PRIVACY POLICY

Docufast

Effective Date: January 27, 2026

Docufast, a trade name of Wyandock, LLC (“we”, “us”, or “our”), is committed to
 protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and
 safeguard your personal information when you use our website at docufast.com
 (“Website”) and our apostille facilitation services (“Services”).

 By using our Website or Services, you consent to the data practices described in this
 Privacy Policy. If you do not agree with this Privacy Policy, please do not use our
 Website or Services.

1. Information We Collect

We collect several types of information from and about users of our Website and
 Services:

1.1 Personal Information You Provide

We collect personal information that you voluntarily provide to us when you:
 Place an order for our Services
 Create an account on our Website
 Contact us via email, phone, WhatsApp Business, or website forms
 Upload documents for processing
 Subscribe to our newsletters or promotional communications

 This personal information may include:

Contact Information: Name, email address, phone number, mailing address
 Payment Information: Payment card details and billing information (processed
 securely through Shopify and Stripe; we do not store complete payment card
 information on our servers)
 Government-Issued Identification: Social Security numbers, passport numbers,
 driver’ license numbers, or other identification numbers, collected only when required for
 specific document processing
 Document Information: Copies and scans of documents you submit for apostille
 services, which may contain personal information such as birth dates, marriage dates,
 educational records, criminal background information, and other sensitive data
 Communication Records: Contents of messages, emails, and chat conversations you
 have with us through email, WhatsApp Business, or other communication channels
1.2 Information Collected Automatically
When you access our Website, we automatically collect certain information about your
 device and usage:
 Device and Browser Information: IP address, browser type and version, operating
 system, device type
 Usage Data: Pages visited, time spent on pages, links clicked, referring website, date
 and time of visits
 Location Data: General geographic location based on IP address

 We collect this information through cookies, web beacons, and similar tracking
 technologies. See Section 8 for more information about cookies.
1.3 Information About Minors
Our Services are intended for adults (18 years or older). While we may process
 documents on behalf of adults for their minor children (such as birth certificates or
 adoption documents), we do not knowingly collect personal information directly from
 children under 13. If you are a parent or guardian and believe your child has provided
 us with personal information, please contact us, and we will take steps to delete such
 information.
2. How We Use Your Information
We use the information we collect for the following purposes:
 Service Delivery: To process your apostille requests, communicate with you about
 your order, and deliver completed documents
 Payment Processing: To process payments and manage billing through our payment
 processors
 Customer Support: To respond to your inquiries, provide technical support, and
 address service issues
 Service Improvement: To analyze usage patterns, improve our Website and Services,
 and develop new features
 Marketing and Communications: To send you promotional emails, newsletters, and
 updates about our Services (you may opt out at any time)
 Legal Compliance: To comply with applicable laws, regulations, legal processes, and
 government requests
 Security and Fraud Prevention: To protect our Services, detect and prevent fraud,
 and ensure the security of our systems
 Business Operations: To maintain records, conduct analytics, and perform accounting
 and administrative tasks
3. How We Share Your Information
We do not sell, rent, or trade your personal information to third parties for their
 marketing purposes. We may share your information in the following circumstances:
3.1 Service Providers and Business Partners
We share your information with trusted third-party service providers who assist us in
 operating our Website and delivering our Services:
 Payment Processors: Shopify and Stripe for payment processing
 Cloud Service Providers: Amazon Web Services (AWS) and Google Cloud for data
 storage and hosting
 Email Service Providers: Microsoft Outlook (via AWS) and Mailgun for email
 communications
 Analytics Providers: Google Analytics, Facebook Pixel, Hotjar, and Sentry.io for
 website analytics and performance monitoring
 Shipping and Courier Services: Shipping companies for document delivery
 Communication Platforms: WhatsApp Business for customer communications

 These service providers are contractually obligated to use your information only to
 provide services to us and to protect your information.
3.2 Government Authorities
We share your documents and related information with appropriate government
 authorities as necessary to obtain apostilles, including but not limited to:
 U.S. Department of State
 Federal Bureau of Investigation (FBI)
 State Departments and Secretaries of State
 County and local government offices

