Privacy Policy

This Privacy Policy explains how Scaling Law Firms LLC ("Scaling Law Firms," "we," "our," or "us"), a Colorado limited liability company, collects, uses, discloses, and protects personal information when you visit scalinglawfirms.com (the "Site") or engage with our services. This Privacy Policy applies to all visitors, prospective clients, clients, and other individuals who interact with us. By using the Site, you acknowledge that you have read and understood this Privacy Policy.

1. Information We Collect

We collect personal information about you in the following ways:

1.1 Information You Provide Directly

When you contact us, request a discovery call, complete a form, subscribe to communications, or engage our services, we may collect:

• Name and contact details (email address, telephone number, mailing address)
• Firm name, your role, practice area, and other professional information
• Information you include in messages, consultations, intake forms, or correspondence
• Billing and payment information for paid engagements (typically processed by our third-party payment processor; we do not store full payment card numbers)
• Account credentials, if you create an account on the Site
• Any other information you voluntarily share with us

1.2 Information Collected Automatically

When you visit the Site, we and our service providers automatically collect certain technical information, including:

• IP address and approximate geographic location (city/region level)
• Browser type, version, language, and settings
• Operating system and device type, including device identifiers where available
• Pages visited, time spent on each page, scroll depth, and navigation patterns
• Referring website and search terms used to find us
• Date and time of access
• Information collected via cookies and similar tracking technologies (see Section 6)

1.3 Information From Third Parties

We may receive information about you from third parties, including business partners, lead generation services, marketing platforms, social media networks, and publicly available sources, in accordance with their terms and applicable law. This may include professional contact information, firm details, and publicly listed business information.

2. Categories of Personal Information

Under U.S. state privacy laws (including the California Consumer Privacy Act as amended), the following categories of personal information may be collected:

• Identifiers: Name, email address, telephone number, mailing address, IP address, online identifiers
• Customer Records: Records of communications, billing information, and similar information described in California Civil Code § 1798.80(e)
• Commercial Information: Records of products or services purchased or considered, transaction history
• Internet or Other Electronic Network Activity: Browsing history, search history, information regarding interaction with the Site and online services
• Geolocation Data: Approximate location derived from IP address (we do not collect precise geolocation)
• Professional or Employment-Related Information: Firm name, job title, professional role, practice area
• Inferences: Inferences drawn from any of the above to create a profile reflecting preferences or characteristics

We do not collect biometric information, health information, sensitive demographic information (such as race, religion, sexual orientation, or union membership), education records, or financial account information except as described in Section 1.1 for payment processing.

3. How We Use Your Information

We use personal information for the following purposes:

• To provide, operate, and improve the Site and our services
• To respond to inquiries, schedule discovery calls, and manage client engagements
• To send transactional, administrative, and service-related communications
• To send marketing communications, where you have opted in or as otherwise permitted by law
• To process payments, manage billing, and maintain financial records
• To analyze how visitors use the Site and improve content, design, and performance
• To personalize content and recommendations
• To detect, prevent, investigate, and address technical, security, fraud, or abuse issues
• To comply with legal obligations, court orders, and regulatory requirements
• To enforce our Terms of Service and protect our legal rights, property, and safety, and the rights, property, and safety of others
• For other legitimate business purposes consistent with this Privacy Policy and applicable law

4. Legal Bases for Processing

Where the General Data Protection Regulation (GDPR) or similar laws apply, we process personal information based on one or more of the following legal bases:

• Consent: Where you have given clear, specific, and informed consent (for example, to receive marketing emails)
• Contract: Where processing is necessary to perform a contract with you or to take steps at your request before entering into a contract
• Legal obligation: Where processing is necessary to comply with a legal obligation
• Legitimate interests: Where processing is necessary for our legitimate business interests (such as understanding visitor behavior, improving our services, and protecting our business), provided those interests are not overridden by your rights and freedoms
• Vital interests or public interest: Where applicable in limited circumstances

5. How We Share Your Information

We share information only in the following circumstances:

• Service Providers and Processors: With trusted third-party vendors who help us operate our business under contractual obligations to protect your information and use it only as directed. These include website hosting providers, email service providers, customer relationship management (CRM) tools, analytics services, marketing automation platforms, payment processors, and professional advisors.
• Legal Requirements: When required by law, court order, subpoena, regulatory request, or other legal process, or when we believe disclosure is necessary to protect our rights, property, or safety, or that of our clients or others.
• Business Transfers: In connection with a merger, acquisition, financing event, reorganization, sale of assets, bankruptcy, or similar transaction, in which case information may be transferred as part of the transaction subject to standard confidentiality protections.
• With Your Consent: When you direct us to share your information or otherwise consent to sharing.
• Aggregated or Anonymized Information: We may share aggregated, anonymized, or de-identified information that cannot reasonably be used to identify you, for any business purpose.

6. Cookies and Tracking Technologies

We use cookies and similar tracking technologies (including pixels, tags, beacons, and local storage) to operate the Site, analyze usage, and improve your experience. Cookies are small text files placed on your device.

