Legal
Privacy Policy
This Privacy Policy describes how MGH Law, PC collects, uses, and protects personal information obtained through this website, in compliance with the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), and other applicable federal and state privacy laws.
Information We Collect
We may collect the following categories of personal information when you visit our website or contact us:
- Identifiers: Name, email address, phone number, postal address, IP address
- Commercial Information: Records of services requested or considered
- Internet or Electronic Network Activity: Browsing history, search queries, interaction with our website
- Geolocation Data: General location derived from IP address
- Professional or Employment Information: Information you voluntarily provide when contacting us
- Communications: Content of emails or messages you send to us
How We Collect Information
- Information you voluntarily submit via contact forms, email, or phone
- Automatic collection via cookies, web beacons, and similar tracking technologies when you visit our website
- Third-party analytics tools (such as Google Analytics) that track website usage
How We Use Your Information
We use collected personal information for the following business and commercial purposes:
- Responding to your inquiries and providing legal services
- Communicating with you about our services and updates
- Improving and optimizing our website and user experience
- Complying with legal obligations and professional responsibility rules
- Preventing fraud and ensuring website security
- Internal analytics and research to improve our services
Disclosure to Third Parties
We do not sell your personal information. We may share personal information with trusted third parties only as necessary to operate our business:
- Service Providers: IT providers, website hosting, analytics platforms, and practice management software vendors who process data on our behalf under written agreements
- Legal Obligations: Courts, government agencies, or parties in litigation when required by law or court order
- Professional Obligations: Co-counsel, experts, or referral attorneys with your consent
- Business Transfers: In connection with a merger, acquisition, or sale of firm assets, subject to applicable confidentiality obligations
Cookies & Tracking Technologies
Our website uses cookies and similar technologies to enhance your experience and collect analytics data. You may configure your browser to refuse cookies; however, some website features may not function properly without them. We use:
- Strictly Necessary Cookies: Required for basic website operation
- Analytics Cookies: Help us understand how visitors use our site (e.g., Google Analytics)
- Preference Cookies: Remember settings such as your theme preference
Data Retention
We retain personal information only as long as necessary to fulfill the purposes for which it was collected, to comply with legal obligations, and to resolve disputes. Client matter records are retained in accordance with California State Bar rules and applicable law. Non-client website inquiry data is generally retained for no longer than 24 months.
Data Security
We implement appropriate technical and organizational security measures designed to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include encryption, access controls, and regular security assessments. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.
Children's Privacy
This website is not directed to individuals under the age of 16. We do not knowingly collect personal information from children under 16. If you believe we have inadvertently collected such information, please contact us immediately and we will promptly delete it.
Your California Privacy Rights (CCPA/CPRA)
Under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA, effective January 1, 2023), California residents have the following rights regarding their personal information.
Right to Know
Request disclosure of categories and specific pieces of personal information we have collected about you, the sources, our business purposes, and third parties with whom we share it.
Right to Delete
Request deletion of your personal information we hold, subject to certain legal exceptions such as compliance with legal obligations or completion of a transaction.
Right to Correct
Request correction of inaccurate personal information we maintain about you, taking into account the nature of the information and purposes of processing.
Right to Opt-Out
Opt out of the sale or sharing of your personal information. We do not sell personal information, but you may still submit an opt-out request at any time.
Right to Limit Use
Limit the use and disclosure of sensitive personal information (such as precise geolocation or financial data) to only what is necessary for the requested service.
Right to Non-Discrimination
We will not discriminate against you for exercising any of your CCPA privacy rights, including by denying services or charging different prices.
How to Submit a Privacy Request
California residents may submit a verifiable consumer request to exercise any of the above rights by contacting us by email, calling our office, or submitting a written request to our office address. We will respond to verifiable consumer requests within 45 days of receipt, as required by CCPA. We may extend this period by an additional 45 days when reasonably necessary, with prior notice. Requests may be submitted up to twice per 12-month period.
Authorized Agents
You may designate an authorized agent to submit requests on your behalf. We may require you to verify your identity directly and confirm that the agent is authorized to act on your behalf, in accordance with applicable CCPA regulations.
Attorney-Client Privilege Exemption
Personal information subject to the attorney-client privilege or attorney work product doctrine is exempt from certain CCPA obligations. Information collected and maintained in connection with providing legal services may be subject to these exemptions.
Do Not Track
Our website does not currently respond to "Do Not Track" signals from browsers. We recommend using browser privacy settings and cookie controls to manage tracking preferences.
Changes to This Privacy Policy
We may update this Privacy Policy periodically to reflect changes in our practices or applicable law. We will post the updated policy on this page with a revised effective date. Your continued use of the website after any such changes constitutes your acceptance of the updated policy. We encourage you to review this policy annually.
Questions About This Policy?
Contact our privacy compliance team at [email protected]. We usually respond within 2 business days.