Privacy Policy

DMVForensics (“we,” “us,” or “our”) respects your privacy and is committed to protecting the highly sensitive personal and digital information entrusted to us. This Privacy Policy explains how we collect, use, disclose, and safeguard information in connection with our digital forensics, data recovery, and incident response services across Washington DC, Maryland, and Virginia.

1. Information We Collect

Website & Intake Information

• Contact details (name, phone, email) submitted via our booking forms and Netlify Forms.
• Incident descriptions, device details, location/ZIP code, and scheduling preferences.
• Optional information such as how you heard about us or additional notes.

Forensic Engagement Data (Highly Sensitive)

• Exact forensic images (bit-for-bit copies) of phones, computers, tablets, external drives, and other devices you authorize us to examine.
• Metadata, deleted files, communications, application data, location history, and any other content present on the devices.
• Physical access notes, passwords or passcodes you voluntarily provide, and contextual information about the incident.
• Chain-of-custody documentation we create during imaging and analysis.

We do not collect payment card details directly (future processors will handle this securely).

2. How We Use Your Information

• To perform the forensic services you requested (imaging, analysis, data recovery, timeline reconstruction).
• To prepare written reports, findings summaries, and supporting documentation with proper hashes and chain-of-custody records.
• To communicate with you about scheduling, findings, next steps, and follow-up questions.
• To maintain professional records required for quality control, insurance, and potential legal proceedings.
• To improve our processes (anonymized, aggregated insights only).

3. Data Security & Chain of Custody

Your data is among the most sensitive information we handle. We employ industry-standard forensic practices including:

• Write-blocked hardware and validated forensic tools for all imaging.
• Encrypted storage for working copies and evidence.
• Documented, auditable chain-of-custody procedures from first contact through final report or secure destruction.
• Strict access controls — only authorized examiners assigned to your case have access.
• Physical security for devices while in our possession.

We never store live device data on unsecured systems or cloud services not specifically approved for evidence handling.

4. Sharing and Disclosure

We share information only in the following limited circumstances:

• With your explicit direction: Reports and evidence may be provided to your attorney, insurer, or other parties you authorize.
• Legal requirements: We will comply with valid court orders, subpoenas, or law enforcement requests when legally obligated.
• Service providers: Netlify (forms hosting and infrastructure), and future secure payment or email providers under strict confidentiality agreements.
• Business transfers: In the unlikely event of a merger or sale, subject to equivalent protections.

We never sell your personal information or device data.

5. Data Retention and Deletion

• Forensic images and working files are retained only for the duration necessary to complete your engagement plus any required legal or professional hold period.
• Upon your written request (or at the conclusion of the matter), we will securely destroy or return original devices and associated forensic images, subject to any legal preservation obligations.
• Administrative records (intake forms, agreements, reports) are retained for a minimum of 7 years or as required by applicable law or insurance.
• You may request a copy of your report and relevant findings at any time during the retention period.

6. Your Rights and Choices

Depending on your location (including potential CCPA/CPRA applicability for California residents visiting the DMV), you may have rights to:

• Access the personal information we hold about you.
• Request correction or deletion (with the important caveat that evidence under legal hold or active forensic matter may not be deletable immediately).
• Opt out of certain processing (note: we cannot provide services without core intake data).

To exercise these rights, contact us using the information below. We will respond within the timeframes required by law.

7. Cookies and Website Analytics

Our website uses minimal cookies necessary for basic functionality. We do not use third-party advertising trackers. Netlify may collect standard server logs. You can control cookies through your browser settings.

8. Children’s Privacy

Our services are not directed to children under 13. If you believe we have collected information from a child without proper consent, please contact us immediately so we can take appropriate action.

9. Changes to This Policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top will reflect the current version. Material changes will be communicated via our website or direct notice where appropriate.

10. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices: