Privacy Policy
This policy explains how Apostille Depot, a Neighborhood Parcel company, collects, uses, shares and protects your personal information when you use our website and apostille services. It also explains your rights under the European Union and United Kingdom GDPR and under United States state privacy laws, and how to exercise them.
Last updated: June 5, 2026
1. Who we are and the scope of this policy
We take the privacy of your documents seriously, because the records you trust us with are personal and often sensitive.
Apostille Depot is an apostille and document authentication service operated by Neighborhood Parcel, located at 1215 Main St, Unit 115, Tewksbury, MA 01876, United States. In this policy, "we", "us" and "our" refer to Apostille Depot and Neighborhood Parcel. For the purposes of the EU and UK General Data Protection Regulation (GDPR), Neighborhood Parcel is the data controller of your personal information.
This policy applies to apostilledepot.com and to the apostille, authentication, notary and related services we provide. It does not apply to third-party websites we link to, or to government agencies that process your documents as independent authorities. Your use of our services is also governed by our Terms of Agreement.
2. Quick summary
Here is the short version. The full detail follows in the sections below.
3. Information we collect
We collect only the information needed to provide our services, run our website and meet our legal obligations. Depending on how you use us, this may include:
Information you give us
- Contact and account details such as your name, mailing address, phone number and the details you submit through our forms.
- Order and document information, including the documents you send for authentication. These can contain sensitive identifiers such as your date of birth, a Social Security number on a benefits letter, government-issued ID details, or the contents of an FBI report or vital record.
- Payment information, which is processed by our secure third-party payment provider. We do not store full card numbers on our systems.
- Communications you send us through our contact form, by phone or by mail.
Information we collect automatically
- Technical data such as your IP address, browser type, device information and pages viewed.
- Usage data about how you navigate the site, collected through cookies and similar technologies described in Section 6.
Sensitive information. Some documents you send contain sensitive personal information. We use it only to perform the authentication you request. We do not use it to build profiles, infer characteristics or for any unrelated purpose.
4. How we collect your information
We collect personal information in three main ways:
- Directly from you when you place an order, fill out a form, send documents, make a payment or contact us.
- Automatically through cookies and analytics tools when you browse our website.
- From service providers who help us deliver our services, such as payment processors and shipping carriers, and from public authorities in the course of authenticating your documents.
5. How and why we use your information
We use your information for the purposes below. For users in the EU, EEA and UK, each purpose has a legal basis under the GDPR.
| Purpose | GDPR legal basis |
|---|---|
| Provide the apostille, authentication and notary services you order, and deliver your documents | Performance of a contract |
| Process payments and prevent fraud | Contract; legitimate interests |
| Respond to your questions and provide support | Contract; legitimate interests |
| Keep records for tax, accounting and legal compliance | Legal obligation |
| Secure, maintain and improve our website and services | Legitimate interests |
| Send marketing emails and use non-essential cookies | Consent (you may withdraw it anytime) |
Where we rely on legitimate interests, we balance those interests against your rights, and you can object at any time as explained in Section 11. We do not make decisions that produce legal or similarly significant effects about you using solely automated processing.
8. International data transfers
We are based in the United States, and we serve clients around the world. If you are located in the EU, EEA or UK, your personal information will be transferred to and processed in the United States, which may have different data protection laws than your home country.
When we transfer personal data out of the EU, EEA or UK, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses, the UK International Data Transfer Addendum, or another lawful transfer mechanism. You can ask us for more information about these safeguards using the contact details in Section 17.
9. How long we keep your information
We keep personal information only as long as we need it for the purposes described in this policy. In practice:
- We return your original documents to you and do not retain copies longer than necessary to complete and verify your order.
- We keep order and financial records for as long as required by tax and accounting law, which is typically several years.
- We keep website and analytics data for a limited period, then delete or anonymize it.
When we no longer need your information, we securely delete or anonymize it.
10. How we protect your information
We use administrative, technical and physical safeguards to protect your information. These include encryption of data in transit using TLS, restricted access so that only authorized staff handle your documents, secure handling and storage of physical documents, and secure, tracked return shipping.
No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If we become aware of a data breach that affects your personal information, we will notify you and the relevant authorities as required by law.
11. Your rights in the EU, EEA and UK
If you are located in the EU, EEA or UK, the GDPR gives you the following rights over your personal information:
- Access a copy of the personal data we hold about you.
- Rectification of inaccurate or incomplete data.
- Erasure of your data in certain circumstances.
- Restriction of processing in certain circumstances.
- Portability, to receive your data in a usable format or have it transferred.
- Objection to processing based on legitimate interests or direct marketing.
- Withdraw consent at any time, without affecting processing already carried out.
To use any of these rights, contact us as described in Section 13. You also have the right to lodge a complaint with your local data protection authority, or with the UK Information Commissioner's Office if you are in the United Kingdom. If we are required to appoint an EU or UK representative under Article 27 GDPR, their details will be published in this section.
12. Your United States privacy rights
If you are a resident of California, Virginia, Colorado, Connecticut, Utah or another state with a consumer privacy law, you have rights over your personal information. Depending on your state, these include the right to know what we collect, the right to access and delete your information, the right to correct inaccurate information, the right to data portability, and the right to opt out of the sale or sharing of your information and of targeted advertising.
We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We will never discriminate against you for exercising your privacy rights.
Categories we collect (California CCPA/CPRA)
| Category | Examples | Collected |
|---|---|---|
| Identifiers | Name, address, phone, IP address | Yes |
| Customer records | Document and order details, payment information | Yes |
| Sensitive personal information | Government IDs, Social Security number contained in documents you send | Yes |
| Internet activity | Browsing and usage data on our site | Yes |
| Geolocation | Approximate location from IP address | Yes |
| Biometric, education, employment profiling | Not collected for profiling | No |
We use sensitive personal information only to perform the service you request and for purposes permitted by law, not to infer characteristics about you. As a result, the right to limit the use of sensitive personal information applies to a limited extent, since we already restrict our use. California residents may also request information under the "Shine the Light" law about disclosures to third parties for direct marketing. You may use an authorized agent to submit a request, and we will verify your identity before acting.
13. How to exercise your rights
You can exercise any of the rights in this policy in three ways. We will verify your identity before we act on a request, and we will respond within the time required by the law that applies to you.
- Submit a request through our secure contact form.
- Call us at (978) 424-4629.
- Write to us at Apostille Depot, 1215 Main St, Unit 115, Tewksbury, MA 01876, USA.
You will never be charged for making a request, and we will not treat you differently for exercising your rights.
14. Children's privacy
Our services are intended for adults. We do not knowingly collect personal information from children under 16. If you believe a child has provided us with personal information, contact us and we will delete it.
15. Links to other websites
Our website and pages such as our blog and locations may link to other sites. We are not responsible for the privacy practices of those sites. We encourage you to read the privacy policy of any website you visit through a link from ours.
16. Changes to this policy
We may update this policy from time to time to reflect changes in our practices or the law. When we do, we will revise the "Last updated" date at the top of the page. For significant changes, we will provide a more prominent notice. We encourage you to review this page periodically.
17. How to contact us
If you have questions about this policy or how we handle your information, reach out any time. We are happy to help.
Apostille Depot, a Neighborhood Parcel company
1215 Main St, Unit 115, Tewksbury, MA 01876, United States