Who We Are

Holborn Law APC is the business responsible for the personal information collected through this website (https://holborn.law).

Data Controller: Holborn Law APC
Email: nesa@holborn.law
Address: 500 N. State College Blvd. #1100-434, Orange, CA 92868

What Data We Collect

We collect the following types of personal information through our website:

Contact and inquiry information: your name, email address, and phone number when you request a free consultation.
Cookie consent preferences: your choices about cookies and similar technologies, recorded through our consent management system.
Device and technical information: IP address, browser type, and related technical data needed to load and protect the website.
Analytics information (with your consent): information about how visitors use the website collected through analytics technologies, which may include online identifiers and information about pages viewed and interactions.

Sources of personal information:

Directly from you when you submit a consultation request through our website.
Automatically from your device when you access the website (for example, through technical logs and similar records).
From cookies and similar technologies, including analytics cookies, when you choose to allow them through our cookie settings.

Providing your contact and inquiry information is optional, but if you do not provide it, we may not be able to respond to your request for a free consultation. Device and technical information is collected as part of providing the website.

How We Use Your Data

We use your personal information for the following purposes:

To respond to your request for a free consultation and communicate with you about your inquiry (legal basis: contract).
To provide legal services to clients and manage the client relationship (legal basis: contract).
To protect the website and our systems, including monitoring for security threats and abuse using technical records (legal basis: legitimate interest).
To measure and understand website usage using analytics technologies (legal basis: consent). You can withdraw your consent at any time by adjusting your cookie preferences.

Who We Share Your Data With

We share personal information only as needed to operate and secure our website and to provide the services you request. When we use service providers, they process personal information according to their own privacy policies and our instructions where applicable.

Cloudflare: We use Cloudflare to help deliver and protect the website (for example, performance optimization and security). This involves processing device and technical information such as IP address and browser details to route traffic and help detect malicious activity.

Google Analytics: If you allow analytics cookies, we use Google Analytics to understand how visitors use our website. This involves processing analytics information collected through cookies and similar technologies to generate reports and insights about website usage.

adscale.de: We use services associated with adscale.de in connection with website functionality that may involve online identifiers and technical information. Where these technologies involve cookies or similar tracking, they operate based on your cookie choices.

We use our own consent management system (Trustwards) to record and manage your cookie preferences. This data is processed internally and not shared with third parties.

International Data Transfers

Some of our service providers are located outside the primary processing jurisdiction, specifically in the United States. This means personal information may be transferred to, stored in, or accessed from the United States when these providers support our website.

Google Analytics (Google LLC): Google LLC is certified under the EU-U.S. Data Privacy Framework (DPF).
Cloudflare (Cloudflare, Inc.): Cloudflare, Inc. is certified under the EU-U.S. Data Privacy Framework (DPF).

Our consent management system (Trustwards) is based in Spain (EU), so consent data is not transferred internationally.

How Long We Keep Your Data

Client files and personal information are retained for as long as necessary to provide legal services and to comply with our professional and legal recordkeeping obligations, generally a minimum of 5 years after a matter concludes, consistent with California State Bar requirements. Contact form submissions from prospective clients who do not retain the firm are kept only as long as needed to respond to the inquiry.

Cookie consent records: 10 years (to demonstrate compliance and address potential claims within legal limitation periods).
Security logs and technical records: 12 months.
Analytics data: until consent is withdrawn or according to the analytics tool retention settings.

Your Rights

If you are a California consumer, you have the following rights under the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA):

Right to know: you can request information about the personal information we collected about you, including the categories of personal information, the sources, the purposes for collecting it, and the categories of third parties we disclosed it to.
Right to delete: you can request that we delete personal information we collected from you, subject to exceptions allowed by law.
Right to correct: you can request that we correct inaccurate personal information we maintain about you.
Right to opt-out of sale or sharing: you can direct us not to sell or share your personal information for cross-context behavioral advertising (“Do Not Sell or Share My Personal Information”).
Right to limit the use and disclosure of sensitive personal information: you can request limits on certain uses and disclosures of sensitive personal information, where applicable under the CCPA/CPRA.
Right to non-discrimination: we will not discriminate against you for exercising your privacy rights.

