Privacy Policy

We value your privacy. While many firms give the nod to cybersecurity and protecting your vital data, most fall short. At Otter Creek Law, we put the security of your private information first.

Confidentiality & Privilege

Anything you communicate to us is confidential and privileged. Accordingly, anything we learn relating to the representation is confidential, whatever its source. Furthermore, with limited exceptions, you have the right to assert attorney-client privilege to safeguard from disclosure information you have communicated to us.

Data Privacy Policy

The processing of personal data should be designed to serve mankind. – GDPR, Recital 4.

1. Introduction

Otter Creek Law, PLLC, is committed to protecting the privacy of our clients and website visitors. This Privacy Policy outlines how we collect, use, and safeguard your personal information in compliance with applicable laws, including the California Consumer Privacy Act (CCPA), the General Data Protection Regulation (GDPR), and other regulations.

2. Information We Collect

• Personal Information: We may collect names, contact details, billing information, and any data provided during legal consultations.
• Sensitive Data: We may process sensitive data when necessary for legal representation.
• Automatically Collected Data: This includes IP addresses, browser details, and site usage analytics.

3. Legal Basis for Processing (GDPR Compliance)

We process personal data based on:

• Contractual necessity (providing legal services).
• Legal obligations (compliance with laws).
• Legitimate interests (business and website operation).
• Consent (where required, such as marketing communications).

4. How We Use Your Information

• To provide and manage legal services.
• To communicate with you regarding your legal matters.
• To comply with legal and regulatory requirements.
• To enhance website security and functionality.

5. Your Rights Under CCPA, GDPR, and Other Privacy Laws

California Residents (CCPA/CPRA Rights)

·      Right to Know what personal data we collect.

·      Right to Delete your personal information.

·      Right to Opt-Out of the sale or sharing of personal data (if applicable).

·      Right to Non-Discrimination for exercising privacy rights.

·      Right to Correct inaccurate personal data.

·      Right to Limit the Use of sensitive data.

EU & UK Residents (GDPR & UK GDPR Rights)

·      Right to Access your data.

·      Right to Rectification (correct inaccurate data).

·      Right to Erasure (Right to be Forgotten).

·      Right to Restrict Processing.

·      Right to Object to data processing.

·      Right to Data Portability (receive your data in a structured format).

·      Right to Withdraw Consent at any time.

Other Jurisdictions

·      Canada (PIPEDA): Right to access and correct personal data.

·      Australia (Privacy Act 1988): Rights to access and correct data and opt-out of direct marketing.

·      Brazil (LGPD): Similar rights to GDPR, including consent withdrawal and portability.

·      New York (NY SHIELD Act): Mandates reasonable security measures.

·      Financial Data (GLBA): Requires protection of client financial information.

·      Health Data (HIPAA): Protects health-related data confidentiality.

·      Virginia, Colorado, Connecticut: Privacy rights similar to CCPA.

To exercise these rights, contact us at privacy@ottercreeklaw.com.

6. Information Sharing & International Data Transfers

• We do not sell personal data.
• We may share data with service providers under strict confidentiality agreements.
• If transferring data outside the EU, we implement appropriate safeguards (e.g., Standard Contractual Clauses).

7. Data Security & Retention

We implement industry-standard security measures. We retain data as required by law or as necessary for legal representation.

8. Changes to This Policy

We may update this Privacy Policy. Any changes will be posted with an updated revision date.

9. Contact Us

For privacy-related inquiries, contact us at privacy@ottercreeklaw.com.