Information you provide.
A real law-firm website may collect information
voluntarily submitted through contact forms,
consultation requests, email, telephone calls,
newsletter forms, account systems, or other
communication channels.
Depending on the implementation, this may include
names, email addresses, telephone numbers, messages,
appointment details, or other information supplied
by the visitor.
CURRENT TEMPLATE — The demonstration contact form
has no backend and does not transmit or store submitted data.
Automatically collected information.
A production website may receive technical
information such as IP address, browser type,
device information, operating system, referring
pages, requested pages, timestamps, and similar
server or analytics data.
TEMPLATE OWNER NOTE — Describe what the finished
site actually collects. “Probably nothing” is not
a technical audit.
Cookies and similar technologies.
If the finished website uses cookies, analytics,
embedded media, advertising tools, session storage,
tracking technologies, or similar systems, the
policy should explain their purpose and how visitors
can manage applicable choices.
CURRENT TEMPLATE — No advertising or analytics
system is included by default.
How information may be used.
Depending on the real firm’s practices, submitted
information may be used to respond to inquiries,
review consultation requests, communicate with
prospective or existing clients, operate the website,
protect security, maintain records, improve services,
or comply with legal obligations.
TEMPLATE OWNER NOTE — Delete uses that do not apply.
Add material uses that actually do.
Attorney-client relationship.
Submitting information through a website does not
necessarily create an attorney-client relationship.
A real firm should clearly explain its intake,
conflicts, engagement, and representation procedures.
Sending a message labeled “CONFIDENTIAL!!!” does not
rewrite the firm’s engagement process.
Third-party service providers.
A production website may rely on hosting providers,
email services, scheduling systems, analytics
platforms, spam prevention, form processors,
content, form processors,
content-delivery networks, or other vendors.
The completed policy should identify or appropriately
describe relevant categories of providers and their
role in processing information.
TEMPLATE OWNER NOTE — Every shiny plugin you install
deserves approximately five minutes of adult supervision.
Disclosure of information.
A real firm should describe circumstances in which
information may be disclosed, such as to service
providers, when authorized by the individual,
when reasonably necessary to protect rights or
security, or when required by applicable law.
Replace this demonstration language with the firm’s
actual practices.
Data retention.
A production privacy policy should explain how long
information is retained or describe the criteria
used to determine appropriate retention periods.
“Forever, because nobody knows where the delete
button is” should not be the internal policy.
Security.
A real site operator may use administrative,
technical, and organizational measures intended
to protect information. No online system can promise
absolute security, however.
Security claims should describe reality, not optimism.
Privacy choices and rights.
Depending on applicable law and the visitor’s
location, individuals may have rights or choices
concerning access, correction, deletion, restriction,
objection, portability, marketing communications,
cookies, or certain uses of personal information.
TEMPLATE OWNER NOTE — Jurisdiction-specific rights
should be reviewed before publication.
Children’s information.
If the real website is not intended for children,
the operator should determine whether and how that
fact should be addressed based on its services,
audience, data practices, and applicable requirements.
Do not invent an age threshold without reviewing
the rules that actually apply.
External links.
A website may link to external services or websites
that operate under their own privacy practices.
The firm generally does not control those third-party
policies or systems.
The internet contains other websites. We regret to confirm this.