Privacy Policy & Data Practices

Scope of This Policy

This Privacy Policy applies to the website located at www.dijuliolawgroup.com (the "Site"), any associated subdomains, and all information collected through the Site or submitted to the Firm via contact forms, email, telephone, or other electronic means in connection with your use of the Site.

This policy does not govern information collected from you in the context of an existing attorney-client relationship, which is governed by separate engagement agreements and the California Rules of Professional Conduct. It also does not apply to third-party websites that may be linked from our Site.

This policy reflects the requirements of the CCPA as amended by the CPRA, and the updated CCPA regulations approved by the California Privacy Protection Agency (CPPA) on September 26, 2025, effective January 1, 2026.

Information We Collect

We collect information in two ways: information you provide directly to us, and information collected automatically when you use the Site. We collect personal information for specific, disclosed purposes and retain it only as long as reasonably necessary for those purposes.

Information You Provide Directly

When you contact us through the Site — by completing a contact form, requesting a consultation, or sending an email — you may provide us with:

• Your full name and contact information, including email address, telephone number, and mailing address
• The general nature of your legal inquiry or the matter you wish to discuss
• Any documents, descriptions of facts, or other information you voluntarily submit in connection with your inquiry
• Payment information if you engage our services (processed through secured third-party payment processors)

Information Collected Automatically

When you visit the Site, certain information is collected automatically through standard web technologies, including:

• IP address and approximate geographic location derived from that address
• Browser type, version, and operating system
• Pages visited, time spent on each page, and navigation paths through the Site
• Referring website or search engine query that directed you to the Site
• Date and time of each visit
• Device type and screen resolution

This information is collected through server logs, cookies, and third-party analytics services and is described further in Section 6 below. We do not collect precise geolocation data, biometric data, neural data, or other sensitive personal information through automated means. See Section 11 for our full sensitive personal information disclosures.

Categories of Personal Information Collected (CCPA Disclosure)

In the preceding twelve months, the Firm has collected the following categories of personal information:

• Identifiers: name, email address, telephone number, mailing address, IP address
• Internet or network activity: browsing history on this Site, search queries, interaction with pages
• Professional or employment information: information voluntarily provided in connection with legal inquiries
• Communications: the content of messages, emails, and contact form submissions

We do not sell or share personal information as those terms are defined under the CCPA/CPRA. We do not use personal information collected from this Site to build consumer profiles for advertising purposes.

How We Use Your Information

The Firm uses the information collected for the following purposes, consistent with the principle of data minimization — we collect only what is reasonably necessary for the disclosed purpose:

Responding to Inquiries and Providing Legal Services

• To respond to your consultation requests, questions, and communications
• To evaluate potential conflicts of interest before establishing an attorney-client relationship
• To provide legal representation and services where an engagement has been established
• To communicate with you regarding the status of your matter

Business Operations and Compliance

• To maintain accurate records and fulfill our legal and professional obligations
• To comply with applicable laws, court orders, regulatory requirements, and the California Rules of Professional Conduct
• To detect, prevent, and address fraud, unauthorized activity, or security incidents
• To process billing and payments where applicable

Website Improvement and Analytics

• To analyze how visitors use the Site in order to improve its content, structure, and functionality
• To measure the effectiveness of the Site's informational content
• To identify and resolve technical issues

We do not sell your personal information. We do not share personal information for cross-context behavioral advertising. We do not use automated decision-making technology (ADMT) to make decisions about you that produce significant legal or similarly consequential effects.

Attorney-Client Privilege & Confidentiality

DiJulio Law Group takes its professional obligations of confidentiality seriously. Under California Business and Professions Code Section 6068(e) and the California Rules of Professional Conduct, attorneys have a duty to maintain the confidential information of clients inviolate. Information shared with our attorneys in the context of a formal attorney-client relationship is subject to the attorney-client privilege and the duty of confidentiality.

However, information submitted through this website before an attorney-client relationship has been formally established — including through online contact forms — is not automatically protected by the attorney-client privilege. The Firm will nonetheless treat such pre-engagement communications with appropriate professional discretion.

Conflict Screening

Information you provide when inquiring about our services may be used internally to conduct conflict-of-interest screenings required by the California Rules of Professional Conduct before the Firm can agree to represent you. This screening process is confidential and limited to authorized personnel.

Interaction with CCPA Rights

Where personal information is collected and maintained solely in connection with providing legal services in an attorney-client relationship, certain CCPA rights — including the right to delete — may be limited by the Firm's professional obligations to retain records. The Firm will always explain applicable limitations when responding to your request.

