Privacy Policy

This Privacy Policy applies to the website newhampshiredocumentshredding.com, owned and operated by Neighborhood Parcel LLC, 1215 Main St, Unit 115, Tewksbury, MA 01876. By using this website, you agree to the collection and use of information in accordance with this policy.

01 Who We Are

New Hampshire Document Shredding is a certified document and media destruction service operated by Neighborhood Parcel LLC, a Massachusetts-based company serving residents and businesses across southern New Hampshire since 2007. We are accredited by the Better Business Bureau with an A+ rating and are fully compliant with HIPAA, FACTA, SOX, GLBA, and New Hampshire RSA 359-C.

Our core business is the secure, certified destruction of sensitive documents and digital media. Privacy protection is not incidental to what we do — it is what we do. This policy governs how we handle information collected through our website and our client service operations.

Data Controller: Neighborhood Parcel LLC, 1215 Main St, Unit 115, Tewksbury, MA 01876 — Phone: (978) 636-0301

02 Information We Collect

We collect information in two ways: information you provide to us directly, and information collected automatically when you use our website.

Information You Provide Directly

Information Collected Automatically

When you visit our website, we automatically collect certain technical information through cookies and standard web analytics tools:

• IP address and approximate geographic location (city/region level, not precise)
• Browser type, version, and operating system
• Pages visited, time on site, and referral source
• Device type (desktop, mobile, tablet)
• Cookie identifiers (see Section 4 for full cookie policy)

We do not collect Social Security numbers, driver's license numbers, financial account numbers, or health information through our website. Any sensitive information you bring to us for shredding is handled exclusively through our secure physical chain of custody — not stored, processed, or transmitted electronically.

03 How We Use Your Information

We use the information we collect for the following purposes:

• Service delivery: Scheduling, confirming, and completing your shredding service, including generating your notarized Certificate of Destruction.
• Compliance documentation: Maintaining service records that satisfy HIPAA, FACTA, SOX, and NH RSA 359-C audit requirements. We retain these records only as long as legally required or as necessary to respond to compliance inquiries.
• Communication: Responding to your inquiries, sending appointment confirmations and service reminders, and providing quotes.
• Marketing communications: Sending informational and promotional emails about our services, only to contacts who have opted in or who are existing clients. You may opt out at any time (see Section 12).
• Website improvement: Analyzing aggregated, anonymized traffic data to improve our website content, navigation, and user experience.
• Legal and regulatory compliance: Meeting our obligations under applicable federal and New Hampshire state law, including responding to lawful government requests.
• Security and fraud prevention: Detecting, investigating, and preventing unauthorized access, spam, or other harmful activity on our website.

We do not sell, rent, or trade your personal information to any third party for their own marketing purposes. We do not use your personal information to make automated decisions that produce legal or similarly significant effects about you.

04 Cookies & Tracking Technologies

Our website uses cookies and similar tracking technologies. A cookie is a small text file placed on your device when you visit a website. Below is a description of the types of cookies we use and their purpose.

Managing cookies: You can control and delete cookies through your browser settings. Most browsers allow you to refuse cookies or delete existing cookies. Disabling cookies may affect some website functionality. For more information, visit allaboutcookies.org. You can also opt out of Google Analytics tracking at tools.google.com/dlpage/gaoptout.

05 Information Sharing and Disclosure

We do not sell or share your personal information with third parties for their marketing purposes. We may share your information in the following limited circumstances:

Service Providers

We work with trusted third-party vendors who assist us in operating our website and delivering our services. These include:

• Booking and scheduling platform (support.mydocumentshredding.com) — for online appointment scheduling
• Payment processors — for secure credit card and payment processing (PCI-DSS compliant)
• Website hosting and analytics providers — for website operations and traffic analysis
• Email service providers — for sending transactional and marketing communications

All service providers are contractually required to use your personal information only for the specific purpose of providing services to us, and to maintain appropriate security standards.