How to exercise your rights: Please submit your request by emailing nesa@holborn.law. We may need to verify your identity before completing your request. Under the CCPA/CPRA, we generally respond within 45 days, and we may extend this period by an additional 45 days when reasonably necessary, with notice.

Automated Decision-Making

We do not use automated decision-making or profiling that produces legal effects or similarly significantly affects you.

Children's Privacy

Our services are not directed at children under 16 years of age. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately.

Data Security

We implement appropriate technical and organizational measures designed to protect personal information. However, no method of transmission over the Internet or method of electronic storage is 100% secure. We cannot guarantee absolute security, but we take reasonable precautions to reduce risk.

Data Breach Notification

If we become aware of a personal data breach that poses a high risk to your rights and freedoms, we will notify you without undue delay. Our notice will describe, as appropriate, the nature of the breach, the likely consequences, and the measures taken or proposed to address it. We maintain procedures to detect, report, and investigate security incidents. If you suspect a security issue involving our website, please contact us at nesa@holborn.law.

How to Lodge a Complaint

We encourage you to contact us first so we can try to resolve your concern.

California consumers may also submit complaints to the California Privacy Protection Agency (CPPA) or the California Attorney General. CPPA website: https://cppa.ca.gov/

If you are located outside California, you may have the right to lodge a complaint with the competent authority in your jurisdiction.

Updates to This Policy

We review and update this Privacy Policy periodically. The “Last updated” date at the top of this policy indicates when it was last changed. If we make significant changes, we will provide notice by posting an update on this website and, where appropriate, by email. Changes take effect from the date indicated at the top of this policy. Where processing is based on consent, we will request new consent when required.

Contact Us

Email: nesa@holborn.law
Address: 500 N. State College Blvd. #1100-434, Orange, CA 92868
Data Controller: Holborn Law APC

California Privacy Rights (CCPA/CPRA)

This section applies to California consumers and serves as our Notice at Collection.

Categories of personal information collected in the last 12 months:

Identifiers: such as name, email address, phone number, IP address, and other online identifiers.
Internet or other electronic network activity information: such as information about interactions with our website collected through analytics technologies when you allow them.
Cookie preference information: records of your cookie choices and related consent signals.

Business or commercial purposes for collecting personal information:

To respond to consultation requests and communicate with prospective clients.
To provide legal services to clients and manage the client relationship.
To operate, maintain, and secure our website and systems.
To measure and understand website usage through analytics, where you have provided consent through your cookie choices.

Sale of personal information: We do not sell personal information.
Sharing for cross-context behavioral advertising: We do not share personal information for cross-context behavioral advertising.

Do Not Sell or Share My Personal Information: Because we do not sell or share personal information for cross-context behavioral advertising, we do not offer this website as a “sale” or “sharing” opt-out mechanism for those activities. If this changes, we will provide a clear “Do Not Sell or Share My Personal Information” option. We honor Global Privacy Control (GPC) signals as valid opt-out requests where applicable.

Right to limit the use of sensitive personal information: We do not collect special categories of data through this website as part of our consultation request process. If we ever collect sensitive personal information as defined by the CCPA/CPRA and use it beyond what is permitted without offering a limitation right, we will provide a method to limit its use and disclosure.

How to submit a request: Email nesa@holborn.law with your request to know, delete, or correct. You may also use this contact to ask questions about our privacy practices.

Verification: To protect your information, we will take reasonable steps to verify your identity before responding. The verification steps will depend on the nature of the request and the sensitivity of the information involved.

Response timing: We generally respond within 45 days. If we need more time, we may extend by an additional 45 days and will notify you of the reason for the extension.

Non-discrimination: We do not discriminate against you for exercising your CCPA/CPRA rights.