PRIVACY POLICY

Last updated: May 14, 2026

Noss & Russell, LLP ("we," "our," "us," or "the Firm") respects your privacy. This Privacy Policy explains what personal information we collect when you visit nossrussell.com (the "Site"), subscribe to our newsletter, contact the Firm, or otherwise interact with us; how we use, share, and protect that information; and the choices and rights available to you.

This Privacy Policy does not apply to communications between the Firm and clients who have entered into a written engagement agreement with the Firm. Such communications are governed by the attorney-client relationship and are protected by attorney-client privilege, the work product doctrine, and applicable rules of professional conduct.

1. INFORMATION WE COLLECT

We collect personal information in the categories defined by the California Consumer Privacy Act ("CCPA"), as amended by the California Privacy Rights Act ("CPRA"):

Identifiers: Name, email address, postal address, phone number, IP address, online identifiers.
Personal information under Cal. Civ. Code § 1798.80(e): Name, signature, address, telephone number, and other contact information you submit.
Internet or other electronic network activity: Pages viewed, time on site, referring URL, browser type, device type, operating system, interaction with newsletter emails.
Geolocation data: Approximate location derived from IP address (city/region level).
Professional or employment-related information: If you contact us in a professional capacity, your job title, employer, and related information.
Inferences: Inferences drawn from the above to understand visitor interest in particular practice areas.

We do not knowingly collect Sensitive Personal Information as defined by the CCPA through this website. If you choose to send us sensitive information voluntarily in a communication, we treat it consistent with this Privacy Policy and our professional obligations.

Sources of Information

We collect personal information from the following sources:

Directly from you when you submit a contact form, subscribe to our newsletter, send us an email, call us, or otherwise communicate with the Firm
Automatically when you visit the Site, through cookies and similar technologies described in Section 4
From third-party service providers that help us operate the Site, our email communications, and our intake process
From publicly available sources in limited circumstances, such as when conducting conflict checks or verifying identity

2. HOW WE USE PERSONAL INFORMATION

We use personal information for the following business purposes:

To respond to inquiries. To evaluate potential representation, respond to questions, and communicate with you about matters you raise.
To provide legal services. For clients who have signed an engagement agreement, to provide and administer legal representation, including by email, telephone, and SMS where the client has provided a mobile number.
To send communications you have requested. To deliver the newsletter you subscribed to, including blog posts, legal insights, and updates about cases the Firm is investigating.
To operate and improve the Site. To maintain, secure, troubleshoot, and improve the website and our communications.
To comply with legal and ethical obligations. To meet our obligations under applicable rules of professional conduct, anti-money-laundering laws, record-retention requirements, and other applicable law.
To protect the Firm and others. To detect, prevent, and respond to fraud, security incidents, unauthorized activity, or violations of the Firm's policies or the Terms of Use.

We do not sell personal information for monetary consideration. We do not currently share personal information for cross-context behavioral advertising (as those terms are defined under the CCPA). If we begin to do so in the future, we will update this Privacy Policy and provide a "Your Privacy Choices" link and other required opt-out mechanisms.

3. THIRD-PARTY SERVICE PROVIDERS

We share personal information only as follows:

Service providers. Third-party vendors that help us operate the Site and the Firm, including website hosting (Wix.com Ltd.), email marketing (Wix Email Marketing and/or Clio Grow), website analytics (Google Analytics), and case management systems. Service providers may use personal information only to perform services for the Firm.
Co-counsel and referral counsel. Where the Firm associates with other counsel or refers matters with the consent of the client, we may share information as necessary in connection with that representation.
Legal and regulatory compliance. Where required to comply with a subpoena, court order, regulatory request, or other legal obligation, or where necessary to protect the Firm's rights or the rights, safety, or property of others.
Professional advisors. Our own attorneys, accountants, auditors, and insurers in the course of their professional services to the Firm.
Business transactions. In the unlikely event of a Firm merger, dissolution, or sale of substantially all of the Firm's assets, personal information may be transferred to a successor entity, subject to applicable rules of professional conduct.

4. COOKIES AND SIMILAR TECHNOLOGIES

The Site uses cookies and similar technologies to operate, secure, and analyze the website. A cookie is a small file that a website places on your device.

Categories of cookies and similar technologies used on this Site

Strictly necessary cookies. Set by our website host (Wix) to enable core site functionality, security, and load balancing. These cannot be disabled without breaking the Site.
Analytics cookies. Set by Google Analytics to measure how visitors use the Site (pages viewed, time on site, referring source) so we can improve content. Google Analytics is configured as a service provider; we do not use Google Analytics for advertising or remarketing.
Email tracking pixels. Our newsletter provider (Wix Email Marketing and/or Clio Grow) uses small tracking pixels in emails we send to measure whether emails were delivered and opened. You can disable image loading in your email client to prevent pixel tracking.

