Privacy Policy
Effective date: September 1, 2026
This policy explains how [LEGAL BUSINESS NAME], doing business as Center Street Mail (“we,” “us”), handles personal information through our website, customer portal, and mail services. Our address is 201 E Center St, Suite 108, Anaheim, CA 92805. Privacy contact: [PRIVACY EMAIL].
Information we collect
We collect information you provide when applying, creating an account, communicating with us, or requesting services. This may include your name, business name, authorized recipient names, email, telephone number, physical and forwarding addresses, plan selection, and service instructions.
For activated mailboxes, we collect required identity-verification and mailbox-authorization information, including USPS Form 1583 information and identification documentation required for the service. Mail handling creates records such as envelope and package photographs, sender and recipient details, arrival dates, tracking numbers, requested scans, mail contents included in those scans, and pickup, forwarding, and destruction instructions.
Billing records may include transaction identifiers, subscription status, invoices, and payment-method summaries. Payments are processed through Stripe when payment functionality is enabled. Do not email us full card numbers or security codes.
Our website and infrastructure may also collect IP addresses, browser and device information, access times, request logs, and authentication information. [CONFIRM exact cookies, browser storage, analytics, advertising tools, and third-party collection across websites; describe their purposes and controls here.]
How we use information
We use information to process applications, verify identity and authority, receive and manage mail, provide scans and forwarding you request, administer accounts and payments, respond to support requests, send service notices, protect accounts, investigate misuse, and meet legal and postal obligations. Promotional messages, if offered, include an unsubscribe method; necessary service notices may continue.
We open mail for scanning only under your authorization, except where otherwise legally required or permitted. Access to another recipient’s mail requires appropriate authorization.
When information is disclosed
We disclose information as needed to providers that support hosting, storage, authentication, payments, communications, identity verification, and mail transport, and to personnel authorized to operate the service. The current implementation uses Cloudflare infrastructure and Stripe payment integration. [CONFIRM additional providers and which services are enabled.]
We provide required records to USPS and disclose information when legally required, in response to valid legal process, or as permitted by law to address fraud, security, or legal claims. Information may also transfer in a business transaction, subject to applicable protections. We share information with people you authorize, such as a designated pickup person.
[CONFIRM AND INSERT an accurate statement about whether personal information is sold or shared for cross-context behavioral advertising. If applicable, provide the required opt-out methods and recognition of Global Privacy Control. Do not publish an unverified “we never sell data” promise.]
Retention and security
We retain information for service delivery, legal and postal compliance, accounting, security, and dispute resolution, then delete or de-identify it according to our retention schedule. Account deletion does not require removal of records we must retain by law.
[INSERT verified retention periods or meaningful criteria for application records, identification and Form 1583 records, mail images and scans, billing records, logs, and backups. Disclose how long customers can access scans after closure.]
We use reasonable administrative, technical, and physical safeguards appropriate to the information we handle. No system guarantees complete security. Protect your account credentials and contact us promptly if you suspect unauthorized access.
Your choices and requests
Contact [PRIVACY EMAIL] to request access to, correction of, or deletion of your information, or help updating account details. We may verify identity and authority before acting. We respond as required by applicable law and explain any legally permitted limitations. Customers should download needed mail scans before requesting deletion or closing their accounts.
Where applicable law grants additional rights, these may include information about collection and disclosure, portability, limits on certain uses of sensitive information, and opting out of sale or sharing. We will not unlawfully discriminate against you for exercising a privacy right. Authorized agents may submit requests subject to lawful verification.
[COMPLETE California applicability review. If CCPA applies, add the required notice at collection, category and preceding-12-month disclosures, sensitive-information disclosures, request methods, response procedures, and applicable opt-out links. This paragraph alone is not a complete CCPA notice.]
Tracking signals and children
[INSERT the website’s verified response to browser Do Not Track signals and whether other parties collect information over time and across websites. Address Global Privacy Control separately where required.]
Our service is intended for account holders age 18 or older and is not directed to children under 13. Contact us if you believe a child submitted information directly to us. Mail for an authorized recipient may contain information about minors; we handle it according to the service authorization and applicable law.
Changes and contact
We post updates on this page and revise the effective date. We provide additional notice or obtain consent when required for material changes. For questions or requests, email [PRIVACY EMAIL] or write to our address above, attention Privacy.