Respect for your information starts here.

Effective October 19, 2026

About this policy

Bay State Asset Recovery is an independently operated business serving Greater Boston and Eastern Massachusetts. In this policy, “we,” “us,” and “our” refer to the business operating under that name. This policy covers information collected through this website. Questions and privacy requests can be sent through our contact form.

Information you provide

A project request collects your company and contact name, business email, optional phone number, pickup city and state, equipment categories, approximate quantities, desired timeframe, requested services, additional information, and contact consent. Please do not submit patient information, passwords, confidential asset manifests, or sensitive personal data. File uploads are not accepted.

How information is used

We use request details to respond to your inquiry, prepare a quote, arrange services you choose to purchase, and keep related business records. We also use limited technical information to operate and protect the website. Submitting a request does not add you to a marketing list. We do not sell your request information or use it for behavioral advertising.

Storage and service providers

Requests are saved in an access-restricted database on our server so an email delivery problem does not lose your inquiry. We use Cloudflare to deliver and protect the website, Resend to send quote notifications, and Google’s Gmail to receive and manage those notifications. These providers process the information needed to provide their services, including technical connection details or the contents of a notification. Processing may take place in the United States and other countries where our providers operate.

We share request details as needed to answer your inquiry or provide services you request. We may also disclose information when required by law or reasonably necessary to protect people, our business, or the security of the website.

How long we keep information

Website request records are automatically removed from the application database after 30 days. The maintenance task runs hourly. Email notifications, follow-up correspondence, service-provider records, and any backups are separate copies and are not deleted by that task. Those records may be retained as needed to answer inquiries, carry out agreed services, maintain business records, resolve disputes, or meet legal obligations. You can ask us about retention or request deletion using the contact form.

Cookies and technical information

The quote form uses an essential security cookie that expires after two hours. It helps us verify that a submission comes from the form you opened. Abuse counters use keyed hashes of source addresses or email addresses, rather than storing those identifiers directly in the rate-limit table, and are routinely expired. Cloudflare also processes connection and diagnostic information to deliver and protect the site.

We do not use advertising trackers or third-party analytics in the website application. Fonts and images are served with the site. Essential security features are required to submit the form.

Security and your choices

We use HTTPS for the public website, restrict access to saved requests, validate submissions, and limit repeated requests. No method of storage or transmission is completely secure. You can choose not to submit the form and leave optional fields blank. Please keep passwords, patient information, sensitive personal data, and confidential equipment manifests out of your request.

Privacy requests

Use our contact form to ask about this policy or request access to, correction of, or deletion of your information. Identify the message as a privacy request and provide your original email address or request reference so we can locate it. Please do not send identity documents. We may need to verify a request before disclosing or changing information. We handle requests under applicable law and may retain records where a legal obligation or other permitted reason requires it.

Changes to this policy

We may update this policy as our services or information practices change. The effective date above identifies the current version.