 This sharing is necessary to fulfill the Services you have requested.
3.3 Legal Requirements
We may disclose your information if required to do so by law or in response to:
 Valid legal processes (subpoenas, court orders, warrants)
 Government or regulatory requests
 Requests to protect our legal rights or comply with judicial proceedings
 Situations involving potential threats to public safety or security
3.4 Business Transfers
If Wyandock, LLC is involved in a merger, acquisition, asset sale, bankruptcy, or other
 business transaction, your information may be transferred as part of that transaction.
 We will notify you of any such change in ownership or control of your personal
 information.
3.5 With Your Consent
We may share your information for any other purpose with your explicit consent.
4. Data Storage and Security
4.1 Where We Store Your Data
Digital Storage: Your information is stored on secure servers provided by Amazon
 Web Services (AWS) and Google Cloud, primarily located in the United States. We also
 use Google Drive for internal team collaboration.
 Physical Storage: Physical documents are securely stored at our team members’
 offices in the United States.
4.2 How We Protect Your Data
We implement reasonable technical and organizational security measures to protect
 your information, including:
 Encryption in Transit: All data transmitted between your browser and our servers is
 encrypted using SSL/TLS protocols
 Access Controls: Limited access to personal information on a need-to-know basis
 Secure Storage: Data stored using industry-standard security practices provided by
 AWS and Google Cloud
 Physical Security: Physical documents are stored in secure locations with restricted
 access
 Monitoring and Error Tracking: Use of Sentry.io to monitor system security and detect
 potential issues

 However, no method of transmission over the Internet or electronic storage is 100%
 secure. While we strive to protect your information, we cannot guarantee absolute
 security. You provide information to us at your own risk.
4.3 Data Retention
Physical Documents: Physical documents submitted to us are securely stored for
 approximately six months after service completion, after which they are securely
destroyed. You may request earlier destruction or return of your physical documents by
 mail at your expense.

Digital Information: Digital copies of documents, customer contact information,
 transaction records, and communication histories are retained indefinitely unless you
 request deletion. This allows us to provide ongoing customer support and maintain
 business records.
 Legal Retention: Some information may be retained for longer periods as required by
 law, for legal compliance, dispute resolution, or enforcement of our agreements.
5. Your Rights and Choices
You have certain rights regarding your personal information:
5.1 Access and Correction
You have the right to access the personal information we hold about you and to request
 correction of any inaccurate or incomplete information. To exercise this right, please
 contact us using the information in Section 11.
5.2 Deletion
You may request deletion of your personal information at any time. Please note that we
 may retain certain information as required by law or for legitimate business purposes,
 such as completing transactions or resolving disputes. To request deletion, contact us
 at support@docufast.com.
5.3 Opt-Out of Marketing Communications
You may opt out of receiving promotional emails from us by:
 Clicking the “unsubscribe” link in any promotional email
 Contacting us at support@docufast.com

 Please note that even if you opt out of promotional emails, we will still send you
 transactional and service-related communications.
5.4 Do Not Track Signals
Some web browsers have a “Do Not Track” feature. Our Website does not currently
 respond to Do Not Track signals. You can manage cookies through your browser
 settings (see Section 8).
6. International Data Transfers
We are based in the United States and primarily serve customers worldwide. If you are
 accessing our Services from outside the United States, please be aware that your
 information will be transferred to, stored, and processed in the United States, where our
 servers and operations are located.

 The United States may have data protection laws that differ from those in your country.
 By using our Services, you consent to the transfer of your information to the United
 States and the processing of your information in accordance with this Privacy Policy.
6.1 European Union Users
If you are located in the European Economic Area (EEA), United Kingdom, or
 Switzerland, you have additional rights under the General Data Protection Regulation
 (GDPR) and equivalent laws, including:
 The right to access your personal data
 The right to rectification of inaccurate data
 The right to erasure (“right to be forgotten”)
 The right to restrict processing
 The right to data portability
 The right to object to processing
 The right to withdraw consent at any time
 The right to lodge a complaint with a supervisory authority

