Privacy Policy

Last updated: 11/2024

Privacy Policy

www.orderbirthrecord.com (hereinafter, “the Company”, “We”, “Us” and the like) is firmly committed to regulatory compliance and the privacy and protection of personal data. Accordingly, in the present Privacy Policy, the User (hereinafter “the User”, “you”, “your”) will find all the relevant information to better understand what we do with your personal data.

We may update this Privacy Policy according to new legislative or jurisprudential requirements and/or business needs, among others. Any update or modification of the present Privacy Policy will be considered applicable from the moment of its publication on the website. Therefore, the User is recommended to review this Privacy Policy regularly.

Please bear in mind that to access and use our website you must be an adult and have the legal capacity to enter into contracts, according to the applicable national laws and regulations of your birth or residence country.

Without affecting your rights under applicable legislation, the present Privacy Policy is not contractual or part of your contract with us.

This Privacy Policy will always be available on this website so that the data subjects can consult it at all times.

For any doubts or questions related to this Privacy Policy, you can contact our Customer Service Team by email: info@orderbirthrecord.com or through our Contact Form.

What Does Personal Data Mean?

For the purposes of this Privacy Policy, "personal data" means all data that identifies you or that could be used to identify you, such as the data you provided when filling in the vital record application form, while managing, if applicable, additional information requested by the U.S. Health Department State Office, or when contacting our Customer Service Team, and/or other information provided by browsing this website or from your IP address.

Who is the personal data controller?

The Company stated in our Terms and Conditions will be the controller of your personal data collected, among others, when you browse our website, fill in the vital record application form, and/or you contact our Customer Service Team by email, post or by means of our Contact Form.

When does this Privacy Policy apply?

This Privacy Policy applies to the personal data that we collect, use, and process from you as a User and/or Customer of our website.

Our website may contain functionalities or links that may redirect you to third-party websites. In this sense, please note that these third-party websites are not operated by us, so we cannot assume any responsibility for the information and content provided on them and/or the correct provision of the functionalities and/or services offered by these third parties since we have no control over this. These third-party websites are bound by their own Cookie and Privacy Policies.

What type of personal data do we collect and process?

We collect the following categories of personal data:

• Direct interactions: such as when you complete the vital record application form of your interest on our website, or when we request you for additional information as a requirement of the U.S. Health Department State Office, or when you fill in the Contact form, or when you contact our Customer Service Team via email, or even when the Company contacts you in order to request you to provide necessary information to complete your vital record application form or to provide the Identity Verification Form.
• Automated technologies: we may automatically collect information like your IP address, the sections you consult on our website, or the time that you remain on our website by using cookies, whether our own or from third parties. You can consult our Cookie Policy to obtain more information about the cookies of our website, their purposes, and other information of interest.
• Payment data: We will only request your credit or debit card information on the payment page in connection with the costs for our Services. The captured data will be sent securely to our certified payment service providers for the authorization of the transaction. In no case do we visualize or access the complete data of your credit or debit card. It is the customer’s responsibility not to enter, provide, or send his/her card information through channels not authorized by the Company.

In all cases, we only process personal data which is strictly necessary for the fulfillment of the purposes described above. In this sense, if you provide us with more information than the ones expressly required, you consent to the processing of them for the informed purpose/s for which you're sending it.

In order to be able to properly use our Services, and if applicable according to the Services contracted attend and manage your vital record application form and/or answer your queries, and at any other time thereafter, you must provide us with accurate, truthful, updated and complete information, being this trustworthy to your real situation.

If you provide us with personal data of third parties, whether these are from minors or adults, you confirm that you have informed them about the purposes for which their personal data will be processed and you guarantee to us that you have obtained their prior and express consent to communicate us their personal data. In this sense, if you provide us with the personal data of a minor, you guarantee us that you are a parent and/or legal guardian and, therefore, you consent the processing of your ward/child’s personal data.

According to the above, the Company will not be held responsible if:

• The Users and/or Customers are not adults nor have the legal capacity to contract the Services offered on this Website in accordance with the laws and regulations of their birth or residence country. In this sense, it is the sole responsibility of parents and/or legal guardians to exercise adequate control over their minor children’s/ward’s online activity and to prevent their access to websites whose content is not suitable or recommended for minors, and that allows the sending of personal data without the prior authorization of their parents or legal guardians.
• The Company has received an adult’s personal data and/or private information to use the Services by an individual without having requested his/her consent to communicate us his/her personal data. In such a case, the Company will inform the interested person how his/her personal data and/or private information has been collected and, where appropriate, we will ask the individual who provided the personal data to the Company to confirm he/she requested the consent of the data subject and, where appropriate, to amend this circumstance.
• For circumstances that are beyond our reasonable control, such as being provided with erroneous, incomplete, and/or fraudulent information from you as a user and/or customer. You will be solely responsible for the inaccuracy or lack of veracity of the information provided.

What do we use your personal data for?

Please be informed that you only are required to provide personal data and information strictly necessary to fill in the vital record application form, and/or when we request you for additional information as a requirement of the U.S. Health Department State Office according to the Services contracted, and/or to submit a query by means of our Contact Form. In this sense, if you provide us with more information than that expressly required, you consent to the processing of it for the purpose/s for which you're sending it.

