ZINGRALLY
DATA HANDLING & CONTACT FORM POLICY
Operated by ZingThis, LLC d/b/a ZingRally
Effective Date: April 20, 2025
Last Updated: April 5, 2026
Applies to: zingrally.com and all associated subdomains and services
1. Introduction and Purpose
This Data Handling & Contact Form Policy (“Policy”) describes how ZingThis, LLC, doing business as ZingRally (“ZingRally,” “we,” “us,” or “our”), collects, processes, stores, protects, and disposes of personal data submitted through contact forms, inquiry forms, Client Service Agreements, and all other data intake points across the ZingRally website (zingrally.com).
ZingRally is a property tax sale surplus recovery service. We assist former property owners in identifying and reclaiming unclaimed surplus funds held by county governments and state agencies in Maryland, Virginia, Florida, Ohio, Colorado, North Carolina, Pennsylvania, South Carolina, Tennessee, and other states where ZingRally operates. Our standard service fee is 10% of the recovered amount, contingency-based, due only upon successful recovery.
This Policy is designed to meet the requirements of the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), the General Data Protection Regulation (GDPR), applicable U.S. state privacy laws, and best practices recommended by leading data compliance frameworks. This Policy works in conjunction with our Privacy Policy, Terms of Service, and Terms of Use. In the event of conflict, the Privacy Policy governs.
2. Data We Collect and Why
2.1 Contact Form Submissions (zingrally.com)
When you submit a contact or inquiry form on zingrally.com, we collect the following personal data:
| Data Collected | Purpose | Legal Basis | Retention |
|---|---|---|---|
| Full name | To address you personally in our response | Legitimate interest / consent | 2 years |
| Email address | To respond to your inquiry | Legitimate interest / consent | 2 years |
| Phone number (if provided) | To follow up regarding your surplus claim inquiry | Consent | 2 years |
| Former property address | To research potential surplus funds associated with your property | Legitimate interest / consent | 2 years |
| Message content | To understand and respond to your inquiry | Legitimate interest / consent | 2 years |
| IP address (automatic) | Spam prevention and security | Legitimate interest | 90 days |
| Submission timestamp | Record keeping and anti-fraud | Legitimate interest | 2 years |
Contact form submissions are collected via JotForm and delivered to our team by email. We do not add contact form submitters to marketing lists without explicit consent.
2.2 Client Service Agreement Data
When you sign a Client Service Agreement with ZingRally, we collect:
| Data Collected | Purpose | Legal Basis | Retention |
|---|---|---|---|
| Full legal name | Contract execution and identity verification | Contract performance | 7 years |
| Email address | Agreement delivery, claim communications, and payout notifications | Contract performance | 7 years |
| Phone number | Communication regarding claim status and recovery | Contract performance | 7 years |
| Former property address | Surplus fund research and claim filing | Contract performance | 7 years |
| County and state of tax sale | Identifying the correct agency to file the claim with | Contract performance | 7 years |
| Electronic signature and date | Legal execution of the Client Service Agreement | Contract performance | 7 years |
| Agreed service fee (10%) | Fee documentation and payment upon successful recovery | Contract performance | 7 years |
Client Service Agreements are collected and signed electronically via JotForm under the E-SIGN Act. A copy is automatically emailed to you and retained in our secure records.
2.3 Identity and Ownership Verification Documents
To process your surplus fund claim with the relevant county or state agency, we collect:
| Data Collected | Purpose | Legal Basis | Retention |
|---|---|---|---|
| Government-issued photo ID | Identity verification required by county or state agency for claim processing | Legal obligation / contract performance | Duration of claim process, then securely deleted |
| Proof of prior property ownership (deed, tax bill, title document) | Establishing entitlement to surplus funds as required by county or state agency | Legal obligation / contract performance | Duration of claim process, then securely deleted |
| Additional documentation as required by specific county or state | Compliance with applicable state and county claim filing requirements | Legal obligation | Duration of claim process, then securely deleted |
Identity documents are used solely for the purpose of filing your surplus claim. They are not shared with any third party other than the relevant county Finance Department or state agency. We securely delete identity documents once the claim has been submitted and processed.
