Privacy Policy

We use personal information only for the specific purposes for which it was collected. The primary purposes are:

We retain personal information only for as long as necessary for the purposes described in this policy or as required by law.

We do not sell, rent, or trade your personal information to any third party for marketing purposes. We share personal information only in the following limited circumstances:

Our primary operations are in the Commonwealth of Massachusetts, USA. If you access our services from the European Economic Area (EEA), your personal data may be transferred to and processed in the United States. Where such transfers occur, we ensure appropriate safeguards are in place in accordance with GDPR Chapter V, including Standard Contractual Clauses (SCCs) with any relevant third-party processors.

Right to withdraw consent (GDPR Article 7(3)): Where processing is based on consent, you may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing before withdrawal.

Right to lodge a complaint (GDPR Article 77): You have the right to lodge a complaint with your local data protection supervisory authority if you believe we have not complied with GDPR. In the EU, this is typically the data protection authority in your country of residence. In the UK, this is the Information Commissioner’s Office (ICO).

Automated decision-making (GDPR Article 22): We do not make any decisions that significantly affect you based solely on automated processing of your personal data.

Massachusetts residents have the following rights under state law:

Breach notification: If we experience a security breach that compromises your personal information as defined under M.G.L. c. 93H, we are required to notify you and the Massachusetts Attorney General’s Office as soon as reasonably possible.

Security program: You have the assurance that we maintain a Written Information Security Program (WISP) as required by 201 CMR 17.00, which governs how your personal information is protected in both electronic and paper records.

Access to your notary records: You may request a copy of your entry in our notary journal. We will provide available information consistent with our privacy obligations and any applicable legal restrictions.

As required by Massachusetts 201 CMR 17.00, we maintain a comprehensive Written Information Security Program (WISP) that governs how we collect, store, process, and safeguard personal information of Massachusetts residents. Our WISP includes both electronic and paper record safeguards and is reviewed at least annually.

We have designated a responsible employee to maintain our information security program. All personnel with access to personal information receive training on data protection obligations and handling procedures. We conduct periodic risk assessments to identify and address potential vulnerabilities. We take disciplinary measures for any violations of our privacy and security policies.

Electronic systems containing personal information are protected by:

Paper records containing personal information — including printed appointment forms, document copies retained with client consent, and notary-related paperwork — are stored in locked filing systems. Physical access to records is restricted to authorized personnel. Documents are disposed of through secure shredding.

In the event of a data security breach affecting personal information as defined under M.G.L. c. 93H, we will:

1. Promptly investigate and contain the breach. 2. Notify affected Massachusetts residents and the Massachusetts Attorney General’s Office as required by law. 3. Document the breach and all responsive actions taken. 4. Review and improve our security practices to prevent recurrence.

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from minors. If a minor requires notary services, the parent or legal guardian must be present, provide consent, and handle all communication and booking. If we become aware that we have inadvertently collected personal information from a minor without appropriate consent, we will take immediate steps to delete that information.

Cookies are small text files placed on your device by a website when you visit. They allow the website to remember your preferences and actions over time. Some cookies are essential for the site to function; others are optional and used for analytics or personalization.

You have several options for controlling cookies:

Browser settings: Most browsers allow you to view, block, or delete cookies through their settings menu. Blocking essential cookies will affect website functionality.

Google Analytics opt-out: You can install the Google Analytics Opt-out Browser Add-on to prevent your data from being used by Google Analytics.

For EU/EEA users: We rely on your consent before placing non-essential cookies. You may withdraw consent at any time through your browser settings. Withdrawal of consent does not affect the lawfulness of processing based on prior consent.

Do Not Track: Some browsers transmit a “Do Not Track” signal. Our website does not currently respond to Do Not Track signals, though we limit tracking and analytics to what is described in this policy.

Our website may include links to third-party websites (e.g., our booking platform, payment processor, or social media profiles). These third parties have their own privacy policies, and we are not responsible for their data practices. We recommend reviewing the privacy policy of any third-party site before providing personal information.

Embedded content from third-party services (e.g., Google Maps, YouTube) may collect data about your interaction with that content even if you do not have an account with those services.

If you are located in the European Economic Area and believe we have not complied with our obligations under the GDPR, you have the right to lodge a complaint with the data protection supervisory authority in your country of residence or habitual place of work (GDPR Article 77). A list of EU supervisory authorities is available at edpb.europa.eu. For UK residents, the relevant authority is the Information Commissioner’s Office (ICO).

We ask that you contact us directly before lodging a supervisory complaint so we have an opportunity to address your concern.

We will acknowledge receipt of your request within 5 business days and provide a substantive response within 30 calendar days. If your request is complex or voluminous, we may extend this period by an additional 60 days and will notify you accordingly (GDPR Article 12(3)). There is no fee for privacy rights requests. We may ask you to verify your identity before processing a request involving access to or modification of personal data.

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or services. When we make material changes, we will update the “Last Revised” date at the top of this page. For significant changes that affect how we process personal information, we will take reasonable steps to notify affected individuals (for example, by posting a notice on our website or contacting you directly if we have your contact information).

Your continued use of our website or services after the effective date of a revised policy constitutes your acceptance of the updated terms. We encourage you to review this page periodically.