Legal Requirements

We may disclose your personal information if we are required to do so by law, or in good-faith belief that such disclosure is reasonably necessary to:

• Comply with a legal obligation, subpoena, court order, or valid legal process
• Protect and defend the rights or property of Neighborhood Parcel LLC
• Prevent or investigate possible wrongdoing in connection with our services
• Protect the personal safety of our clients, employees, or the public
• Respond to a request from government or law enforcement authorities

Business Transfers

In the event of a merger, acquisition, reorganization, or sale of assets, your personal information may be transferred as part of that transaction. We will notify affected users before personal information becomes subject to a different privacy policy.

06 Data Retention

We retain personal information only for as long as necessary to fulfill the purposes described in this policy or as required by applicable law. Our general retention guidelines are:

When personal information is no longer required, we securely delete or anonymize it in accordance with our data disposal practices — the same security standards we apply to the documents our clients bring to us.

07 Security Practices

As a certified document security company, we hold ourselves to a higher standard of data protection than most website operators. The following measures protect the personal information we collect and store:

08 Your Privacy Rights

Depending on your jurisdiction, you may have the following rights with respect to your personal information. To exercise any of these rights, contact us at the information provided in Section 16.

We will respond to verified privacy rights requests within 30 days. We will not discriminate against you for exercising any of these rights — exercising a privacy right will not affect the price or quality of services you receive from us.

09 New Hampshire Privacy Law NH RSA 359-C

We are a New Hampshire-focused business and take our obligations under New Hampshire law seriously. The following NH RSA 359-C provisions are directly relevant to our operations and your rights as a New Hampshire resident:

Disposal of Personal Information (RSA 359-C:20)

New Hampshire law requires that businesses take reasonable steps to protect personal information from unauthorized access or use during disposal. This includes shredding, erasing, or otherwise destroying records containing personal information so that the information cannot be read or reconstructed. Compliance with this provision is the core of the service we provide to our clients — and we apply the same standard to our own records management.

Security Breach Notification (RSA 359-C:19, :20-a)

New Hampshire law requires businesses to notify affected NH residents in the event of a security breach involving their personal information. If we experience a breach that meets the notification threshold under RSA 359-C:19, we will:

• Notify affected New Hampshire residents in the most expedient time possible and without unreasonable delay
• Notify the New Hampshire Attorney General's Office as required by statute
• Provide notification that includes the nature of the breach, the information involved, and steps you can take to protect yourself
• Offer guidance on monitoring your financial accounts and credit reports if financial information was involved

Definition of Personal Information Under NH Law

Under NH RSA 359-C:19, “personal information” means an individual's first name or initial and last name in combination with any one or more of the following data elements:

• Social Security number
• Driver's license number or New Hampshire identification card number
• Account number, credit or debit card number, in combination with any required security code, access code, or password that would permit access to an individual's financial account

Our internal data practices are designed to minimize the collection and retention of such information combinations consistent with our service delivery and legal obligations.

10 California Residents CCPA / CPRA

If you are a California resident, the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) provide you with additional rights regarding your personal information. In the preceding 12 months, we have collected the following categories of personal information as defined by the CCPA:

• Identifiers — such as name, email address, IP address, and phone number
• Commercial information — such as records of services purchased
• Internet or other electronic network activity — such as browsing history on our website and interactions with our web content

We do not sell personal information as defined under the CCPA. California residents have the right to request disclosure of personal information collected, request deletion of personal information, and opt out of any sale (we do not sell data). To submit a CCPA request, contact us at (978) 636-0301 or at the address in Section 16.

We will not discriminate against California residents for exercising CCPA rights.

11 Children's Privacy COPPA

Our website and services are intended for adults and are not directed at children under the age of 13. We do not knowingly collect personal information from children under 13 years of age through our website.

If you are a parent or guardian and believe that your child under 13 has provided personal information to us through our website, please contact us immediately at (978) 636-0301 or at the address in Section 16. We will promptly investigate and, if confirmed, delete such information from our records.

This policy complies with the Children's Online Privacy Protection Act (COPPA), 15 U.S.C. § 6501 et seq., and the FTC's implementing regulations at 16 C.F.R. Part 312.

