Privacy Policy
Legacy Arts Law PC
Last Updated and Effective: October 15, 2026
1. Introduction and Scope
Legacy Arts Law PC (“Legacy Arts,” “we,” “us,” or “our”) respects your privacy. This Privacy Policy explains what information we collect through legacyartslaw.com and its related pages, email-capture forms, newsletter, blog and other informative posts, videos, calendar-booking tools, and other features (collectively, the “Site”), how we use and disclose that information, and the choices available to you.
This Privacy Policy applies to personal information collected through the Site, including when you subscribe to our newsletter, request or download information, view or interact with our informative posts or videos, submit an inquiry, or book a consultation or other calendar appointment. It does not apply to information you provide directly to an unaffiliated third-party website or service under that party’s own privacy policy; however, it describes our use of personal information disclosed to service providers that process it on our behalf and to third parties that may process it for their own purposes. Those parties maintain their own privacy policies, which we encourage you to review.
By using the Site, you acknowledge the practices described in this Privacy Policy; where applicable law requires consent for a particular practice, we will obtain that consent separately. If you do not agree with this Privacy Policy, please do not use the Site.
2. Information We Collect
(a) Information you provide directly. We collect information you submit through an email-capture or newsletter form, consultation or calendar-booking form, email, telephone call, post or video interaction, or other communication, including your name, email address, telephone number, organization, appointment details, areas of interest, communications, and any other information you choose to provide. Please do not submit confidential or sensitive legal information through the Site or an ordinary email; submitting information does not create an attorney-client relationship.
(b) Information collected automatically. When you visit the Site, our servers and service providers may automatically record technical information, including your IP address, approximate location derived from that address, browser type and version, operating system and device type, screen resolution, referring and exit URLs, pages and articles viewed, search terms entered on the Site, links clicked, time spent on pages, and the dates and times of your visits. This information is collected through cookies, log files, pixels, and similar technologies described in Section 3.
(c) Information from third parties. We may receive information about you and your interactions with our advertising from advertising platforms, analytics and attribution providers, referring websites, social media platforms, and our customer relationship management, email, and call-booking providers, including the advertisement, campaign, keyword, or referring source associated with your visit or lead submission and information about email delivery, opens, clicks, and appointments.
(d) Sensitive information. Through the Site and lead intake process, we do not intentionally collect Social Security numbers, government identification numbers, precise geolocation, biometric data, account log-in credentials, financial account or payment-card credentials, contents of private communications, racial or ethnic origin, religious or philosophical beliefs, union membership, genetic data, health information, sex life or sexual orientation information, or other sensitive personal information as defined by applicable law. Please do not send us sensitive personal information about yourself or another person through the Site or by email. See Section 10 regarding our restrictions on collecting, using, and disclosing information for unrelated purposes.
3. Cookies and Similar Tracking Technologies
A cookie is a small text file placed on your device by a website. We and our service providers use cookies, web beacons, pixels, tags, local storage, server-side conversion tools, and similar technologies for: (a) operating and securing the Site and lead forms; (b) remembering preferences and consent choices; (c) analyzing Site traffic and visitor interactions; and (d) measuring, attributing, and optimizing advertising campaigns, including determining which advertisement, campaign, keyword, or referring source generated a visit or lead.
Most browsers let you refuse or delete cookies through their settings, and you can generally set your browser to notify you when a cookie is placed. Blocking strictly necessary cookies may prevent parts of the Site from working. Where required by applicable law, we will request your consent before placing non-essential cookies and will honor your consent choices.
4. How We Use Information
We use the information described above to operate, maintain, secure, and improve the Site; deliver newsletters and other requested communications; provide, host, and measure informative posts and videos; receive and manage inquiries; schedule and conduct consultations or other appointments; communicate about our legal services and related resources; analyze Site use and communications engagement; administer prospective-client and client relationships and internal operations; process payments and maintain invoices, receipts, accounting, and tax records; prevent fraud and security incidents; create aggregated or de-identified statistics; comply with legal and professional obligations; and enforce our legal rights.
We do not use your personal information for purposes materially unrelated to those described in this Privacy Policy, and we do not sell personal information for money; however, our use of advertising and tracking technologies may constitute “sharing” or “sale” under certain state privacy laws, as explained in Sections 8, 12, 12A, and 13.
5. Marketing Communications and Call Booking
If you subscribe through an email-capture form, request information, view or interact with our posts or videos, submit an inquiry, or book an appointment, we may store your contact details, subscription preferences, submission or appointment details, source and date of the inquiry, communications, and marketing preferences in our email, customer relationship management, and scheduling systems. Our newsletters and other emails may contain tracking pixels and tagged links that record delivery, opens, or clicks. We use this information to send requested communications, manage inquiries, administer appointments, measure engagement, and improve our Site and legal services. Newsletter and other marketing consent is not a condition of obtaining legal services.