Your cookie choices

Most browsers allow you to refuse, delete, or manage cookies through your browser settings. For more information, visit https://www.allaboutcookies.org. Some Site features may not function if cookies are disabled.

You can opt out of Google Analytics by installing the Google Analytics Opt-Out Browser Add-On at https://tools.google.com/dlpage/gaoptout.

Do Not Track and Global Privacy Control

Some browsers transmit a "Do Not Track" (DNT) signal. There is no industry consensus on how websites should respond to DNT signals, and the Site does not currently respond to DNT signals. Where required by law, the Site honors the Global Privacy Control (GPC) signal as an opt-out request to the extent applicable to our processing activities.

If you provide your mobile telephone number to the Firm and consent to text message communications, the Firm may send you text messages relating to your matter, including scheduling, case updates, and meeting confirmations. Message and data rates may apply. Message frequency varies based on the needs of the matter.

You may opt out of text messages at any time by replying STOP to any message. You may request help by replying HELP. The Firm does not use SMS for marketing communications.

5. SMS AND TEXT MESSAGE COMMUNICATIONS

6. RETENTION OF PERSONAL INFORMATION

We retain personal information only as long as reasonably necessary for the purposes described in this Privacy Policy. Retention periods vary based on the nature of the information and applicable legal, regulatory, and ethical requirements. Newsletter subscriber data is retained until you unsubscribe. Information related to legal representation is retained for the period required by applicable rules of professional conduct and law-firm record-retention obligations, which in California is generally a minimum of five years after the conclusion of the representation.

7. INFORMATION SECURITY

We use reasonable administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, use, disclosure, alteration, or destruction. No system is perfectly secure, however, and we cannot guarantee the security of information transmitted over the Internet.

8. CHILDREN'S PRIVACY

The Site is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided personal information to us, please contact us at contact@nossrussell.com and we will delete it.

9. CALIFORNIA RESIDENTS RIGHTS

California residents have the following rights under the CCPA, as amended by the CPRA:

Right to Know. The right to request that we disclose the categories of personal information we have collected, the categories of sources, the business or commercial purposes for collection, the categories of third parties with whom we have shared information, and the specific pieces of personal information we have collected about you.
Right to Access and Portability. The right to obtain a copy of personal information we have collected, in a portable format where technically feasible.
Right to Correct. The right to request that we correct inaccurate personal information we maintain about you.
Right to Delete. The right to request that we delete personal information we have collected from you, subject to exceptions including our obligations to retain certain records under rules of professional conduct.
Right to Opt Out of Sale or Sharing. The right to opt out of the sale or sharing of personal information. We do not currently sell or share personal information for cross-context behavioral advertising, but if we begin to do so, you will be able to opt out.
Right to Limit Use of Sensitive Personal Information. The right to limit our use of sensitive personal information to purposes permitted under the CCPA. We do not currently use sensitive personal information for purposes beyond those permitted.
Right to Non-Discrimination. The right not to receive discriminatory treatment for exercising any of the above rights.

How to exercise your rights

To exercise any of these rights, contact us at contact@nossrussell.com or (619) 678-1880. We will respond within 45 days, as required by the CCPA, and may extend that period by an additional 45 days where reasonably necessary, with notice to you.

Verification

To protect your privacy and security, we will verify your identity before responding to a request. Verification typically requires you to provide certain information that matches information we have on file. The information you provide for verification will be used solely for that purpose.

Authorized Agents

You may designate an authorized agent to make a request on your behalf. We will require written authorization from you and verification of both your identity and your agent's identity before processing the request.

Shine the Light

California Civil Code § 1798.83 ("Shine the Light") permits California residents to request information about the disclosure of certain personal information to third parties for those third parties' direct marketing purposes. The Firm does not disclose personal information to third parties for their direct marketing purposes.

10. THIRD-PARTY LINKS

The Site may contain links to third-party websites. We are not responsible for the content, privacy practices, or security of any linked third-party website.

11. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time. The "Last Updated" date at the top reflects the most recent revision. Material changes will be communicated through a prominent notice on the Site.

12. CONTACT

Noss & Russell, LLP
Attn: Privacy
600 West Broadway, Suite 700
San Diego, CA 92101
Email: contact@nossrussell.com
Phone: (619) 678-1880