Effective date: September 4, 2025

Plain‑English summary (read this first): We run a law practice in Texas. We keep what you share with us secure, use it only for legitimate legal and business purposes, and give you meaningful control over your data. We also use industry‑standard analytics and security tools that can observe and record how the site is used (for example, page views, clicks, and form entries you choose to submit) so we can keep the site safe and useful. By using this site, calling us, texting us, or using our chat or contact forms, you consent to our collection, use, recording, and monitoring of your communications and device information to the extent permitted by federal and Texas law, and you can opt out of non‑essential tracking any time. If you’re from a state that requires all‑party consent to call or session recording, we will ask for your consent before recording—and you may decline.

---

1) Who we are and what this policy covers

This Privacy & Monitoring Policy (this “Policy”) describes how Raub Law Firm, PC (“we,” “us,” or “our“) collects, uses, discloses, and protects Personal Data related to:

• Visitors to raublawfirm.com and raub.law and any microsites we operate (collectively, the “Site”)

• Individuals who call, text, e‑mail, use web chat, submit contact/intake forms, or otherwise communicate with us (“You”)

• Clients and prospective clients for our personal injury legal services

• Job applicants and vendors interacting with us through the Site

Jurisdiction. This Policy is designed for the United States and is tailored to Texas (including South Texas) and the U.S. District Court for the Southern District of Texas. If you access the Site from another jurisdiction, your rights may vary and, where required, we will honor additional rights that apply to you.

Attorney advertising & no legal advice. The Site is attorney advertising. Nothing on the Site creates an attorney‑client relationship. That relationship begins only after conflicts are cleared and a written engagement agreement is signed by you and us. Do not send confidential information unless and until that relationship is formed.

---

2) Key definitions (plain language)

Personal Data means information that identifies or can reasonably be linked to you (for example, name, e‑mail, phone, IP address, device identifiers, and information you enter into a form).

Sensitive Personal Data includes things like precise location, health‑related information, biometric identifiers, government‑issued IDs, and information about children. We handle Sensitive Personal Data with heightened care and only when we have a lawful basis and any consents required by law.

Processing means anything we do with Personal Data (collect, use, store, share, analyze, secure, or delete).

Controller / Processor. For the Site, we act as a controller—we decide why and how data is processed. Our service providers are processors—they act on our instructions under contract.

---

3) What we collect

We collect data in three categories. Examples are illustrative—not exhaustive.

A) Data you provide directly

• Contact & case info. Name, phone, e‑mail, preferred contact times; accident details, injury descriptions, photos/videos you upload, insurance information you choose to share, and other facts you include in an inquiry or intake form.

• Communications. Phone calls, voicemails, text messages, e‑mails, live chat transcripts. Where legally permitted and with required notices, calls and chats may be monitored or recorded for quality, training, compliance, and evidentiary purposes.

• Hiring & vendor info. Résumés, work history, references, W‑9 and business contact details.

B) Data collected automatically

• Device & network data. IP address, device type, browser/OS, language, referrer/exit pages, and similar technical identifiers.

• Usage & interaction data. Page views, clicks, scrolls, time on page, error logs. We may use session‑replay/analytics tools to understand usability and detect fraud/abuse. These tools may capture on‑page interactions and, if you type into a form, the text you choose to submit (we configure tools to avoid capturing payment card or SSN fields and we do not seek to collect such data on the Site).

• Location signals. We may infer coarse location from IP to localize content and comply with state‑specific rights.

C) Data from third parties

• Referrals & partners. If another law firm or marketing partner refers you to us, we may receive your contact and case details.

• Service providers. Anti‑fraud vendors, security monitoring, cloud hosting, contact center platforms, and analytics providers may provide us with risk signals or aggregated reports.

Note on health information: This Site is not a medical portal and we are not a HIPAA‑regulated entity for Site interactions. If your matter requires us to receive medical records, we will collect them outside the Site after we establish an attorney‑client relationship and execute any necessary releases or business associate agreements.

---

4) Why we use your data (lawful purposes)

We process Personal Data for:

1. Client intake and conflict checks (confirm identity, assess your matter, prevent conflicts)

2. Providing legal services (investigation, evidence management, negotiations, litigation)

3. Operations & security (site performance, fraud prevention, threat detection, incident response)

4. Quality assurance (training staff, ensuring accurate records, improving workflows)

5. Communications (responding to inquiries, scheduling, sending updates you request)

6. Marketing & analytics (measuring which pages help people find answers; honoring opt‑outs for targeted ads and sales of data)

7. Compliance & legal defense (meeting obligations, responding to lawful requests, establishing/defending legal claims)

We do not sell Personal Data to data brokers. We never sell Sensitive Personal Data (such as health or biometric data). If we ever proposed to do so, we would present a clear, separate notice and obtain the consents required by law.

