Privacy Policy

Cole Law Partners (“CLP”, “we”, “us”, or “our”) is a boutique law firm providing personalized counsel in commercial litigation, construction law, employment matters, and related areas. We are committed to protecting the privacy and security of personal information entrusted to us by our clients, prospective clients, website visitors, event attendees, job applicants, vendors, and other individuals (“you”). This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you interact with us, including through our website (www.colelp.com), our services, marketing activities, or other communications.

“Personal information” refers to any data that identifies, relates to, describes, or can reasonably be associated with or linked to an identifiable individual. It does not include de-identified, anonymized, or aggregated data, or information publicly available from government records.

This Policy applies to personal information we collect in online and offline formats, including:

• Through our website and related online services (collectively, the “Site”);
• In connection with providing legal and advisory services (the “Services”);
• During marketing and business development activities, such as events, newsletters, and emails;
• Through job applications or alumni interactions; and
• From visitors to our offices.

This Policy does not apply to personal information processed on behalf of clients during legal representation, which is governed by our engagement agreements, professional ethics rules (including Massachusetts Rules of Professional Conduct), and applicable laws. If you are a resident of California, Colorado, Connecticut, Virginia, or another state with comprehensive privacy laws, additional rights may apply (see “Your Rights” below).

We may update this Policy from time to time. Changes will be posted here with the updated date. Your continued use of our Site or Services after changes constitutes acceptance of the revised Policy.

Information We Collect and How We Collect It

We collect personal information depending on your interactions with us. We obtain it directly from you, automatically through technology, or from third-party sources.

Categories of Personal Information

The following table outlines the categories of personal information we may collect, examples, and sources:

Category	Examples	Sources
Identifiers	Name, email address, postal address, phone number, IP address, online identifiers, government-issued ID (e.g., for client onboarding).	Directly from you (e.g., forms, communications); automatically (e.g., Site usage); third parties (e.g., public records, business directories).
Professional or Employment Information	Job title, employer, work history, education, professional licenses (e.g., bar admissions), qualifications.	Directly from you (e.g., inquiries, applications); third parties (e.g., LinkedIn, references).
Demographic Information	Age, gender, marital status (where relevant, e.g., for events or diversity initiatives). May include sensitive data like race or ethnicity if voluntarily provided.	Directly from you (e.g., surveys, event registrations).
Commercial/Financial Information	Billing details, payment information, financial records (for client services or vendor relations).	Directly from you; third parties (e.g., banks for AML compliance).
Internet or Network Activity	Browsing history on our Site, device type, browser type, pages visited, time spent, referral sources.	Automatically via cookies, analytics tools (see “Cookies and Tracking Technologies” below).
Geolocation Data	Approximate location based on IP address or provided address.	Automatically; directly from you.
Audio/Visual Information	Photos, videos, or recordings from events or office visits; voicemails.	Directly from you; captured during interactions.
Sensitive Personal Information	Health data (e.g., dietary preferences for events), racial/ethnic origin (if provided for diversity purposes), or other protected classifications. We collect this only with consent or as required by law.	Directly from you.
Inferences	Preferences or profiles derived from other data (e.g., interests in legal topics for targeted communications).	Generated internally from collected data.

We do not knowingly collect personal information from children under 13. If we learn we have done so, we will delete it.

Cookies and Tracking Technologies

Our Site uses cookies, web beacons, and similar technologies to enhance functionality, analyze usage, and personalize content. These may collect internet/network activity data. We use essential cookies for Site operation and analytics cookies for performance; you can manage preferences via browser settings. Third-party tools (e.g., Google Analytics) may also collect data; their practices are governed by their own policies.

How We Use Your Personal Information

We use personal information for legitimate business purposes, including:

• Providing Services: To onboard clients, deliver legal advice, manage cases, comply with anti-money laundering (AML) and know-your-client (KYC) requirements, and fulfill contractual obligations.
• Marketing and Communications: To send newsletters, legal updates, event invitations, and tailored content based on your interests. We rely on legitimate interests or consent where required.
• Site Operation and Improvement: To maintain, secure, and analyze Site usage; respond to inquiries; prevent fraud.
• Business Operations: For recruitment, vendor management, alumni relations, internal analytics, and compliance with laws (e.g., sanctions screening).
• Events and Relationship Building: To host events, track attendance, and build professional relationships.
• Legal Compliance: To meet regulatory obligations, respond to legal processes, or protect our rights.

Our legal bases for processing (under GDPR/UK GDPR, where applicable) include contract performance, legitimate interests (e.g., business development), legal obligations, and consent (e.g., for marketing emails).

We retain personal information only as long as necessary for these purposes, or as required by law (e.g., client records for 7+ years).

How We Share Your Personal Information

We do not sell or rent your personal information. We may disclose it in limited circumstances:

• Service Providers: To vendors (e.g., IT providers, event organizers, analytics firms) bound by confidentiality and used only for our purposes.
• Affiliates and Partners: Within CLP or with co-counsel for joint matters (with client consent where required).
• Legal and Compliance: To regulators, courts, or law enforcement if required; for audits or disputes.
• Business Transfers: In mergers, acquisitions, or asset sales, subject to confidentiality.
• With Consent: As you direct or permit.

We may share de-identified data without restriction.

Security of Your Personal Information

We implement reasonable administrative, technical, and physical safeguards to protect personal information from unauthorized access, loss, or misuse (e.g., encryption, access controls, firewalls). However, no system is infallible; we cannot guarantee absolute security. Report suspected breaches to info@colelp.com.

Your Rights and Choices

You have rights regarding your personal information, subject to verification and exceptions:

• Access, Correction, Deletion: Request to know, correct, or delete your data.
• Opt-Out: Unsubscribe from marketing via email links or contact us. Limit sharing under certain state laws (e.g., no “sales” under CCPA).
• Do Not Track: We do not respond to browser Do Not Track signals but honor opt-outs where required.
• State-Specific Rights:
  • California (CCPA/CPRA): Rights to access (twice/year), delete, correct, opt-out of sales/sharing, limit sensitive data use. We do not sell/share for targeted ads. No financial incentives. Non-discrimination for exercising rights.
  • Other States (e.g., CO, CT, VA): Similar rights to access, correct, delete, opt-out of targeted ads/profiling/sales (we do not engage in these).
• GDPR/UK GDPR (if applicable): Additional rights like objection, restriction, portability. Data controller: Cole Law Partners, [address]. Contact our DPO at info@colelp.com.

To exercise rights, contact us at info@colelp.com or [phone]. We respond within legally required timelines (e.g., 45 days for CCPA). Authorized agents may submit on your behalf with verification.

International Transfers

If you are outside the U.S., note that we process data in the U.S., which may have different protections. By providing data, you consent to transfer. For EEA/UK data, we use Standard Contractual Clauses if needed.

Third-Party Links

Our Site may link to third-party sites; we are not responsible for their practices. Review their policies.

Contact Us

For questions or requests:
Cole Law Partners
Email: info@colelp.com
Phone: 617-356-0606

This Policy is governed by U.S. law.