Malouche Law Firm PLLC(“the firm,” “we,” “us,” or “our”) is committed to protecting the privacy of visitors to malouchelaw.com(the “Site”). This Privacy Policy explains what information we collect, how we use it, with whom we share it, and the rights you have over your personal information.

Important note before contacting us

Submitting an inquiry through the Site or otherwise communicating with the firm does not create an attorney-client relationship. An attorney-client relationship is formed only after we have completed a conflict check and you have signed a written engagement agreement with the firm. Please do not send sensitive or confidential information through the contact form unless and until that relationship has been established. We will treat information you submit with appropriate care, but it is not protected by the attorney-client privilege until an engagement is in place.

Information we collect

We collect only the information necessary to respond to your inquiry and to operate the Site securely.

Information you provide directly

Contact form submissions. When you submit our contact form, we collect your name, email address, an optional phone number, and the contents of your message.
Scheduling.If you book a consultation through our scheduling provider, that provider collects the information you submit during booking (name, email, time slot, any notes you provide). This information is governed by the scheduling provider’s own privacy policy, linked from its booking page.
Email correspondence. If you email us directly, we receive your email address, name, and the contents of your message.

Information collected automatically

Server logs. Our hosting provider records standard server log information, including IP addresses and request timestamps. We use this information solely to operate and secure the Site (for example, to apply rate limits to the contact form to prevent abuse).
Analytics. We use a privacy-friendly, first-party analytics service that records aggregate page-view counts and basic device information. This service does not use cookies, does not collect personal identifiers, and does not track visitors across other websites.

We do not use third-party advertising cookies, behavioral tracking, or cross-site fingerprinting on the Site.

How we use your information

To respond to inquiries you send through the contact form or by email.
To schedule and conduct initial consultations.
To operate, secure, and improve the Site, including detecting and preventing abuse.
To comply with our legal, regulatory, and professional-responsibility obligations.

Legal bases for processing (EU/UK visitors)

If you are located in the European Economic Area, the United Kingdom, or Switzerland, we rely on the following legal bases under the General Data Protection Regulation (GDPR) and equivalent laws:

Consent. When you voluntarily submit information through the contact form, you are providing consent for us to use that information to respond to your inquiry.
Legitimate interests. We process limited technical information (such as IP addresses for rate limiting) based on our legitimate interest in operating the Site securely.
Legal obligations. We may process information when required by law, regulation, or the rules of professional conduct.

How we share information

We do not sell, rent, or trade your personal information. We share information only in the limited circumstances described below.

Service providers we use

We rely on a small number of vetted service providers to operate the Site. These providers process information on our behalf under contractual confidentiality and data-protection obligations.

Vercel Inc. — hosts the Site and provides privacy-friendly analytics. United States.
Resend Inc. — delivers contact-form messages from the Site to our inbox. United States.
Google LLC (Google Workspace) — provides the email inbox where contact-form messages and other correspondence are received and stored. United States.
Calendly LLC — provides the consultation scheduling tool embedded on our contact page. United States.

Legal disclosures

We may disclose information when required by subpoena, court order, or other legal process, when necessary to comply with applicable law or the rules of professional conduct, or to protect the rights, property, or safety of the firm, our clients, or others.

Business transfers

If the firm is involved in a merger, acquisition, sale of assets, or similar transaction, information may be transferred as part of that transaction, subject to standard confidentiality protections.

International data transfers

The firm is based in the United States, and the service providers listed above process information in the United States. If you are located outside the United States, your information will be transferred to and processed in the United States, which may have data-protection laws different from those in your country. Where required, we rely on Standard Contractual Clauses or other lawful transfer mechanisms.

How long we keep your information

We retain contact-form submissions and related correspondence for up to 24 monthsfrom the date of your inquiry, after which they are deleted unless they have become part of an active client matter or we are required to retain them for a longer period under law or the rules of professional conduct. Information associated with active client matters is retained according to the firm’s separate file-retention policy.

Security

We use industry-standard safeguards to protect information transmitted to and stored on the Site, including encryption in transit (HTTPS/TLS), access controls on our email and hosting accounts, and rate limiting on the contact form. No method of transmission over the internet is 100% secure, however, and we cannot guarantee absolute security.

Cookies and tracking

The Site does not set tracking cookies and does not use third-party advertising or behavioral-tracking technologies. Our analytics provider does not use cookies.

Your rights

Subject to applicable law, you have rights regarding your personal information. To exercise any of these rights, contact us at info@malouchelaw.com. We may need to verify your identity before responding. We will not discriminate against you for exercising any of these rights.

All visitors

Request a copy of the personal information we hold about you.
Ask us to correct inaccurate information.
Ask us to delete your information, subject to legal and professional-responsibility exceptions.

California residents (CCPA / CPRA)

If you are a California resident, you have the following additional rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act:

The right to know what personal information we collect, use, disclose, and how.
The right to correct inaccurate personal information.
The right to delete personal information we have collected from you.
The right to opt out of the sale or sharing of personal information. We do not sell or share personal information as those terms are defined under the CCPA.
The right to limit the use and disclosure of sensitive personal information.
The right to non-discrimination for exercising any of these rights.

EU, UK, and Swiss residents (GDPR)

If you are located in the EEA, the UK, or Switzerland, you also have the following rights:

The right of access to your personal data.
The right to rectification of inaccurate data.
The right to erasure (“right to be forgotten”), subject to legal exceptions.
The right to restriction of processing.
The right to data portability.
The right to object to processing based on legitimate interests.
The right to withdraw consent at any time, where processing is based on consent.
The right to lodge a complaint with your local data-protection authority if you believe we have processed your personal data unlawfully.

Children’s privacy

The Site is not directed to children under the age of 16, and we do not knowingly collect personal information from children under 16. If you believe a child has provided us with personal information, please contact us and we will delete it.

Third-party links

The Site may contain links to third-party websites. We are not responsible for the privacy practices or content of those sites. We encourage you to review the privacy policies of any third-party site you visit.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Effective” date at the top of this page. Material changes will be communicated by a prominent notice on the Site. Your continued use of the Site after the effective date of any update constitutes your acknowledgment of the updated policy.

Contact us

If you have questions about this Privacy Policy or want to exercise any of the rights described above, contact us at:

Malouche Law Firm PLLC
26 Broadway
New York, NY 10004
Email: info@malouchelaw.com
Phone: (551) 587-1086