Skip to main content

Legal

Privacy Policy

Last updated March 20, 2026

This policy explains what information we collect, how we use it, who we share it with, and what rights you have. Read it before you sign up.

Who we are

Virtual Business Mailbox is a Denver, Colorado business that provides virtual business address services. Our mailing address services are fulfilled by Shift Workspaces, our operating partner, at their Denver locations.

Our website is virtualbusinessmailbox.com. You can contact us at {{ .Site.Params.email }}.

What we collect

When you sign up and pay

We collect the information you provide during checkout and account setup:

  • Your name
  • Your email address
  • Your business name
  • Your billing address
  • Payment information — processed and stored by Stripe, not by us

We do not store your credit card number, CVV, or full card details on our servers. Stripe handles all payment processing. Their privacy policy is at stripe.com/privacy.

When you complete USPS Form 1583

Federal law requires us to collect the following before we can receive mail on your behalf:

  • Your legal name
  • Your home address
  • Copies of two forms of identification

This information is collected to comply with United States Postal Service regulations. It is stored securely and is not used for marketing purposes.

When you use the website

We collect standard usage data through Google Analytics 4 and Google Tag Manager:

  • Pages visited
  • Time on site
  • General geographic location (city/region level)
  • Browser and device type
  • How you arrived at the site (search, direct, referral)

This data is collected in aggregate and is not linked to your personal identity.

We also use cookies. A cookie is a small file stored on your browser. We use cookies for:

  • Analytics (Google Analytics 4)
  • Conversion tracking (Google Ads)
  • Session management

You can disable cookies in your browser settings. Some site features may not work correctly if you do.

How we use your information

We use the information we collect to:

  • Create and manage your account
  • Process your subscription payment
  • Issue your Denver business address and suite number
  • Send you Form 1583 for signature via DocuSign
  • Send email notifications when mail arrives
  • Respond to support requests
  • Measure and improve our website and advertising

We do not sell your personal information to third parties. We do not use your information for purposes other than those listed above.

Who we share your information with

Shift Workspaces

To fulfill your virtual mailbox service, we transmit the following information to Shift Workspaces, our Denver operating partner:

  • Your name
  • Your email address
  • Your business name
  • Your assigned suite number

Shift Workspaces uses this information solely to receive, log, and scan your mail. They do not use it for marketing and do not sell it to third parties.

Stripe

Stripe processes all subscription payments on our behalf. When you check out, you interact directly with Stripe’s hosted payment page. We receive confirmation of payment from Stripe but do not handle your card details directly.

Stripe’s privacy policy: stripe.com/privacy

DocuSign

We use DocuSign to send you USPS Form 1583 for electronic signature. DocuSign receives your name and email address to deliver the signing request.

DocuSign’s privacy policy: docusign.com/company/privacy-policy

Google

We use Google Analytics 4 and Google Ads conversion tracking. Google receives anonymized usage data from your visit. We have enabled IP anonymization in our Google Analytics configuration.

Google’s privacy policy: policies.google.com/privacy

We may disclose your information if required to do so by law, court order, or government authority. We will notify you of such a request where legally permitted to do so.

USPS Form 1583 data

The information you provide on USPS Form 1583 — including your home address and identification — is required by federal regulation and is treated with additional care:

  • It is stored in a secure, access-controlled system
  • It is not shared with any party other than USPS as required by regulation
  • It is not used for marketing or any purpose other than regulatory compliance
  • It is retained for the duration of your service and as required by USPS regulations after cancellation

Data security

We take reasonable technical and organizational measures to protect your personal information. These include encrypted connections (HTTPS), access controls on systems that hold personal data, and secure handling procedures for Form 1583 documents.

No system is completely secure. If you have reason to believe your information has been compromised, contact us at {{ .Site.Params.email }} immediately.

Data retention

We retain your account information for the duration of your subscription and for up to three years after cancellation, as required for tax and compliance purposes.

USPS Form 1583 records are retained as required by USPS regulations.

Analytics data is retained according to Google Analytics default settings (14 months).

Your rights

You have the right to:

  • Access the personal information we hold about you
  • Correct inaccurate information
  • Delete your account and associated personal data, subject to regulatory retention requirements
  • Object to processing of your information for marketing purposes
  • Portability — receive a copy of your data in a machine-readable format

To exercise any of these rights, email us at {{ .Site.Params.email }}. We will respond within 30 days.

California residents

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

  • The right to know what personal information we collect, use, disclose, and sell
  • The right to delete personal information we have collected from you
  • The right to opt out of the sale of personal information — we do not sell personal information
  • The right to non-discrimination for exercising your rights

To submit a CCPA request, email {{ .Site.Params.email }} with the subject line “CCPA Request.”

Children

Our service is intended for adults operating businesses. We do not knowingly collect personal information from anyone under the age of 18. If you believe we have inadvertently collected information from a minor, contact us and we will delete it.

Changes to this policy

We may update this policy from time to time. When we do, we update the “last updated” date at the top of this page. If we make material changes that affect how we use your personal information, we will notify you by email at least 14 days before the changes take effect.

Continued use of the service after the effective date of any changes constitutes acceptance of the updated policy.

Contact

Questions about this policy or your personal data:

Virtual Business Mailbox

320 E. Vine Dr., STE 318 Fort Collins, CO 80524
admin@virtualbusinessmailbox.com