GDPR Privacy Policy

Last updated: September 25, 2026

Apostille Texas (ā€œApostille Texas,ā€ ā€œwe,ā€ ā€œus,ā€ or ā€œourā€) respects your privacy and is committed to protecting the personal information we collect when you visit our website or use our services.

This GDPR Privacy Policy explains what personal information we collect, how and why we use it, when we may share it, how long we retain it, and the privacy rights that may be available to you under the General Data Protection Regulation (ā€œGDPRā€) and other applicable data protection laws.

This GDPR Privacy Policy applies to personal information collected through the Apostille Texas website and our related services. It should be read together with our Privacy Policy, Terms and Conditions, and any other privacy notices we may provide in connection with specific services.

If you have questions or concerns about this GDPR Privacy Policy or our handling of your personal information, please Contact Apostille Texas through our website.

About Apostille Texas

Apostille Texas is a U.S.-based legal document services provider serving individuals and businesses worldwide. We provide expedited apostille, authentication, attestation, and document legalization services through the Texas Secretary of State, the U.S. Department of State, and foreign embassies and consulates in Washington, D.C.

1. What Information Do We Collect?

Personal Information You Provide to Us

We collect personal information that you voluntarily provide when you contact Apostille Texas, request information about our services, submit documents or information for review, place an order, make a payment, or otherwise communicate with us.

Depending on how you interact with us, this information may include:

Name and Contact Information. We may collect your first and last name, email address, mailing address, telephone number, and other similar contact information.

Order and Document Information. We may collect information and documents you provide in connection with an inquiry, document review, order, or apostille, authentication, attestation, or legalization service.

Payment and Transaction Information. When you make a payment, information necessary to complete the transaction is processed by our payment service provider. Apostille Texas does not store complete credit or debit card numbers or card security codes. Payment information is also subject to the privacy and security practices of the applicable payment service provider.

Information Automatically Collected

When you visit or use our website, certain technical information may be collected automatically. This information generally does not directly identify you but may include your IP address, browser type, device type, operating system, language preferences, referring URLs, approximate location, and information about how and when you use our website.

We may use this information to operate and secure our website, understand how visitors use it, troubleshoot technical issues, improve website performance and user experience, and perform analytics and reporting.

We may also use cookies and similar technologies as described in Section 4 of this GDPR Privacy Policy and, where applicable, our Cookie Policy.

2. How and Why Do We Use Your Information?

We process personal information only when we have an appropriate legal basis for doing so where applicable law requires one.

Depending on the circumstances, we may use personal information for the following purposes:

To provide and fulfill our services. We use information to review documents, respond to service requests, process and fulfill orders, provide apostille, authentication, attestation, and legalization services, and communicate with you regarding requested services. Where the GDPR applies, this processing is generally necessary to take steps at your request before entering into a contract or to perform our contract with you.

To communicate with you. We may use your contact information to respond to questions or requests and provide important information concerning your documents, orders, payments, or services. Depending on the circumstances, this processing may be necessary to perform our contract with you or for our legitimate interests in operating our business and providing customer service.

To process and administer transactions. We may process information necessary to facilitate payments, maintain transaction records, issue receipts, and administer orders. This processing may be necessary to perform our contract with you and comply with applicable legal, tax, accounting, or recordkeeping obligations.

To operate, maintain, and improve our website and services. We may process information to troubleshoot problems, maintain website functionality, understand how our website and services are used, improve user experience, and perform internal analytics. Where applicable, we rely on our legitimate interests in operating and improving our business and services or on consent when required for particular cookies or similar technologies.

To protect our website, business, and customers. We may process information to detect or prevent fraud, misuse, security incidents, or other potentially unlawful activity and to maintain the security and integrity of our website and services. Where applicable, we rely on our legitimate interests in protecting our business, systems, customers, and legal rights.

To comply with legal obligations and lawful requests. We may process or disclose information when necessary to comply with applicable laws, regulations, court orders, subpoenas, or other valid legal processes.

To establish, exercise, or defend legal rights. We may process information when reasonably necessary to enforce our Terms and Conditions, protect our rights or property, resolve disputes, or establish, exercise, or defend legal claims.

For other purposes with your consent. Where required by applicable law, we may process personal information for another purpose after obtaining your consent. Where processing is based on consent, you may withdraw that consent as provided by applicable law.

