Privacy policy

What this policy covers

This policy applies to derosalawfirm.com and to information collected through the site’s free case review form. It does not apply to information we receive by phone, mail, or in person, which is governed by the engagement agreement and the attorney-client relationship where one exists.

Submitting information through this site, including the intake form, does not create an attorney-client relationship. See the Disclaimer and Terms of Use for that scope.

Even if we do not take your matter, information you share while seeking legal help is protected by our professional duties to prospective clients under California Rule of Professional Conduct 1.18. We will not use or reveal it except as those rules permit.

What information do we collect, and where does it come from?

We collect information directly from you, and limited technical information automatically through your device and browser.

From you, directly:

• Case review form: your name, email address, phone number, and the answers and narrative you submit. The form runs on Fluent Forms, a WordPress plugin: submissions are processed and stored on our own website environment, hosted with Kinsta, not routed through a third-party form service’s cloud.
• What the form asks for: contact information, employment details (employer name, job title, dates of employment, and similar facts relevant to a potential claim), a narrative description of your situation. The form does not accept file uploads. With each submission the form software also records your IP address, the approximate location derived from it, and your browser and device type, for security and spam prevention. Provide only what you are comfortable sharing.

Automatically, through your device:

• Standard technical data such as IP address, browser type, device type, pages visited, and referring URL, collected through Google Analytics 4. GA4 is consent-gated: it does not load, and no analytics cookies are set, until you opt in through the cookie banner. See the Cookie Notice for details on what runs before and after you make a choice.
• Security and performance data collected by Cloudflare, our content delivery and security provider, as part of delivering the site and protecting it from abuse.
• Anti-spam verification data collected by Cloudflare Turnstile, which protects the site’s forms from automated spam. Turnstile evaluates limited browser signals to distinguish people from bots; it is not an advertising or analytics tool and does not require you to solve visual puzzles.

We do not run any advertising or social-media pixels on this site. We do not use session replay software and we do not operate a chat widget on this site.

Why do we collect this information?

• Respond to inquiries and evaluate whether we can assist with a potential legal matter.
• Communicate with current and prospective clients about their matters.
• Understand how visitors use the site, so we can improve it, using consent-gated analytics (Google Analytics 4).
• Operate, secure, and maintain the website (Kinsta hosting, Cloudflare delivery and security, Cloudflare Turnstile anti-spam).
• Meet legal, regulatory, and professional-responsibility obligations.

We do not use intake form information for any purpose other than evaluating and, where an attorney-client relationship is formed, representing you. We do not use case narrative content for marketing.

Who do we share information with?

We do not sell personal information, and we do not share personal information for cross-context behavioral advertising, as those terms are used under California law. This site runs no advertising pixels of any kind.

We work with a limited set of service providers who process information on our behalf, each bound by their own privacy terms and, where applicable, contractual limits on how they may use data:

We may also disclose information where required by law, court order, or subpoena, or to protect the rights, property, or safety of our firm or others.

We do not permit these providers to use the information they process for us for their own independent marketing purposes.

How long do we keep information?

• Case review submissions (on the site and in our inquiry-tracking software): retained while a potential or actual matter is being evaluated or handled, and thereafter in accordance with the State Bar of California’s file-retention guidance, applicable statutes of limitation, and any requirements of our malpractice carrier, after which they are securely deleted or destroyed.
• Analytics data: retained according to the Google Analytics 4 data-retention settings for this site, which we have configured conservatively.

If you ask us to delete information we hold about you and we are not required to keep it (for example, by an ethical duty to preserve client files, or by law), we will do so. See “Your rights” below.

How do we protect your information?

We take reasonable, industry-standard measures to protect the information you share with us, including:

• The site is served over encrypted (HTTPS) connections and protected by Cloudflare’s infrastructure-level security.
• Form submissions are stored within the site’s managed hosting environment at Kinsta, which encrypts data at rest and in transit.
• The site’s forms are protected against automated abuse by Cloudflare Turnstile.
• Access to intake and client information is limited to Taylor E. DeRosa and any staff or contractors bound by confidentiality obligations. As a sole practitioner, Taylor E. DeRosa personally reviews intake submissions. There is no intermediate staff layer handling your information before he sees it.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If you have particularly sensitive documents, you are welcome to describe your situation first and discuss the best way to share supporting materials before sending them.

What rights do you have over your information?

Regardless of whether the CCPA’s thresholds apply to us, we extend the following rights to anyone who submits information through this site, both as a courtesy and, to the extent applicable, as required by law:

• Right to know / access: you can ask what personal information we have collected about you and why.
• Right to correction: you can ask us to correct inaccurate information.
• Right to deletion: you can ask us to delete information we hold about you, subject to exceptions such as information we are ethically or legally required to retain (for example, client file records), or information needed to complete a matter already in progress.
• Right to opt out of marketing: we do not send marketing email. If we ever offer a newsletter, it will be opt-in only, with an unsubscribe link in every message.
• Right to opt out of sale or sharing: we do not sell personal information, and we do not share it for cross-context behavioral advertising, so there is nothing to opt out of. If you would like written confirmation, contact us and we will provide it and record your request.
• Right to non-discrimination: we will not treat you differently for exercising any of these rights.

How to exercise these rights: email hello@derosalawfirm.com, call (714) 261-9895, or write to DeRosa Law Firm, 5811 Pine Avenue, Suite B, Chino Hills, CA 91709. We will respond within a reasonable time and may need to verify your identity before acting on requests involving sensitive information, such as intake or case-related records.

Do Not Track and Global Privacy Control (GPC)

Most browsers offer a “Do Not Track” (DNT) signal. There is no accepted industry standard for how websites should respond to DNT, and this site does not currently change its behavior based on a DNT signal alone.

This site does honor the Global Privacy Control (GPC), an opt-out signal your browser or a browser extension can send automatically. When your browser sends a GPC signal, this site automatically treats it as a decline of non-essential cookies: analytics stays off and the cookie banner is not shown. You can still open “Cookie Preferences” in the site footer to review or change that choice. See the Cookie Notice for the full breakdown of what runs before and after a GPC or cookie-consent choice.

Children’s privacy

This website is not directed to children, and we do not knowingly collect personal information from anyone under 16. If you believe a minor has submitted information to us, contact us at hello@derosalawfirm.com and we will delete it.

Changes to this policy

We may update this policy from time to time, for example to reflect a new service provider or a change in the law. When we do, we will update the “Effective date” at the top of this page. If a change is material, we will note it prominently on this page for a reasonable period. We encourage you to review this page periodically.

Contact us

Questions about this policy, or requests regarding your information, can be directed to:

Taylor E. DeRosa
DeRosa Law Firm
Orange, California
hello@derosalawfirm.com
(714) 261-9895

Written requests under this policy (including CCPA-style requests) may be mailed to: DeRosa Law Firm, 5811 Pine Avenue, Suite B, Chino Hills, CA 91709.