Disclosure of Information

The Firm does not sell, rent, trade, share, or otherwise disclose your personal information to third parties for their independent marketing, advertising, or commercial purposes. We may disclose information only in the following limited circumstances:

Service Providers

We may share information with trusted third-party vendors who assist us in operating the Site, managing communications, processing payments, or providing analytics services. These vendors are contractually obligated to use your information solely for the purpose of providing services to us, are prohibited from further disclosure, and are required to maintain reasonable security practices.

Legal and Regulatory Requirements

We may disclose information when required to do so by law, subpoena, court order, or lawful request by governmental authorities, or when we believe disclosure is necessary to protect our rights, the rights of others, or the safety of any person.

Professional Obligations

In the context of an attorney-client relationship, the Firm may share information with co-counsel, expert witnesses, court personnel, opposing parties, and others as required to provide legal services or as permitted by applicable professional responsibility rules and client consent.

Business Transfers

In the event of a merger, acquisition, firm dissolution, or transfer of assets, client and prospective client information may be transferred subject to the applicable rules of professional conduct governing client notification, consent, and file transfer obligations.

No Sale or Sharing of Personal Information

DiJulio Law Group does not sell personal information and does not share personal information for cross-context behavioral advertising as those terms are defined under the CCPA/CPRA. In the preceding twelve months, the Firm has not sold or shared personal information of California residents.

Cookies & Tracking Technologies

Our Site uses cookies and similar tracking technologies to enhance your browsing experience and gather aggregate analytics data. A cookie is a small data file placed on your device when you visit a website. Under the 2026 CCPA regulations, we are required to ensure that opting out of data collection is no more difficult than opting in, and that our cookie interfaces are free from dark patterns.

Types of Cookies We Use

• Strictly Necessary Cookies: Required for the Site to function properly, including maintaining session state and security features. These cannot be disabled without affecting Site functionality.
• Analytics Cookies: Used to collect aggregate, anonymized data about how visitors use the Site (e.g., Google Analytics). This helps us understand traffic patterns and improve content. These cookies do not identify you personally and are only activated with your consent.
• Functionality Cookies: Allow the Site to remember your cookie consent preferences and similar settings to improve your experience.

Your Cookie Choices

When you first visit the Site, you will be presented with a cookie consent banner offering you the choice to Accept All, Accept Essential cookies only, or Reject All non-essential cookies. Your choice is saved for twelve months and can be changed at any time. The number of steps required to reject cookies is equal to the number of steps required to accept them, in compliance with California's prohibition on asymmetric opt-out design.

Managing Cookies in Your Browser

Most web browsers allow you to control cookies through their settings. You may set your browser to refuse cookies or to alert you when cookies are being sent. Disabling certain cookies may affect the functionality of the Site. To opt out of Google Analytics tracking, you may install the Google Analytics Opt-Out Browser Add-on available at tools.google.com/dlpage/gaoptout.

Third-Party Links & Services

Our Site may contain links to external websites operated by third parties, including court systems, government agencies, legal research databases, and other legal resources. These links are provided for informational convenience only.

DiJulio Law Group has no control over the content, privacy practices, or data collection activities of third-party websites. We are not responsible for the privacy policies or practices of any third-party site. We encourage you to review the privacy policy of any website you visit before submitting personal information.

Our Site uses Google Analytics for aggregate traffic analysis. Google Analytics operates under its own privacy policy and data processing terms. You can learn more at policies.google.com/privacy. We have enabled IP anonymization in Google Analytics where available.

Data Security

We implement reasonable administrative, technical, and physical security measures designed to protect your personal information against unauthorized access, disclosure, alteration, or destruction. These measures include:

• SSL/TLS encryption for data transmitted between your browser and our servers
• Access controls limiting personnel access to personal information on a need-to-know basis
• Secure storage of client files and communications in compliance with applicable California State Bar rules
• Regular review of information collection, storage, and processing practices
• Employee training on data security and confidentiality obligations

While we take data security seriously, no method of transmission over the Internet or electronic storage is completely secure. We cannot guarantee the absolute security of information transmitted to or stored on the Site. If you have reason to believe that your interaction with us is no longer secure, please contact us immediately.

Data Retention

We retain personal information for as long as necessary to fulfill the purposes for which it was collected, to comply with our professional and legal obligations, and to resolve disputes or enforce our agreements. Under the 2026 CCPA regulations, if we retain personal information for more than twelve months, we will respond to requests to know with information going back to January 1, 2022.