6.1 Types of Cookies We Use

• Strictly Necessary Cookies: Required for the Site to function properly, security, and basic features. These cannot be disabled.
• Performance and Analytics Cookies: Help us understand how visitors interact with the Site so we can improve it (for example, Google Analytics).
• Functional Cookies: Remember your preferences and settings to provide enhanced functionality.
• Marketing Cookies: Used to deliver relevant content and measure marketing campaign effectiveness, where permitted by law and consent.

6.2 Managing Cookies

You can control cookies through your browser settings. Most browsers allow you to refuse cookies, delete existing cookies, or be notified when cookies are placed. Disabling certain cookies may affect Site functionality. For Google Analytics specifically, you can install the Google Analytics Opt-out Browser Add-on. Where applicable law requires consent for cookies (such as the EU ePrivacy Directive), we will request your consent before placing non-essential cookies.

7. Third-Party Services and Links

The Site may contain links to or integrations with third-party websites, services, or content (including embedded videos, social media plugins, scheduling tools, and third-party widgets). We do not control and are not responsible for the privacy practices, content, or policies of third parties. The collection and use of your information by third parties is governed by their privacy policies. We encourage you to review the privacy policies of any third-party services you interact with through or alongside the Site.

8. Your Privacy Rights — General

Depending on your location and applicable law, you may have the following rights regarding your personal information:

• Right to Access: Request a copy of the personal information we hold about you
• Right to Correct: Request correction of inaccurate or incomplete information
• Right to Delete: Request deletion of your personal information, subject to certain legal exceptions
• Right to Portability: Request your information in a structured, commonly used, machine-readable format
• Right to Object or Restrict Processing: Object to or restrict certain processing activities
• Right to Withdraw Consent: Withdraw consent where processing is based on consent (without affecting prior lawful processing)
• Right to Opt Out of Marketing: Unsubscribe from marketing communications at any time
• Right to Non-Discrimination: Not be discriminated against for exercising your privacy rights
• Right to Designate an Authorized Agent: Use an authorized agent to submit requests on your behalf, subject to verification

To exercise any of these rights, please contact us using the information in Section 22. We will respond within the timeframes required by applicable law (generally 30–45 days). We may need to verify your identity before fulfilling certain requests. If we cannot honor your request, we will explain why.

9. California Privacy Rights (CCPA/CPRA)

If you are a California resident, the California Consumer Privacy Act ("CCPA") as amended by the California Privacy Rights Act ("CPRA") provides you with specific rights, in addition to those described above:

• The right to know what categories and specific pieces of personal information we collect, use, disclose, and share
• The right to request deletion of personal information, subject to certain exceptions
• The right to correct inaccurate personal information
• The right to opt out of the sale or sharing of personal information. We do not sell or share personal information as those terms are defined under California law.
• The right to limit the use and disclosure of sensitive personal information
• The right to non-discrimination for exercising your privacy rights
• The right to designate an authorized agent

California's "Shine the Light" law (California Civil Code § 1798.83) also permits California residents to request a notice describing what categories of personal information we share with third parties for direct marketing purposes. We do not share personal information with third parties for their direct marketing purposes.

To exercise these rights, please email us at contact@scalinglawfirms.com. We may need to verify your identity before processing your request.

10. Colorado Privacy Rights (CPA)

If you are a Colorado resident, the Colorado Privacy Act ("CPA"), effective July 1, 2023, provides you with the following rights:

• Right of Access: Confirm whether we are processing your personal data and access that data
• Right to Correction: Correct inaccuracies in your personal data
• Right to Deletion: Delete personal data we have collected from you
• Right to Data Portability: Obtain a portable copy of your personal data, where technically feasible
• Right to Opt Out: Opt out of (i) the sale of personal data, (ii) targeted advertising, and (iii) profiling that produces legal or similarly significant effects
• Right to Appeal: Appeal a refusal of any request

We honor opt-out preferences signaled through Universal Opt-Out Mechanisms, including Global Privacy Control (GPC), where required by Colorado law. To exercise your CPA rights, contact us at contact@scalinglawfirms.com. We will respond within 45 days, with one possible 45-day extension. If we decline a request, you may appeal by replying to our response or sending a new email with "Appeal" in the subject line. If your appeal is denied, you may contact the Colorado Attorney General at coag.gov/file-complaint.

11. Virginia Privacy Rights (VCDPA)

If you are a Virginia resident, the Virginia Consumer Data Protection Act ("VCDPA") provides you with similar rights to access, correct, delete, obtain a portable copy of, and opt out of the processing of your personal data for targeted advertising, sale, or certain profiling. To exercise these rights, contact us at contact@scalinglawfirms.com. You have the right to appeal a refusal of any request. If your appeal is denied, you may contact the Virginia Attorney General.

