Privacy Policy

We take your privacy seriously. This policy explains exactly what information we collect, how we use it, and your rights regarding your data.

Last Updated: May 6, 2026

Quick summary:

We do not sell your data HIPAA compliant No third-party ad tracking Data retained 7 years Massachusetts law applies

Our Commitment to Your Privacy

MyPaperShredding by Neighborhood Parcel (“we,” “us,” or “our”) is committed to protecting the privacy of our customers, website visitors, and business contacts. This Privacy Policy describes how we collect, use, store, and protect personal information in connection with our document shredding and destruction services and our website at mypapershredding.com.

This policy applies to information collected through our website, by phone, through our online scheduling form, and in person at our Tewksbury, MA facility. By using our services or providing us with your information, you consent to the practices described in this policy.

Plain language summary: We collect the basic contact and service information we need to do our job. We do not sell it. We do not share it with advertisers. We keep it secure and retain it only as long as required by law or necessary for our business records.

Who We Are

MyPaperShredding by Neighborhood Parcel is a BBB A+ rated document destruction company based at 1215 Main St. Unit 115, Tewksbury, MA 01876. We are rated by the Boston North Business Chamber. Questions about this policy can be directed to info@mypapershredding.com or (978) 636-0301.

Changes to This Policy

We may update this policy periodically. When we do, we will revise the “Last Updated” date at the top. Material changes will be communicated via notice on our website. Continued use of our services following any update constitutes acceptance of the revised policy.


Information We Collect

Information You Provide Directly

When you schedule service, contact us, or submit a quote request, we may collect the following:

  • Full name
  • Business name (if applicable)
  • Service address
  • Mailing or billing address
  • Phone number
  • Email address
  • Type of materials to be shredded (general description only)
  • Estimated volume (number of boxes or bags)
  • Payment information (processed securely; we do not store full card numbers)

We collect only what we need to schedule, confirm, and complete your service and to issue your Certificate of Destruction.

Information Collected Automatically

When you visit mypapershredding.com, we may automatically collect certain technical information, including your IP address, browser type, pages visited, referring URL, and approximate geographic location (city/region level). This information is used to improve our website and understand how visitors find us. See the Cookies section for more detail.

Information from Phone Calls

When you call us at (978) 636-0301, our phone system may record calls for quality assurance and training purposes. We will inform you at the start of any recorded call. Call recordings are retained for 90 days and then deleted.

Business Account Information

For recurring business customers, we maintain account records including contact information, service history, invoice records, signed service agreements, Business Associate Agreements (where applicable), and Certificates of Destruction issued.


How We Use Your Information

Purpose Information Used Legal Basis
Schedule and confirm service appointments Name, address, phone, email Contract performance
Issue Certificate of Destruction Name, service address, volume, date Contract performance / legal obligation
Process payment and issue invoices Name, billing address, payment method Contract performance
Respond to inquiries and customer service Name, phone, email, service history Legitimate business interest
Comply with legal and regulatory requirements Service records, Certificates of Destruction Legal obligation
Improve our website and services Anonymized usage data, feedback Legitimate business interest
Send service reminders and confirmations Name, phone, email Contract performance / consent
Marketing communications (with consent) Name, email Consent (opt-in only)

We Do Not

  • Sell, rent, or trade your personal information to third parties
  • Use your information for behavioral advertising or ad targeting
  • Share your service history with other companies for marketing purposes
  • Build profiles on you for resale or data brokering

When We Share Information

We do not sell your personal information. We share information only in the following limited circumstances:

Service Providers

We work with a small number of trusted service providers who help us operate our business, including our scheduling and CRM software, payment processing provider, and email platform. These providers access only the information necessary to perform their specific function and are contractually prohibited from using it for any other purpose.

Legal Requirements

We may disclose information when required by law, court order, subpoena, or lawful government request. We may also disclose information to protect the rights, property, or safety of our company, our customers, or others, or to detect and prevent fraud.

Business Transfers

If MyPaperShredding by Neighborhood Parcel is involved in a merger, acquisition, or sale of all or a portion of its assets, customer information may be transferred as part of that transaction. We will notify affected customers via email or website notice before any such transfer occurs and before your information becomes subject to a different privacy policy.

With Your Consent

We may share your information for any other purpose with your prior written consent.

We never share client information with competitors or data brokers. Your service history, contact information, and document types are kept strictly within our organization and authorized service providers.


HIPAA & Medical Records

Healthcare Clients: If you are a covered entity under HIPAA and engage us to destroy protected health information (PHI), we act as your Business Associate. We will execute a Business Associate Agreement (BAA) with you before any service involving PHI. Request a BAA when scheduling by calling (978) 636-0301.

How We Handle PHI

As a Business Associate, we are required to safeguard PHI against unauthorized access, use, or disclosure. We do not access, review, or read any protected health information contained in documents presented for shredding. Our process is designed so that PHI is never in our possession in a readable form for longer than the time required to transport and destroy it.

