Privacy Policy

Direct Recovery Solutions is a United States-based business specializing in shipping invoice auditing, carrier billing recovery, e-commerce marketplace reimbursements, and related financial recovery services for businesses. We operate this website to provide information about our services and to facilitate client engagements.

This Privacy Policy applies to:

• Visitors to our website at directrecoverysolutions.com and any related subdomains
• Individuals who submit inquiries, contact forms, or free claim review requests
• Existing and prospective clients who share data as part of an engagement
• Recipients of our marketing communications (where applicable and consented)

This policy does not apply to the data practices of third-party websites we may link to, or to the internal data handling practices of carriers, marketplaces, or other platforms we access on your behalf as part of a client engagement (which are governed by those platforms’ own privacy policies).

We collect information in two primary ways: information you provide to us directly, and information collected automatically when you visit our website.

Information You Provide Directly

When you fill out a contact form, request a free claim review, or engage our services, we may collect:

• Identity information: First name, last name, job title
• Contact information: Business email address, phone number, company name
• Business information: Monthly shipping spend range, primary carrier(s) or marketplace(s) used, nature of your shipping or e-commerce operations
• Account credentials: Read-only access credentials for carrier portals or marketplace accounts, provided as part of an active service engagement and governed by a separate Client Agreement
• Communications: The content of messages, emails, or notes you send to us

Information Collected Automatically

When you visit our website, we and our third-party analytics partners may automatically collect:

• Device & technical data: IP address, browser type and version, operating system, device type
• Usage data: Pages visited, time spent on pages, links clicked, referring URL, exit pages
• Cookie data: See Section 5 — Cookies & Tracking for full details

Information From Third Parties

In the course of delivering our services, we may receive information about your business from:

• Carrier billing systems (UPS, FedEx, USPS) when authorized by you
• Marketplace platforms (Amazon Seller Central, Walmart Seller Center) when authorized by you
• Publicly available business records (e.g., business registration data for verification purposes)

Data Category	Examples	Source
Identity	Name, job title	You (directly)
Contact	Email, phone, company name	You (directly)
Business / Shipping	Carrier invoices, account reports	You / Carrier systems
Technical / Device	IP address, browser, OS	Automatically collected
Usage / Behavioral	Pages visited, clicks, session duration	Automatically collected
Communications	Emails, form submissions, meeting notes	You (directly)

We use the information we collect only for legitimate business purposes directly related to delivering and improving our services. Specifically, we use your information to:

Service Delivery

• Respond to your inquiry or claim review request and assess how we can help
• Onboard you as a client and set up your audit engagement
• Access carrier billing portals and marketplace accounts on your behalf (with your explicit authorization) to perform audits
• Identify billing errors, overcharges, and refund opportunities
• Prepare and file refund claims with carriers and marketplaces
• Track claim status and communicate results to you
• Issue invoices and collect our performance-based fees

Communications

• Send you updates about your active claims and recovery progress
• Respond to your questions, requests, or complaints
• Send service-related announcements (e.g., policy changes, new service offerings)
• Send marketing communications only if you have opted in or are an existing client

Website Improvement & Analytics

• Understand how visitors use our website to improve its content and functionality
• Diagnose technical problems and ensure website security
• Measure the effectiveness of our marketing efforts

Legal & Compliance

• Comply with applicable laws, regulations, and legal obligations
• Respond to lawful requests from government authorities
• Enforce our Client Agreement and other contractual rights
• Protect the rights, property, or safety of DRS, our clients, or others

We do not sell, rent, or trade your personal information. We share your information only in the limited circumstances described below, and only to the extent necessary for the stated purpose.

Service Providers

We work with trusted third-party vendors who assist in operating our business. These providers are contractually required to handle your data securely and only for the purposes we specify. They include:

• Website hosting and infrastructure providers (e.g., server and cloud services)
• Customer relationship management (CRM) software used to manage client communications
• Email and communication platforms for correspondence and updates
• Analytics platforms (e.g., Google Analytics) for website usage insights
• Accounting and invoicing software for billing and payment processing
• Licensed customs brokers engaged on your behalf for duty recovery services

Carriers & Marketplaces

As part of delivering our audit and recovery services, we submit claim information — including your business account details and shipment data — directly to carriers (UPS, FedEx, USPS) and marketplace platforms (Amazon, Walmart) on your behalf. This sharing is authorized by you as part of your Client Agreement and is necessary to perform the services.

Legal Requirements

We may disclose your information if required to do so by law or in response to a valid legal process, including subpoenas, court orders, or government requests. We will notify you of such requests where legally permitted to do so.

Business Transfers

In the event of a merger, acquisition, reorganization, sale of assets, or bankruptcy, your information may be transferred to a successor entity as part of that transaction. We will notify you via email or a prominent notice on our website if such a transfer occurs and your data will be treated in accordance with this Privacy Policy.

With Your Consent

We may share your information for any other purpose with your prior knowledge and explicit consent.

Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyze website traffic, and support our marketing efforts. A cookie is a small text file stored on your device by your web browser.