You may opt out of marketing emails at any time using the unsubscribe link in the message or by contacting us under Section 20, and you may opt out of marketing text messages, if any, by replying STOP. After you unsubscribe we may retain a record of your email address on a suppression list so that we do not email you again.
6. Service Providers and AI-Assisted Processing
We use service providers to operate our business, including website hosting and form providers; email and newsletter delivery providers; calendar-booking and customer relationship management providers; video, analytics, and security providers; AI tools, if used, for the limited administrative processing described below; and financial service providers, payment providers, and accounting software for banking, payments, accounting, invoices, and receipts. Service providers acting on our behalf may process the categories of information described in this Privacy Policy only as reasonably necessary to provide their services to us, while advertising platforms acting as independent third parties may determine certain processing under their own privacy terms. We do not control and are not responsible for those practices. We may use Claude and ChatGPT to sort and analyze lead data, including identifying the advertisement or source associated with a lead, and to extract and transfer information from invoices and receipts into accounting software; these tools assist personnel with administrative analysis and data entry and are not used to make decisions that produce legal or similarly significant effects concerning consumers. We do not intentionally submit sensitive personal information to these tools, and we use contractual or available business privacy controls designed to restrict provider use of submitted data for model training or unrelated purposes where commercially available.
7. Accounting and Payment Information
When we receive or make business payments, banking services may be provided through certain financial service providers. If you make a payment by credit card, your full payment card number and security code are transmitted directly to and handled by the applicable payment processor; Legacy Arts does not receive or store full payment card numbers. We retain transaction records, invoices, receipts, payment amounts and dates, billing and business contact information, and limited payment identifiers as needed for payment administration, accounting, tax, legal compliance, and fraud prevention.
Financial institutions and payment providers process payment and financial information under their own privacy notices and legal obligations, and we do not control their independent processing.
8. Advertising and Analytics Partners
We use third party software to receive information about visits, interactions, lead submissions, device and browser data, IP address, and keyword, or referring-source attribution, including through cookies, pixels, tags, and server-side conversion technologies. We use this information to measure Site and campaign performance, attribute and analyze leads, create or measure advertising audiences, and optimize our advertising; advertising platforms may also use information they receive in accordance with their own privacy policies and your settings with those platforms.
Depending on your state of residence, sharing information with advertising partners for cross-context behavioral advertising may be treated as a “sale” or “sharing” of personal information under applicable law even though no money is exchanged. You may opt out as described in Sections 12, 12A, and 13. You may also opt out of interest-based advertising from participating companies through the Digital Advertising Alliance at optout.aboutads.info and the Network Advertising Initiative at optout.networkadvertising.org, and you may manage your Google advertising settings through your Google Account.
9. How We Share Information
We disclose personal information only: (a) to the service providers described in Sections 6 through 8 for website hosting, lead management, communications, scheduling, attribution, analytics, AI-assisted processing, banking, payments, and accounting, and to advertising and analytics partners that may process personal information for their own purposes, including cross-context behavioral advertising; (b) at your direction or with your consent; (c) in connection with a merger, financing, acquisition, reorganization, bankruptcy, or sale of all or part of our business or assets, subject to applicable law; (d) to comply with law, legal process, or a lawful government request; and (e) where we reasonably believe disclosure is necessary to prevent fraud or harm, protect rights, property, or safety, or enforce our agreements.
We may use and disclose aggregated or de-identified information that cannot reasonably be used to identify or be linked to an individual, and we will not attempt to reidentify such information except as permitted by law to test our de-identification processes. We do not sell personal information for money, and we do not knowingly sell or share for cross-context behavioral advertising the personal information of anyone under 16.
10. No Collection for Unrelated Purposes
We do not collect, use, or disclose personal information for purposes materially unrelated to lead management, marketing, analytics, providing and administering our services, payment and accounting administration, security, legal compliance, and the other purposes described in this Privacy Policy without providing any notice or obtaining any consent required by applicable law.
Please do not submit sensitive personal information or confidential information about another person through a lead form, calendar, email, or other communication unless we specifically request it through an appropriate secure process.
11. Your Choices
You may: opt out of marketing emails or text messages as described in Section 5; decline to provide information, understanding that we may then be unable to respond to your inquiry or provide requested services; refuse or delete cookies through your browser settings; block email open-tracking by disabling remote images; opt out of interest-based advertising as described in Sections 8 and 13; and contact us using Section 20 to request access to, correction of, or deletion of personal information we hold about you. We will honor such requests as required by applicable law and, where the law does not require it, will make reasonable efforts to accommodate them.
