This Privacy Policy explains how Elevate20 LLC ("Elevate20," "Covered18," "we," "us"), a Wyoming limited liability company, collects, uses, shares and protects personal information when you visit covered18.com (the "Site"), use Covered18, buy a Covered18 kit, or sign up for email updates (together, the "Services").
Contact: [email protected] · Elevate20 LLC, 1401 21st St, Suite R, Sacramento, CA 95811
1. Who our Services are for
The Services are for parents and other adults (18 or older) planning for a young person who is turning 18. They are not directed to anyone under 18, and we do not knowingly collect personal information from anyone under 18. If you believe a person under 18 has given us personal information, email [email protected] and we will delete it.
We do not ask for your young adult's name, date of birth, Social Security number, or health information to sign up for updates or to buy a kit.
2. Information we collect
| Category | Examples | Source |
|---|---|---|
| Identifiers / contact | Email address you give us | You (email-updates form, checkout, emails to us) |
| Sign-up context | U.S. state, your student's school year | You |
| Technical data | Browser and device type; a one-way hash of your IP used only for short-term rate limiting (we do not store raw IP addresses with sign-up records) | Automatically |
| How you found us | Your optional answer to “How did you hear about us?”, the campaign tag in the link you used to reach the Site (for example, utm_source), and the referring web page, saved with your email-updates sign-up. We do this without cookies or third-party analytics. | You and your browser |
| Order information | When you buy a kit: the email address you give at checkout, the amount paid (including any discount code used), the time of purchase, the Stripe checkout reference for your order, and the U.S. state you choose for your kit | You and Stripe (our payment processor) |
| Communications | What you write if you email us | You |
Payments. Payments are processed by Stripe, our third-party payment processor. You enter your card or other payment details on Stripe’s checkout page, and Stripe handles them under its own privacy policy (stripe.com/privacy). We never receive or store your full card number. From Stripe we receive the order details listed above (for example, your email, the amount, and the time of purchase), plus limited payment details Stripe shows merchants, such as the card brand and last four digits.
Sensitive information. We do not ask for health information, government IDs, or financial account numbers on our sign-up form. Please do not send them to us by email or form.
3. How we use information
- Process your order, confirm your payment, give you your state kit, and keep your download page working for 30 days after purchase.
- Handle refunds, discount codes, customer support, accounting, tax and fraud prevention.
- Email you about Covered18 (product news and educational content), if you sign up for email updates, including sign-ups collected before sales opened.
- Respond to your questions and requests.
- Protect the Services, prevent spam and abuse, and comply with law.
We do not use your information to make automated decisions that produce legal or similarly significant effects about you.
4. Email and unsubscribe (CAN-SPAM)
- Every marketing email identifies us as the sender, includes our postal address, and has a clear unsubscribe link.
- We honor unsubscribe requests as soon as practicable and within 10 business days, and we will not sell or transfer your email address to others after you opt out.
- To unsubscribe, click the link in any email or email [email protected]. We keep a minimal "do not email" record so we don't email you again by mistake.
- We may still send transactional or relationship messages (for example, a reply to your question).
5. Cookies, analytics and similar technologies
We do not use analytics scripts, advertising cookies, or advertising pixels on the Site. We do not use advertising pixels or retargeting tools.
Your browser settings may let you block cookies; some Site features may not work.
6. How we share information
We do not sell personal information and we do not "share" it for cross-context behavioral advertising. We share information only with:
- Service providers that help us run the Services under contract (for example, hosting and file storage on Cloudflare, and payment processing by Stripe). They may use the information only to provide services to us, or as their own privacy policies describe for payment processing and fraud prevention.
- Legal and safety: where required by law, subpoena, or to protect rights, safety, or security.
- Business transfers: in a merger, acquisition, financing or sale of assets, with notice as required by law.
- With your direction or consent.
7. Retention
- Email-updates records (including sign-ups collected before sales opened): kept until you unsubscribe or ask us to delete, plus a minimal suppression record so we don't email you again.
- Order records (email, amount, purchase time, chosen state, checkout reference): kept for download access during the 30-day download window and afterward for accounting, tax, refund and legal purposes, generally up to 7 years. Download links stop working after 30 days even though the record is kept.
- Rate-limit counters: short-lived (hours).
- Emails to us: up to 2 years, unless a longer period is needed for legal reasons.
8. Your California privacy rights (CCPA/CPRA)
Elevate20 LLC likely does not currently meet CCPA/CPRA "business" thresholds. This section is included as good practice.
If you are a California resident, you may have the right to know/access, delete, and correct personal information we collected about you; to opt out of the sale or sharing of personal information (we do not sell or share as defined by the CCPA/CPRA); and not to be retaliated against for exercising your rights.
How to exercise: email [email protected] with the subject "California privacy request." We will verify your request (for example, by confirming the email address on file) and respond within the time the law requires (generally 45 days, extendable once).
Categories (past 12 months): identifiers (email); sign-up context (state, school year); commercial information (purchase records: amount, time, chosen state); technical data used for abuse prevention. Sold or shared: none.
California "Shine the Light" (Civ. Code §1798.83): we do not disclose personal information to third parties for their direct marketing purposes.
9. Other U.S. state privacy rights
Residents of some other states may have similar rights. Email [email protected] and we will consider requests under the laws that apply.
10. Security
We use reasonable administrative, technical and physical safeguards, including HTTPS, access controls, and limited data collection. No system is perfectly secure. Please do not send sensitive documents or health information to us.
11. International visitors
The Services are intended for users in the United States. If you access them from elsewhere, your information will be processed in the United States.
12. Third-party links
The Site may link to other sites (for example, government or school websites). We are not responsible for their privacy practices.
13. Changes
We may update this Policy. We will post the new "Last updated" date, and for material changes we will notify email subscribers and customers by email when practical.
14. Contact
Elevate20 LLC · [email protected] · 1401 21st St, Suite R, Sacramento, CA 95811
Educational information, not legal advice. Covered18 is not a law firm. State rules differ; schools and providers may require their own forms.