2.4 Public Records Data
| Data Collected | Purpose | Legal Basis | Retention |
|---|---|---|---|
| County surplus fund list entries (name, property address, surplus amount) | Identifying former property owners entitled to unclaimed surplus funds | Legitimate interest | Duration of outreach, then deleted |
| Property records (Maryland SDAT, Virginia equivalent, county records) | Locating current contact information for former property owners | Legitimate interest | Duration of outreach, then deleted |
| State unclaimed property database entries (claimitmd.com and equivalent) | Identifying surplus funds that have transferred to state unclaimed property programs | Legitimate interest | Duration of outreach, then deleted |
3. How We Process and Store Data
3.1 Data Infrastructure
ZingRally uses the following infrastructure to store and process personal data:
- JotForm — contact forms and electronic Client Service Agreement signatures. JotForm stores form submission data on secure cloud servers. For more information, see JotForm’s privacy policy at jotform.com/privacy.
- Email — form submissions, claim communications, and document delivery are handled via email. Email communications are stored in ZingRally’s secure business email account.
- Secure file storage — identity documents and claim files are stored in password-protected, encrypted file storage accessible only to authorized ZingRally personnel.
- County and State Agencies — your personal data and supporting documents are submitted directly to the relevant county Finance Department or state agency as required to process your claim.
3.2 Data Minimization
We collect only the minimum personal data necessary to provide our Services. We do not collect sensitive personal information such as Social Security numbers, government-issued ID numbers beyond what is required by the relevant agency, health data, racial or ethnic origin, religious beliefs, or biometric data unless explicitly required by the county or state agency processing your surplus claim.
3.3 Data Accuracy
We take reasonable steps to ensure that personal data we hold is accurate and kept up to date. If your contact information changes after signing a Client Service Agreement, please notify us immediately at [email protected] so we can update your claim file.
3.4 Data Security
We implement the following technical and organizational security measures to protect your personal data:
- Encryption of data in transit for all web forms and email communications
- Password-protected and encrypted storage for claim files and identity documents
- Access controls limiting internal access to personal data on a need-to-know basis
- JotForm’s built-in SSL encryption and secure data storage for form submissions and electronic signatures
- Secure deletion of identity documents once claim filing is complete
- Regular review of data handling practices and third-party service provider security
Despite these measures, no method of electronic storage or transmission over the Internet is 100% secure. We cannot guarantee absolute security of your personal data. In the event of a data breach, we will notify you and relevant authorities as required by applicable law.
3.5 Data Retention Schedule
- Contact form submissions and general inquiries — 2 years, then deleted
- Client Service Agreements — 7 years after claim resolution for legal and tax compliance
- Claim correspondence and communications — 7 years after claim resolution
- Financial and transaction records — 7 years to comply with U.S. tax law
- Identity documents submitted for claim processing — securely deleted upon claim submission and processing completion
- Public records data used for outreach — deleted once outreach is complete or client is onboarded
- Security logs and IP addresses — 90 days
4. Contact Form Specific Provisions
4.1 How Contact Form Data Is Used
Personal data submitted through our contact forms is used exclusively for:
- Responding to your inquiry about surplus fund recovery services
- Researching whether surplus funds may exist for your former property li>Following up on unresolved inquiries or incomplete claim information
- Maintaining a record of communications for dispute resolution
- Fraud and abuse prevention
We do not use contact form submissions to add you to marketing email lists, share your information with advertisers, or contact you for purposes unrelated to your surplus fund inquiry without your explicit consent.
4.2 Response Timeframe
We aim to respond to all contact form inquiries within 2–3 business days during business hours (Monday – Friday, 9:00 AM – 5:00 PM EST). For privacy-related requests including data access, deletion, or correction requests, we will respond within the timeframe required by applicable law (generally 30–45 days).
4.3 Consent at Point of Collection
By submitting a contact form on our website, you consent to ZingRally collecting and processing the personal data you provide for the purpose of responding to your surplus fund inquiry. You are not required to provide more information than is necessary to address your request. Optional fields (such as phone number) are collected only if you choose to provide them.