12. State Privacy Rights
Residents of states with comprehensive consumer privacy laws may have some or all of the following rights, depending on the law that applies and subject to applicable exceptions and verification requirements:
(a) to know or access the categories and specific pieces of personal information we have collected about you, the sources of that information, our purposes for collecting it, and the categories of third parties to whom we disclose it; (b) to correct inaccurate personal information; (c) to request deletion of personal information we hold about you; (d) to obtain a portable copy of information you provided to us; (e) to opt out of the sale or sharing of personal information and of targeted or cross-context behavioral advertising; (f) where provided by applicable law, to limit specified uses and disclosures of sensitive personal information; and (g) not to receive discriminatory treatment for exercising these rights.
To exercise a right, contact us using Section 20 with the subject line “Privacy Request” and tell us which right you wish to exercise and the state in which you reside. We will take reasonable steps to verify your identity, generally by asking you to respond from the email address associated with your information. An authorized agent may submit a request on your behalf through the applicable request method with written proof of authorization, and we may require you to verify your identity directly with us and confirm that you authorized the agent, unless the agent provides a valid power of attorney under applicable law; for an opt-out request, we may deny the agent’s request only if the agent does not provide signed permission demonstrating authority to act for you. We will respond within the period required by applicable law, typically forty-five (45) days, and may extend that period where permitted. If we deny your request, we will explain why, and you may appeal by replying to our response with the subject line “Privacy Appeal.”
12A. California Privacy Rights
This section applies to California residents who are “consumers” under the California Consumer Privacy Act, as amended (the “CCPA”), to the extent the CCPA applies to City of Angels and the personal information at issue. For purposes of the CCPA, “personal information,” “sensitive personal information,” “sell,” “share,” “business purpose,” “service provider,” and “third party” have the meanings given to them in the CCPA.
In the preceding twelve (12) months, we may have collected the following categories of personal information: identifiers; personal information described in California Civil Code § 1798.80(e); commercial information; internet or other electronic network activity; approximate geolocation data; professional or employment-related information that you choose to provide; and inferences drawn from the foregoing. We collect these categories directly from you through lead forms, call booking, email, telephone calls, payments, and other communications; automatically from your device and browser through cookies, pixels, tags, logs, and server-side conversion tools; and from advertising platforms, analytics and attribution providers, referring websites, social media platforms, customer relationship management, email and scheduling providers, financial institutions, payment processors, and accounting providers.
We may use these categories for the business and commercial purposes described in Sections 4 through 10, including providing and administering services, responding to inquiries, advertising and campaign measurement, analytics, security, fraud prevention, accounting, legal compliance, and internal operations. During the preceding twelve (12) months, we disclosed for business purposes: identifiers and California Civil Code § 1798.80(e) information to hosting, customer relationship management, communications, scheduling, payment, accounting, and AI-assisted processing providers for Site operation, lead management, communications, appointments, transactions, recordkeeping, and administrative analysis; commercial information to customer relationship management, payment, accounting, analytics, attribution, and AI-assisted processing providers for lead administration, transactions, recordkeeping, campaign measurement, and administrative analysis; internet or other electronic network activity and approximate geolocation data to hosting, security, analytics, attribution, and advertising providers for Site operation, security, analytics, and campaign measurement; professional or employment-related information to customer relationship management, communications, scheduling, and AI-assisted processing providers for lead management and administrative analysis; and inferences to analytics, attribution, advertising, customer relationship management, and AI-assisted processing providers for attribution, audience measurement, lead analysis, and campaign optimization. We did not disclose sensitive personal information for a business purpose because we do not intentionally collect it. Separately, during that period we sold or shared identifiers, internet or other electronic network activity, approximate geolocation data, commercial information, and inferences with advertising and analytics partners for the specific purpose of cross-context behavioral advertising, including audience creation, campaign attribution, measurement, and optimization.
California consumers may request to know or access the categories and specific pieces of personal information collected about them; the categories of sources, business or commercial purposes, and third parties to whom personal information is disclosed, sold, or shared; correction of inaccurate personal information; deletion of personal information, subject to statutory exceptions; and a copy of personal information in a portable and, to the extent technically feasible, readily usable format. California consumers may also opt out of the sale or sharing of personal information and receive nondiscriminatory treatment for exercising their CCPA rights; if we use or disclose sensitive personal information for purposes that trigger the CCPA's limitation right, they may direct us to limit that use or disclosure.
We do not knowingly sell or share the personal information of consumers under 16. We do not use or disclose sensitive personal information for purposes that require offering a right to limit under the CCPA; if our practices change, we will provide the required notice and limitation mechanism before engaging in that processing.
