Privacy Policy

Last updated: 18 September 2026.

Who we are. NationalDebtRegistry.net is operated by Four Nine Nine Ltd, 3rd Floor, 86-90 Paul Street, London EC2A 4NE, United Kingdom. Contact: contact@499group.com. National Debt Registry is not a lender, creditor or debt relief provider.

Information we collect. When you submit a request we collect what you provide (name, contact details, state, debt amount, debt types and payment status and, on some request pages, your street address, city and ZIP code) plus technical data such as IP address, device information and the campaign or click identifiers in the link you arrived on.

How we use it. To connect you with independent debt relief providers you asked to hear from, to track which campaign or partner referred you, to operate and improve the site, and to prevent fraud.

Sharing. Four Nine Nine Ltd shares the information you submit with one or more independent debt relief providers and their service providers so they can evaluate your request and contact you about it. Those parties use it under their own privacy policies. We also share information with service providers that host the site and provide analytics and security, and with authorities when the law requires it. Four Nine Nine Ltd may be compensated when your request is passed on; under the California Consumer Privacy Act this may be treated as a "sale" or "sharing" of personal information, and you can opt out as described on our Do Not Sell or Share My Personal Information page.

Service vendors. We use vendors who process information on our behalf: website hosting and security (Cloudflare, including Turnstile bot protection), independent consent certification (TrustedForm) on our forms, email delivery, and usage analytics (Google Analytics and Microsoft Clarity). These vendors may only use your information to provide their services to us.

Sensitive personal information. The request form asks what types of debt you have, and one of the answers is medical bills. We treat that answer as sensitive personal information under California law. We use it only to route your request to the participating debt relief providers you asked to hear from and to keep the consent record; we do not use it to infer characteristics about you and we do not use it for advertising. Because passing it to a provider can count as a sale or sharing, you may limit our use of it: use the Limit the Use of My Sensitive Personal Information link in the footer, the request form on our Do Not Sell or Share My Personal Information page, or email contact@499group.com with the subject "Limit sensitive information".

Consent records. The request form shows this consent language before you submit, and you can print or save this page as your copy of it: "By checking this box I am electronically signing this consent: I expressly authorize National Debt Registry (operated by Four Nine Nine Ltd) and up to four of its participating debt relief providers to call and text me about my request at the number I provided, including with automatic telephone dialing systems and prerecorded or artificial voice messages, even if my number is on a Do Not Call registry. Consent is not a condition of purchase. Message and data rates may apply. Message frequency varies. Reply STOP to stop and HELP for help. I can also revoke consent by emailing contact@499group.com. I can print or save a copy of this consent from the Privacy Policy page."

Advertising and analytics cookies. We use a first-party cookie to remember how you arrived here (campaign and affiliate identifiers) for up to 30 days, session storage to operate our forms, and Google Analytics and Microsoft Clarity cookies to understand how the site is used. We do not run third-party advertising cookies. If we add advertising measurement tags in future we will list them here first.

How long we keep it. We keep the request you submitted, the consent record (the disclosure text, date, time, page and the independent consent certificate) and the campaign identifiers attached to it for five years from the date of submission, so that we can prove consent and answer any dispute about a call or message. Server logs are kept for up to 12 months. Analytics data is kept for the period set in the analytics tool (Google Analytics: 14 months). Emails you send us are kept for two years. Answers you type but never submit are held in your browser only and are not sent to us. After those periods we delete the information or anonymize it. Independent debt relief providers keep the information they received under their own policies.

Global Privacy Control. If your browser sends a Global Privacy Control (GPC) signal, we treat it as a request to opt out of the sale and sharing of personal information collected in that browser, and we do not load advertising tags for that visit. If your browser sends the signal and you then submit a request form, we tell you on the form that the two conflict and ask you to confirm that you want this request sent to independent debt relief providers; your confirmation applies to that request only, and the signal keeps applying to everything else. You can still opt out afterwards as described below.

Your privacy rights. Depending on where you live (California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah and Virginia have consumer privacy laws), you may have the right to:

• know what personal information we hold about you and get a copy of it, including a copy in a portable, readily usable format;
• correct inaccurate information;
• delete it;
• opt out of the sale or sharing of personal information, of targeted advertising, and of profiling that produces legal or similarly significant effects (we do not profile);
• limit the use of sensitive personal information (the debt types you select, which may include medical bills);
• know the specific third parties to which we disclosed your personal information (where your state provides that right, for example Oregon, Minnesota and Delaware);
• not be discriminated against for exercising these rights.

To exercise a right, use the request form on our Do Not Sell or Share My Personal Information page, email contact@499group.com with the subject "Privacy request", or write to Four Nine Nine Ltd, 3rd Floor, 86-90 Paul Street, London EC2A 4NE, United Kingdom. Tell us which right you are exercising and the name, email address and phone number you used on this site so that we can match your record; we do not ask for a Social Security number to verify a request. Requests to opt out of sale or sharing and requests to limit the use of sensitive personal information are not verified: we act on them as received, unless we have reason to believe the request is fraudulent. An authorized agent may act for you if the agent gives us your signed permission and, for a request to know, delete or correct, we can confirm your identity with you. We act on opt-out and limit requests within 15 business days and tell the third parties that received your personal information in the previous 90 days to stop selling or sharing it. For requests to know, delete or correct we confirm receipt within 10 business days and answer within 45 days; if we need up to 45 more days we tell you why in writing. If we deny a request, you may appeal by replying to our answer with the word "Appeal"; a person who did not make the original decision reviews the appeal and answers in writing within 45 days, and if the appeal is denied we tell you how to contact your state's attorney general. California residents: see the Do Not Sell or Share My Personal Information page for the full California notice. You may also contact a debt relief provider about the information it holds, but that does not replace our responsibility to handle your request: when you ask us to delete or to opt out we notify the providers that received your information in the previous 90 days.

Children. This site is for adults. You must be 18 or older to submit a request. We do not knowingly collect personal information from anyone under 18, and never from a child under 13; if you believe a child has given us information, email contact@499group.com and we will delete it. We do not sell or share the personal information of anyone we know to be under 16.

Security and where information is processed. Information is transmitted over encrypted connections and stored with access limited to the people who need it to do their jobs. Four Nine Nine Ltd is a United Kingdom company; the information you submit is processed on servers in the United States and may be accessed from the United Kingdom. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

California "Shine the Light". California Civil Code section 1798.83 lets California residents ask once a year which third parties received their personal information for those parties' own direct marketing. Email contact@499group.com with the subject "Shine the Light request".

Changes. We post any change on this page with a new date at the top. If a change reduces your rights, we will say so in a notice at the top of this page for 30 days.

Contact. Email contact@499group.com with the subject "Privacy request", or write to Four Nine Nine Ltd, 3rd Floor, 86-90 Paul Street, London EC2A 4NE, United Kingdom.