Types of Cookies We Use

Cookie Type	Purpose	Duration
Strictly Necessary	Required for the website to function (e.g., form submissions, security)	Session
Functional	Remember your preferences and settings across visits	Up to 1 year
Analytics	Understand how visitors interact with our site (Google Analytics)	Up to 2 years
Marketing / Advertising	Track conversions and serve relevant advertising (e.g., Google Ads, Meta Pixel)	Up to 90 days

Managing Your Cookie Preferences

You can control and manage cookies in several ways:

• Browser settings: Most browsers allow you to refuse cookies or delete existing cookies. Visit your browser’s help documentation for instructions.
• Google Analytics opt-out: Install the Google Analytics Opt-out Browser Add-on to prevent data from being collected by Google Analytics.
• Ad preferences: Opt out of interest-based advertising via the NAI opt-out tool or DAA opt-out page.

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, comply with our legal obligations, resolve disputes, and enforce our agreements.

Data Type	Retention Period	Reason
Inquiry / Contact form data	2 years from last contact	Business communications, follow-up
Active client account data	Duration of engagement + 5 years	Legal, tax, and audit compliance
Carrier invoice & claim data	Duration of engagement + 3 years	Dispute resolution, audit trail
Account access credentials	Deleted within 30 days of engagement end	Security and data minimization
Website analytics data	Up to 26 months	Trend analysis, site improvement
Marketing email list data	Until opt-out or 3 years of inactivity	Communication preferences

When your data is no longer required, we will securely delete or anonymize it in accordance with applicable law and our internal data destruction procedures.

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption in transit: All data transmitted between your browser and our servers is encrypted using TLS (Transport Layer Security)
• Access controls: Access to client data is restricted on a need-to-know basis and protected by strong authentication requirements
• Secure credential handling: Account credentials provided for auditing purposes are stored in encrypted credential management systems and are never stored in plain text
• Employee training: Our team members are trained on data privacy and security practices and are bound by confidentiality obligations
• Vendor vetting: Third-party service providers are evaluated for their security practices before being granted access to any client data
• Regular review: We periodically review and update our security practices to address evolving risks

Data Breach Response

In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify affected individuals and relevant authorities as required by applicable law, and will take immediate steps to contain and remediate the breach.

Depending on your location, you may have certain rights regarding your personal information. We honor these rights and make it straightforward to exercise them.

Rights Available to All Users

• Right to Access: Request a copy of the personal information we hold about you
• Right to Correction: Ask us to correct inaccurate or incomplete information
• Right to Deletion: Request that we delete your personal information, subject to our legal retention obligations
• Right to Opt Out of Marketing: Unsubscribe from marketing emails at any time using the link in our emails, or by contacting us directly
• Right to Data Portability: Request your data in a structured, machine-readable format where technically feasible

California Residents — CCPA Rights

If you are a California resident, you have the following additional rights under the California Consumer Privacy Act (CCPA):

• Right to Know: Request disclosure of the categories and specific pieces of personal information collected, the purposes of collection, and any third parties with whom it was shared
• Right to Delete: Request deletion of personal information we have collected, subject to certain exceptions
• Right to Opt Out of Sale: We do not sell personal information, so this right is not applicable — but you may contact us to confirm this at any time
• Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights

EU / EEA & UK Residents — GDPR Rights

If you are located in the European Union, European Economic Area, or the United Kingdom, you have the following rights under the General Data Protection Regulation (GDPR) or UK GDPR:

• Right to Access (Article 15): Obtain confirmation of whether we process your data and receive a copy
• Right to Rectification (Article 16): Request correction of inaccurate data
• Right to Erasure (Article 17): Request deletion under certain circumstances (“right to be forgotten”)
• Right to Restrict Processing (Article 18): Ask us to limit how we use your data in certain situations
• Right to Data Portability (Article 20): Receive your data in a portable format
• Right to Object (Article 21): Object to processing based on legitimate interests or for direct marketing
• Right to Lodge a Complaint: You have the right to lodge a complaint with your local supervisory authority

Our website and services are directed exclusively at businesses and business professionals. We do not knowingly collect personal information from individuals under the age of 18.

If you are under 18, please do not use our website or provide any personal information to us. If you believe we have inadvertently collected information from a minor, please contact us immediately at info@directrecoverysolutions.com and we will take prompt steps to delete that information.

Our website may contain links to third-party websites, tools, or resources — including carrier portals (UPS, FedEx, USPS), marketplace platforms (Amazon, Walmart), and industry resources. These links are provided for your convenience and informational purposes only.

We have no control over the content, privacy practices, or data collection activities of third-party websites. We strongly encourage you to review the privacy policies of any third-party site you visit before providing any personal information. Direct Recovery Solutions is not responsible for the privacy practices or content of third-party websites.

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or for other operational reasons. When we make material changes, we will:

• Update the “Last Updated” date at the top of this policy
• Post the revised policy on this page with the new effective date
• Notify active clients via email if the changes are material and affect how we handle their data

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Your continued use of our website or services after any changes constitutes your acceptance of the updated policy.

If you have any questions, concerns, or requests related to this Privacy Policy or how we handle your personal information, please reach out to us through any of the following channels. We take all privacy inquiries seriously and respond within 2 business days.