3. When Do We Share Your Information?

We do not sell personal information.

We may share or disclose personal information when reasonably necessary to provide our services, operate our business, comply with legal obligations, protect our rights, or as otherwise described in this GDPR Privacy Policy.

We may share information with:

Government Agencies, Embassies, and Consulates. We may provide information or documents to government agencies, including the Texas Secretary of State and U.S. Department of State, and to foreign embassies or consulates when necessary to perform requested apostille, authentication, attestation, or legalization services.

Service Providers. We may share information with third-party service providers that perform services on our behalf, such as payment processing, website hosting, email and communications, technology, security, analytics, document delivery, shipping, and other services necessary to operate our business.

Shipping and Delivery Providers. When necessary to deliver or return documents, we may provide information such as your name, mailing address, telephone number, email address, and other information reasonably necessary for shipment or delivery.

Legal and Governmental Authorities. We may disclose information when required by applicable law or when necessary to respond to a valid subpoena, court order, governmental request, or other lawful legal process.

Parties Involved in Protecting Rights or Preventing Harm. We may disclose information when reasonably necessary to investigate or prevent fraud, unlawful activity, security threats, violations of our policies, or threats to the rights, property, or safety of Apostille Texas, our customers, or others.

Parties to a Business Transaction. If Apostille Texas is involved in a merger, acquisition, sale of assets, reorganization, or similar business transaction, personal information may be disclosed or transferred as part of that transaction, subject to applicable law.

Other Parties at Your Direction. We may share information with another party when you have consented to or directed the disclosure.

4. Cookies and Similar Technologies

We may use cookies and similar technologies to operate our website, remember preferences, understand how visitors use our website, improve performance and functionality, and help maintain the security of our services.

Some cookies may be necessary for the website to function properly, while others may be used for analytics or other purposes. Where required by applicable law, we obtain consent before using non-essential cookies or similar technologies.

Most web browsers allow you to block or delete cookies through browser settings. Blocking or deleting certain cookies may affect some features or functionality of our website.

Where available, you may also use the cookie preference controls provided on our website to manage non-essential cookies and similar technologies.

For additional information about the cookies and similar technologies we use, please review our Cookie Policy.

5. International Transfers of Personal Information

Apostille Texas is based in the United States. Personal information collected through our website and services may be processed or stored in the United States or other countries where our service providers or recipients operate.

If you are located outside the United States, your personal information may therefore be transferred to and processed in countries with data protection laws that differ from those in your country of residence.

Where required by applicable data protection law, we use appropriate safeguards or other lawful mechanisms for international transfers of personal information.

6. Third-Party Websites

Our website may contain links to websites, services, or resources operated by third parties. Apostille Texas does not control these third-party websites and is not responsible for their content, privacy practices, security practices, or policies.

When you leave our website or provide information directly to a third party, that third party’s privacy policy and terms will apply. We encourage you to review the privacy practices of third-party websites and services before providing personal information to them.

7. How Long Do We Keep Your Information?

We retain personal information only for as long as reasonably necessary to fulfill the purposes described in this GDPR Privacy Policy, provide our services, maintain appropriate business and transaction records, comply with legal, tax, accounting, or regulatory requirements, resolve disputes, and enforce our agreements.

Retention periods may vary depending on the type of information, the purpose for which it was collected, applicable legal requirements, and our legitimate business needs.

When personal information is no longer reasonably necessary for these purposes, we will delete or anonymize it where appropriate. If immediate deletion is not reasonably possible, such as when information is contained in backup systems, we will protect the information and retain it in accordance with our applicable retention and security practices until deletion or overwriting occurs.

8. How Do We Keep Your Information Safe?

We use appropriate technical and organizational measures designed to protect personal information against unauthorized access, loss, misuse, alteration, or disclosure.

However, no method of transmission over the Internet or method of electronic storage can be guaranteed to be completely secure. While we take reasonable measures to protect personal information, we cannot guarantee absolute security.

You are encouraged to use appropriate precautions when transmitting personal information or documents electronically and to access our website using a secure connection.

9. Children’s Privacy

Our website and services are intended for a general audience and are not directed to children under the age of 13.