Client Files and Matter Records

Client files and matter records are retained in accordance with California State Bar guidelines, applicable statutes of limitations, and our internal records management policies. The State Bar of California recommends retaining client files for a minimum of five years following the conclusion of the matter, though the Firm may retain records for longer periods depending on the nature of the matter and applicable limitation periods.

Website and Analytics Data

Automatically collected website usage data and analytics information is retained in aggregate, anonymized form and is not tied to individual identities. Cookie consent preferences are retained for twelve months from the date of your choice. This data is used solely for the purpose of improving Site performance and content.

Prospective Client Inquiries

Information submitted by prospective clients who do not ultimately retain the Firm is retained for conflict-checking purposes and is otherwise treated as confidential. Such records may be retained for a period of time sufficient to address any future conflict-of-interest questions. We maintain documentation of responses to CCPA consumer rights requests for a period of twenty-four (24) months as required by law.

California Privacy Rights (CCPA / CPRA)

If you are a California resident, the CCPA as amended by the CPRA, and the updated regulations effective January 1, 2026, provide you with specific rights regarding your personal information. These rights are subject to limitations and exceptions under applicable law, including exemptions that may apply to personal information collected and maintained in connection with legal services.

Right to Know

You have the right to request that we disclose the personal information we have collected about you, including: the categories of information collected; the sources from which it was collected; the purposes for which it was used; and the categories of third parties with whom it was disclosed. Under the 2026 regulations, if we have retained your personal information for more than twelve months, we will respond with information going back to January 1, 2022.

Right to Delete

You have the right to request deletion of personal information we have collected about you, subject to certain exceptions. We may deny or limit deletion requests where retention is necessary to complete a transaction, comply with a legal or professional obligation, detect security incidents, or for other purposes permitted under the CCPA/CPRA. Where we deny a deletion request, we will explain the applicable exception.

Right to Correct

You have the right to request that we correct inaccurate personal information that we maintain about you. Upon receiving a verified request, we will use commercially reasonable efforts to correct the information. If we deny a request to correct health-related information, you may submit a written statement of up to 250 words contesting the accuracy of the information, which we will maintain with your records.

Right to Opt Out of Sale or Sharing

You have the right to opt out of the sale or sharing of your personal information. As noted above, DiJulio Law Group does not sell or share personal information as those terms are defined under the CCPA/CPRA. Nevertheless, you may exercise this right at any time by clicking the "Your California Privacy Choices" link in our website footer, or by contacting us directly.

Right to Limit Use of Sensitive Personal Information

You have the right to direct us to limit our use and disclosure of sensitive personal information (see Section 11) to uses necessary to provide the services you have requested, and for other limited purposes enumerated under the CCPA regulations. Because the Firm uses sensitive personal information only for the limited purposes of providing legal services and complying with professional obligations, this right is substantially satisfied by our existing practices. You may still submit a request to limit using the contact information in Section 16.

Right to Non-Discrimination

You have the right not to receive discriminatory treatment for exercising any of your California privacy rights. We will not deny you services, charge you different prices, or provide a different level of service based solely on the exercise of your privacy rights.

How to Submit a Request

To exercise any of the rights described above, please submit a verifiable consumer request to us using the contact information in Section 16. We will acknowledge receipt of your request within ten (10) business days and respond fully within forty-five (45) days as required by law, with a possible extension of an additional forty-five (45) days where reasonably necessary. We maintain documentation of all consumer rights request processing for twenty-four (24) months. We may need to verify your identity before processing your request and will not use verification information for any other purpose.

Authorized Agents

You may designate an authorized agent to submit a CCPA request on your behalf. We will require the authorized agent to provide written proof of authorization and may require you to verify your identity directly with us. We will not discriminate against you for using an authorized agent.

Sensitive Personal Information

Under the CCPA/CPRA and the 2026 regulations, "sensitive personal information" (SPI) includes the following categories, which are subject to heightened protections and your right to limit use:

• Social Security numbers, driver's license numbers, state ID numbers, passport numbers, and financial account information
• Precise geolocation data
• Racial or ethnic origin, religious or philosophical beliefs, or union membership
• Contents of mail, email, or text messages where the Firm is not the intended recipient
• Genetic data and biometric information processed for identification purposes
• Health or medical information
• Information about a consumer's sex life or sexual orientation
• Neural data (added effective January 1, 2026 — brain-computer interface or similar neurological data)
• Personal information of consumers the business knows are under the age of 16 (added effective January 1, 2026)

Our Use of Sensitive Personal Information

DiJulio Law Group does not collect neural data, biometric data, or precise geolocation data through this website. In the context of legal representation, the Firm may necessarily collect and process certain categories of sensitive personal information — such as health information, financial account information, or immigration status — as required to provide the legal services you have engaged us to perform. Such information is collected and used only for the purposes disclosed in your engagement agreement and as required by the California Rules of Professional Conduct.