---

5) Monitoring & recording notice (calls, chats, and site sessions)

We use security and analytics tools that monitor Site traffic and may record:

• inbound/outbound calls, voicemails, and call metadata;

• two‑way chat and contact forms, including contents you choose to submit; and

• on‑page interactions (e.g., mouse movements, clicks, scrolls) through session‑replay tools configured for legal compliance and data minimization.

Consent to monitoring. By using the Site or contacting us, you consent to this monitoring to the extent permitted by federal and Texas law. If you are in a jurisdiction that requires all‑party consent to record calls or electronic communications, we will post a conspicuous notice and, where required, obtain your express consent (e.g., “this call/chat may be recorded”) before recording. You can decline and continue unrecorded where legally required/feasible or choose alternative contact methods.

What we do not monitor. We do not use keystroke loggers, nor do we attempt to capture passwords or payment card numbers on the Site.

---

6) Cookies, tracking, and your choices

We use:

• Strictly necessary cookies for security and core features (cannot be turned off).

• Functional & analytics cookies to improve usability and understand traffic.

• Advertising/retargeting tags on some pages to reach people who have expressed interest in our services. We will always offer an opt‑out from targeted advertising.

How to control tracking:

• Use our on‑site Privacy Preferences center to opt out of non‑essential cookies and targeted advertising.

• Set a recognized Global Privacy Control (GPC) or similar browser signal—we will honor it as an authorized agent opt‑out where required.

• Use your device/browser settings to clear cookies and restrict cross‑site tracking.

---

7) Texas‑specific rights (TDPSA)

If you are a Texas resident, you have the right to:

• Know/Access whether we process your Personal Data and access it

• Correct inaccuracies in your Personal Data

• Delete Personal Data you provided or we obtained about you

• Portability: receive a copy in a portable, usable format (if available digitally)

• Opt out of (a) targeted advertising, (b) the sale of Personal Data, and (c) profiling in furtherance of decisions with legal or similarly significant effects

How to exercise your rights:

• Use the Texas Privacy Request form linked in the Site footer; or

• E‑mail [[email protected]] with the subject “Texas Privacy Request.”

We will verify your identity and respond within 45 days (with one 45‑day extension if reasonably necessary). You may file up to two free requests per year. If we decline, we will explain why and provide a link to appeal. If we deny your appeal, we will provide a mechanism to contact the Texas Attorney General.

Authorized agents & browser signals. You may authorize an agent to submit an opt‑out on your behalf. Beginning January 1, 2025, we honor browser‑based global opt‑out signals recognized by Texas law as an authorized agent method. You may also use our on‑site opt‑out tools.

Small‑business and sectoral exclusions. If an activity is out of scope because another federal law applies (e.g., HIPAA‑covered medical records), we will handle data under that law’s rules and explain the difference in our response.

---

8) Other U.S. rights that may apply

Depending on your state, you may have additional privacy rights (e.g., California, Colorado, Connecticut, Utah, Virginia). If you tell us your state of residence, we will apply the strongest applicable rights to your request. If you are a California resident, please see our California Privacy Notice [link] for additional disclosures.

Children’s privacy. Our Site is not directed to children under 13. We do not knowingly collect Personal Data from children. If you believe a child under 13 has provided Personal Data to us via the Site, contact us and we will delete it.

E‑mail and text marketing. If you opt in to receive updates, you can unsubscribe at any time using the link in any e‑mail or replying STOP to a text.

---

9) Data retention

We keep Personal Data only as long as necessary for the purposes described above, to resolve disputes, comply with legal/ethical obligations, maintain accurate business and tax records, and preserve evidence reasonably anticipated to be relevant to a legal claim or defense. When retention is no longer necessary, we securely delete or de‑identify the data.

Typical windows (illustrative):

• Site analytics: 12–24 months (aggregated thereafter)

• Contact form submissions (no client engagement): up to 24 months

• Call recordings & chat logs: 12–24 months unless a matter is active

• Client/matter records: per legal and ethical rules (often years), including litigation holds and bar‑mandated periods

---

10) How we share data

We share Personal Data only with:

• Service providers (cloud hosting, call center platforms, e‑mail, analytics, security) under contracts that (a) limit use to our purposes, (b) require safeguards, and (c) require deletion/return at end of service

• Referral or co‑counsel firms (with your direction or consent, or as reasonably necessary to evaluate your case)

• Authorities or counterparties when legally required or to establish, exercise, or defend legal claims

• Successors in a merger, acquisition, or other business transaction (we will require the successor to honor this Policy)

We do not share Personal Data with data brokers for their independent marketing.

