Enterprise Privacy Policy & Data Protection Disclosure

Effective Date: October 31, 2026 · Governing Legal Entity: Smart Solutions LLC (State of Wyoming Entity Filing, 30 N Gould St, Ste R, Sheridan, WY 82801, USA) · Contact: info@smartsolutionsweb.com

1. Corporate Scope & Statement of Purpose

Smart Solutions LLC ("Smart Solutions," "we," "us," or "our") operates dedicated business process outsourcing (BPO) call center floors, remote fleet and freight logistics dispatch infrastructure, customer support desks, and digital operations management for commercial enterprises across the United States, Canada, the United Kingdom, and the European Union.

This Enterprise Privacy Policy governs the collection, processing, storage, and safeguarding of data provided by our corporate clients, as well as data processed on behalf of clients during outbound voice operations, customer support, and fleet logistics coordination. We operate under the core standard of zero unauthorized data dissemination and zero third-party commercial data monetization.

2. Telephone Consumer Protection Act (TCPA) Compliance Protocol

For all voice campaigns conducted on behalf of North American clients (including Real Estate Wholesaling, Insurance Live Transfers, and Outbound B2B Pipeline Origination), Smart Solutions enforces rigorous multi-layered compliance with the Telephone Consumer Protection Act (47 U.S.C. § 227), TSR guidelines, and Federal Communications Commission (FCC) regulations:

• Mandatory National & State DNC Scrubbing: All client-provided calling lists are scrubbed against the US National Do-Not-Call Registry and applicable State Do-Not-Call databases at intervals not exceeding 30 calendar days prior to dialer ingestion.
• Strict Local Calling Windows: Outbound calling is strictly restricted to between 8:00 AM and 9:00 PM local time at the recipient's geographic location. Time-zone gating is enforced at the telephony server level.
• Immediate Opt-Out Processing: When any consumer expresses a verbal or written request to be removed from calling campaigns, our voice specialists immediately tag the disposition as "DNC - Permanent Suppression." This updates internal suppression lists across all dialer servers within 24 hours.
• STIR/SHAKEN Caller ID Attestation: Outbound caller IDs are verified with Level-A cryptographic attestation to eliminate caller ID spoofing and protect telecommunications network integrity.

3. GDPR & CCPA/CPRA Consumer Rights Safeguards

In accordance with the European Union General Data Protection Regulation (Regulation (EU) 2016/679 - GDPR) and the California Consumer Privacy Act as amended by the CPRA (Cal. Civ. Code § 1798.100 et seq.), Smart Solutions acts primarily as a Data Processor on behalf of our enterprise clients (who serve as Data Controllers):

• Zero Sale or Leasing of Data: Smart Solutions does not sell, rent, lease, trade, or monetize client data, consumer records, phone logs, or business contacts to any third-party brokers, lead generation aggregators, or advertising networks.
• Right to Access & Portability: Upon receipt of an authenticated written request from a Data Controller, Smart Solutions will deliver an export of all processed consumer records in a structured, machine-readable format within 30 days.
• Right to Erasure ("Right to Be Forgotten"): Upon verified request or client contract termination, all associated lead files, contact records, and intermediate processing logs are permanently sanitized and cryptographically purged from production databases.
• Cross-Border Data Safeguards: All transatlantic data transmissions utilize standard contractual clauses (SCCs) and 256-bit AES encryption in transit.

3b. Australian & New Zealand Privacy Safeguards (Privacy Act 1988 & 2020)

For corporate clients and consumers located in Australia and New Zealand, Smart Solutions strictly adheres to the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth) and the New Zealand Information Privacy Principles (IPPs) under the Privacy Act 2020:

• Spam Act 2003 (Australia) & Unsolicited Electronic Messages Act 2007 (NZ): We do not engage in unauthorized commercial electronic messaging or automated phone harvesting.
• Australian & NZ Do Not Call Registers: For campaigns in Australia, records are filtered against the Australian Do Not Call Register (ACMA). In New Zealand, consumer opt-out suppression lists are strictly respected.
• Cross-Border Disclosure: Personal information transferred offshore for operational processing is protected by contractual clauses ensuring security standards equivalent to the Australian and NZ Privacy Acts.

4. HIPAA Business Associate Physical & Electronic Safeguards

When providing medical transit dispatch (NEMT) or healthcare intake support, Smart Solutions implements Business Associate Agreement (BAA) standards under the Health Insurance Portability and Accountability Act of 1996 (HIPAA):

• PHI Encryption: Protected Health Information (PHI) and patient records are encrypted at rest using AES-256 bit encryption and in transit using TLS 1.3 cryptographic protocols.
• Role-Based Access Control (RBAC): Production staff have access solely to the specific patient or transportation records necessary to execute authorized transport dispatch.
• Screen Watermarking & Export Blocking: Workstation monitors used for healthcare campaigns feature dynamic user-session watermarking, and local file downloading or clipboard copying is cryptographically disabled.

5. Clean-Desk Production Floor Security Controls

To eliminate internal data leakage and exfiltration vectors, all Smart Solutions dedicated operations floors enforce mandatory physical controls:

• No Personal Mobile Devices: Personal smartphones, wearable recording devices, external USB flash drives, and cameras are strictly banned from the operations floor. Employees store personal belongings in biometric lockers outside production zones.
• Disabled Workstation USB Ports: All agent workstations have hardware and operating system-level USB mass-storage ports disabled. Personal webmail, external cloud storage, and personal file transfers are completely blacklisted.
• Dual-Monitor CCTV & Supervisor Auditing: Production floors are under continuous 24/7 high-definition CCTV surveillance, supplemented by real-time supervisor screen telemetry and keystroke cadence auditing.

6. Data Retention, Incident Response & DPO Inquiries

Call audio recordings are retained in encrypted cold storage for 90 days (unless a longer retention period is explicitly requested by the enterprise client for compliance audits) and subsequently permanently expunged.