Privacy Notice for California Residents Under the California Consumer Privacy Rights Act

Effective Date: January 14, 2025

Last Reviewed On: January 14, 2025

This page contains a description of your rights and specific disclosures required by various privacy rules and the CCPA (CCPA applies to California residents only). For additional information regarding our data handling practices, see our Legal Notice.

Collection of Personal Information

Information LegaFi Collects

“Personal information” as defined by CCPA, means information that identifies, relates to, describes, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household.

Categories of Personal Information that may be collected by LegaFi include:

• Audio, electronic, visual, thermal, olfactory, or similar information, such as voice recordings, video recordings, physical characteristics or description, and photos.
• Professional information, such as occupation, employment history, professional contact information, education history, or other information provided by you in connection with the Services.
• Sensitive personal information, as defined under applicable local law, such as certain characteristics of protected classifications as defined above, account login credentials and passwords, and financial account information, credit card number, debit card number, or other payment card information.

Information that is publicly accessible is not considered “Personal Information” under this policy. Information that has been de-identified, or aggregated with other consumer information is similarly excluded from Personal Information.

Sources of Personal Information Collected by LegaFi

LegaFi may collect Personal Information in the categories listed above through the following sources:

• Social Media—information such as your name, email address, social media handles, the contents of a message or attachments that you may send to us, other information that you choose to provide, and information that you provide about other people.
• Gravity Forms—information entered into the Gravity Form by the user will be saved and collected.
• WordPress Comments—information entered by the user in the comments will be saved and collected.
• WordPress Posts—information posted by the author will be saved and collected.
• WordPress User Data—information stored as user metadata in our database.

Use of Personal Information

LegaFi may use, or disclose, the Personal Information it collects for one or more of the following purposes:

• Performing Services—including performing legal services to serve LegaFi client(s), providing information received to a law firm for a legal consultation, providing advertising or marketing services, providing analytic services, or providing similar services on behalf of a business or services provider. It may also be used to send you information that you requested or agreed to receive.
• Auditing—including tracking advertising conversion events, and auditing compliance with laws and other standards.
• Security—including detecting security incidents, protecting against malicious, deceptive, fraudulent, or illegal activity, prosecuting those responsible for that activity, conducting risk management, and to otherwise protect the safety and security of LegaFi users or members of the public.
• Undertaking internal research—this includes research for technological development.
• Improving and maintaining quality of service—including undertaking activities to verify or maintain the quality or safety of the LegaFi website, improving the website, upgrading our infrastructure, and developing new services.
• Commercial purposes—including marketing and promoting of third-party websites relating to ongoing litigation
• Legal purposes—such as protecting or defending the legal rights or property of LegaFi, LegaFi clients, third parties, employees, agents, and contractors (including enforcement of our agreements), and complying with the law, legal process, and legal and government requests.
• We may also deidentify or anonymize your data in such a way that you may not reasonably be re-identified by us or another party, and we may use this deidentified data for any purpose permitted under applicable law. To the extent we deidentify any data originally based on personal information, we will maintain and use such data in deidentified form and will not attempt to reidentify the data.

LegaFi will not, without first providing you notice, collect additional categories of Personal Information or use the collected Personal Information for any purpose not specifically listed.

Sharing of Personal Information

LegaFi may disclose your Personal Information to a third party for a business purpose. LegaFi does not sell your Personal Information to any third parties; however, if you have provided consent, LegaFi may disclose your Personal information to law firms that have paid for advertisement on LegaFi’ website, firms that you have requested review your information as part of a case evaluation, and firms that you have requested participate in your legal representation.