---

11) Security

We use reasonable administrative, technical, and physical safeguards designed to protect Personal Data, such as encryption in transit, strong authentication, least‑privilege access, logging, and staff training. No method of transmission or storage is 100% secure; we cannot guarantee absolute security, but we continuously improve our controls.

Incident response & breach notices. If the security of your Personal Data is compromised, we will investigate and provide any notices required by law. If a third‑party service provider causes or experiences an incident involving your data, we may direct them to notify you and regulators where appropriate.

---

12) Special notices for Texas

A) Monitoring and recording laws

Texas permits recording of calls and electronic communications with one‑party consent. Where we record, we will ensure the necessary consent is obtained and will provide conspicuous notice. If you do not consent to recording, tell us; we will offer an alternative where feasible.

B) Biometric identifiers

We do not intentionally collect biometric identifiers on the Site. If, in the future, we use features that could process biometrics (e.g., voiceprint verification on support lines or face geometry in secure portals), we will provide advance notice, obtain written consent, limit use to the stated purpose, and delete such data within the legally required timeframe.

C) Data breach notifications

If a breach of system security involving Sensitive Personal Information occurs, we will notify affected individuals and, where thresholds are met, notify the Texas Attorney General. We may also notify consumer reporting agencies as required.

D) Global Privacy Control (GPC)

For Texas residents, we recognize browser‑based opt‑out signals that meet Texas standards as an authorized agent method for opting out of targeted ads and sale of Personal Data. You may still use our on‑site tools to refine your choices.

---

13) Communications & marketing rules (U.S.)

• E‑mails. We identify our messages as promotional where applicable, include our physical address, and provide a working unsubscribe link. We honor opt‑out requests promptly.

• Texts/Calls. We do not auto‑dial or send prerecorded messages to your mobile number without the level of consent required by law. You can reply STOP to opt out of texts and HELP for help. Standard message and data rates may apply.

• Call recording disclosures. When a call may be recorded, we will say so at the start. If you remain on the line after the notice, that is your consent; otherwise please advise us and we will switch to a non‑recorded method where feasible.

---

14) Law‑enforcement and legal requests

We may disclose information if we believe it is reasonably necessary to:

• comply with applicable law, court order, or lawful process;

• respond to a subpoena or government inquiry;

• protect the rights, property, or safety of you, our clients, our staff, or the public; or

• detect, prevent, or address fraud, abuse, or security issues.

Where allowed, we will narrow overly broad requests, notify you if appropriate, and require valid legal process.

---

15) Your choices and controls (quick actions)

• Opt‑out of ads/cookies: Use our Privacy Preferences center or send a request to [[email protected]]

• Do‑Not‑Sell/Share (Texas and other states): Use the footer link “Your Privacy Choices”

• Access/Correct/Delete/Portability: Use the Texas Privacy Request form or e‑mail us

• Appeal a decision: Reply to our response and include “Privacy Appeal” in the subject

• GPC browser signal: Turn it on in your browser; we’ll honor it where required

• Recording consent: If you do not want a call or chat recorded, tell us before sharing information

---

16) De‑identification & aggregation

We may de‑identify Personal Data (remove identifiers so it cannot reasonably be linked to an individual) and use it for research, analytics, and Site improvement. We will not attempt to re‑identify de‑identified data and will contractually prohibit service providers from doing so.

---

17) International visitors

Our Site and systems are located in the United States. If you access the Site from outside the U.S., your information will be transferred to, stored, and processed in the U.S. By using the Site, you consent to this transfer.

---

18) Third‑party links and services

The Site may link to third‑party sites or embed third‑party services (maps, video players, scheduling). Those services have their own privacy practices. Review their policies before interacting; we are not responsible for their privacy or security practices.

---

19) Changes to this Policy

We may update this Policy to reflect changes in law or our practices. When we post changes, we will update the “Effective date” and, for material changes, provide additional notice (e.g., banner or e‑mail). Your continued use after the effective date constitutes acceptance of the updated Policy.

---

20) Contact us (privacy requests & questions)

Raub Law Firm, PC
Attn: Privacy
814 Leopard Street
Corpus Christi, Texas 78401
Phone: [+1-361-880-8181]
E‑mail: [email protected]

For Texas residents, you may also contact the Texas Attorney General – Consumer Protection (see the AG’s website) if your privacy concerns are not resolved.

---

21) Governance, venue, and conflicts

Governing law & venue. This Policy and any disputes regarding the Site are governed by the laws of the State of Texas, without regard to conflict‑of‑laws principles. Venue for disputes arising from Site use lies in the state courts of Nueces County, Texas or the United States District Court for the Southern District of Texas (Corpus Christi Division), as applicable.