4.4 JotForm as Data Processor
ZingRally uses JotForm to collect contact form submissions and electronic signatures. JotForm acts as a data processor on our behalf. JotForm may set cookies on your device and collect submission data including your IP address, browser type, and form completion time solely for the purpose of form delivery, submission confirmation, and document integrity verification. JotForm does not use your data for its own marketing purposes on our behalf. For more information, see JotForm’s privacy policy at jotform.com/privacy.
4.5 Marketing Opt-In
If you wish to receive marketing communications from ZingRally — including updates about our services or new state availability — you must explicitly opt in by checking a clearly labeled consent checkbox. Pre-checked consent boxes are not used. You may unsubscribe at any time by contacting us at [email protected].
5. Third-Party Data Sharing
We do not sell your personal data. We share personal data with third parties only as described below:
| Third Party | Data Shared | Purpose | Privacy Policy |
|---|---|---|---|
| County Finance Departments and State Agencies | Name, contact info, identity documents, proof of ownership, signed Client Service Agreement | Required to file and process your surplus fund claim | Applicable government agency privacy notices |
| JotForm | Contact form data, electronic signatures, agreement data | Form collection, e-signature, and document delivery | jotform.com/privacy |
| Email Service Provider | Email address, name, communication content | Delivering responses, notifications, and claim updates | Provider’s privacy policy |
All third-party service providers are required to process your data only for the purposes described above and in accordance with applicable privacy laws. We do not permit service providers to use your data for their own marketing or commercial purposes.
6. Your Data Rights
6.1 Right to Access
You have the right to request a copy of the personal data we hold about you, including data submitted through contact forms and your Client Service Agreement.
6.2 Right to Correction
You have the right to request that we correct inaccurate or incomplete personal data. Please contact us immediately if any information in your claim file is incorrect, as errors may affect your claim.
6.3 Right to Deletion
You have the right to request that we delete your personal data, subject to exceptions for legal obligations including our duty to retain signed Client Service Agreements and financial records for 7 years as required by law.
6.4 Right to Data Portability
You have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format.
6.5 Right to Object or Restrict Processing
You have the right to object to or request restriction of processing of your personal data, particularly where processing is based on legitimate interest.
6.6 Right to Opt Out of Sale or Sharing (CCPA)
ZingRally does not sell your personal data. If you believe your personal data is being shared in a manner that constitutes a “sale” under CCPA, you have the right to opt out. To exercise this right, email us at [email protected] with the subject line “Do Not Sell or Share My Personal Information.”
6.7 How to Submit a Data Rights Request
To exercise any of the rights described above, please contact us by:
- Email: [email protected] (cc: [email protected])
- Web: https://zingrally.com/contact-us/
- Phone: 202-681-2778
We will respond within the timeframe required by applicable law. We may need to verify your identity before processing your request. You will not be discriminated against for exercising any of your data rights.
7. Children’s Data
Our Services are not directed to individuals under the age of 18. We do not knowingly collect personal data from anyone under 18 through contact forms, Client Service Agreements, or any other means. If you believe a minor has submitted personal data through our platform, please contact us at [email protected] and we will delete that data immediately.
8. International Data Transfers
ZingRally primarily serves clients in the United States. Your personal data is processed and stored within the United States. If any international data transfer becomes necessary, we will implement appropriate safeguards including European Commission-approved Standard Contractual Clauses and other legally valid transfer mechanisms.
9. Data Breach Response
In the event of a data breach that may affect your personal data, we will notify affected individuals without undue delay and within the timeframe required by applicable law (72 hours under GDPR; as required under applicable U.S. state laws). We will provide clear information about the nature of the breach, the data affected, and the steps we are taking to address it. We maintain documented incident response procedures and conduct periodic security reviews to minimize the risk of data breaches.
10. Changes to This Policy
We may update this Data Handling & Contact Form Policy from time to time. When we make material changes, we will update the effective date at the top of this page and notify you by email where appropriate. Your continued use of our Services after any changes constitutes acceptance of the updated Policy.
11. Contact Us
If you have any questions, concerns, or requests regarding this Policy or how we process your personal data, please contact us at:
- Email: [email protected] (cc: [email protected])
- Phone: 202-681-2778
- Web: https://zingrally.com/contact-us/
- Data Protection Officer: [email protected]
- Business Hours: Monday – Friday, 9:00 AM – 5:00 PM EST