Unbundle the signature stack
Ask for the complete agreement and every linked disclosure before enrollment. A short web form can reference separate terms, a bank authorization, an electronic-delivery agreement and a privacy notice. Save the versions you actually accepted.
Margin notes for the service agreement
Who: the legal entity providing service, any separate law firm and the account administrator.
What: the debts included, work promised and work excluded.
When: expected offer timing and conditions before a fee is earned.
Exit: cancellation method, refunds, remaining charges and access to account funds.
Disputes: arbitration, court forum, governing law and complaint contacts.
The FTC’s debt-service guidance describes important fee and risk disclosures. A sales representative’s summary should match the written terms. Do not infer attorney representation from a legal-sounding business name.
Read each permission as a different question
| Permission | Question to resolve before accepting |
|---|---|
| Negotiate or represent | Can the provider only present offers, or can it bind you? Must you approve each settlement? Does it include court representation? |
| Debit a bank account | Who initiates withdrawals, for what amount and schedule, and how can authorization be changed or revoked? |
| Receive documents electronically | Where are notices delivered, how are copies obtained, and what happens if access fails? |
| Marketing contact | Which companies and channels are included? Is this broader than communications needed to perform the service? |
| Data sharing | What is collected, who receives it, why, and which choices are offered? |
Revoking one permission may not cancel the service contract or the underlying debt. Ask the recipient to confirm exactly what a requested change will do and retain its response. Do not grant access credentials merely because an intake form asks for them; establish why the access is needed and whether a narrower method exists.
Read the privacy notice without assuming a universal opt-out
A privacy notice explains practices; it is not the same as permission for unlimited use. Coverage depends on the entity and activity. Different regulators administer different privacy rules. Check which regime covers the entity and activity before relying on a particular opt-out rule.
For entities covered by Regulation P, certain sharing with companies outside the same corporate group is subject to notice and opt-out requirements, while exceptions address such things as processing and servicing. You cannot assume every disclosure can be stopped, or that an opt-out deletes records already held.
Keep proof of the choices you make
- Find the actual privacy-contact and cancellation addresses.
- Keep a copy of the sharing choices and submission confirmation.
- Ask about retention, third-party vendors and secure document delivery.
- Resolve any mismatch between a salesperson’s promise and the written permission before signing.
State privacy, recording, electronic-signature and professional-practice laws can add requirements. This page identifies the review questions; it does not declare a particular contract enforceable.
Sources and further reading
General educational information. The original evidence, dates and recorded qualifications are available in the optional archive below.