Privacy Policy

1.1 Client Information

• Business name, email domain, and contact information
• Unique six-digit H.A.U.L. Pass number (assigned upon registration as your permanent account identifier)
• Names and email addresses of authorized users
• Payment information including cardholder name and billing address (card details are processed and stored by our PCI-DSS compliant payment processor; we never store your full card numbers)
• Billing address (street, city, state, ZIP code) used for invoice generation and payment verification
• Dispatch request details including sequential request numbers, locations, load information, and point-of-contact information
• Communication logs (relay messages)

1.2 Emergency Freight Response Specialist (Contractor) Information

• Full name, phone number, email address, city, state, and ZIP code
• Identity verification documents (government-issued ID and selfie)
• Emergency contact name and phone number
• GPS location data during active dispatches and while in “available” status for job matching
• Clock-in/out records with auto-generated server-side PINs (contractors do not choose their own PINs)
• Performance ratings, reliability scores, and incident records
• Payout information (bank or payment handle)
• Assessment scores and completion records
• Safety training completion records, including module completion timestamps and duration
• Digital safety sign-off records with timestamps and IP address
• PPE verification records (self-attestation confirmations and optional photos)
• Worker-initiated incident reports including incident type, description, optional photos, and GPS coordinates at the time of report
• Safety compliance scores calculated from assessment results, PPE compliance, incident history, and client feedback
• Signed contractor agreements (independent contractor agreement, non-disclosure, etc.) with IP address and timestamp
• Social Security Number (SSN) — collected only at the time of first payout, encrypted at rest, and used exclusively for IRS Form 1099 reporting

1.3 Website Form Submissions and Support Calls

When you submit a form on our website (contact, quote request, or service reservation) or contact our support line, we collect:

• Name, email address, phone number, and company name
• Service details, location, and scheduling preferences (for reservations)
• Address metadata provided with reservations, which may include standardized address details, location reference identifiers, and approximate latitude/longitude coordinates
• Payment method selection and any applicable promotional codes for online reservation submissions
• Information shared during support calls, including quote requests, service questions, and reservation status inquiries
• Call recordings, transcripts, and call notes used for quality review, training, and fraud prevention
• SMS and marketing communication consent selections
• IP address, browser information, and referral source

This data is retained for fraud prevention purposes. If a submission is determined to be fraudulent, the associated email address, phone number, and IP address may be added to our block list to prevent future abuse. See our Terms of Service for details on our fraud enforcement policy.

1.4 Lumper Application Information

When you apply for a position through our careers form or by emailing your resume to careers@ezlumperservices.com, we collect:

• Full name, email address, and phone number
• City, state, and ZIP code
• Skills and certifications (forklift certification, pallet jack experience, warehouse experience)
• Years of experience and availability
• How you heard about us and any additional notes
• Resume files and attachments sent via email (PDF, DOC, DOCX, or other document formats)
• Email sender name, email address, and subject line when submitting via email

If you email a resume to careers@ezlumperservices.com, we store the attachment in encrypted cloud storage and associate it with your application. If no existing application matches your email address, a new application record is created automatically from the information in your email.

Application data — including emailed resumes — is used exclusively for recruitment and onboarding evaluation. Our automated HR review system may score your application based on qualifications to prioritize review by our operations team. Hiring criteria and approval rules are established by operations. If your required assessment score is at least 80%, your application may be automatically approved for onboarding, including account setup and onboarding invitation delivery. If your assessment score is below 80% (low-grade) or incomplete, your application remains in manual review and requires explicit staff approval before onboarding.

1.5 Automatically Collected Information

• IP addresses and device information
• Browser type and operating system
• Access timestamps and pages viewed
• Device fingerprint hashes (privacy-preserving, for security)
• UTM parameters and referral sources for understanding how you found us

• Service delivery: To match Lumpers to dispatch requests, process payments, enforce geofencing, and provide real-time tracking.
• Account management: To manage subscriptions, credits, invoices, and user permissions.
• Communication: To send operational notifications, dispatch updates, billing alerts, and service-related emails.
• Phone support: To help with quotes, service questions, and reservation support during calls.
• Security: To detect fraud, prevent abuse, enforce rate limits, and investigate security incidents.
• Compliance: To meet legal obligations and respond to lawful requests.
• Reporting: To compile and send periodic activity reports to Client account contacts, summarizing dispatch requests, service history, and account activity from the preceding period.
• Service Reminders: To send automated countdown emails before scheduled dispatch appointments, reminding Clients and reservation holders of upcoming services.
• Dispatch Matching: To use a scoring algorithm that ranks eligible contractors based on proximity, reliability, safety compliance, experience, response time, and availability for each incoming dispatch request.
• Safety Compliance: To evaluate safety training completion, PPE compliance, and incident history for calculating safety scores used in assignment matching.
• Incident Response: To review and respond to worker-reported safety incidents, notify management, and improve workplace safety practices.
• Improvement: To analyze usage patterns and improve the Platform.

We employ application-layer envelope encryption for sensitive data including:

• Phone numbers and point-of-contact phone numbers
• Lumper payout handles
• Identity verification document references
• Precise GPS coordinates
• Manual payment reference IDs
• Dispute notes

Encryption keys are managed through a dedicated key management service provided by our cloud infrastructure provider. Data is encrypted before being written to the database.

For live map rendering during active dispatches, we use rounded GPS coordinates (reduced precision). Precise coordinates are available only to authorized internal staff.