Breach Notification

In the event of a breach of unsecured PHI, we will notify affected covered entities in accordance with the HIPAA Breach Notification Rule (45 CFR Part 164, Subpart D). Notification will be provided without unreasonable delay and within 60 days of discovery of the breach.

Subcontractors

We do not use subcontractors for the physical shredding process. All destruction is performed by our own trained employees using our own equipment. If we ever engage a subcontractor who will have access to PHI, we will execute a Business Associate Agreement with that subcontractor as required by HIPAA.

Certificate of Destruction as PHI Documentation

Your Certificate of Destruction serves as documentation that PHI was destroyed in a manner that renders it unreadable, unretrievable, and indecipherable, as required under 45 CFR 164.530(j). Retain this certificate as part of your HIPAA compliance records.


Cookies & Website Tracking

What Are Cookies

Cookies are small text files stored on your device when you visit a website. They help websites remember your preferences, understand how you navigate, and function correctly. We use cookies in a limited and purpose-specific way.

Cookies We Use

Cookie Type Purpose Can Be Disabled
Essential / Functional Required for the website to operate (form submissions, session management) No — required for site function
Analytics (Google Analytics) Understand how visitors use our website (pages visited, time on site, referral source). Data is aggregated and anonymized. Yes — opt out below
Preference Remember your choices on the site (e.g., cookie consent status) Yes

We Do Not Use

  • Third-party advertising cookies or ad retargeting pixels
  • Social media tracking pixels
  • Cross-site behavioral tracking technology
  • Fingerprinting or device identification tools

How to Control Cookies

You can control cookies through your browser settings. Most browsers allow you to view, delete, and block cookies. Note that disabling essential cookies may affect website functionality. To opt out of Google Analytics tracking, you can install the Google Analytics Opt-Out Browser Add-On.

Do Not Track

Some browsers send a “Do Not Track” signal. Our website respects Do Not Track signals. When a Do Not Track signal is detected, we do not use analytics tracking for that visit.


How Long We Keep Your Data

Data Type Retention Period Reason
Service records and Certificates of Destruction 7 years Standard business records; compliance documentation
Customer contact information Duration of relationship + 3 years Service continuity and dispute resolution
Payment and invoice records 7 years Tax and accounting requirements
Business Associate Agreements 6 years from date of creation or last effect HIPAA requirement (45 CFR 164.530(j))
Call recordings 90 days Quality assurance; then deleted
Website analytics data 26 months (Google Analytics default) Website improvement

After the applicable retention period, personal information is securely deleted or anonymized. Service records required for compliance purposes are retained for the full required period regardless of account status.

Security

We implement reasonable administrative, technical, and physical security measures to protect your information against unauthorized access, loss, alteration, or disclosure. Access to customer records is restricted to employees who need that information to perform their job.

No method of transmission over the internet or electronic storage is 100% secure. If you have reason to believe that your data has been compromised, contact us immediately at (978) 636-0301.


Your Privacy Rights

Depending on where you are located, you may have certain rights regarding your personal information. As a Massachusetts-based company serving Massachusetts residents, we honor the following rights for all customers:

Right to Access

You have the right to request a copy of the personal information we hold about you.

Right to Correction

You can request that we correct inaccurate or incomplete information about you.

Right to Deletion

You can ask us to delete your personal information, subject to legal retention requirements.

Right to Opt Out

You can opt out of marketing emails at any time using the unsubscribe link in any email.

Right to Portability

You can request your data in a portable format for transfer to another provider.

Right to Complain

You have the right to file a complaint with the Massachusetts Attorney General’s Office.

How to Exercise Your Rights

To make a privacy-related request, contact us by email at info@mypapershredding.com or by phone at (978) 636-0301. We will respond to all verifiable requests within 30 days. We may need to verify your identity before processing your request.

Massachusetts Data Privacy

We comply with Massachusetts General Laws Chapter 93H (the Massachusetts Data Security Law) and 201 CMR 17.00 (Standards for the Protection of Personal Information of Residents of the Commonwealth). Our security program includes administrative, technical, and physical safeguards appropriate to the size and nature of our business and the personal information we maintain.

We have a written information security program on file and conduct regular reviews to ensure ongoing compliance.

Children’s Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe we have inadvertently collected information from a minor, contact us at info@mypapershredding.com and we will delete it promptly.


Privacy Contact & Questions

For any questions, concerns, or requests related to this Privacy Policy or your personal information, contact us through any of the following channels:

MyPaperShredding by Neighborhood Parcel
1215 Main St. Unit 115, Tewksbury, MA 01876
Phone: (978) 636-0301
Email: info@mypapershredding.com
Hours: Mon–Thu 7am–6pm, Fri 7am–5pm, Sat 8am–2pm

For HIPAA-related privacy concerns, the same contact information applies. We will treat all HIPAA-related inquiries with the additional protections required under the HIPAA Privacy Rule.

Related Policies

This Privacy Policy should be read together with our Terms of Use, which govern the services we provide. Together they form the complete picture of how we operate and protect your information.

Questions? We’re Here to Help.

BBB A+ rated document destruction serving metro Boston, MA. Your data stays yours.

Get a Free Quote Call (978) 636-0301