Privacy Policy - Stonebrook

At Stonebrook Firm ("we," "us," "our"), we are committed to protecting the privacy and security of our clients' personal information. This Privacy Policy outlines how we collect, use, disclose, and safeguard your personal data in accordance with the applicable laws, including the California Consumer Privacy Act (CCPA), the General Data Protection Regulation (GDPR) for international clients, and other U.S. federal and state privacy regulations. By engaging with us through our website, services, or communications, you consent to the practices described in this Privacy Policy.

This Privacy Policy applies to the personal information we collect when you:

• Visit our website at [stonebrookfirm.com] (the "Website").

• Interact with us via email, phone, or in person.

• Use any of our legal services.

We may collect several types of information from and about users of our website and clients, including:

• Personal Identification Information: Name, address, email address, phone number, and any other details necessary for legal service delivery.

• Business Information: Data about the company you represent or work for, including employer identification numbers, business addresses, and other corporate data.

• Payment Information: For invoicing purposes, we may collect payment card details and billing information.

• Legal Case Information: Information necessary for legal services such as contracts, agreements, and legal disputes.

• Device and Usage Information: Technical information like your Internet Protocol (IP) address, browser type, operating system, and details about your visit to our website, such as pages viewed and links clicked.

• Cookies and Tracking Data: We use cookies and similar technologies to track your activity on our website. This helps improve functionality and user experience.

We may collect personal information in several ways, including:

• Directly from You: When you voluntarily provide information to us, such as filling out contact forms, signing contracts, or corresponding with us via phone, email, or other channels.

• Automatically: Through the use of cookies and tracking technologies when you interact with our website.

• From Third Parties: We may collect information from publicly accessible sources or from third parties involved in your legal matters.

The information we collect is used primarily to:

• Provide, operate, and maintain our legal services.

• Communicate with you regarding your case or legal matters.

• Process payments for services rendered.

• Ensure legal and regulatory compliance.

• Improve the functionality of our website and user experience.

• Protect our business interests, including risk management, fraud prevention, and business administration.

We may also use your personal information for marketing purposes, such as sending you newsletters or updates about our services, unless you opt-out.

We process personal information based on the following legal grounds:

• Performance of a Contract: To provide legal services or perform any other contractual obligations we have with you.

• Legal Obligations: To comply with applicable legal or regulatory requirements.

• Consent: For optional uses of personal data, such as marketing communications, we rely on your consent, which you may withdraw at any time.

• Legitimate Interests: Where we have a legitimate interest in processing your data, such as improving services or ensuring the security of our operations.

We may share your personal information with:

• Service Providers: Third-party vendors who provide services such as payment processing, IT support, and data storage.

• Law Enforcement or Regulatory Authorities: If required by law or necessary to comply with legal processes.

• Other Legal Parties: When required for the execution or defense of a legal case.

We will not sell, rent, or lease your personal information to any third party for their marketing purposes.

We use appropriate technical and organizational measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction. This includes secure data storage, encrypted communications, and restricted access to personal data.

While we strive to protect your information, please note that no data transmission over the internet or data storage system is guaranteed to be 100% secure.

We retain your personal information for as long as necessary to fulfill the purposes for which it was collected, including the performance of legal services and compliance with legal obligations. We may retain certain information for longer periods as required by law or for legitimate business purposes, such as resolving disputes and enforcing agreements.

Depending on your jurisdiction, you may have the following rights regarding your personal information:

• Right to Access: You have the right to request access to the personal data we hold about you.

• Right to Rectification: You have the right to request correction of any inaccurate or incomplete information.

• Right to Erasure: You may request that we delete your personal information, subject to legal obligations and retention policies.

• Right to Restriction: You may request that we limit the processing of your personal data in certain situations.

• Right to Data Portability: You can request that your personal information be provided to you in a structured, commonly used format.

• Right to Object: You may object to the processing of your data under certain conditions.

To exercise any of these rights, please contact us at: privacy@stonebrookfirm.com

Under the California Consumer Privacy Act (CCPA), residents of California have the right to:

• Know what personal information is being collected about them.

• Request the deletion of their personal data.

• Opt-out of the sale of their personal information.

• Access information about how their data is shared or used.

If you are a California resident and would like to exercise any of your CCPA rights, please contact us at privacy@stonebrookfirm.com.

Our services are not directed to individuals under the age of 18, and we do not knowingly collect personal information from children. If we become aware that we have inadvertently collected personal information from a child, we will take steps to delete it as required by law.

We may update this Privacy Policy periodically to reflect changes in our practices or applicable laws. We will notify you of any significant changes by updating the "Effective Date" at the top of this policy.