To submit a California request to know, access, correct, or delete, contact us using Section 20 with the subject line “California Privacy Request.” To opt out of sale or sharing, use the the opt-out controls presented on the Site, or send a recognized opt-out preference signal as described in Section 13; we will not require you to create an account or provide information beyond what is reasonably necessary to process the opt-out. We will verify requests to know, access, correct, or delete using information reasonably necessary to confirm your identity and may decline a request where permitted by law; we will not require verification for an opt-out request unless we have a good-faith, reasonable, and documented basis to believe the request is fraudulent. We will not discriminate against you for exercising a CCPA right. If we cannot fulfill a request, we will explain the basis for the denial and provide instructions for any further review or appeal available under applicable law.
13. Do Not Track and Global Privacy Control
Some browsers transmit a “Do Not Track” signal. Because no common industry standard for interpreting that signal has been adopted, the Site does not currently respond to Do Not Track headers. Where required by applicable law, we process recognized universal opt-out mechanisms, including the Global Privacy Control (GPC), as a valid request to opt out of sale or sharing for the browser and device transmitting the signal and, if we can identify the consumer from the signal without requesting additional information, for the consumer; the signal overrides conflicting cookie or privacy settings for that browser and device, we do not require verification, and we display or otherwise provide confirmation that the opt-out has been processed.
14. Children’s Privacy
The Site is intended for adults and is not directed to children under 13. We do not knowingly collect personal information from children under 13 as defined by the Children’s Online Privacy Protection Act. If we learn that we have collected such information, we will delete it. If you believe a child under 13 has provided us personal information, please contact us using Section 20 and we will take prompt action.
15. Data Retention
We retain each category of personal information only as long as reasonably necessary and proportionate for the disclosed purpose, taking into account the duration of the lead or customer relationship, the sensitivity and volume of the information, operational needs, applicable limitation periods, and legal, tax, accounting, security, fraud-prevention, dispute-resolution, and enforcement requirements; we do not retain a category longer than reasonably necessary for its stated purpose. Lead and marketing contact data is retained while we manage your inquiry or business relationship and for a reasonable period afterward, and if you opt out of marketing, we retain a suppression record as long as reasonably necessary to honor your choice. Payment, invoice, receipt, and transaction records are retained for the periods required by applicable tax, accounting, and other legal requirements. Correspondence and submissions are retained as long as needed to respond and to maintain our records. Server logs, cookie identifiers, advertising and attribution data, and analytics data are retained for the periods configured in the applicable provider settings or until they are aggregated or de-identified, based on the shortest period reasonably necessary for security, troubleshooting, attribution, audience measurement, and campaign analysis; the applicable periods will be stated in the notice at collection where California law requires a retention period or criteria by category. We may retain information longer where necessary to comply with law, resolve disputes, or enforce our agreements.
16. Security
We use reasonable administrative, technical, and physical safeguards designed to protect information in our custody, including encryption of the Site in transit, access controls, and reliance on established service providers. However, no method of transmission or storage over the internet is completely secure, and we cannot guarantee the absolute security of any information. You transmit information to us at your own risk and are responsible for maintaining the confidentiality of any password you use in connection with the Site. If we become aware of a security incident affecting your personal information, we will notify you and the appropriate authorities as required by applicable law.
17. Third-Party Links
The Site may link to social media platforms, video hosts, calendar services, payment providers, newsletter platforms, or other third-party websites and services. This Privacy Policy does not apply to any third-party website, and Legacy Arts does not control and is not responsible for the privacy practices, content, or security of those sites, except to the extent applicable law imposes responsibility on us for our selection, configuration, or disclosure of personal information to a third party. Review the privacy policy of any site you visit through a link on the Site.
18. Users Outside the United States
The Site is operated from the United States, the business is conducted primarily in California and throughout the United States, and the Site is intended for users located in the United States. If you access the Site from outside the United States, your information may be transferred to, stored in, and processed in the United States, where data-protection laws may differ from those of your jurisdiction; where applicable law requires a specific transfer mechanism or consent, we will implement that mechanism or obtain that consent. We do not offer the Site to, or knowingly target, individuals in jurisdictions where doing so would subject us to registration or representation requirements we have not satisfied.
19. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. When we do, we will post the revised version on the Site and update the “Effective” date above. If we make material changes to how we use or disclose personal information, we will provide additional notice, such as a prominent notice on the Site or an email to affected contacts, where required by law. Any revised Privacy Policy will apply from its stated effective date, subject to any additional notice or consent required by applicable law.
20. Contact Us
For questions about this Privacy Policy or our privacy practices, or to exercise a privacy right, contact:
Legacy Arts Law PC
309 E. Aliso St., Unit 3
Ojai, CA 93023
Email: admin@legacyartslaw.com