12. Other U.S. State Privacy Rights

If you are a resident of Connecticut, Utah, Texas, Oregon, Montana, Iowa, Tennessee, Delaware, New Hampshire, New Jersey, Indiana, Maryland, Kentucky, Minnesota, Nebraska, Rhode Island, or another state with a comprehensive privacy law, you may have similar rights — including the rights to access, correct, delete, obtain portability of your personal data, and opt out of certain processing activities such as targeted advertising, sale of personal data, or profiling. To exercise any applicable rights, please contact us at contact@scalinglawfirms.com. Where required by applicable law, you may also have the right to appeal a denial of a request and to file a complaint with your state attorney general.

If you are a Nevada resident, Nevada law (NRS 603A) gives you the right to opt out of the sale of certain personal information. We do not sell personal information as defined under Nevada law. You may still submit an opt-out request to contact@scalinglawfirms.com.

13. EU, UK, and Swiss Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, the General Data Protection Regulation (GDPR), UK GDPR, and Swiss FADP apply to our processing of your personal information.

13.1 Data Controller

Scaling Law Firms LLC is the data controller for personal information collected through the Site.

13.2 Your Rights Under GDPR

In addition to the rights described in Section 8, you have the right to lodge a complaint with your local data protection authority (or with the Information Commissioner's Office in the UK) if you believe we have violated your rights under applicable law.

13.3 International Transfers

Personal information may be transferred to and processed in the United States. Where required, we implement appropriate safeguards for international data transfers, including Standard Contractual Clauses approved by the European Commission, the UK Addendum to the EU SCCs, and other legally recognized mechanisms.

14. Sensitive Personal Information

We do not knowingly collect, process, or sell sensitive personal information (such as Social Security numbers, driver's license numbers, financial account numbers, precise geolocation, racial or ethnic origin, religious or philosophical beliefs, union membership, genetic or biometric data, health information, sex life or sexual orientation, or citizenship or immigration status). If you believe you have provided sensitive personal information to us, please contact us so we can take appropriate action.

15. Marketing Communications and Opt-Out

We may send marketing communications by email, telephone, SMS, or other channels, with your consent where required by law (such as under the CAN-SPAM Act, TCPA, or GDPR).

You can opt out of marketing communications at any time by:

• Clicking the "unsubscribe" link in any marketing email
• Replying to a marketing SMS with "STOP"
• Contacting us at contact@scalinglawfirms.com

Even if you opt out of marketing communications, we may still send you transactional, administrative, or service-related messages necessary to provide our services or comply with legal obligations.

16. Data Retention

We retain personal information only for as long as necessary to fulfill the purposes described in this Privacy Policy, including:

• Providing services and maintaining client relationships
• Complying with legal, accounting, tax, and regulatory obligations (typically 7 years for financial records)
• Resolving disputes and enforcing our agreements
• Protecting our legal rights

When we no longer need personal information, we will delete, anonymize, or take other reasonable steps to render it inaccessible. Specific retention periods depend on the type of information, the purpose of processing, and applicable legal requirements.

17. Data Security and Breach Notification

We implement reasonable administrative, technical, and physical safeguards designed to protect personal information from unauthorized access, use, alteration, disclosure, or destruction. These measures include encryption in transit, access controls, secure hosting, and ongoing security review.

However, no method of transmission over the internet or method of electronic storage is completely secure, and we cannot guarantee absolute security. In the event of a data breach affecting your personal information, we will notify you and any required authorities as required by applicable law.

18. Children's Privacy

The Site and our services are intended for businesses and adult professionals. We do not direct the Site or our services to children, and we do not knowingly collect personal information from children under the age of 16 (or under 13 where the Children's Online Privacy Protection Act applies). If you are a parent or guardian and believe we have collected personal information from your child, please contact us so we can promptly delete it.

19. International Data Transfers

Scaling Law Firms LLC is based in the United States. If you access the Site or use our services from outside the United States, your personal information may be transferred to, stored, and processed in the United States, which may have different data protection laws than your country of residence. By using the Site or our services, you consent to this transfer where lawful. Where required by law (such as under GDPR), we implement appropriate safeguards for international data transfers.

20. Universal Opt-Out Mechanisms and Do Not Track

Some web browsers and extensions transmit opt-out signals such as the Global Privacy Control (GPC) or "Do Not Track" (DNT) signals. We honor recognized opt-out signals (including GPC) as opt-out preferences for the sale and sharing of personal data and for targeted advertising, where required by applicable law (including the California Privacy Rights Act, Colorado Privacy Act, and Connecticut Data Privacy Act).

Because there is no industry-standard interpretation of DNT signals beyond what GPC and similar mechanisms provide, the Site does not separately respond to legacy DNT signals.

21. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will update the "Effective Date" at the top of this page and, where appropriate, provide additional notice (for example, by email or a prominent notice on the Site). Your continued use of the Site or our services after changes are posted constitutes your acceptance of the updated Privacy Policy. If you do not agree, you must stop using the Site and our services.

22. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices — including to exercise any of your rights — please contact us: