This Privacy Policy describes how information is collected, used, stored, and protected when users access services connected with the Lancaster County Assessor. It applies to all visitors using property search tools, assessment records, tangible personal property data, mapping systems, online forms, and other digital services provided through official county platforms. The purpose is to provide clear information about data handling practices and user rights when interacting with county systems. When users access the website or submit requests, certain technical and personal details may be collected. This can include browser type, IP address, pages visited, search activity, and information entered into forms for services such as exemptions, property updates, or tax-related inquiries. This data supports system performance, service delivery, and accurate record maintenance.
All information collected is processed under applicable privacy laws and county administrative policies. Data is used strictly for official purposes such as maintaining property records, processing applications, supporting assessment activities, and improving public service access. Personal information is not sold, rented, or used for unrelated commercial activities. Security measures are applied to protect data from unauthorized access, misuse, or disclosure. Access to sensitive information is restricted to authorized personnel, and systems are regularly maintained to reduce risk and maintain data integrity. While safeguards are in place, digital systems cannot provide absolute protection in every situation. By using Lancaster County Assessor services, users accept the data practices outlined in this Privacy Policy. Updates may be made from time to time due to changes in legal requirements, technology, or administrative processes. Users are encouraged to review this page periodically for the latest version.
Data You Give Voluntarily
When users submit forms through Lancaster County Assessor services, they may provide personal details such as full name, mailing address, email address, and phone number. This information is collected only for the purpose related to the specific request being made, such as property inquiries, exemption applications, or record updates. Sensitive identifiers like Social Security numbers are not requested unless required by law for a specific official transaction. Any information shared is stored securely and used strictly for administrative processing.
Automatically Collected Data
When visiting the website, certain technical information is collected automatically. This may include IP address, browser type, operating system, device information, pages visited, and the date and time of access. This data helps the Lancaster County Assessor improve website performance, maintain security, and monitor system usage patterns.
Automatically collected data is used in aggregated form to identify technical issues such as broken links, slow-loading pages, or navigation problems. It is not directly linked to personal identity unless a user logs into a secured system or submits identifiable information through official forms. Analytics data is retained only for a limited period based on operational needs and system maintenance requirements.
How We Use Your Data
Information collected through Lancaster County Assessor services is used for clearly defined and limited purposes connected to official county functions. Each use of data is based on a lawful reason, such as carrying out public duties, meeting legal obligations, or responding to requests submitted by users. Personal information is not sold or shared with third parties for marketing or unrelated activities.
For Service Improvements
Usage data is reviewed in aggregated form to improve website performance, navigation, and accessibility. This type of analysis does not rely on personal identification and is used to identify general trends such as frequently visited pages, search patterns, or technical issues. When users submit feedback or inquiries through contact forms, the provided details may be used to respond or seek clarification, and related correspondence is retained only for a limited period before being securely removed.
Communication and Notifications
Communication is sent only when it is necessary for service delivery, legal requirements, or when users have provided consent. This may include updates about applications, property records, or official notices. Users may opt out of non-essential communications at any time using available unsubscribe options or by contacting the office directly. Certain legal or administrative notifications cannot be opted out of, as they are required for compliance purposes. Communication preferences are recorded and maintained for administrative tracking within a limited timeframe.
Legal and Compliance Purposes
Data may be used to comply with applicable laws, court orders, audits, or official government requests. Access to such information is restricted to authorized personnel to ensure proper handling and confidentiality. Information is only used for these purposes when required and is not repurposed for unrelated activities. Any additional use of personal data beyond these conditions requires appropriate legal authority or user consent.
Data Protection and Security Measures
This policy covers how personal and property-related information is safeguarded within Lancaster County Assessor systems. It outlines the controls used to protect data during transmission, storage, and internal processing, along with procedures designed to reduce risks of unauthorized access, misuse, or loss. Security practices are applied across digital platforms, internal networks, and administrative systems to maintain reliable handling of assessment records, tangible personal property data, and related services.
Encryption and Secure Access
All communication between a user’s browser and the website is protected through modern encryption protocols. This ensures that any data entered into forms or search tools is securely transmitted and cannot be intercepted or read during transfer. Stored information is also protected using encryption standards within secure database systems. Access to servers and critical infrastructure is physically restricted and monitored. Security systems are in place to detect and block suspicious activity, including automated attacks or unauthorized access attempts, before they reach internal systems.
Internal Access Restrictions
Access to personal data is limited to authorized staff members who require it to perform official duties. Role-based access controls are used so employees can only view or manage information relevant to their responsibilities. All access activity is recorded in system logs and reviewed for accountability and security monitoring purposes. Any unauthorized or inappropriate access is subject to internal review and corrective action. Staff members are also required to follow data handling policies and participate in ongoing training focused on privacy and information security practices.
Additional Security Practices
Routine vulnerability testing and system audits are conducted to identify and address potential weaknesses. Independent security assessments may also be performed to strengthen overall protection. A formal incident response process is in place to manage and report security events if they occur, including notifying affected individuals when required by law. Regular data backups are maintained in secure offsite locations to support recovery in case of system failure or data loss. Backup systems are tested periodically to confirm reliability and restore capability when needed.