The categories of information that LegaFi may share for a business purpose include:

• Identifying Information
• Personal Information categories listed in the California Customer Records statute (Cal. Civ. Code 1798.89(e))
• Characteristics of protected classifications under California or Federal law
• Commercial information
• Biometric information
• Internet or other electronic information
• Geolocation Data
• Sensory Data
• Professional or employment-related information
• Education Information
• Inferences drawn from any of the provided information

LegaFi may disclose your personal information for a business purpose to the following categories of third parties:

• Law Firms, when the disclosure is specifically requested by you in order to have your case evaluated by a lawyer
• Customer verification providers
• Platform technology providers
• Marketing providers and bulk email processors who send out communications on our behalf
• Governmental or quasi-governmental agencies or organizations that make valid legal requests for information or to whom LegaFi share information to protect or defend the legal rights or property of LegaFi, or the legal rights of third parties, employees, agents, and contractors of LegaFi
• Related companies or any successors in interest in the event of a corporate reorganization, merger, or sale of all or substantially all of our assets
• Litigants or other parties to legal proceedings that make valid legal requests for information or to whom LegaFi shares information to protect or defend the legal rights or property of LegaFi, or the legal rights of third parties, employees, agents, and contractors
• Other authorized third parties, if you have given permission for us to share data with them.

Our Use of Cookies and Related Technologies

• Cookies/Local Device Storage. The Service will at times place and/or store code or other types of information and/or software on your device or within your browser, such as cookies, locally shared objects, and HTML5 (collectively, “Local Device Storage”). We and our third-party business partners may independently or in conjunction use Local Device Storage in connection with the Service in a way that collects personal information for the purposes described in the respective privacy policies, including without limitation to determine whether you have seen a particular advertisement before on the same or different device and to otherwise control and tailor the display of ads to you based on your perceived preferences by collecting data to track the movements of individual users through the Service and elsewhere on the internet over time and across unaffiliated websites, apps, and devices, as well as to help diagnose problems with servers, to gather broad demographic information, to conduct research, to deliver editorial content, to record registration and personalization information, to inform offers that we may make to you, and to otherwise administer the Service. For example, if you register on any part of the Service and are given the option to save your username and password, we may provide this convenience to you via Local Device Storage.
• You May Disable Local Device Storage. If you do not want Local Device Storage, your device, browser, or the settings menu within an application may include an option that allows you to not accept it. However, if you disable Local Device Storage, some portions of the Service may not function properly.
• Tracking Technologies. In addition to Local Device Storage, we and/or our third-party business partners may use web beacons, web bugs, internet or pixel tags, clear gifs, digital fingerprinting (aka “Machine Identification”) and similar technologies (collectively, together with Local Device Storage, the “Tracking Technologies”) on the Service, including in our communications with you, such as within e-mail and text messages, in-application push notifications, videos, and throughout your use of the Services. We and our third-party business partners use Tracking Technologies to determine which messages have been opened by recipients, and for all or some of the same lawful purposes described above for use of Local Device Storage. For additional information see the Online Behavioral Advertising (OBA) section below.
• Do Not Track (DNT). Your browser setting may allow you to automatically transmit a “Do Not Track” (DNT) signal to websites and online services that you visit. There is no consensus as to what DNT means in this context, and since some browsers apply DNT signals by default it does not necessarily reflect our visitors choice as to whether they wish to receive advertisements tailored to their interests. As a result, like many websites, we do not alter our practices when the Service receives a DNT signal from a visitor’s browser. As discussed below, you may opt out of the use of your personal information for online behavioral advertising by third parties at any time. To find out more about DNT, please visit https://allaboutdnt.com/.
• Global Privacy Control (GPC) and similar privacy preference signals. Where required by applicable local law, and as further described in the section below regarding “Your Rights” and “Submitting Requests,” we honor user-initiated browser based opt-out preference signals recognized under applicable local law, such as the Global Privacy Control (GPC). To find out more about GPC, please visit https://globalprivacycontrol.org/.

