This policy describes how we collect, use, and store personal information. “Personal information” is data about you or data that can be used to identify you, such as your name, address, phone number, email address, IP address, social security number, or other information. By using this website, you acknowledge and consent to our practices described below.
Date last updated: November 8, 2024
When and how do we collect personal information?
We only collect personal information about you when you voluntarily choose to provide it. For example, you may disclose personal information to us when you fill out a form on our site (such as filling out a contact form), when submitting information by mail, telephone, or email, and when you sign up for blog updates and other marketing communications. Apart from information you expressly provide us when we are providing legal services in the ordinary course of our business, and except for cookies (as described more fully below), our website does not collect personal information from you.
We do not direct any of our websites to children or individuals under the age of 18, nor do we knowingly collect, use, or store the personal information of individuals under 18.
Generally, we do not collect sensitive information about you unless required by law. Sensitive information includes information relating to: race, political and religious beliefs; sexual orientation and sexual life; criminal convictions; membership of professional or trade unions; biometric and health information; or information about your affiliation with certain organizations, such as professional associations.
How do we use cookies?
As you browse our website, advertising cookies will be placed on your computer so that we can understand your interests. Our platform (currently WordPress), enables us to present you with retargeting advertising on other sites based on your previous interaction with this site. The techniques our platform employs do not collect personal information such as your name, email address, postal address, or telephone number (unless you submit such information to us via “contact us”, “sign up”, “schedule a call”, and similar forms). However, the information we collect through our website does include your IP address, browser type, and content viewed. You can learn more details by reading WordPress’ Privacy Policy (powered by Automattic), here.
Our website does not currently recognize “Do Not Track” initiatives.
Why do we use or process your personal information?
We only use your personal information for a legal and legitimate interest, such as:
- Legal services: We collect and process your personal information to provide you with legal services such as information that you have specifically requested from us, or to provide you with information about our hosted events, to deliver “legal updates”, or to provide you with updates about our firm. We also comply with legal and ethical obligations related to these legal services.
- Marketing: To the extent that we collect personal information for event registration, we use the information solely in connection with the planning of the event for which you registered. We use it to track registration, confirm attendance, and send follow-up communications after the event. We may also use this information to call to your attention similar events that might be of interest to you, or to provide you with updates about our firm.
- Contract performance: We may use or process personal information in connection with pre-contract activities and discussions with you, and to perform a contract we have with you.
- Legal obligations: We will use or process personal information as necessary for compliance with a legal obligation to which we are subject. This includes using or processing personal information for defense of claims against us and satisfying any government reporting obligations and requests.
- Other legitimate interests: We will process your personal information for any of our other legitimate interests not described above. These include analyzing use of our website or services, tailoring website and news content, setting preferences in our website or electronic mailings, improving our website, fulfilling our obligations to our clients and others, and managing our client and vendor relationships.
How and where do we disclose personal information?
We do not sell, trade, or otherwise transfer your information to outside parties. This does not include trusted third-party affiliates who assist us in operating our website, conducting our business, or servicing you, as well as our affiliate organizations (our “Affiliates”), but only so long as our Affiliates agree to keep this information confidential. Some examples include our hosted e-mail and document management servers, and our business process outsourcing affiliate company.
We operate our website from the United States of America (“U.S.”) and store information we collect through our website in the U.S. However, we market and provide legal services in many other countries. Accordingly, we will disclose information collected through our website, as well as other personal information, across offices and geographical boundaries, within and outside of our firm, for legal and legitimate purposes as described above.
The recipients of your personal information may be located outside of the jurisdiction where you reside. The laws of these other countries may not provide the same level of protection as the laws of your home country. By voluntarily providing us with your information, you acknowledge the disclosure of such information to these recipients. Any processing of your personal information outside of your jurisdiction will be in accordance with this Privacy Policy.
We may also release your information when we believe release is appropriate to comply with the law, enforce our site policies, or protect ours or others’ rights, property, or safety.
How do we protect your personal information?
We implement a variety of security measures to maintain the safety of your personal information when you enter, submit, or access your personal information. Even so, please do not disclose any private or confidential information to us via this website. Isaza Law, P.C. cannot guarantee the security of any information transmitted to us over the Internet.
Do we facilitate third party links?
Yes. Occasionally, at our discretion, we may include or offer third party products or services on our website. These third party sites have separate and independent privacy policies. We therefore have no responsibility or liability for the content and activities of such linked sites. Nonetheless, we seek to protect the integrity of our site and welcome any feedback about these sites.
How long do we keep personal information?
We will keep your personal information until we no longer expect to need it for any legal and legitimate purpose and otherwise in keeping with all applicable laws. At the appropriate time, we will take reasonable steps to destroy your personal information, except where we must retain it to satisfy legal or professional ethical obligations.
What are your rights regarding your personal information?