 We do not currently have a representative in the European Union. To exercise your
 GDPR rights or ask questions about our data practices, please contact us at
 support@docufast.com.
Legal Basis for Processing: We process your personal data based on:
 Contract performance: Processing necessary to provide the Services you requested
 Consent: Where you have given explicit consent for specific processing activities
 Legitimate interests: Processing necessary for our legitimate business interests, such
 as improving our Services and preventing fraud
 Legal obligations: Processing necessary to comply with legal requirements
7. Third-Party Links and Services
Our Website may contain links to third-party websites, including our payment
 processors (Shopify and Stripe) and other service providers. This Privacy Policy does
 not apply to those third-party websites or services. We are not responsible for the
 privacy practices or content of third-party sites.
We encourage you to review the privacy policies of any third-party sites you visit. The
 privacy policies of our key service providers can be found at:
 Shopify: https://www.shopify.com/legal/privacy
 Stripe: https://stripe.com/privacy
 Google (Analytics, Cloud): https://policies.google.com/privacy
 Facebook: https://www.facebook.com/privacy/explanation
 Amazon Web Services: https://aws.amazon.com/privacy/
8. Cookies and Tracking Technologies
8.1 What Are Cookies
Cookies are small text files stored on your device when you visit a website. We use
 cookies and similar tracking technologies (web beacons, pixels, scripts) to improve your
 experience, analyze website traffic, and personalize content.
8.2 Types of Cookies We Use
Essential Cookies: Required for the Website to function properly, including session
 management and security features. These cannot be disabled.
 Analytics Cookies: Help us understand how visitors use our Website through services
 like Google Analytics, Hotjar, and Sentry.io. These cookies collect information about
 page visits, traffic sources, and user behavior.
 Marketing Cookies: Used to deliver relevant advertisements through Facebook Pixel
 and other advertising platforms. These cookies track your browsing activity to show you
 targeted ads.
 Functional Cookies: Remember your preferences and settings to provide a
 personalized experience.
8.3 Managing Cookies
You can control cookies through your browser settings. Most browsers allow you to:
 View and delete cookies
 Block third-party cookies
 Block all cookies from specific websites
 Delete all cookies when you close your browser

 Please note that blocking or deleting cookies may affect your ability to use certain
 features of our Website. For more information about managing cookies, visit
 www.allaboutcookies.org.
9. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices,
 technology, legal requirements, or other factors. When we make changes, we will
 update the “Effective Date” at the top of this policy.

 If we make material changes to this Privacy Policy, we will notify you by email (if you
 have provided an email address) or by posting a prominent notice on our Website. We
 encourage you to review this Privacy Policy periodically.

 Your continued use of our Website and Services after changes are posted constitutes
 your acceptance of the updated Privacy Policy.
10. California Privacy Rights
If you are a California resident, you have additional rights under the California
 Consumer Privacy Act (CCPA):
 Right to Know: You have the right to request information about the categories and
 specific pieces of personal information we have collected about you, as well as the
 categories of sources, purposes for collection, and third parties with whom we share
 your information.
 Right to Delete: You have the right to request deletion of your personal information,
 subject to certain exceptions.
 Right to Opt-Out: You have the right to opt out of the “sale” of your personal
 information. We do not sell personal information as defined by the CCPA.
 Right to Non-Discrimination: You have the right not to receive discriminatory
 treatment for exercising your CCPA rights.

 To exercise these rights, please contact us at support@docufast.com or +1 (970) 703-
 4285. We will verify your identity before processing your request.
11. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our data
 practices, please contact us:
 Wyandock, LLC
 Operating as: Docufast
 Email: support@docufast.com
 Phone: +1 (970) 703-4285
 Website: docufast.com

 We will respond to your inquiry within a reasonable timeframe.
BY USING OUR WEBSITE OR SERVICES, YOU ACKNOWLEDGE THAT YOU HAVE
 READ AND UNDERSTOOD THIS PRIVACY POLICY AND AGREE TO ITS TERMS.

© 2025 DocuFast. All rights reserved.

Disclaimer: Docufast is not a government agency and provides apostille facilitation services. Docufast is not a legal firm and does not provide legal advice.