Online Behavioral Advertising (OBA) and How to Opt-Out of OBA

• How OBA Works. We and our third-party business partners use Tracking Technologies on the Service for purposes of “online behavioral advertising” (OBA). OBA allows the serving of advertisements tailored to perceived interests inferred by your browsing on the Service and on other sites, applications, destinations, and services, over time and across unaffiliated websites, apps, and services, using the same or a different device. To enable OBA, we and our third-party business partners independently use Tracking Technologies to collect certain information, some of which may be deemed personal information, including, for example, the make, model, settings, specifications (e.g., CPU speed, connection speed, browser type, operating system, device identifier, online identifier) and geographic location of your device, as well as date/time stamp, IP address, pages visited, time of visits, content viewed, ads viewed, the site(s), application(s), destination(s), and/or service(s) you arrived from, and other clickstream data. Your email address may also be used by us, in coordination with third-party audience authentication service providers to enable OBA.
• Opt-Out of OBA. If you do not want OBA, you may be able to opt out by visiting www.aboutads.info, www.networkadvertising.org, www.youronlinechoices.com and/or by clicking the “Ad Choices” icon that appears in advertising served through OBA. Please note that these opt-out options only apply to tracking by third-party business partners using cookie-based OBA across this Service and other sites, applications, destinations, and services, and not tracking among pages within the Service itself. As may be required under applicable law, to opt out of OBA enabled by use of your email address in coordination with audience authentication providers, visit https://optout.liveramp.com/opt_out, or see the section below regarding “Your Rights” and “Submitting Requests.”

Retention

Your personal information will be held for only so long as it is necessary in accordance with applicable law, regulations, and ethics rules. For each client, we will take into account the client’s reasonable need for the file materials. We will retain your personal information for the period necessary to fulfill the purposes outlined in this Policy. When assessing retention periods, we first examine whether it is necessary to retain the personal information collected and, if retention is required, work to retain the personal information for the shortest possible period permissible under the applicable law.

Your Rights

Right to Access Your Information

Right to Disclosure of Categories of Information—you have the right to request that we provide the following disclosures covering the 12-month period preceding our receipt of your request.

• The categories of Personal Information we have collected about you
• The specific pieces of Personal Information we have collected about you 
• The categories of sources from which Personal Information is collected
• Our purposes for using Personal Information
• The categories of third parties with whom we share Personal Information
• The categories of Personal Information we have sold and the categories of third parties to whom the Personal Information was sold
• The categories of Personal Information we disclose to third parties for a business purpose

Right to Access Specific Pieces of Information—You also have the right to request access to the specific pieces of personal information we have collected about you in the preceding 12 months, which we will deliver to you electronically, in a portable format where feasible.

Right to Deletion

You have the right to request deletion of the personal information about you that we have collected from you. Please note that we are unable to delete information needed to:

• Complete the transaction for which the Personal Information was collected;
• Detect, prevent or prosecute security incidents, fraud, or other misuse, or prosecute those responsible for such activity;
• Comply with legal or reporting obligations, including to pursue or defend legal claims, exercise or enable others to exercise any rights provided by law, enforce or comply with contractual obligations, respond to valid requests for information, and comply with or enforce the applicable laws and regulations;
• Enable other internal uses consistent with your expectations based on your relationship with us or the context in which you provided the information; or
• Exercise or enforce any other exceptions provided by CCPA and/or other applicable law

Right to Opt-Out

You have the right to direct us to not sell your personal information at any time (the “right to opt-out”).

You can also take measures to privatize your browsing data and prevent your data from being used by Google Analytics by opting out here. Some of the data that LegaFi collects from Google Analytics may include, but is not limited to:

1. Geolocation
2. Gender
3. Pages visited

Nondiscrimination

If you exercise any of your rights under CCPA, you have the additional right not to be discriminated against, including by our (a) denying you goods or services, (b) charging you different prices or rates, including through the use of discounts or imposing penalties, (c) providing you a different level or quality of goods or services, or (d) suggesting that you will receive a different price or rate for goods or services or a different level or quality of goods or services if the differential treatment is reasonably related to value provided to us by your data.

Additional Privacy Choices and Rights; Submitting Requests Under Applicable Local Laws

Depending on the jurisdiction in which you live, including if you are a consumer in California, Colorado, Connecticut, Utah, or Virginia, or a data subject in the EEA, UK, or Switzerland, you may have the following additional rights under applicable local law:

• request information about our processing of your personal information (right to know);
• rectify, correct, or update the personal information we hold about you (collectively right to correct);
• opt-out of “sharing” of personal information for cross- contextual behavioral advertising purposes (as these terms are defined under applicable law);
• opt-out of targeted advertising;
• restrict or limit our use of your personal information or your sensitive personal information (right to restrict);
• object to our use of your personal information;
• where you have provided consent, withdraw such consent to our processing of your personal information at any time;
• ask that we transfer the personal information we maintain about you to another organization, or to you, in certain circumstances (right to portability);
• lodge a complaint with your local data protection authority.

