Last updated: October 1, 2024

Pigeon Documents Incorporated ("Pigeon Documents," "we," "us," or "our") is committed to protecting the privacy of our customers, clients, and website visitors. This Privacy Policy applies to www.pigeondocuments.com and any other websites, applications, or services that we own or operate and that link to this Privacy Policy (collectively, the "Services"). This Privacy Policy explains how we collect, use, and disclose information through the Services.

Information Collection

We may collect information from you in a variety of ways, including when you visit our website, create an account, use our Services, or otherwise interact with us. The types of information we may collect include:

• Personal information, such as your name, email address, and other contact information
• Account information, such as your username and password
• Information about your use of our Services, such as the documents you upload and the actions you take within the Services
• Device information, such as your IP address, browser type, and operating system
• Location information, if you enable location services on your device

Information Use

We may use the information we collect for a variety of purposes, including:

• To provide, maintain, and improve our Services
• To personalize your experience and tailor the content and information we present to you
• To contact you with important information about your account or our Services
• To conduct research and analysis to improve our Services
• To enforce our terms of service and prevent fraudulent or illegal activity

Information Disclosure

We may disclose information we collect to:

• Third-party service providers who help us provide and improve our Services
• Law enforcement or other government agencies, as required by law or in response to a valid legal request
• Other third parties when we believe disclosure is necessary to protect the rights, property, or safety of Pigeon Documents or others
• Customer Notification: If Pigeon Documents receives a legally binding request for the disclosure of your personal information (e.g., a court order or government request), we will notify you unless we are legally prohibited from doing so (for example, due to a gag order or similar legal restriction). The notification will include details of the request and the information disclosed, unless restricted by law.

Our Role in Data Processing

Pigeon Documents operates as a data processor for our business clients, handling and transferring documents on their behalf through our web-based document management system. We are committed to complying with applicable regulations, including the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and the Health Insurance Portability and Accountability Act (HIPAA), among others.

• We only process personal data based on our clients’ instructions.
• We implement robust security measures to protect the confidentiality and integrity of the data.
• We work with third-party service providers who adhere to the same security and privacy standards.
• We support our clients in fulfilling their legal obligations, such as responding to data subject access requests.

Data Subject Rights and Communication

As a user of Pigeon Documents, you have the following rights regarding your personal data under applicable data protection laws, including the General Data Protection Regulation (GDPR):

• Access to Information: You have the right to request access to the personal information we hold about you. You can request a copy of your personal data by contacting us at [email protected].
• Rectification: You have the right to correct inaccurate personal information about you.
• Erasure: You have the right to request the deletion of your personal data in certain circumstances, such as when the data is no longer necessary for the purpose for which it was collected.
• Objection to Processing: You have the right to object to the processing of your personal data, particularly where processing is based on our legitimate interests or for direct marketing purposes.
• Data Portability: You have the right to request that we provide your personal data in a commonly used, machine-readable format for transfer to another data controller.
• Automated Decision-Making: You have the right not to be subject to decisions made solely based on automated processing, including profiling, which produce legal effects concerning you or similarly significantly affect you.
• Withdrawal of Consent: You have the right to withdraw your consent for the processing of your personal data at any time. To do so, please contact us at [email protected]. Upon receiving your request, we will stop processing your data and ensure that it is deleted or anonymized within 30 days, unless we are required by law to retain it.

To submit a request related to any of the above rights (e.g., access, correction, erasure, restriction of processing, data portability, objection to processing, or withdrawal of consent), please contact our Data Protection Officer (contact information below). Upon receiving your request, we will acknowledge receipt within 72 hours, and we aim to process all valid requests within 30 days.

Please note, to protect your personal data, we may require additional information to verify your identity before processing your request.

If you are unsatisfied with our handling of your request, you have the right to lodge a complaint with a supervisory authority.

To exercise any of these rights, or if you have any questions or concerns about how we process your personal data, please contact us at [email protected].

Alternatively, if you are located in the European Union, you may contact our appointed GDPR representative, Prighter, as described below.

We will respond to your request within a reasonable timeframe, and always in accordance with applicable data protection laws.

Objection to Data Processing

You may object to the processing of your personal data at any time for direct marketing purposes or for other processing activities based on our legitimate interest. If you object, we will cease processing your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or if processing is necessary for the establishment, exercise, or defense of legal claims.

Security

We take the security of your information very seriously and have implemented robust measures to protect the information we collect from loss, misuse, and unauthorized access, disclosure, alteration, and destruction. We utilize and build on the same industry-leading end-to-end encryption and security standards that banks and government agencies use to keep sensitive documents safe. However, no method of electronic storage or internet transmission is 100% secure, so we cannot guarantee the absolute security of your information.

Cookies and Other Tracking Technologies

We may use cookies and other tracking technologies to collect information about your use of our Services. Cookies are small data files that are stored on your device when you visit a website. We may use both session cookies, which expire when you close your browser, and persistent cookies, which stay on your device until they expire or you delete them. You can control the use of cookies through your browser settings.

Children's Privacy

Our Services are not intended for children under the age of 18. We do not knowingly collect personal information from children under 18. If we learn that we have collected personal information from a child under 18, we will take steps to delete that information as soon as possible.

Changes to this Privacy Policy

We may make changes to this Privacy Policy from time to time. We will post any changes on this page and, if the changes are significant, we will provide a more prominent notice (including, for certain services, email notification of Privacy Policy changes). By continuing to use our Services after any changes become effective, you agree to be bound by the revised Privacy Policy.

Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at [email protected].

Data Protection Officer

We have appointed a Data Protection Officer (DPO) to oversee compliance with our data protection policies. If you have any questions or concerns regarding our data protection practices, you may contact our DPO.

Data Protection Officer: Adam Bulow
Email: [email protected]

Representative

In compliance with Article 27 of the General Data Protection Regulation (GDPR), Pigeon Documents has appointed Prighter as its GDPR representative in the European Union for data protection matters. Prighter gives you an easy way to exercise your privacy-related rights (e.g. requests to access or erase personal data). If you want to contact us via our representative, Prighter or make use of your data subject rights, please visit the following website: https://prighter.com/q/18504934450