Website information

Privacy Notice

Last updated: October 12, 2026

Service Time Lab LLC operates LLR Agent in Broward County, Florida. LLR stands for Lost Lead Recovery. In this notice, “we,” “us,” and “our” mean Service Time Lab LLC, the business responsible for deciding how the website information described here is used.

This notice covers our public website, lead-review inquiries, Contact Us messages, and restricted staff workspaces. It also covers business contact details supplied by a business representative or recorded by our staff during an inquiry or intake. Customer and lead records processed under a separate service engagement are governed by that engagement’s privacy and data-processing arrangements. Submitting a website form does not authorize outreach to your customers.

Your information supports your request. We use it to respond, assess service fit, manage intake, and keep the website secure. We do not sell personal information or share it for targeted advertising. This website has no analytics or advertising trackers. For privacy questions or requests, use our Contact Us form.

1. Information we collect

• Lead-review inquiries: Your name, business name, email address, optional phone number and website, city, service category, approximate inquiry volume, follow-up concern, and any message you provide. We also record your permission to contact you about the inquiry and the applicable permission-text version.
• Contact Us messages: Your name, email address, selected topic, and message. Contact messages are stored for authorized staff review. We also use email alerts to notify staff about new contact messages and lead-review inquiries.
• Business intake: Business identity and location, business contacts and their roles, work contact details, operating requirements, workflow rules, and approvals. Staff may record these details on your behalf. We store saved drafts, the current intake record, and the identities of staff who create or update it.
• Staff accounts: Account identifiers, usernames, role membership, password hashes, and sign-in security information, such as failed-attempt counts and lockout status. Passwords are processed for authentication and are not stored in readable form. There is no public account-registration feature.
• Submission and technical details: Record references, submission identifiers, timestamps, notice versions, and checks used to recognize duplicate submissions. Website operation and security can involve IP addresses, requested pages, browser and connection information, request times, and error diagnostics. We use IP addresses to limit abusive requests. Form verification signals are described below.

Please provide only what is needed for your request. Public forms and intake answers are not intended for customer lists, individual lead records, passwords, payment-card details, government identifiers, health information, or other sensitive personal information. If you supply another person’s business contact details, make sure you are authorized to do so and share this notice with them.

2. How we use information

We use website information to:

• Respond to questions, privacy requests, and requests for a lead review.
• Assess service fit, arrange discussions, and document business requirements and approvals.
• Manage staff access and maintain reliable inquiry and intake records.
• Prevent spam, forged requests, duplicate submissions, and unauthorized access.
• Diagnose website problems, meet legal obligations, and address complaints or disputes.

You can browse without completing a form. Fields marked as required are needed to process that request; if you do not provide them, we may be unable to accept the submission or respond. You are not legally required to submit an inquiry or purchase a service. Inquiry follow-up relates to your request. Using Contact Us does not subscribe you to unrelated marketing.

Website inquiries and intake details are currently kept in the website database. We do not copy them into a CRM, spreadsheets, or AI services, or provide them to referral partners.

3. Legal bases for processing

Where applicable law, including the EU or UK GDPR, requires a legal basis, we rely on the following bases as appropriate to the purpose and our relationship with you:

• Legitimate interests: Responding to business communications, coordinating with business representatives, maintaining intake records, and protecting our website and staff access, subject to balancing those interests against your rights.
• Steps toward or performance of a contract: Where you personally request steps toward a contract with us or are a party to one. Communications with an organization’s representatives generally rely on our legitimate interests instead.
• Legal obligations: Processing needed to comply with applicable law.
• Consent: Where consent is required for a particular communication or technology. You can withdraw that consent as explained below. Browsing the website is not blanket consent to personal-information processing or optional tracking.

4. Who receives information

Authorized staff can access information needed for their work. Public visitors cannot look up submitted inquiries, contact messages, or intake records. Website hosting and database infrastructure providers may process information needed to operate and store it. Cloudflare provides the form-security checks described in section 6. We require safeguards appropriate to the provider’s role and applicable law.

Resend sends staff notifications to our Microsoft 365 mailbox. These alerts include the contact details and message or inquiry information you submit, along with a receipt reference and submission time. We use them to review and respond to your request. We do not use open or click tracking in these alerts. If another provider changes how personal information is handled, we will review and update this notice before that use begins.

We may disclose relevant information to professional advisers or authorities when reasonably necessary and legally permitted to comply with law, respond to valid legal process, resolve disputes, or protect people, systems, and legal rights. If our business undergoes a merger, sale, or reorganization, information may be transferred as part of that transaction, subject to applicable law, appropriate confidentiality protections, and any required notice.

5. Cookies and Similar Technologies

This website uses necessary technologies for security, staff access, and your cookie preference. It does not use analytics scripts, advertising pixels, or optional tracking cookies. Our first-party storage consists of:

• Cookie preference: Choosing “Continue with necessary only” saves llr-cookie-preferences in this browser’s local storage. It contains the notice version, your necessary-only choice, and the time saved, with no contact details or tracking identifier. It is valid for 180 days; an expired entry is removed on your next visit.
• Staff sign-in:LLRAgent.Staff is a first-party session cookie for authorized staff access. The sign-in session expires after 30 minutes of inactivity.
• Staff request security:LLRAgent.Antiforgery is a first-party session cookie that protects staff actions against forged requests. Session cookies are normally removed when the browser session ends, subject to browser restore settings.