Depending on where you live, and subject to our obligations under applicable laws, you may have certain rights and choices regarding your personal information. For example, in addition to choices described elsewhere in this Privacy Policy, you may have some or all of the following rights and choices in general:
A. General Regional Rights
Access Rights: you may have the right to receive certain information, such as the following (these rights, and the applicable types of data and time periods, will vary depending on the laws applicable to the state or country in which you reside):
- The categories of personal information we have collected or disclosed about you; the categories of sources of such information; the business or commercial purpose for collecting or selling your personal information; and the categories of third parties with whom we shared personal information.
- Access to and/or a copy of certain personal information we hold about you.
- In some circumstances, you may have the right to obtain certain personal information in a portable format.
Erasure: you may have the right to request that we delete certain personal information we have about you. We may either decide to delete your personal information entirely, or we may anonymize or aggregate your personal information such that it no longer reasonably identifies you. Certain personal information may be exempt from such requests under applicable law. For example, we need certain types of information so that we can provide our Services to you, we may be required to retain certain information for legal purposes, and there may be other reasons we may need to keep certain personal information under various applicable laws. In addition, if you ask us to delete your personal information, you may no longer be able to access or use some of our Services.
Correction: you may have the right to request that we correct certain personal information we hold about you.
Limitation of Processing: Certain laws may allow you to object to or limit the manner in which we process some of your personal information, including the ways in which we use or share it. For example, you may have these rights if the processing was undertaken without your consent in connection with our legitimate business interests (although we may not be required to cease or limit processing in cases where our interests are balanced against your privacy interests).
Regulator Contact: you may have the right to contact or file a complaint with regulators or supervisory authorities about our processing of personal information. To do so, please contact your local data protection or consumer protection authority.
Other: you may have the right to receive information about the financial incentives that we offer to you, if any. you may also have the right to not be discriminated against (as provided for in applicable law) for exercising certain of your rights.
If you believe that you have specific rights under your jurisdiction and you would like to exercise any of these rights, please submit a support request through our website or email us at [email protected]. Other than marketing opt-out and do-not-sell requests, you will be required to verify your identity before we fulfill your request. In certain jurisdictions, you may be able to designate an authorized agent to make a request on your behalf, subject to certain requirements of your applicable law. We may require that you provide the email address we have on file for you (and verify that you can access that email account) as well as an address, phone number, or other data we have on file, in order to verify your identity. If an agent is submitting the request on your behalf, we reserve the right to validate the agent’s authority to act on your behalf, and we may be required to take additional verification measures under applicable law.
B. Important Information for European Union and United Kingdom Users
If you are a user from the European Union or United Kingdom you should be aware that we are the controller of your personal information (Data Controller) under the EU General Data Protection Regulation (“GDPR”), the UK General Data Protection Regulation (“UK GDPR”), and such similar laws promulgated in the various EU countries. you may have certain additional rights regarding your personal information (as defined in the GDPR and UK GDPR, for instance), including the right to:
- access your information;
- rectify your information if it is incorrect or incomplete;
- have your information erased (“right to be forgotten”) if certain grounds are met;
- withdraw your consent to our processing of your information at any time, if our processing is based on consent;
- object to our processing of your information, if our processing is based on legitimate interests;
- object to our processing of your information for direct marketing purpose; and
- receive your information from us in a structured, commonly used, and machine-readable format, and
- the right to transmit your information to another controller without hindrance from us (data portability).
There is no charge for any of these requests. To make a request, please contact us at [email protected]. We try to respond to such requests in a timely manner, but in no event longer than one month. When we collect your personal information, we maintain and store it for as long as we determine reasonably necessary to provide our services to you, unless you exercise your right to erasure described above, or to comply with applicable legal requirements.
If you are a resident of the European Union or United Kingdom, when we process your personal information, we will only do so in the following situations:
- We have a contractual obligation.
- You have provided your consent. However, you are able to remove your consent at any time, and you may do this by contacting us at [email protected].
- We have a legal obligation.
- We have a legitimate interest in processing your personal information. For example, we may process your personal information to send you marketing communications, relevant content, products or events invitations, or to communicate with you about changes to our services, and to provide, secure, and improve our services.
You should be aware that personal information that you provide to us may be transferred out of the country in which you reside to servers in a country that may not guarantee the same level of protection as the one in which you reside. Nevertheless, we will take all steps reasonably necessary to ensure that your personal information is treated securely in accordance with this privacy policy, and no transfer of your personal information will take place to a third party unless there are adequate controls in place to protect your personal information and/or you have provided contractual consent by becoming a client.
If you are a user in the European Union or United Kingdom and have a concern about our processing of personal information that we are not able to resolve, you have the right to lodge a complaint with the data privacy authority where you reside. For contact details of your local Data Protection Authority, please see: http://ec.europa.eu/justice/data-protection/article-29/structure/data-protection-authorities/index_en.htm.