• Precise GPS data: Deleted after thirty (30) days.
• Summary location metrics: Retained for ninety (90) days.
• Account and billing data: Retained for the duration of the account and as required by law.
• Identity verification documents: Stored in encrypted, private cloud storage. Retained for the duration of the Lumper's active status plus any legally required retention period.
• Audit logs: Retained indefinitely for compliance and dispute resolution.
• Relay messages: Retained for the duration of the associated dispatch plus ninety (90) days.
• Website form submissions: Lead, quote, and reservation data is retained for the duration needed to fulfill the service request and for any follow-up communications, after which it is retained for up to two (2) years for analytics.
• Safety training records: Retained for the duration of the contractor relationship plus three (3) years.
• Incident reports: Retained for seven (7) years for regulatory compliance.
• PPE verification records: Retained for three (3) years.
• Lumper application data: Retained for up to one (1) year after the application date, or for the duration of employment if onboarded.
• Consent records: SMS and marketing consent records are retained indefinitely for TCPA compliance and audit purposes.
• Lumper pay records: Clock-in/out records and payout calculations are retained for at least three (3) years as required by labor record-keeping regulations.

We do not sell your personal information. We share data with the following categories of service providers:

• Payment Processor: A PCI-DSS compliant third-party processor handles all card transactions securely.
• Messaging Provider: Our messaging service provider delivers SMS dispatch notifications, relay messages, and operational alerts on our behalf.
• Cloud Infrastructure Provider: Our cloud platform provides server hosting, email delivery, file storage, and encryption key management.
• Database Provider: Our database hosting provider stores and manages application data with enterprise-grade security.
• Productivity Tools Provider: Operational summaries (such as lumper roster information, application status, and payout records) may be periodically backed up to a cloud-based spreadsheet service for administrative use. No sensitive data (encrypted fields, full GPS coordinates, or financial credentials) is included in these backups.
• Email Service Provider: We use a cloud-based email service to manage internal business communications, including preparing service quotes for customers who have requested them through our website. Your contact information is only used to respond to your requests and is never shared with unrelated parties.
• Law enforcement: When required by valid legal process.

All service providers are bound by data processing agreements and are prohibited from using your data for any purpose other than providing services to us.

We use SMS, email, and other electronic communications for the following purposes:

• Operational: Dispatch offers, PIN delivery, clock-in/out confirmations, departure checks, and relay messages between Clients and Lumpers.
• Transactional: Reservation confirmations, quote acknowledgments, billing receipts, payment alerts, subscription changes, and application status updates.
• Marketing (opt-in only): Service updates and promotional offers, sent only with your explicit consent.

Message and data rates may apply. Message frequency varies based on your Platform activity. You may opt out of marketing messages by replying STOP to any SMS or contacting us at support@ezlumperservices.com. Opting out of operational messages may affect your ability to use the Platform.

Consent records — including the specific consent text shown, your IP address, and timestamp — are retained for compliance and audit purposes.

We use essential cookies for authentication and session management. We may use advertising pixels and tracking technologies on our website to measure the effectiveness of our advertising campaigns across third-party platforms. These trackers help us understand how visitors interact with our site after viewing our ads. You may opt out of personalized advertising through your browser settings or the relevant platform’s ad preferences.

Location tracking is a core requirement for Lumpers during active dispatches and while in “available” status for job matching. Lumpers must consent to location sharing after accepting a dispatch or when toggling on availability. Location sharing during availability can be stopped at any time by toggling off availability in the Lumper Portal. Location data is:

• Collected during active dispatch assignments and while you have opted into “available” status for proximity-based job matching
• Encrypted at the application layer before storage
• Shown to Clients in reduced precision (first name + last initial, rounded coordinates) during active dispatches only
• Available in full precision only to authorized internal staff
• Deleted (precise) after thirty (30) days

Identity verification documents (ID photos, selfies), dispatch photos, PPE verification photos, incident report photos, and resume files are stored in private, encrypted cloud storage. Access is granted only via time-limited signed URLs (maximum five minutes). Files are scanned for content type and size validation.

Resumes submitted via email or uploaded through the careers form are stored with server-side encryption. Original filenames and sender metadata are recorded for processing purposes.

PPE verification photos submitted by workers confirm compliance with safety equipment requirements. Incident report photos document workplace safety events. Both are stored with the same encryption and access controls as other uploaded files.

Our Platform employs automated monitoring systems that continuously check for operational issues and may take corrective actions, including:

• Detecting and resolving stuck or stalled dispatch assignments
• Auto-clocking out Lumpers who have been clocked in for an unusually long period
• Synchronizing subscription status between our billing provider and our Platform
• Calculating and recording pay for completed work assignments
• Cleaning up expired system records
• Monitoring connectivity to external service providers (payment processor, messaging, email delivery)
• Monitoring scheduled task execution and system health, and alerting our team when operational issues are detected
• Scoring lumper applications based on stated qualifications and automatically onboarding applicants whose required assessment score is at least 80%

These automated systems operate on operational data only and do not make decisions that affect your legal rights. All automated actions are logged for audit purposes and reviewed by our team.

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data (subject to legal retention requirements)
• Object to or restrict certain processing
• Data portability

To exercise these rights, contact us at privacy@ezlumperservices.com.

The Platform is not intended for individuals under 18 years of age. We do not knowingly collect data from minors.

In the event of a data breach affecting your personal information, we will notify affected parties within seventy-two (72) hours of confirmation, as required by applicable law.

We may update this Privacy Policy periodically. Material changes will be communicated via email. The “Last updated” date reflects the most recent revision.