Having said that, We use your personal data for the following purposes:

• To provide you our Services, and in the event that you have chosen to contract the option which permits you to fill in a vital records certificate application form so that we can subsequently submit it on your behalf before the U.S. Health Department State Office, we will, when necessary, as well probably ask you for the missing, incomplete and/or missed information/documentation.
• To send you, if applicable, up-to-date information according to the U.S. Health Department State Office updates and/or operational communications regarding the status of your vital records certificate application form. In this sense, we will contact you if the U.S. Health Department State Office requires more personal information and/or additional documentation in order to assess your application;
• To send you new offers, when applicable, in order for you to decide whether you want to upgrade from the Standard Service to the Premium Service.
• To attend to your information and/or refund queries sent to our Customer Service Team;
• To send you operational emails in connection with the our Service, such as payment confirmation emails, as well as communications concerning our services according to your interests while browsing through our website;
• For administrative purposes related to the processing and management of our services, such as accountancy and billing tasks, verification of your payment information;
• To comply with our legal obligations, with legal requirements, laws, and regulations and/or to respond to judicial, police or to the corresponding authorities requirements;
• To protect, investigate, and deter against fraudulent, unauthorized, or illegal activity on/or through this website.
• To improve our website, services, and customer support, as well as to improve your user experience on our website by analyzing your behavior while navigating through this website;

What is the legal basis for processing your personal data?

We only process your personal data when there is a legal basis for doing so. The legal basis will depend on the reason we collect and process your personal data. In almost all cases the legal basis will be:

• The consent that you provided us with for the processing of your personal data in connection to the purposes informed at the time of collection of your data (i.e. to respond to your information queries when you contact our Customer Service Team).
• The execution of the contract when purchasing our Services, and when applicable submitting your vital records certificate application form on your behalf before the U.S. Health Department State Office and keeping you informed about its status, or when sending you a payment confirmation email.
• To comply with our legal obligations and/or to attend administrative, judicial, police, or the corresponding authorities’ official requirements.
• Our legitimate interest to (i) offer an enhanced user experience when you access and use this website and to operate it efficiently, (ii) to send you our communications concerning our services according to your interests while browsing through our website; (iii) to verify the Customer’s identity and monitor fraudulent activity in order to preserve the security and integrity of our website; (iv) defend and address our rights in the event that a claim regarding our professional services may arise.

How long do we keep your personal data?

We will keep your personal data only for as long as is necessary to fulfill the purposes for which they are being processed and, beyond that, your personal data will be retained, and duly blocked, for until the Company has complied with its legal obligations and has met with its business needs, objectives and strategies. In this sense, your personal data will be kept, for example, for as long as is needed in order to address and defend our legitimate interests regarding any claims in connection with the Services offered; until your request for information and/or refund is answered; to finish the investigation of detected fraudulent or illicit activity; we will retain the Cookies’ information providing that you do not revoke its consent.

Once the necessary retention period has ended, your personal data will be securely deleted from our information systems.

Furthermore, if you had provided us with your consent to process your personal data for specific purposes, note that you can withdraw said consent at any time. Upon receiving your withdrawal request, we will proceed to delete your personal data.

Who Do We Share Personal Data With?

We may communicate your personal data to the following third parties, including but not limited to:

• (i) If you have contracted the service that includes the option of submitting on your behalf before the U.S. Health Department State Office your vital records certificate application form, we will share your personal data with them.
• (ii) credit and debit card companies to process payments and (when necessary) carry out fraud controls;
• (iii) public bodies and/or administrative or judicial authorities, as well as the police, as long as they are required in accordance with the applicable law and regulations;
• (iv) law firms to respond to claims regarding our professional services and/or to protect our legitimate interests;
• (v) technology service providers which host our information systems and/or that offer us tools or technological support;
• (vi) suppliers who help us to correctly offer professional services.

The third parties mentioned above may have their headquarters outside the European Economic Area, therefore the personal data will be object of an international transfer. In this regard, we inform you that we only transfer personal data to recipients located in countries that offer a level of personal data protection comparable to the laws and regulations of data protection of European countries or, failing that, we will apply the appropriate safeguards required by the current applicable law and regulations on the protection of personal data, in order to ensure the privacy and security of your personal data and that your individual rights and freedoms are guaranteed.

How do we protect your personal data?

Your trust is very important to us. For that reason, your personal data is stored confidentially and securely in our information systems. We have established the appropriate technical and organizational measures to safeguard and protect your personal data against illegal or unauthorized access, loss or accidental destruction, damage, use, and illegal or unauthorized disclosure.

Likewise, we have taken reasonable precautions to guarantee that all our staff, as well as the suppliers or collaborators who have access to Customers’ personal data, have received adequate training regarding the processing of the personal data collected and that they comply with said data protection obligations.

Although We will do our best to guarantee the protection of your personal data transmitted through our website and/or that you may provide to us by others means such as by email, please bear in mind that you should also take precautions to keep your personal data safe e.g you must not enter or confirm bank details by means of fake messages and/or websites.

What Rights Do You Have and How Can You Exercise Them?

You may exercise your rights of access, rectification, erasure, restriction of processing, to object, as well as the right to the portability of your personal data, with a written request, addressed to us, via our Contact Form or by writing to us at info@orderbirthrecord.com.

You may modify the “privacy settings” of your web browser to set up the tracking cookies at any time. Also, you can install programs or add-ons to your browser, known as "Do Not Track" tools, which will allow you to choose the Cookies you want to allow.

As a general rule, we will respond to data protection rights requests within one (1) month. Occasionally, this period may be extended by two (2) further months where necessary, taking into account whether your request is particularly complex or you have made several number of requests. In this case, we will notify you of this event and explain the reasons for the delay to you.

Finally, we inform you that, where you consider it appropriate, you have the right to lodge a complaint before the corresponding Supervisory Authority, especially if you consider that your data protection rights have not been adequately addressed.

We remain at your disposal for any doubts or questions you may have about the present Privacy Policy or the processing of your personal data. If so, please don’t hesitate to contact us via our Contact Form or by writing to us at info@orderbirthrecord.com.