Limits to Your Rights

Your rights may be limited or denied in some circumstances. For example, we may retain your personal information where required or permitted by applicable law.

We may “sell” or “share” for cross-contextual behavioral advertising your personal information (as these terms are defined under applicable local law). We do not have actual knowledge of selling or sharing the personal information of consumers that are at least 13 and less than 16 years of age. To the extent we have actual knowledge that a consumer is at least 13 and less than 16 years of age, we will request affirmative authorization from the individual before selling or sharing the personal information, to the extent required under applicable local law.

We use and disclose certain of your sensitive personal information for OBA and cross-contextual behavioral advertising. To learn more about your rights to limit our use and disclosure of sensitive personal information under applicable local law, please see the section below on Submitting Requests.

Submitting Requests

To exercise your rights under applicable local law or if you are an authorized agent or parent or guardian seeking to exercise rights on behalf of a minor in accordance with applicable local law, please follow the instructions provided below. Requests for information on the disclosure of your Personal Information, requests for deletion of your Personal Information, and requests to opt out of the sale of your personal information must each be submitted separately. You can submit up to two requests for information on the disclosure of your Personal Information and up to four requests to delete your Personal Information within a 12-month period. To submit a request, fill the relevant form below.

To protect your information from inadvertent deletion or disclosure, and to ensure the integrity of our systems and the proper fulfillment of your request, we cannot simultaneously process requests for access and deletion. Please wait until your pending request for access or deletion has been completed before submitting a subsequent request.

Verification of your identity is required to process a request. In order to process your request, you must provide sufficient information to verify your identity. You may authorize someone to act as your agent and submit a CCPA request on your behalf. You must supply your agent with written permission to act on your behalf, and your agent must provide proof of such authorization before we will act upon the request. If you are submitting a request to access or delete through an authorized agent, you must verify your identity, unless your agent is acting pursuant to a power of attorney under the California Probate Code.

You may have a right to appeal a decision we make relating to requests to exercise your rights under applicable local law. To appeal a decision, please contact info@legafi.com.

Opt-Out of Marketing Communications

If you do not wish to receive future marketing or other commercial messages from us, simply follow the unsubscribe instructions contained within the message you receive. Note, however, that you may continue to receive certain communications from us that are necessary.

Additional Information

Security of My Information

We implement physical, technical, and organizational security measures designed to safeguard personal information. These measures are aimed to protect the personal information we collect from loss, misuse, and unauthorized access, disclosure alteration, and destruction. Please be aware that despite our efforts to maintain the security of your information, no data security measures can guarantee security.

Third-Party Links

Our Services may contain links to third-party websites and applications. Any access to and use of such linked websites and applications is not governed by this Policy but is instead governed by the privacy policies of those third-party websites and applications. We are not responsible for the information practices of such third-party websites and applications. We encourage you to review the privacy policies of any third-party websites or applications that you visit.

International Transfers

Your personal information may be processed, transferred to, and maintained on servers and databases located outside of the jurisdiction in which you are based and where the privacy laws may not be as protective as your jurisdiction. Where required by applicable law, we have put in place appropriate safeguards (such as contractual commitments) in accordance with applicable legal requirements to ensure that your data is adequately protected. For more information on the appropriate safeguards in place, please contact us at the details below in the “Contact Us” section of this Policy.

Children

Our Services are not designed for children under the age of 13. If we discover that a child under the age of 13 has provided us with personal information, we will delete such information from our systems.

Changes to this Policy

This Policy is current as of January 14, 2025. We may change this Policy from time to time, so please be sure to check back periodically. We will post any changes to this Policy on our Services. If we make any changes to this Policy that materially affect our practices with regard to the information we have previously collected about you, we will endeavor to provide you with notice in advance of such change by highlighting the change on the Service.

Contact Us

If you have any questions about any of the information on this page, contact us at info@legafi.com. LegaFi is a controller of your personal information. If you have any questions about the privacy aspects of our Services or would like to make a complaint, request, or have a question about your rights under this policy please contact us at info@legafi.com.