Privacy Policy
Last Updated: October 9, 2026
1. Introduction
The USA Insoluble Fuel Disposal Agency (USIFDA) ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard personal information when you visit our website (usifda.org) and use our certification, reporting, and inquiry services.
We are a private industry association based in the United States. This policy is designed to meet requirements under the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA), other state comprehensive privacy laws (including Virginia VCDPA, Colorado CPA, Connecticut CTDPA, and Texas TDPSA where applicable), the federal Children's Online Privacy Protection Act (COPPA), and the FTC Act Section 5.
We do not sell or share your personal information for cross-context behavioral advertising. We honor opt-out preference signals, including Global Privacy Control (GPC), as described below.
2. Information We Collect
2.1 Personal Information
We may collect the following types of personal information:
- Contact Information: Name, email address, phone number, postal address
- Business Information: Company name, business address, registration details
- Compliance Reports: Information provided when reporting non-compliance incidents
- Certification Applications: Details submitted during the certification process
- Communication Records: Correspondence, inquiries, and feedback
2.2 Automatically Collected Information
When you visit our website, we automatically collect certain information:
- Technical Data: IP address, browser type, device information, operating system
- Usage Data: Pages visited, time spent on pages, click patterns, referral sources
- Cookies and Tracking Technologies: See our Cookies Policy for detailed information
3. How We Use Your Information
We use the collected information for the following purposes:
- To process and respond to compliance reports and certification applications
- To maintain our records of operators and repair facilities authorized to display the USIFDA Mark
- To communicate with you regarding your inquiries, reports, or applications
- To improve our website functionality and user experience
- To analyze website usage and trends
- To comply with legal obligations and regulatory requirements
- To protect our rights, property, and safety, and that of our users
- To send you updates about industry standards and regulatory changes (with your consent)
4. Categories of Personal Information (CCPA/CPRA)
In the preceding 12 months we may collect identifiers (name, email, phone), commercial information (certification and business details you submit), internet or network activity (cookies and analytics, if enabled), and professional information related to your application or report. We do not collect sensitive personal information as defined by CPRA for the purpose of inferring characteristics about you.
5. Disclosure of Information
We may disclose your information in the following circumstances:
- Regulatory Authorities: To the U.S. Environmental Protection Agency, OSHA, state environmental or consumer protection agencies, or other authorities when required by law or in response to lawful process
- Service Providers: To third-party service providers who assist in website operations, data analysis, or business functions (under strict confidentiality agreements)
- Legal Requirements: When required by law, court order, or governmental authority
- USIFDA Mark Authorization: Information about operators and repair facilities authorized to display the USIFDA Mark may be published (excluding personal contact details unless you consent or law requires)
- Business Transfers: In connection with any merger, acquisition, or sale of assets
We do not sell or share personal information for cross-context behavioral advertising. We do not rent or trade your personal information to third parties for their marketing.
6. Data Security
We implement appropriate technical and organizational measures to protect your personal information:
- Encryption of data in transit using SSL/TLS protocols
- Secure storage systems with access controls
- Regular security assessments and updates
- Limited access to personal information on a need-to-know basis
- Staff training on data protection and privacy
However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.
7. Data Retention
We retain your personal information only for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required by law:
- Compliance Reports: Retained for 7 years as required by regulatory obligations
- Certification Records: Retained for the duration of certification plus 7 years
- Website Analytics: Retained for 26 months (Google Analytics default)
- Marketing Communications: Until you opt-out or withdraw consent
8. Your Privacy Rights (United States)
Depending on your state of residence, you may have the right to:
- Know / Access: Request the categories and specific pieces of personal information we have collected about you
- Delete: Request deletion of personal information, subject to legal and operational retention needs
- Correct: Request correction of inaccurate personal information
- Opt out of sale/sharing: We do not sell or share personal information; no action is required to opt out
- Limit use of sensitive personal information: Not applicable to our current practices
- Non-discrimination: We will not discriminate against you for exercising privacy rights
How to submit a request: Use our Contact Form and select "Privacy Inquiry" as the subject. Describe the right you wish to exercise. We may verify your identity before fulfilling a request. Authorized agents may submit requests on your behalf where permitted by law.
Global Privacy Control (GPC): If your browser sends a GPC signal, we treat it as a valid opt-out of any sale or sharing of personal information (we do not sell or share).
California residents may also contact the California Attorney General — CCPA. Other states provide complaint rights with their Attorneys General or privacy regulators.
9. Data Location
We process and store information in the United States. If you access our site from outside the U.S., you understand that your information may be transferred to and processed in the U.S.
10. Children's Privacy (COPPA)
Our website and services are not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately so we can delete it.
11. Third-Party Links
Our website may contain links to third-party websites, including the EPA website and other regulatory resources. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies.
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by:
- Posting the updated policy on our website
- Updating the "Last Updated" date
- Sending email notifications for significant changes (where applicable)
Your continued use of our website after changes become effective constitutes acceptance of the updated policy.
13. Contact Us
If you have questions, concerns, or wish to exercise your privacy rights, please contact us:
Privacy Officer
USA Insoluble Fuel Disposal Agency (USIFDA)
Contact Form (Please select "Privacy Inquiry" as the subject)
Response Time: We aim to respond within 45 days (or as required by applicable state law, including California's 45-day period with a possible 45-day extension where permitted).
14. Governing Law
This Privacy Policy is governed by the laws of the State of Delaware, United States, without regard to conflict-of-law principles.