12 Email Communications & CAN-SPAM CAN-SPAM Act

If you provide us with your email address to receive information about our services or to schedule service, we may send you:

• Transactional emails — appointment confirmations, service reminders, and Certificates of Destruction. These are required to fulfill your service and cannot be opted out of while you are an active client.
• Marketing emails — occasional newsletters, seasonal reminders about document purge timing, and promotional information about our services. You can opt out of these at any time.

In compliance with the CAN-SPAM Act, every marketing email we send:

• Accurately identifies the sender (Neighborhood Parcel / NH Document Shredding)
• Uses an honest subject line that is not deceptive
• Identifies the message as an advertisement where required
• Includes our physical mailing address
• Includes a clear, working unsubscribe mechanism
• Processes opt-out requests within 10 business days

To opt out of marketing emails: Click the unsubscribe link in any marketing email, or contact us directly at (978) 636-0301 or at the address in Section 16. Your opt-out request will be processed within 10 business days.

13 Third-Party Services and Embedded Content

Our website uses the following third-party services that may collect information about your interactions:

Google Analytics

We use Google Analytics to understand how visitors use our website. Google Analytics collects information such as how often you visit, what pages you visit, and what website you visited prior to ours. We use this information to improve our website. Google Analytics collects only the IP address assigned to you on the date you visit, not your name or other identifying information. We do not combine the information collected through Google Analytics with personally identifiable information. Google's ability to use and share information collected by Google Analytics is restricted by the Google Analytics Terms of Service and the Google Privacy Policy.

Online Booking Portal

Our online booking and scheduling system (support.mydocumentshredding.com) is operated by a third-party service provider. When you use the booking portal, you are subject to that platform's privacy policy in addition to this one. We have selected this provider based on their security and privacy practices.

Embedded Content

Pages on our website may include embedded content from third-party sources (such as YouTube videos, maps, or social media content). Embedded third-party content behaves in the same way as if you had visited that third party's website directly — they may collect data about you, use cookies, and track your interaction with the embedded content. We do not control these third parties or their privacy practices.

External Links

Our website contains links to other websites, including government compliance resources, partner organizations, and industry references. Once you leave our website, we are not responsible for the privacy practices of those other sites. We encourage you to read the privacy policy of every website you visit.

14 Data Breach Notification Procedures

In the event of a confirmed data security breach that involves personal information we hold about you, we will act promptly and transparently in accordance with applicable law. Our breach response process includes:

1. Immediate containment: Upon discovery of a suspected breach, we will immediately take steps to contain and assess the incident.
2. Notification to affected individuals: If the breach involves personal information about New Hampshire residents, we will provide notice in the most expedient time possible, and without unreasonable delay, consistent with NH RSA 359-C:19. Notification will be provided by the most effective means available, which may include email, first-class mail, or conspicuous posting on our website.
3. Notification to regulators: We will notify the New Hampshire Attorney General's Office and any other required regulatory bodies as required by applicable state and federal law.
4. Notification content: Our breach notification will describe the nature of the breach, the types of personal information involved, what we are doing to address the breach, and what steps you can take to protect yourself.
5. Credit monitoring assistance: Where financial account information may have been involved, we will provide information on how to monitor your credit and financial accounts.

If you believe your personal information has been compromised in connection with our services, contact us immediately at (978) 636-0301.

15 Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or business operations. When we make material changes, we will:

• Update the “Last Updated” date at the top of this policy
• Post the updated policy on this page
• Where required by law or where changes are material, notify affected clients by email or by a notice on our website prior to the change taking effect

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of our website after the posting of a revised Privacy Policy constitutes your acknowledgment of the changes.

16 Contact Us About This Policy

If you have questions, concerns, or requests related to this Privacy Policy or our data practices, please contact us:

This Privacy Policy was last reviewed by our compliance team and is maintained in accordance with our obligations under New Hampshire RSA 359-C, the Federal Trade Commission Act, HIPAA, FACTA, COPPA, and the CAN-SPAM Act. For questions about the laws that govern document shredding and data disposal in New Hampshire, visit our FACTA compliance guide or our page on HIPAA compliance in NH.