We do not knowingly collect personal information directly from children under 13 in a manner that would require parental consent under the Children’s Online Privacy Protection Act (ā€œCOPPAā€). If we obtain actual knowledge that we have collected personal information directly from a child under 13 in circumstances requiring parental consent without obtaining the required consent, we will take reasonable steps to delete that information.

Our services may involve documents or information concerning a child when those materials are submitted by a parent, legal guardian, or other authorized adult in connection with an apostille, authentication, attestation, or legalization service. Processing information contained in documents submitted by an authorized adult is different from knowingly collecting personal information directly from a child through our website.

Where other applicable data protection laws provide additional protections for minors, we process personal information in accordance with those requirements.

If you are a parent or legal guardian and believe that a child has provided personal information directly to Apostille Texas without appropriate authorization, please Contact Apostille TexasĀ through our website.

10. Your Rights Under The GDPR

If the GDPR applies to our processing of your personal information, you may have certain data protection rights, subject to applicable conditions and exceptions. These may include:

  • Right to be informed. You have the right to receive information about how and why your personal information is processed.
  • Right of access. You may request access to personal information we hold about you and certain information about how it is processed.
  • Right to rectification. You may request correction or completion of inaccurate or incomplete personal information.
  • Right to erasure. In certain circumstances, you may request deletion of your personal information, sometimes referred to as the ā€œright to be forgotten.ā€
  • Right to restrict processing. In certain circumstances, you may request that we restrict how your personal information is processed.
  • Right to object. You may have the right to object to certain processing, including processing based on legitimate interests and processing for direct marketing.
  • Right to data portability. In certain circumstances, you may have the right to receive personal information you provided to us in a structured, commonly used, machine-readable format and to have that information transmitted to another organization where applicable.
  • Right to withdraw consent. Where we rely on your consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing performed before consent was withdrawn.
  • Rights concerning automated decision-making. Where applicable, you may have rights concerning decisions based solely on automated processing, including profiling, that produce legal or similarly significant effects.
  • Right to lodge a complaint. You may have the right to lodge a complaint with the appropriate data protection supervisory authority if you believe your personal information has been processed in violation of applicable data protection law.

To exercise an applicable privacy right or ask questions about your personal information, please Contact Apostille Texas through our website. We may take reasonable steps to verify your identity or authority before processing certain requests.

11. California Privacy Rights

California residents may have certain rights regarding their personal information under applicable California privacy laws.

Where the California Consumer Privacy Act (ā€œCCPAā€), as amended, applies, these rights may include:

  • Right to know. You may have the right to request information about personal information collected about you, including applicable categories and specific pieces of personal information, sources, purposes of use, and categories of third parties to which it is disclosed.
  • Right to delete. You may have the right to request deletion of certain personal information collected from you, subject to applicable exceptions.
  • Right to correct. You may have the right to request correction of inaccurate personal information maintained about you.
  • Right to opt out of sale or sharing. Where applicable, you may have the right to direct a business not to sell or share your personal information as those terms are defined under California law.
  • Right to limit certain uses and disclosures of sensitive personal information. Where applicable, you may have the right to limit certain uses and disclosures of sensitive personal information.
  • Right to non-discrimination. Where applicable, you have the right not to receive discriminatory treatment for exercising privacy rights provided by California law.

Apostille Texas does not sell personal information. If our practices change, we will update this GDPR Privacy Policy and provide any notices or choices required by applicable law.

To submit an applicable privacy request or ask a question concerning your personal information, please Contact Apostille Texas through our website. We may take reasonable steps to verify your identity or authority before processing certain requests.

California residents may also have rights under other applicable California privacy laws.

12. Updates To This GDPR Privacy Policy

We may update this GDPR Privacy Policy from time to time to reflect changes in our practices, services, legal requirements, or other circumstances.

When we update this GDPR Privacy Policy, we will revise the “Last Updated” date at the top of this page. Changes will become effective when the updated GDPR Privacy Policy is posted on our website unless otherwise stated.

If we make material changes, we may provide additional notice where appropriate or required by applicable law.

We encourage you to review this GDPR Privacy Policy periodically to stay informed about how we collect, use, and protect personal information.

Contact Us

If you have questions about this GDPR Privacy Policy, our privacy practices, your personal information, or an applicable privacy request, please Contact Apostille Texas through our website.