Website & Inquiry Data Security
A quote request includes contact and business details. Mail and identity documents must not be sent until the operator, authority, and approved secure process are confirmed in writing. This page distinguishes current website controls from conditional service controls.
Transport & Web Security
Every page on getbusinessaddress.com is served over HTTPS. Responses request HTTP Strict Transport Security (HSTS), including the preload directive. The directive is not a claim that the domain appears in every browser vendor's preload list.
Our response headers include X-Frame-Options: DENY to block our pages from being loaded inside iframes, preventing clickjacking. We also enforce a strict Content-Security-Policy that restricts which scripts, styles, and connections the browser will accept from our pages.
Bot Protection & Form Security
Our lead form uses Cloudflare Turnstile to evaluate whether a submission is likely to be legitimate. Cloudflare processes technical signals under its own policies, and Turnstile does not replace server-side validation, rate limits, or the consent checks applied by our intake endpoint.
Lead Data Storage
Form submissions are stored in Cloudflare D1, a serverless SQL database. Access to that database is restricted by an admin API key; there is no public read interface. We do not sell or rent contact information. We disclose only what is reasonably needed to the processors and authorized recipients listed in our Privacy Policy, including Cloudflare, PostHog, Cal.com, Google Workspace, and service or government recipients you authorize.
Analytics: What We Track and What We Do Not
We use PostHog to understand a limited set of named site events. Browser code sends only allowlisted events and properties through a same-origin gateway; it does not load PostHog JavaScript or expose the project key. Global Privacy Control or Do Not Track stops analytics before storage or capture. We do not use session replay or create analytics person profiles.
We do not use Google Analytics, Facebook Pixel, LinkedIn Insight Tag, or any other third-party advertising tracker. There are no retargeting pixels on this site.
Current Website Status
Checking the public health endpoint.
Mail Handling
Mail handling is not activated by submitting this site's form. We first confirm the service address, unit assignment, mail authority, approved use, and effective date in writing. If the service is provided under USPS CMRA rules, the required identity and Form 1583 process must be completed before mail is accepted.
Mail Handling
The written activation summary identifies the approved handling location and available actions. We do not publish or claim a licensed CMRA location on this page without current documentary proof.
Form 1583 Compliance
When CMRA rules apply, the applicant completes Form 1583 and the identity-verification steps required by current USPS instructions before the service goes active.
Shredding on Request
Available disposal and forwarding instructions are stated in the written service scope. There is no live customer dashboard today; handling requests go through the confirmed support channel, while the planner shows a preview of the future workflow.
We Keep What We Need
When Form 1583 applies, required records are retained for at least the USPS minimum period. Beyond that, we aim to keep only the information needed for the service, security, accounting, and legal obligations.
What We Do Not Claim
Some security pages list certifications and audit results to build confidence. We want to be straightforward: this is a small private business-support and document-filing service; any mail handling remains conditional on written activation.
We Do Not Currently Hold or Claim
- SOC 2 Type I or Type II certification
- ISO 27001 or similar information security certification
- Independent penetration test results
- Formal encryption-at-rest certification for D1 data
If any of the above matter for your specific use case, we encourage you to ask questions before signing up. We would rather answer honestly than overstate what we have.
Questions or Security Concerns
If you have a security question, notice something that looks wrong, or want to know more about a specific data practice, email hello@getbusinessaddress.com. Messages sent there are routed for review; no response-time guarantee is stated on this page.
Last updated: July 11, 2026
A Business Address You Can Trust.
HTTPS, bot protection, no ad pixels, and written activation controls before any address or mail service is used.