Privacy at Minute Notary.

This Privacy Policy explains how Minute Notary, a notary public office in Ottawa, Ontario, handles personal information collected through this website and during in-person, mobile, and remote online appointments. It applies to anyone who books an appointment, uploads a document, lists a signer, contacts the office, or otherwise interacts with the service.

We handle personal information in line with Canada's federal Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable Ontario law, including the duties that govern notaries public and commissioners for taking affidavits.

This Policy does not apply to anonymized or aggregated information that cannot identify you, or to third-party websites you reach through links from our pages. Those sites have their own privacy practices, and we encourage you to read them.

When you use our notary services, we may collect the following personal information:

• Personal contact information, including name, address, phone number, and email
• Signer details, including date of birth when needed for identity review
• Government-issued ID images or details used for verification
• Unsigned documents and completed notarized PDFs related to the appointment
• Appointment details, comments, service selection, stamp or seal count, and Google Meet attendance details
• Payment status, amount, currency, Stripe reference, and receipt information when applicable

We use the information we collect to:

• Provide notarization services as requested
• Verify your identity as required by law
• Communicate with you and other listed signers about appointments
• Create Google Calendar invitations and Google Meet links for remote appointments
• Route appointment documents through controlled Google Drive folders
• Send confirmation and completed-document emails through the approved office email system
• Record payment status and receipts after Stripe confirms payment
• Maintain records as required by Ontario regulations
• Protect the service from fraud, misuse, double-booking, and unauthorized access

Under Canadian privacy law we collect, use, and disclose personal information with your consent, which may be express or implied depending on the sensitivity of the information and the context. Booking an appointment and uploading a document is treated as your consent to the handling described in this Policy. In practice we rely on the following grounds:

• Consent — for identity verification, storing your appointment files, and contacting the signers you list.
• Performance of our service — to do the notarial work you have asked for, schedule the appointment, and take payment.
• Legal and professional duty — to meet the record-keeping and identity-verification obligations Ontario places on notaries and commissioners.
• Legitimate operation of the service — to prevent fraud, secure accounts, and resolve disputes or support requests.

You can withdraw consent at any time, subject to legal and contractual limits. Withdrawing consent may mean we can no longer complete a notarization or keep serving you, and it does not affect records we are legally required to retain. To withdraw consent, contact the office using the details below.

Remote online appointments use the website for intake, upload, scheduling, review, and payment. The operational work is handled with trusted providers:

• Google Drive stores unsigned documents, signer ID photos, pending appointment files, and completed PDFs in appointment-specific folders.
• Google Calendar and Google Meet are used to book the appointment, invite the client and listed signers, and host the remote meeting.
• Gmail or the approved office email system sends appointment confirmations and completed-document delivery messages.
• Stripe handles card and wallet payment details, including Google Pay where available. This website stores only the booking payment status and Stripe reference.

Remote service is available only when the document, signer identity review, video meeting, and the notary's professional judgement allow it. Some documents may still require an in-person appointment or manual review.

We use administrative, technical, and operational safeguards to protect personal information. Connections to this website are encrypted in transit (HTTPS). Access to booking files is limited to authorized notary/admin users. Admin accounts are password-protected and support two-factor authentication, and sensitive actions such as file view, resend, delivery, and status changes are logged.

Online forms are protected against automated abuse by Cloudflare Turnstile. Electronic signing normally takes place on our own website, and each completed document is sealed with a tamper-evident “Verified by Minute Notary” digital signature and an independent, trusted timestamp so later changes can be detected. If our own signing system is temporarily unavailable, we may fall back to a trusted third-party e-signature provider (SignNow) so a signing can still be completed. No safeguard is perfect; if a breach affecting your personal information occurs, we will respond and notify you as required by law.

Appointment files are not stored in public website media storage. Blog images, frontend assets, and other public website media may use Cloudflare R2, but online booking documents, ID photos, and completed notarized PDFs are routed through Google Drive.

