Legal
Privacy Policy
Last updated March 20, 2026
This policy explains what information we collect, how we use it, who we share it with, and what rights you have. Read it before you sign up.
Who we are
Virtual Business Mailbox is a Denver, Colorado business that provides virtual business address services. Our mailing address services are fulfilled by Shift Workspaces, our operating partner, at their Denver locations.
Our website is virtualbusinessmailbox.com. You can contact us at {{ .Site.Params.email }}.
What we collect
When you sign up and pay
We collect the information you provide during checkout and account setup:
- Your name
- Your email address
- Your business name
- Your billing address
- Payment information — processed and stored by Stripe, not by us
We do not store your credit card number, CVV, or full card details on our servers. Stripe handles all payment processing. Their privacy policy is at stripe.com/privacy.
When you complete USPS Form 1583
Federal law requires us to collect the following before we can receive mail on your behalf:
- Your legal name
- Your home address
- Copies of two forms of identification
This information is collected to comply with United States Postal Service regulations. It is stored securely and is not used for marketing purposes.
When you use the website
We collect standard usage data through Google Analytics 4 and Google Tag Manager:
- Pages visited
- Time on site
- General geographic location (city/region level)
- Browser and device type
- How you arrived at the site (search, direct, referral)
This data is collected in aggregate and is not linked to your personal identity.
We also use cookies. A cookie is a small file stored on your browser. We use cookies for:
- Analytics (Google Analytics 4)
- Conversion tracking (Google Ads)
- Session management
You can disable cookies in your browser settings. Some site features may not work correctly if you do.
How we use your information
We use the information we collect to:
- Create and manage your account
- Process your subscription payment
- Issue your Denver business address and suite number
- Send you Form 1583 for signature via DocuSign
- Send email notifications when mail arrives
- Respond to support requests
- Measure and improve our website and advertising
We do not sell your personal information to third parties. We do not use your information for purposes other than those listed above.
Who we share your information with
Shift Workspaces
To fulfill your virtual mailbox service, we transmit the following information to Shift Workspaces, our Denver operating partner:
- Your name
- Your email address
- Your business name
- Your assigned suite number
Shift Workspaces uses this information solely to receive, log, and scan your mail. They do not use it for marketing and do not sell it to third parties.
Stripe
Stripe processes all subscription payments on our behalf. When you check out, you interact directly with Stripe’s hosted payment page. We receive confirmation of payment from Stripe but do not handle your card details directly.
Stripe’s privacy policy: stripe.com/privacy
DocuSign
We use DocuSign to send you USPS Form 1583 for electronic signature. DocuSign receives your name and email address to deliver the signing request.
DocuSign’s privacy policy: docusign.com/company/privacy-policy
We use Google Analytics 4 and Google Ads conversion tracking. Google receives anonymized usage data from your visit. We have enabled IP anonymization in our Google Analytics configuration.
Google’s privacy policy: policies.google.com/privacy
Legal requirements
We may disclose your information if required to do so by law, court order, or government authority. We will notify you of such a request where legally permitted to do so.
USPS Form 1583 data
The information you provide on USPS Form 1583 — including your home address and identification — is required by federal regulation and is treated with additional care:
- It is stored in a secure, access-controlled system
- It is not shared with any party other than USPS as required by regulation
- It is not used for marketing or any purpose other than regulatory compliance
- It is retained for the duration of your service and as required by USPS regulations after cancellation
Data security
We take reasonable technical and organizational measures to protect your personal information. These include encrypted connections (HTTPS), access controls on systems that hold personal data, and secure handling procedures for Form 1583 documents.
No system is completely secure. If you have reason to believe your information has been compromised, contact us at {{ .Site.Params.email }} immediately.
Data retention
We retain your account information for the duration of your subscription and for up to three years after cancellation, as required for tax and compliance purposes.
USPS Form 1583 records are retained as required by USPS regulations.
Analytics data is retained according to Google Analytics default settings (14 months).
Your rights
You have the right to:
- Access the personal information we hold about you
- Correct inaccurate information
- Delete your account and associated personal data, subject to regulatory retention requirements
- Object to processing of your information for marketing purposes
- Portability — receive a copy of your data in a machine-readable format
To exercise any of these rights, email us at {{ .Site.Params.email }}. We will respond within 30 days.
California residents
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):
- The right to know what personal information we collect, use, disclose, and sell
- The right to delete personal information we have collected from you
- The right to opt out of the sale of personal information — we do not sell personal information
- The right to non-discrimination for exercising your rights
To submit a CCPA request, email {{ .Site.Params.email }} with the subject line “CCPA Request.”
Children
Our service is intended for adults operating businesses. We do not knowingly collect personal information from anyone under the age of 18. If you believe we have inadvertently collected information from a minor, contact us and we will delete it.
Changes to this policy
We may update this policy from time to time. When we do, we update the “last updated” date at the top of this page. If we make material changes that affect how we use your personal information, we will notify you by email at least 14 days before the changes take effect.
Continued use of the service after the effective date of any changes constitutes acceptance of the updated policy.
Contact
Questions about this policy or your personal data:
Virtual Business Mailbox
320 E. Vine Dr., STE 318 Fort Collins, CO 80524
admin@virtualbusinessmailbox.com