Open Cookie settings in the footer to review these details at any time. Necessary technologies cannot be disabled through that control. You can delete or block storage in your browser, although blocking necessary cookies can prevent staff sign-in or related functions. If preference storage is blocked, the notice may appear again on your next visit.

Closing the notice or continuing to browse does not consent to optional tracking. Your necessary-only choice does not authorize future analytics or advertising. If we introduce optional technologies requiring consent, we will update the notice and request consent before enabling them. Because we do not sell personal information or share it for targeted advertising, there is no such activity for a Global Privacy Control signal to stop. Browser Do Not Track signals do not change the necessary functions described here.

6. Form security and automated processing

Cloudflare Turnstile loads when you attempt to submit a form with valid required fields, including staff sign-in. It checks technical signals such as your IP address, browser, connection, and the website origin to distinguish people from bots. Our server sends the verification token to Cloudflare; it does not send your message, contact details, or intake answers as part of that verification. Verification tokens and form-security tickets are not stored with your submission.

Cloudflare acts as a processor when protecting our website and as an independent controller when using technical signals to improve its bot detection. Its Turnstile Privacy Addendum explains those roles, its processing, and how to contact it about information for which it is independently responsible.

Automated validation and security controls may block or delay a submission. We do not use website submissions for automated decisions that produce legal or similarly significant effects, or send their contents to generative AI services for processing or model training. Descriptions of AI agents elsewhere on the website do not change how these website forms handle your information.

7. How long we keep information

We keep personal information for as long as needed for its stated purpose and applicable legal obligations. The period depends on the type of record and the circumstances:

• Inquiries and contact messages: Whether the request is open or resolved, the last meaningful contact, any resulting business relationship, and outstanding complaints or legal requirements.
• Intake records: Whether the proposed work is active, a draft is still needed, and the need to document requirements, approvals, responsibilities, or disputes.
• Staff and security records: The period of authorized access and the need to investigate incidents, prevent abuse, or meet legal requirements.
• Privacy requests: The time needed to resolve the request and retain a proportionate record of our response and compliance.

Information no longer needed for these purposes is subject to deletion or anonymization. Limited records may be retained where necessary for a legal obligation or claim. Where backups are used, deleted information may remain until the backup is replaced or expires and must remain protected in the meantime. Browser-storage periods are listed in section 5. Clearing browser storage does not delete a submission from our database; contact us to request that.

8. Your choices and privacy rights

You may ask to access, correct, or delete your website information, or ask us to stop following up on an inquiry. Depending on the law that applies, you may also have rights to obtain a copy in a portable format, restrict or object to processing, appeal a denied request, and exercise your rights without unlawful discrimination. These rights are subject to applicable conditions and exceptions.

Objection and withdrawal: Where applicable law provides this right, you can object to processing based on legitimate interests for reasons relating to your situation. You can object to direct marketing at any time. Where we rely on consent, you can withdraw it at any time without affecting the lawfulness of processing before withdrawal.

Use the Contact Us form and select “Privacy request.” Describe your request and, if available, include your submission reference. You do not need an account or a purchase. You may also reply to an existing communication from us.

We may request information reasonably needed to verify your identity or an authorized agent’s authority before disclosing or changing records. Do not send identity documents or sensitive information through the public form. We will explain any additional verification needed. We respond within the time required by applicable law and explain any permitted extension, refusal, or exception. If an appeal right applies, you may request review through the same form and identify it as an appeal.

You may complain to the privacy regulator with authority over your situation, including your local data-protection authority where EU or UK law applies. You do not have to contact us first to exercise a right to complain to a regulator.

9. International processing

We are a United States business. Information may be processed in the United States and in other countries where our infrastructure or security providers operate. Cloudflare operates globally. Privacy laws in those countries may differ from those where you live.

Where applicable law restricts an international transfer, the transfer must use a permitted mechanism, such as an adequacy decision or appropriate contractual safeguards. Contact us to ask about the locations and safeguards relevant to your information and how to obtain any information or copy of safeguards to which you are entitled. Visiting the website does not constitute consent to an otherwise restricted transfer.

10. Security

We use measures intended to protect personal information, including restricted staff access, hashed staff passwords, form verification, and request limits. No website, transmission, or storage system can be guaranteed completely secure. Report a suspected website security issue through Contact Us under “Website issue,” without including passwords or exposed personal records. Staff should also notify their administrator about suspected account misuse.

11. Children and external links

This website is intended for adult business owners and authorized business representatives. It is not directed to children, and we do not knowingly collect personal information from children under 13. If you believe a child has provided personal information, contact us so we can investigate and address its removal as appropriate.

External websites have their own privacy practices. Review their notices when following a link. This does not limit our responsibilities for providers processing information on our behalf.

12. Changes and contact

We may update this notice as our website, practices, or legal obligations change. We will revise the date above and provide additional notice or obtain consent when required by law. An update does not authorize an incompatible new use of previously collected information without any legal basis or permission required for that use.

Contact Service Time Lab LLC, the operator of LLR Agent, through the Contact Us form and select “Privacy request” for privacy questions or requests. Our Website Terms address website use; they do not limit privacy rights that cannot lawfully be waived.