Privacy Policy – Data Points Law

Last Updated: December 2024

Data Points Law PLLC is a law firm with offices in Massachusetts, U.S.A. The information on this site is not intended to convey or constitute legal advice. Please see our Terms of Use for further details.

This Policy describes how we process personal information about you collected through this site and the operation of our services, including how that information may be used, with whom it may be shared, and your choices and rights about such uses and disclosures.

We are a data controller of the personal information we utilize for our own purposes in operating and administering our law firm. To the extent our clients share personal information with us that we process on their behalf in connection with our legal services, we are a data processor and handle that data pursuant to our contract with the client and our legal and ethical obligations.

We may obtain personal information about you in several ways, including directly from you, through automated means, and from third parties.

Information We Collect

Information You Provide

We collect personal information that you provide directly to us, including when you send us email, fill out a form on our site, respond to a survey, interact with us on social media, or otherwise communicate with us in connection with our services. Such personal information may include:

Business contact information, such as your first and last name, email address, postal address, phone number, social media handles, and similar identifiers.
Employment information, such as company name and job title. We may also collect educational or other professional information, including as provided for purposes of consulting, employment, or referral arrangements.
Information concerning your interest in receiving marketing and other information from us and your communication preferences.
Other personal information about yourself or others that you choose to provide, including the contents of email and your email address.
Characteristics of protected classifications under state or federal law, or information that may be considered “sensitive personal information” or “special category data” under certain privacy laws, such as data that reveals racial or ethnic origin, a mental or physical health condition or diagnosis, sex life, gender identity, or sexual orientation.
Financial information, such as credit card details, bank routing numbers, checking account numbers, tax identification numbers, and other invoicing and payment information.

Information Collected Automatically

Our website may automatically collect your IP address and/or other unique identifiers and information from the computer or other device you use to access our website, including your browser type, device type, operating system, software version, and hardware model.

Information Collected from Third Parties

We may collect personal information about you from public sources and other third parties which we may combine with other information. For example, we may use information from LinkedIn to update information about you in our contact database.

How We Use Your Information

We use the personal information that we collect from and about you for our business purposes and legitimate interests, for performance of a contract, and to comply with our legal obligations.

If we need to process characteristics of protected classifications, or information that may be considered “sensitive personal information” or “special category data” under certain privacy laws, we will do so only with your explicit consent, where the processing is necessary for the exercise, establishment or defense of legal claims, or where the data has been manifestly made public. Where explicit consent is the legal basis for our processing of your personal information, you may withdraw such consent at any time.

We use your personal information for the following purposes:

Facilitate client intake and administration, including invoicing and billing.
Communicate with you, including for purposes of providing legal advice, and responding to your requests and messages.
Conduct marketing activities, including sending promotional emails.
Legal and compliance purposes, such as to detect, investigate, and respond to suspected fraud, security incidents, exercise a legal claim, cooperate with law enforcement investigations, or comply with applicable laws, regulations, legal processes, or governmental requests.
Other internal uses that are reasonably aligned with your expectations based on our interactions with you and that are compatible with the context in which the information was provided to us.

How We Share Personal Information

We may disclose your personal information as follows:

To our service providers, including cloud providers and software and services to maintain the security of our servers, network systems, and databases, legal software providers, credit card and payment processing services, marketing services providers, and individual experts, consultants, and other professionals that we utilize in connection with our legal services.
To our professional advisors, including accountants, IT and marketing consultants, and legal advisors, including to collect unpaid invoices or enforce agreements.
To other third parties in connection with our legal services, including as directed by you such as in connection with representing you in legal proceedings or negotiations.
To law enforcement, other government agencies or authorities, or third parties as required by applicable law, court order, subpoena, or legal process served on us.
To business transferees, such as in connection with, or during negotiations of, any merger, financing, divestiture, restructuring, reorganization, dissolution, or other sale of our assets or acquisition of all or a portion of our business to another company.
We may also share personal information to investigate a possible crime, such as fraud or identity theft, when we believe it is necessary to do so to protect the rights, property, or safety of our firm or other persons, or as otherwise required or permitted by law or our ethical obligations.

Our service providers and professional advisors are subject to binding contractual obligations and restrictions that limit the use of the data we share with them to carrying out the services that they are performing for us, and they are not authorized to retain, share, store, or use your personal information for any purpose other than completion of the specific services for which they were hired.

Tracking Technologies and Targeted Advertising

We have limited the technologies used with our site to those that ensure the site functions correctly. We don’t utilize an analytics service with this site or emails that we may send to you, and we don’t engage in targeted advertising, cross-context behavioral advertising, or equivalents under applicable law.

Sale / Sharing of Personal Information

We do not “sell” or “share” personal information as those terms are defined in the California Consumer Privacy Act (the “CCPA”) and similar state privacy laws, including for purposes of targeted advertising or cross-context behavioral advertising and have not done so within the last 12 months. We do not “sell” or “share” your personal information with third parties for marketing or promotional purposes.