We do not sell, trade, or otherwise transfer your personal information to third parties for marketing. We may share information only when required by law, with your consent, with another signer you listed for the appointment, or with the service providers needed to operate the booking, payment, meeting, file storage, signing, and email workflow. Those providers may process information only for us:

• Stripe — processes card and wallet payments. This website stores only the payment status and Stripe reference, never full card numbers.
• Google Workspace (Drive, Calendar, Meet, and email) — stores appointment files, schedules and hosts remote meetings, and delivers confirmation and completed-document emails.
• Independent timestamp authority — electronic signing runs on our own website, and a completed document is sealed here. Only a one-way fingerprint (hash) of the document is sent to an independent timestamp authority to certify the date and time; the document itself and your personal information are never sent.
• SignNow — a third-party e-signature provider used only as a backup if our own signing system is temporarily unavailable, so a signing can still be completed.
• Cloudflare — provides the Turnstile anti-abuse check and R2 storage for public website assets such as blog images.
• Oracle Cloud (OCI Vault) — holds the private key that seals completed documents inside a hardware security module. Only a one-way fingerprint (hash) of the document is sent for sealing; the document itself and your personal information never leave our systems.
• Log storage (VictoriaLogs) — receives operational and security logs so we can run and safeguard the service. Logs are scrubbed of personal information (emails, phone numbers, names, addresses, dates of birth, and IP addresses are masked or removed) before they are sent.

The office is based in Ottawa, Ontario, and your notarial records stay under our control here. Some of the trusted providers above (for example Stripe, Google, Cloudflare, Oracle Cloud, and SignNow when used as a signing backup) operate data centres in the United States and other countries, so limited personal information may be processed or stored outside Canada.

When information is handled outside your province or country, it may be subject to the laws of those places, including lawful access by their courts and authorities. We use providers that offer contractual and technical safeguards for the information they process on our behalf. By using the online booking service, you consent to this processing and storage.

This website uses a small number of cookies and similar browser storage. We keep them to the minimum needed to run the site and understand, in aggregate, how it is used:

• Essential cookies — keep you signed in to an account, remember a booking in progress, and support security checks such as Cloudflare Turnstile. The site cannot work properly without these.
• Analytics — we keep aggregate, non-identifying usage information (such as which pages are visited and how people reach the site) on our own systems, so we can improve it. We do not use third-party advertising or tracking analytics.
• Embedded providers — pages that load Stripe or a security check may set their own cookies needed for those features to function.

We do not use cookies to sell your information or to build advertising profiles. You can block or delete cookies through your browser settings, though some features, such as signing in or completing a booking, may stop working if you do.

We keep personal information only as long as needed for the service, legal records, accounting, fraud prevention, and dispute handling. The website removes abandoned unpaid booking drafts after a short checkout window, currently about 10 minutes.

Disposable pre-signing working files, such as the unsigned PDF prepared for your appointment, are removed from Google Drive after a short post-appointment period, currently up to 7 days. Records we are required to keep, including the government-issued ID used to verify your identity and the completed, notarized document, are retained for the longer periods required by Ontario law and notarial practice (for example, identity-verification records for at least six years, and notarial records longer), so that we can meet our regulatory obligations and respond to any later dispute or audit.

Under Canadian privacy law you have rights over the personal information we hold about you. Depending on the circumstances, you can:

• Ask whether we hold personal information about you, and request access to it
• Ask us to correct information that is inaccurate or incomplete
• Withdraw your consent to future uses, subject to legal and contractual limits
• Ask us to delete information that is no longer needed, where no law requires us to keep it

To exercise any of these rights, contact the office using the details below. We may need to verify your identity before we respond, and we will reply within the time Canadian privacy law allows. Some requests may be limited or refused where the law requires it, for example where releasing information would reveal another person's personal information or where we must retain a notarial record.

We may update this Privacy Policy from time to time to reflect changes in our practices, the tools we use, or the law. When we do, we revise the “Last updated” date shown at the top of this page. For significant changes, we will take reasonable steps to highlight them. Continuing to use the website or our services after an update means you accept the revised Policy.