Relationship to engagement agreements. If you become a client, the privacy and confidentiality terms in your signed engagement agreement and our professional/ethical duties control to the extent of any conflict with this Policy.

---

Annex A — Detailed data map (SECTOR86 clarity grid)

Below is a structured “what/why/who/how long” map for common data flows.

Data Category	Examples	Purpose/Use	Legal Basis	Shared With	Typical Retention
Identifiers	Name, e‑mail, phone	Intake, communications	Legitimate interests; your request	Cloud e‑mail, call center	24 months (non‑clients); per matter (clients)
Internet/Device	IP, device fingerprint	Security, performance, geofencing rights	Legitimate interests; compliance	Hosting, security vendors	12–24 months
Usage/Analytics	Page views, scrolls	UX improvement, fraud detection	Legitimate interests; consent where required	Analytics processors	12–24 months (aggregated thereafter)
Communications	Calls, chats, e‑mails	QA, training, documentation	Consent/one‑party consent; legitimate interests	Contact center, CRM	12–24 months (longer if needed)
Case Info	Accident, injury details	Evaluate and provide legal services	Pre‑contractual steps; contract; legal claims	Co‑counsel, experts	Per legal ethics & holds
Sensitive Data	Health data, geolocation	Only when necessary, with heightened care	Consent; legal claims	Limited processors, co‑counsel	Minimum necessary; per law
Children’s Data	Under 13	Not collected/used	N/A	N/A	N/A
Biometric Data	Voiceprint, face geometry	Not collected on Site; if adopted, with explicit consent	Consent; legal compliance	Specialized vendors	As required by law

---

Annex B — Your request workflow

1. Submit: Use the Texas Privacy Request form or e‑mail [email protected].

2. Verify: We may ask for limited info to confirm you are the right person (we minimize verification data).

3. Respond: Within 45 days (one 45‑day extension if necessary), we’ll complete your request or explain why we cannot and how to appeal.

4. Appeal: If you appeal, we reply within 60 days. If denied, we provide the Texas AG complaint mechanism.

5. Recordkeeping: For deletion requests where we got data from other sources, we may keep a suppression record to ensure it stays deleted and is not re‑added, or opt you out of further processing except for exempt purposes.

---

Annex C — Recording & session‑replay transparency (scripts you’ll see)

To avoid ambiguity, here are the exact disclosures we deploy:

Phone: “This call may be monitored or recorded for quality, training, and security. By continuing, you consent to monitoring/recording as permitted by law. If you prefer not to be recorded, please tell us now.”

Web chat: “This chat may be monitored or recorded. By continuing you consent to monitoring/recording as permitted by law. If you prefer not to be recorded, close this window and contact us by phone or e‑mail.”

Session‑replay banner (first visit): “We use cookies and session analytics to improve site performance and security. Click Accept All to consent to analytics/retargeting; click Manage to choose options; strictly necessary cookies always on. We honor Global Privacy Control signals.”

Privacy Preferences center labels:

• Strictly Necessary (Always On)

• Performance & Analytics (Opt‑in)

• Advertising & Retargeting (Opt‑in)

---

Annex D — Service‑provider standards (what we require in contracts)

Our vendor contracts include:

• Purpose limitation and no secondary use

• Confidentiality obligations

• Security controls aligned to the nature and volume of data

• Breach notification and cooperation duties

• Deletion/return of data at end of engagement

• Flow‑down of obligations to subcontractors

• Audit rights or independent assessment reports

---

Annex E — Frequently Asked Questions

Q: Do you sell my data?
A: No. We do not sell Personal Data or share it with data brokers. We use processors to provide the Site and our services under strict contracts.

Q: Will you see everything I do on the Site?
A: We use analytics and security tools that can observe page interactions. We do not use hidden keyloggers, and we configure tools to avoid capturing sensitive fields. You control non‑essential tracking in the Privacy Preferences center.

Q: Are my messages to you confidential?
A: We protect your information, but an attorney‑client relationship starts only after a conflict check and signed engagement agreement. Once you become a client, attorney‑client privilege and confidentiality rules apply.

Q: Can I use GPC to opt out?
A: Yes. We honor recognized browser‑based opt‑out signals for Texas residents as an authorized agent method. You can also set preferences on our Site.

Q: What if I’m from a state that requires consent from everyone on the call?
A: We provide clear recording notices and seek consent. If you do not consent, we’ll offer an alternative method when feasible.

Q: How do you handle medical records?
A: We do not collect medical records through the Site. If we need medical information to evaluate your claim, we will obtain it off‑site via secure channels after you sign required authorizations.

---

© 2025 Raub Law Firm, PC. All rights reserved.