Opt-Out Preferences
Users may control how their personal information is used for non-essential purposes. Options are available to limit communications, reduce tracking, or withdraw consent where applicable. Requests are handled through established procedures and processed within a reasonable timeframe to ensure user preferences are respected.
How to Limit the Use of Your Data
Email communications can be stopped by using the unsubscribe option included at the bottom of official messages. For text message alerts, users may opt out by replying with “STOP” to any received message. These actions apply only to non-essential notifications such as updates, reminders, or informational messages.
If a user wishes to restrict broader data use, a written request can be submitted through mail or email. The request should include identifying details such as full name and address along with a clear statement requesting limitation of data processing. Once verified, non-essential processing such as analytics tracking, surveys, or promotional communication will be discontinued where applicable. Certain communications cannot be opted out of, particularly those required for legal, regulatory, or administrative purposes. These include official notices related to property records, assessments, or statutory obligations.
Sharing and Third-Party Services
This policy outlines how information may be shared with external service providers and third-party platforms when necessary for operating Lancaster County Assessor services. Certain functions such as payment processing, data hosting, analytics, and communication tools may rely on trusted external systems. Any sharing of information is limited to what is required for service delivery, security, or legal compliance, and is managed under strict contractual and privacy safeguards to protect user data.
When and Why We Share Data
We share data with other government departments when necessary to process your request. We also share data with state agencies for administrative purposes. In each case, we share only the minimum data needed. We require all recipients to use the data only for the stated purpose and to delete it when no longer needed. We do not share data with private companies except for contracted services like payment processing or website hosting.
Third-Party Tools and Services
Our website uses a few third-party services to function properly. We use a payment gateway for online payments. That gateway receives your payment card data directly and does not share it with us. We use a cloud hosting provider that stores our website data on servers located in the United States. We have a data processing agreement with that provider that requires them to follow our security standards. We also use a survey tool to collect user feedback. That tool stores responses on encrypted servers and we delete survey data after a reasonable period. We do not use any third-party analytics tools that track individual users across different websites.
Your Rights and Data Control Options
Users have rights over personal information collected through Lancaster County Assessor services, including access, correction, and limited deletion where legally allowed. Requests can be submitted through official county contact channels and may require identity verification before processing. Users may also adjust communication preferences by opting out of non-essential emails or alerts, while still receiving required legal or service-related notices. Browser settings can be used to limit cookies and tracking features, though this may affect some website functions. All requests are handled in line with applicable laws and retention requirements.
Requesting Data Access or Deletion
You can request a copy of all personal data we hold about you by submitting a written request to our office. Include your full name, current address, and a description of the data you want to see. We will provide the data in a portable format within a reasonable time. You can also request that we delete your personal data, except for records we are legally required to keep. We will confirm deletion in writing. There is no fee for these requests.
Updating Your Personal Details
If your contact information changes, you can update it by contacting our office. We ask that you provide your previous information and the new details so we can verify your identity. For certain records, you may need to provide proof of ownership. We update our records promptly after receiving your request. If you notice an error in your data, you can file a correction request. We investigate and respond within a reasonable time.
Changes to This Privacy Policy
This Privacy Policy may be updated from time to time to reflect changes in services, technology, legal requirements, or administrative practices. Any updates apply to how data is collected, used, and protected through Lancaster County Assessor systems. Users are encouraged to review the policy periodically to stay informed about the latest version.
Notification of Updates
When significant or material changes are made, a notice may be displayed on the website for a defined period. If users have provided an email address and opted into notifications, they may also receive direct communication about important updates. The “Date of Last Revision” at the top of the policy will be updated each time changes are published. In some cases, users may also be able to subscribe to update alerts through official contact channels.
Date of Last Revision
The Privacy Policy reflects the most recent approved version as of the stated revision date. Previous versions may be available upon request by contacting the designated privacy or administrative office, where records are maintained in accordance with applicable retention policies.
Contact Us for Privacy Concerns
If you have questions about this Privacy Policy, need help with personal data, or want to submit a privacy request, support is available through official Lancaster County Assessor channels. All requests are reviewed by authorized staff under applicable privacy rules.
How to Reach Our Office
- Website: https://co.lancaster.pa.us
- Phone: 717-299-8381 (Monday to Friday, business hours)
- Email: assessor@co.lancaster.pa.us
- Address: 150 North Queen Street, Suite 310, Lancaster, PA 17603
- Hours: Monday through Friday, 8:30 a.m. to 5:00 p.m., excluding county holidays
Privacy Requests
For access, correction, or deletion requests where permitted by law, identity verification may be required before processing. This step helps protect personal information from unauthorized access. All requests are handled by designated staff and processed within a reasonable timeframe depending on the nature of the inquiry and legal requirements. Some records may be retained as required under official retention policies.an contact our Data Protection Officer. If you believe we have not handled your data properly, you have the right to file a complaint with the appropriate regulatory authority.