US State Privacy Rights

Scope and Applicability of State Privacy Protections

This US State Privacy Rights notice supplements our general Privacy Policy and applies solely to visitors, users, and others who reside in states with comprehensive privacy legislation. As a legal directory and lead-generation marketplace, Legal Online Directory ("the Platform") operates as a "Business" under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), Cal. Civ. Code § 1798.100 et seq., and as a "Controller" under the frameworks of the Virginia Consumer Data Protection Act (VCDPA), Va. Code Ann. § 59.1-575 et seq., the Colorado Privacy Act (CPA), Colo. Rev. Stat. § 6-1-1301 et seq., the Connecticut Data Privacy Act (CTDPA), Conn. Gen. Stat. § 42-515 et seq., the Texas Data Privacy and Security Act (TDPSA), Tex. Bus. & Com. Code § 541.001 et seq., and other substantially similar state laws in Utah, Oregon, Montana, and Florida.

Legal Online Directory is not a law firm. The information collected through our platform is used to facilitate connections between consumers and licensed attorneys, process document sales, and manage attorney-to-attorney case exchanges. Our data practices are designed to comply with the high-water marks of state privacy regulations while respecting the unique attorney-client privilege considerations that may arise once a lead is converted.

Categories of Personal Information Collected and Disclosed

In the preceding 12 months, the Platform has collected, and for business purposes disclosed to third parties (such as participating law firms, legal funding partners, and analytics providers), the following categories of personal information as defined by CCPA/CPRA § 1798.140:

Sensitive Personal Information (SPI)

Consistent with CPRA (Cal. Civ. Code § 1798.121) and VCDPA (Va. Code § 59.1-575), we collect "Sensitive Personal Information." This includes information relating to a consumer's health (e.g., personal injury details), precise geolocation (for finding local counsel), and racial or ethnic origin (where relevant to a civil rights claim).

We do not use or disclose sensitive personal information for purposes other than those necessary to perform the services requested (facilitating a legal referral) or as permitted by law. Under the CPA (Colorado) and CTDPA (Connecticut), we obtain your affirmative "Opt-In" consent before processing such sensitive data for non-exempt purposes.

The Right to Opt-Out: "Sales" and "Sharing" of Information

Under the CCPA/CPRA, the "sale" of personal information is defined broadly and includes the transfer of data for "valuable consideration." Because Legal Online Directory generates revenue by selling consumer leads to attorneys and law firms, this constitutes a "sale."

Furthermore, "Sharing" refers to the disclosure of personal information for "Cross-Context Behavioral Advertising." Pursuant to Cal. Civ. Code § 1798.120 and the Colorado Privacy Act § 6-1-1306, residents have the right to opt-out of these activities.

• One-to-One Consent: In alignment with the FCC's 2024 One-to-One Consent Rule (47 C.F.R. § 64.1200), we do not "sell" your lead to multiple, unnamed parties. You are provided a specific list of attorneys, and your data is shared only with the specific providers you select.
• Global Privacy Control (GPC): We recognize "Universal Opt-Out Mechanisms" or Global Privacy Control signals. If your browser sends a GPC signal, our Platform will automatically process this as a request to opt-out of the "sharing" of your data for advertising, as required by CPRA, CPA, and CTDPA.

Your Core Privacy Rights by State

While specific statutes differ, most residents of CA, VA, CO, CT, UT, TX, and OR share the following fundamental rights regarding their personal data:

1. Right to Know and Access

You have the right to request that we disclose the categories of personal information we have collected, the sources from which it was collected, the business purpose for collecting or selling it, and the specific pieces of data we hold about you. (Reference: CCPA § 1798.110, VCDPA § 59.1-577).

2. Right to Correction

If the information we hold about you is inaccurate (e.g., an incorrect legal matter type or contact information), you have the right to request that we correct it. (Reference: CPRA § 1798.106, TDPSA § 541.051).