C. U.S. State-Specific Rights
Various states provide specific rights to residents of the state regarding personal information, which includes allowing consumers in these states to opt out of certain sharing of their data.
We do not track users over time and across apps or websites, and our website therefore does not respond to Do Not Track signals.
Depending on where you reside, your state may have enacted privacy laws (e.g., as of the date of this Policy, California, Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Tennessee, Texas, Utah and Virginia) that allow you to request that Isaza Law:
- Disclose the sources, categories, and specific pieces of personal information we have collected about you, how that information is used, and with whom Isaza Law shares it
- Disclose the purpose for collecting personal information
- Disclose the categories of third parties with whom Isaza Law shares personal information
- Delete/rectify/restrict their personal information, subject to certain exceptions (right of rectification not applicable to Iowa and Utah residents)
- Disclose, for any “sales” of personal information, the categories of personal information collected and sold and to what categories of third parties it was sold
- Opt out of sales of your personal information (if any) or subject certain personal information to automated decision-making algorithms (not applicable to Iowa or Utah residents)
- Provide a copy of your personal information in a readily usable format that allows the information to be transmitted to others
- Residents in these states may not be discriminated against for exercising any of the rights described above.
Residents of these states may exercise these rights by emailing us at [email protected].
In general, we, including our service providers, collect the following California regulated categories of personal information (PI) from you:
Category | Examples | Collected |
A. Identifiers. | A real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, Social Security number, driver’s license number, passport number, or other similar identifiers. | YES |
B. PI categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)). | A name, signature, Social Security number, physical characteristics or description, address, telephone number, passport number, driver’s license or state identification card number, insurance policy number, education, employment, employment history, bank account number, credit card number, debit card number, or any other financial information, medical information, or health insurance information. Some PI included in this category may overlap with other categories. | YES |
C. Protected classification characteristics under California or federal law. | Age (40 years or older), race, color, ancestry, national origin, citizenship, religion or creed, marital status, medical condition, physical or mental disability, sex (including gender, gender identity, gender expression, pregnancy or childbirth and related medical conditions), sexual orientation, veteran or military status, genetic information (including familial genetic information). | YES |
D. Commercial information. | Records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies. | NO |
E. Biometric information. | Genetic, physiological, behavioral, and biological characteristics, or activity patterns used to extract a template or other identifier or identifying information, such as, fingerprints, faceprints, and voiceprints, iris or retina scans, keystroke, gait, or other physical patterns, and sleep, health, or exercise data. | NO |
F. Internet or other similar network activity. | Browsing history, search history, information on a consumer’s interaction with our Service or advertisement. | YES |
G. Geolocation data. | Physical location or movements. | YES |
H. Sensory data. | Audio, electronic, visual, thermal, olfactory, or similar information. | NO |
I. Professional or employment-related information. | Current or past job history or performance evaluations. | NO |
J. Non-public education information | Education records directly related to a student maintained by an educational institution or party acting on its behalf, such as grades, transcripts, class lists, student schedules, student identification codes, student financial information, or student disciplinary records. | NO |
K. Inferences drawn from other PI. | Profile reflecting a person’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes. | NO |
Have we shared your personal information for a business purpose?
Yes. In the preceding twelve (12) months, the Company has disclosed the following categories of personal information for a business purpose with Affiliates:
- Category A: Identifiers
- Category B: California customer records
- Category C: Protected classification characteristics
- Category F: Internet or other similar network activity
- Category G: Geolocation data
How can you exercise your privacy rights?
If you wish to exercise any of these rights, you may: (a) email our Data Protection Officer at [email protected]; (b) call us at 949-632-3860; or (c) send us a message on our website at IsazaLaw.com/contact.
To update or correct the information you provide to us via this website for an event sponsored by us, you may contact the event coordinator directly via email or telephone. To change information that we collect through other means, please email [email protected]. We allow you to opt out of future communications at any time by clicking the “unsubscribe” link at the bottom of all emails.
If you would like to make a complaint about how we have handled your personal information, or to make a complaint about a breach of data protection laws, please email us. We will investigate complaints and will communicate the outcome of the investigation to you after the complaint is made in accordance with applicable law. You may also have a right in some locations to file a complaint with your local data protection authority.
How do we notify you of changes to our Privacy Policy?
If we make minor changes to our Privacy Policy, we will post those changes on this page, and/or update the Privacy Policy modification date below. If we materially change this Privacy Policy, we will notify you via email and/or provide a notice on our website home page.
How may you contact us?
If you have any questions about this Privacy Policy, you may contact us using the information below.
Isaza Law, PC
6789 Quail Hill Parkway, Suite 1020
Irvine, California 92603
United States
[email protected]
949-632-3860