Privacy Policy

• Contact information: First name, last name, email address, phone number
• Firm information: Firm name, firm size, practice area, current IT setup, anything you tell us in a form or conversation
• Account information: Login credentials, billing information, service preferences (clients only)
• Communication records: Correspondence with our team, support tickets, service requests, feedback

Our contact, assessment, and booking forms are hosted by GoHighLevel (LeadConnector) and submit directly to GoHighLevel's platform. Information you type into those forms goes to GoHighLevel, which is our CRM and email/SMS provider.

Everything in this section is blocked until you consent, with one exception: our website platform collects basic first-party analytics on every visit. That exception is described in 2.4.

• Device and connection data: IP address, browser type and version, operating system, device type, screen size
• Usage data: Pages viewed, time on page, referring URL, links clicked, navigation paths
• Approximate location: City or region, derived from IP address
• Session recordings: Mouse movement, scrolling, clicks, page interactions (see 2.3)

We use the following. None of them load until you consent. If you decline, they are never downloaded and these companies receive nothing.

Google Analytics 4 (Google LLC). Measures traffic and how visitors move through the Site. Collects IP address, device and browser data, pages viewed, and events such as form submissions. The Google Analytics script is not downloaded at all unless you consent, so Google receives nothing before then. Privacy policy: https://policies.google.com/privacy

Microsoft Clarity (Microsoft Corporation). A session replay and heatmap tool. Clarity records a reconstruction of your visit, including mouse movement, clicks, scrolling, and page interactions, and lets us play it back to understand where the Site is confusing. Clarity is configured with "Strict" masking enabled, which obscures page text in recordings. Clarity cannot record inside third-party embedded frames, which is where all of our forms are hosted, so anything you type into our contact, assessment, or booking forms is not captured by Clarity. Privacy statement: https://privacy.microsoft.com/privacystatement

GoHighLevel / LeadConnector (HighLevel Inc.). Our CRM. Besides hosting our forms, LeadConnector places a tracking script that associates visits with contact records, so that if you later submit a form we can see which pages you viewed. Collects IP address, device data, and page views. Privacy policy: https://www.gohighlevel.com/privacy-policy

Our website is built and hosted on Lovable (Lovable Labs). The platform collects basic analytics on every visit, and this is not gated by the cookie banner. It records pages viewed, the referring source, approximate country, device type, and session length.

We keep it running for two reasons. It is first-party, meaning it reports to our own website address rather than sending your activity to an outside advertising or analytics company. And it is cookieless, meaning it stores nothing on your device and cannot follow you to any other website. It tells us how many people read a given page. It does not build a profile of you.

If you decline cookies, this is the only measurement that still runs.

• Referral sources and business partners
• Public databases and professional directories

As a managed service provider, delivering contracted services gives us access to client systems. Depending on scope, this can include:

• System data: network configuration, device inventories, software inventories, patch status, security telemetry
• User information: employee names, email addresses, authentication and access logs
• Business data: files, email, and other information on systems we manage, which for a law firm may include privileged and confidential client material

We do not own or control this data. We act as a service provider and access it only as needed to deliver contracted services. Our handling of it is governed by our Master Service Agreement, not by this Privacy Policy. See Section 10.

Marketing emails include a clear unsubscribe link, our physical address, and an accurate subject line. Opt out any time via the unsubscribe link, or contact [email protected] or (646) 825-3900. We honor opt-outs within 10 business days. We comply with the CAN-SPAM Act.

Unsubscribing from marketing does not stop service or security communications to active clients.

If you opt in to SMS, we may send customer care messages, appointment reminders, account notifications, service alerts, and verification codes. Message frequency varies. Message and data rates may apply. Text STOP to opt out, HELP for help. SMS consent is not a condition of purchasing services.

Phone numbers collected for SMS, and your SMS consent, are never shared with third parties or affiliates for their own marketing purposes.

Wherever you live, you may:

• Access a copy of the personal information we hold about you
• Correct inaccurate information
• Delete information, subject to legal and contractual limits
• Object to certain processing
• Opt out of marketing at any time
• Port your information to another provider

Email [email protected] or call (646) 825-3900. We respond promptly and will tell you if we need more information to locate your records or verify your identity.

This mailbox is kept separate from our marketing systems.

We will not treat you differently for exercising any of these rights.

We honor GPC and other browser-level opt-out preference signals. If your browser sends GPC, we treat it as an opt-out automatically.

We are not a business subject to the CCPA/CPRA, which applies to companies meeting revenue or data-volume thresholds we do not meet. We extend the rights in Section 7.1 to California residents as a matter of practice regardless, and as stated in Section 4, we do not sell or share personal information.

New York has no comprehensive consumer privacy statute at this time. Our security obligations under the SHIELD Act are in Section 9. Residents of any state may exercise the rights in Section 7.1.

We do not load analytics, session replay, or CRM tracking until you consent. On your first visit you will see a consent banner listing each category. Nothing beyond strictly necessary cookies fires until you choose.

• Strictly necessary: Security, load balancing, remembering your cookie choice. Consent required: No
• Statistics: Google Analytics, Microsoft Clarity. Consent required: Yes
• Marketing: GoHighLevel / LeadConnector visit tracking. Consent required: Yes
• Preferences: Remembering settings. Consent required: Yes

Change or withdraw consent any time via the cookie settings link in the footer of every page. Withdrawal takes effect immediately for future collection.

You can also control cookies through your browser settings, though that is a blunter instrument and may affect how the Site works.

Every cookie and tracker on this Site is listed by name, provider, purpose, and duration in the Details tab of the cookie banner, which you can open at any time from the cookie settings link in the footer. That list is generated by an automated scan of the Site and updates when the Site changes.