3. Right to Deletion

You may request that we delete the personal information we have collected from you. Please note that certain exceptions apply under CCPA § 1798.105(d), such as when data is necessary to complete a transaction, detect security incidents, fulfill the terms of a written warranty, or comply with a legal obligation (such as maintaining records of "Prior Express Written Consent" for TCPA defense).

4. Right to Opt-Out of Targeted Advertising and Profiling

Residents of VA, CO, CT, and TX have the specific right to opt-out of the processing of data for "Profiling" in furtherance of decisions that produce legal or similarly significant effects. While we use algorithms to match you with attorneys, final decisions regarding legal representation are made by the attorneys themselves, not the Platform. (Reference: CPA § 6-1-1306(1)(a)).

5. Right to Data Portability

You have the right to receive your data in a portable and, to the extent technically feasible, readily usable format that allows you to transmit the data to another entity without hindrance. (Reference: VCDPA § 59.1-577(A)(4)).

Verification and Request Process

To exercise your rights, you must submit a "Verifiable Consumer Request." Under Cal. Code Regs. Tit. 11, § 7060-7063, we must verify your identity before granting access to or deleting your data.

• Submitting Requests: You may submit requests via our dedicated privacy portal linked on the Contact page.
• Verification: We generally verify requests by matching at least two or three data points provided by you (such as email and phone number) with data already in our possession.
• Authorized Agents: You may designate an authorized agent to make a request on your behalf. In California, agents must be registered with the Secretary of State. We will require written proof of the agent's authority and direct verification of your identity. (CCPA § 1798.135).
• Response Timing: For CCPA requests, we acknowledge receipt within 10 business days and provide a substantive response within 45 calendar days. For other states (VA, CO, CT), the standard is 45 days, with a 45-day extension available if reasonably necessary.

Non-Discrimination and Appeals

We will not discriminate against you for exercising any of your privacy rights. Consistent with Cal. Civ. Code § 1798.125 and VCDPA § 59.1-577, we will not deny you services, charge different prices, or provide a different level of quality based on your privacy choices.

Appeals Process: If you are a resident of Virginia, Colorado, Connecticut, or Texas and we decline to take action on your request, you have the right to appeal our decision within a reasonable period. You may initiate an appeal through the Contact page. If the appeal is denied, you may contact your State Attorney General:

• Virginia: [oag.state.va.us]
• Colorado: [coag.gov]
• Connecticut: [portal.ct.gov/AG]
• Texas: [texasattorneygeneral.gov]

California "Shine the Light" Law

Separate from the CCPA, California Civil Code Section 1798.83 (the "Shine the Light" law) permits California residents to request once a year, free of charge, information about the personal information (if any) we disclosed to third parties for direct marketing purposes in the preceding calendar year. Legal Online Directory complies with this by allowing users to opt-out of all third-party marketing disclosures via the "Do Not Sell or Share My Personal Information" link.

Children’s Privacy (COPPA and State Variations)

Our Platform is directed to adults (age 18+) seeking legal services. We do not knowingly collect personal information from children under the age of 13 in compliance with the Children's Online Privacy Protection Act (COPPA), 15 U.S.C. §§ 6501–6506.

Under CCPA/CPRA § 1798.120(c), we do not sell or share the personal information of consumers if we have actual knowledge that the consumer is less than 16 years of age, unless the consumer (for those between 13 and 16) or the consumer's parent/legal guardian (for those under 13) has provided affirmative authorization ("Opt-In").

Data Retention and Necessity

We retain personal information only for as long as is reasonably necessary for the purposes described in this notice. For example:

• Leads: Retained for the duration of our contractual obligation to the attorney/firm and for 5 years to satisfy TCPA and TSR (16 C.F.R. Part 310) record-keeping requirements regarding consent.
• Financial Records: Retained for 7 years to comply with tax and audit regulations.
• Legal Documents: Retained for the duration of your account plus any statutory limitation periods for contract or professional liability claims.

Contact

If you have questions about your rights under state law, our data collection practices, or how to submit a request, please visit our Contact page. Accurate and timely communication is essential to our compliance with the Bona Fide Error defense provisions found in many state privacy statues.