Privacy Notice

This Privacy Notice explains how MyMercyPath ("MyMercyPath," "we," "us," or "our"), operating the website mymercypath.com (the "Site") and providing federal clemency document preparation services (the "Services"), collects, uses, shares, and protects personal information. MyMercyPath is the data controller responsible for the personal information processed in connection with the Site and the Services.

1. Personal information we collect

We collect the following categories of personal information:

• Identity and contact data — name, relationship to applicant, email address, phone number, mailing address.
• Case and background data — information you voluntarily provide about the applicant, including case number, court, facility, dates, sentence, conviction description, rehabilitation history, employment and education history, and community involvement.
• Documents and support materials — records, certificates, personal statements, support letters, and other files you provide for preparation of the clemency package.
• Signed acknowledgments — typed electronic signatures, checkbox confirmations, timestamps, and related metadata captured when you sign the Service Agreement or client acknowledgment.
• Communications — the contents of emails, messages, and support requests you send us.
• Technical data — IP address, browser type, device identifiers, pages visited, and other standard log data.

Payment card and billing information is collected and processed directly by our third-party payment provider. MyMercyPath does not store full card details.

2. How we use personal information (purposes)

• To evaluate and respond to consultation requests and to determine whether we can accept a matter.
• To provide the Services, including preparing, organizing, and formatting the clemency package.
• To communicate with you about your file, drafts, revisions, and delivery.
• To administer signed agreements and acknowledgments and to maintain business records.
• To operate, secure, and improve the Site and prevent fraud or abuse.
• To comply with applicable law, respond to lawful requests, and enforce our Terms.

3. Legal bases for processing

Where required by law (including the GDPR and UK GDPR), we rely on the following legal bases:

• Performance of a contract — to provide the Services you request and to administer the Service Agreement.
• Legitimate interests — to operate, secure, and improve the Site, to keep business records, and to respond to inquiries.
• Consent — where we ask for it, such as certain optional communications; you may withdraw consent at any time.
• Legal obligation — to comply with tax, accounting, and other legal requirements.

4. How we share personal information

We share personal information only with the categories of recipients below:

• Payment provider — our third-party payment provider processes payments and receives information necessary to complete transactions, calculate tax where required, handle refunds, and prevent fraud. Their handling of this data is governed by their own policies.
• Service providers and subprocessors — hosting, email delivery, analytics, error monitoring, and document preparation tooling that support the Site and Services under contract with us.
• Professional advisers — legal, accounting, and insurance advisers where reasonably necessary.
• Government or authorities — where required by law, subpoena, or other lawful process.
• Successors — in connection with a merger, acquisition, financing, or sale of assets, subject to appropriate safeguards.

We do not sell personal information and we do not share it for cross-context behavioral advertising.

5. International transfers

MyMercyPath is based in the United States. If you are located in the United Kingdom or European Economic Area, personal information may be transferred to and processed in the United States and other jurisdictions. Where applicable, we rely on lawful transfer mechanisms such as the Standard Contractual Clauses or an adequacy decision.

6. Data retention

We retain personal information for as long as reasonably necessary to provide the Services, comply with our legal, tax, and accounting obligations, resolve disputes, and enforce our agreements. Typical retention periods:

• Consultation intake records that do not become client files: up to 24 months.
• Signed Service Agreements, client acknowledgments, and related records: 7 years after the file is closed.
• Prepared clemency package materials and supporting documents: 3 years after delivery, unless a longer period is requested by the client or required by law.
• Billing and transaction records: 7 years to comply with tax and accounting requirements.
• Website logs and technical data: up to 12 months.

When personal information is no longer needed, it is deleted or anonymised.

7. Security

We use appropriate technical and organisational measures designed to protect personal information, including transport-layer encryption (HTTPS/TLS) for data in transit, access controls, role-based permissions, secure hosting, and vendor due diligence. No method of transmission or storage is completely secure, but we work to protect your information consistent with reasonable industry practice.

8. Your rights

Depending on where you live, you may have rights to access, correct, delete, restrict, or object to processing of your personal information, to receive a portable copy, to withdraw consent, and to complain to your supervisory authority. To exercise these rights, contact us at support@mymercypath.com. We will respond within the time required by applicable law (generally within one month under the UK/EU GDPR). We may need to verify your identity before acting on a request.

9. Children

The Site and Services are not directed to children under 16. We do not knowingly collect personal information from children.

10. Cookies and analytics

The Site uses essential cookies and similar technologies necessary to operate the Site and remember your preferences. We may use limited analytics to understand how the Site is used. You can manage cookies through your browser settings; disabling some cookies may affect Site functionality.

11. Do not submit sensitive information through public channels

Please do not send sensitive documents, medical records, or detailed case information through general contact channels unless we specifically ask you to. We will provide instructions for securely transmitting materials once you become a client.

12. Changes to this notice

We may update this Privacy Notice from time to time. The updated version will be posted here with a new "Last updated" date. Material changes will be highlighted where reasonably practical.

13. Contact

MyMercyPath
Email: support@mymercypath.com
Phone: 201-598-0410