We do not use sensitive personal information to infer characteristics about you beyond what is necessary to provide the requested legal services. We do not use sensitive personal information for advertising, profiling, or any purpose unrelated to the legal matter for which it was provided.

Minors Under 16

Consistent with the 2026 CCPA regulations, personal information of individuals we know to be under the age of 16 is treated as sensitive personal information. We do not knowingly collect personal information from individuals under 16 through the Site. In the context of legal representation involving a minor as a party or subject of the matter, such information is handled with heightened care and in accordance with applicable professional responsibility rules.

Global Privacy Control & Opt-Out

The Global Privacy Control (GPC) is a browser-level signal that communicates a consumer's preference to opt out of the sale or sharing of personal information. Under the CCPA/CPRA and the 2026 regulations, businesses that sell or share personal information are required to honor GPC signals as a valid opt-out request.

Because DiJulio Law Group does not sell or share personal information as defined under the CCPA/CPRA, a GPC signal will not alter our data practices with respect to sale or sharing. However, we acknowledge and respect the intent of GPC signals. If you have enabled GPC in your browser, we will treat it as a request to limit non-essential analytics tracking on this Site.

Confirming Your Opt-Out Status

Under the 2026 CCPA regulations, you have the right to confirm the status of any opt-out request, including one submitted through the Global Privacy Control. To confirm the status of your opt-out preference or any previously submitted CCPA request, please contact us using the information in Section 16. We will respond within the timeframes required by applicable law.

Your California Privacy Choices

To exercise your right to opt out of any data sharing or to manage your privacy preferences, click the "Your California Privacy Choices" link in the footer of this website, or contact us directly using the information in Section 16. Under the 2026 regulations, the steps required to opt out will never exceed the steps required to opt in to data sharing.

Children's Privacy

The Site is not directed to individuals under the age of 18, and we do not knowingly collect personal information from children under 18 through the Site. Under the 2026 CCPA regulations, personal information of individuals the Firm knows to be under the age of 16 is classified as sensitive personal information and is subject to heightened protections (see Section 11).

If you are a parent or guardian and believe that your child under 18 has submitted personal information to us through the Site, please contact us using the information provided in Section 16 and we will take prompt steps to delete such information from our records.

Legal services provided by the Firm may involve matters on behalf of minors. Any personal information relating to minors collected in the context of formal legal representation is governed by the relevant engagement agreement, the California Rules of Professional Conduct, and applicable law.

Changes to This Policy

We reserve the right to modify this Privacy Policy at any time to reflect changes in law, regulation, our practices, or other factors. If we make material changes to this policy, we will update the "Last Updated" date at the top of this page and, where appropriate, provide notice through the Site or by direct communication to individuals whose information is affected by the change.

Your continued use of the Site following the posting of any changes to this Privacy Policy constitutes your acknowledgment of those changes. We encourage you to review this policy periodically. The most current version will always be available at www.dijuliolawgroup.com/privacy-policy.

No Attorney-Client Relationship

The information provided on this Site is for general informational purposes only and is not intended as, and should not be construed as, legal advice on any specific matter. Laws and regulations vary by jurisdiction and change frequently. You should consult a qualified attorney regarding your specific circumstances.

DiJulio Law Group does not represent any person based solely on an inquiry submitted through this website. Prior to representation, the Firm will provide a written engagement agreement that specifies the scope of representation, applicable fees, and other material terms.

Contact Us

If you have questions about this Privacy Policy, wish to exercise your California privacy rights, need to confirm the status of a prior opt-out request, or need to report a privacy concern, please contact us using any of the following methods. Personnel responsible for handling CCPA requests are trained in accordance with applicable law.

We will acknowledge receipt of your request within ten (10) business days and will respond fully within the time periods required by applicable California law. We will not use information provided to verify your identity for any purpose other than verification. We maintain records of consumer rights request processing for twenty-four (24) months as required by law.