De-identified and Aggregate Information

We may de-identify or aggregate any of the information we collect such that it is not personal information and use or disclose it for any purpose permitted by law and applicable ethics rules.

Links to Other Websites or Applications

There may be links to third-party websites or applications within our site which we do not control and for which we are not responsible. The data collection and use practices of any third party is governed by that party’s applicable privacy statement. We encourage you to review the privacy policies of any third-party service before providing any information to or through them.

Children or Teens

This site and our services are not intended for children or teens under the age of 18, and we do not knowingly collect data from children or teens under the age of 18.

International Transfers

If you access our site or use our services from outside the United States, please be aware that your personal information may be transferred to, stored, and processed in the United States or other jurisdictions. By using our site and services, you acknowledge that we, our service providers, and other third parties to whom we may disclose your personal information as described in this Policy, may transfer your personal information to, or store or access it in, the United States or other jurisdictions that may not provide levels of data protection that are equivalent to those of your home jurisdiction. You consent to the use and storage of your personal information in the United States or such other jurisdictions, and further acknowledge that your personal information may be subject to access requests from governments, courts, or law enforcement in the United States or other jurisdictions.

How Long We Keep Personal Information

We retain personal information for as long as necessary to fulfill the purposes for which we have collected it. To determine the appropriate retention period for specific personal information, we consider the amount, nature, and sensitivity of the personal information, the potential risk of harm from unauthorized use or disclosure, the purposes for which we use the personal information, and applicable legal, tax, or accounting requirements. Subject to applicable law, we may dispose of any personal information at any time. We may anonymize personal information, delete it or take other appropriate steps. Personal information may persist in backups and archives for additional time.

Security

We use commercially reasonable administrative, technical, and physical safeguards designed to protect personal information from unauthorized access or use. However, no transmission of information over the internet is absolutely secure and we cannot guarantee the security of your information. You use the site and provide us with personal information at your own initiative and risk.

Opting Out of Marketing Communications

You may opt out of receiving promotional communications from us or request changes to your communication preferences by following the instructions in those communications or by emailing us at info@datapointslaw.com. If you opt out, we may still send you non-promotional communications, such as those about your account or our ongoing business relations.

Your Privacy Choices

Residents in U.S. states with comprehensive privacy laws (such as California), as well as individuals in the European Economic Area, the United Kingdom, Switzerland and other jurisdictions outside the U.S. have certain privacy rights. If you do not live in a jurisdiction with such rights, we will still consider any request you make to exercise such rights to the extent we hold your personal information in our capacity as a controller. These rights vary by jurisdiction but may include the right to:

Request deletion or erasure of your personal information, correction or updating of incomplete or inaccurate information, or access to and/or a copy of certain personal information.
Object to our processing of your personal information, including for direct marketing purposes, or request that we restrict the way we process and disclose your personal information.
Request that we transfer your personal information in a portable format to a third party.
Where we have collected and processed your personal information with your consent, you may withdraw your consent; provided any such withdrawal of consent will not impact processing we conducted prior to such withdrawal, nor will it affect processing of your personal information conducted in reliance on lawful processing grounds other than consent.

Depending on the applicable jurisdiction, you may also have the following rights under applicable state privacy or other data protection laws. Please note we do not typically engage in these activities.

To opt-out of the “sale” or “share” of your personal information for purposes of cross-context behavioral advertising or targeted advertising.
To opt-out of profiling or automated decisions made about you in furtherance of decisions that produce legal or similarly significant effects.

We may refuse a request, including for example where the use of personal information is required for compliance with law or in connection with claims. We may be entitled to continue processing your information where there are compelling legitimate grounds to do so. The rights described herein are not absolute and we reserve all of our rights available to us at law in this regard.

How to Submit a Request

Please contact us at info@datapointslaw.com if you wish to exercise any privacy rights.

Before processing your request, we may need to verify your identity, in which case we may ask you to provide information sufficient to confirm your identity, such as your name, email address, and information about your interactions with us.

If you would like to use an authorized agent to exercise your rights, we may request evidence that you have provided such agent with power of attorney or that the agent otherwise has valid signed authority to submit requests on your behalf. We may also ask that you verify your identity directly with us.

We will process your request within the time frames provided by applicable law, provided that if we’re unable to verify your identity we may be unable to respond to your request.

No Discrimination

We will not discriminate against you because you exercised your rights under this Policy.

Complaints

If you have a concern about our processing of your personal information that we are not able to resolve, you have the right to lodge a complaint with your local regulator or data protection authority.

Changes

We reserve the right to change this Policy at any time. Please check this page periodically for updates. If we make changes, we will notify you by revising the date at the top of this Policy, and in some cases, we may provide you with additional notice (such as by adding a statement to our website homepage).

Contact

If you have any questions about our processing of your personal information or would like to exercise your privacy rights, please email us at info@datapointslaw.com. You can also reach us via U.S. mail at Data Points Law PLLC, 130 Main St #5004 Spencer, MA 01562.