PRIVACY POLICY

Lubin Law Firm  ·  Law Office of Seth D. Lubin, P.A.

Effective Date: June 2, 2026  ·  Last Updated: June 2, 2026

This Privacy Policy ("Policy") describes how Lubin Law Firm (the Law Office of Seth D. Lubin, P.A.), a Florida professional association ("Firm," "we," "us," or "our"), collects, uses, discloses, and protects information about visitors to our website at www.lubinlawfirm.com (the "Website"). This Policy applies to information we collect through the Website and through communications you initiate with us in response to the Website. It does not govern information we receive from clients in the course of an established attorney-client relationship, which is addressed separately by the Rules Regulating The Florida Bar and our engagement letters.

Please read this Policy carefully. By continuing to use the Website after you have had a reasonable opportunity to read this Policy, and by clicking "Accept" on our cookie consent banner (if presented), you confirm that you have read and understand this Policy. If you do not agree with any part of this Policy, you should not use the Website.

1. Information We Collect

1.1 Information you provide to us directly.

When you contact us through the Website (including by completing a contact form, scheduling a consultation, sending an email through a link on the Website, or calling a telephone number listed on the Website), we collect the information you provide. This typically includes:

·     Your name

·     Your email address

·     Your telephone number

·     The property address or other information relevant to your inquiry

·     The contents of your message or inquiry

·     Any other information you choose to provide

Telephone calls to the Firm may be recorded for quality assurance, training, and documentation purposes. We will inform you at the beginning of any call if it is being recorded.

1.2 Information collected automatically when you visit the Website.

When you visit the Website, we and our service providers collect certain information automatically through cookies, web beacons, and similar technologies. This information may include:

·     Your Internet Protocol (IP) address

·     Your browser type and version, operating system, and device identifiers

·     Your general geographic location (city or region level), derived from your IP address

·     The pages of the Website you visit and the time and duration of your visits

·     The website (if any) that referred you to the Website

·     Aggregate analytics information about Website usage

Section 5 of this Policy describes the specific tracking technologies in use, your choices regarding them, and how we obtain your consent before deploying non-essential tracking on your device.

1.3 Information we do not collect.

We do not knowingly collect Social Security numbers, financial account information, government identification numbers, biometric identifiers, precise (sub-city) geolocation, or sensitive categories of personal information through the Website. If you provide such information voluntarily in an unsolicited communication, we will use it only as reasonably necessary to respond to your inquiry and otherwise consistent with this Policy and our professional obligations.

2. Categories of Personal Information

For purposes of state privacy laws that categorize personal information, we collect or have collected the following categories of personal information from Website visitors in the past twelve (12) months. Categories follow the framework established by the California Consumer Privacy Act / California Privacy Rights Act ("CCPA/CPRA"); equivalent categories under other state laws are also represented.

A. Identifiers (e.g., name, email address, telephone number, IP address) — Yes

B. Customer records information (Cal. Civ. Code § 1798.80(e)) — Yes

C. Protected classification characteristics under California or federal law — No

D. Commercial information (e.g., transaction history with the Firm) — Limited (contact and engagement history only)

E. Biometric information — No

F. Internet or other electronic network activity information — Yes

G. Geolocation data (general only; no precise geolocation) — Yes (general)

H. Sensory data (audio, electronic, visual) — Yes (telephone call recordings, where applicable)

I. Professional or employment-related information — No

J. Non-public education information — No

K. Inferences drawn from other personal information — Limited

L. Sensitive personal information (as defined under CCPA/CPRA, VCDPA, CPA, and similar laws) — No

3. Sources of Information

We obtain personal information from the following sources:

·     Directly from you, through forms, emails, and telephone calls

·     Automatically from your device when you visit the Website, through cookies and similar technologies

·     From third-party service providers that support the Website (such as our website hosting platform, analytics services, and form spam protection services)

·     From referrals (when another person provides your contact information to refer you to the Firm), with the understanding that the referring party represents to us that they have your permission to do so

4. How We Use Personal Information

We use personal information for the following purposes:

·     To respond to your inquiries, including evaluating whether the Firm can assist you with the matter you have raised

·     To communicate with you about your matter, including scheduling consultations and following up on outstanding questions

·     To provide legal services after an attorney-client relationship is established under a signed engagement letter

·     To operate, maintain, and improve the Website

·     To analyze Website usage in aggregate form to improve content and user experience

·     To detect and prevent fraud, spam, unauthorized access, or other prohibited activity

·     To comply with applicable laws, court orders, subpoenas, and other legal process

·     To enforce our Terms of Use and protect our legal rights

·     For any other purpose disclosed to you at the point of collection or to which you have consented

We do not use Website information for targeted advertising, behavioral advertising, remarketing, or to build profiles of you across non-affiliated websites. We do not engage in automated decision-making or profiling with respect to Website visitors that produces legal or similarly significant effects.

5. Cookies, Pixels, and Tracking Technologies

We use a limited number of cookies and similar technologies on the Website. We describe each category below, including whether it is essential or non-essential, what data it collects, and how to control it.

5.1 Essential cookies.

These cookies are necessary for the Website to function properly and to provide basic security. They include a session cookie ("crumb") used by our website platform to prevent cross-site request forgery, and cookies necessary to verify that form submissions are not automated. Essential cookies do not require your consent.

5.2 Analytics cookies.

We use Google Analytics 4 (operated by Google LLC) to understand aggregate traffic patterns on the Website. Analytics cookies are non-essential and are placed on your device only if you click "Accept" on our cookie consent banner. We have configured Google Analytics to disable Google Signals (cross-device tracking and advertising audience features), and we have disabled ads personalization for all regions. Google Analytics receives a truncated form of your IP address, the pages you view, the approximate duration of your visit, and similar usage information. We use this information only in aggregate form to understand Website performance.

5.3 Form security technologies.

Our website platform (Squarespace, Inc.) deploys Google reCAPTCHA Enterprise on certain pages that contain contact or scheduling forms. reCAPTCHA helps prevent automated spam submissions by analyzing visitor behavior for signs of bot activity. reCAPTCHA may set cookies and transmit limited usage information to Google for the sole purpose of distinguishing human visitors from automated traffic. We consider this an essential security function of the Website.

5.4 Technologies we do NOT use.

For the avoidance of doubt, we do not deploy on the Website: the Meta (Facebook) Pixel, Meta Custom Audiences, LinkedIn Insight Tag, TikTok Pixel, Microsoft (Bing) UET, Pinterest Tag, X (Twitter) Pixel, CallRail or other call tracking pixels, session replay tools such as FullStory, Hotjar, Microsoft Clarity, or Mouseflow, or any cross-site behavioral advertising or retargeting technologies. We do not install pen registers, trap and trace devices, or any other electronic surveillance technology on visitor devices, and we have not obtained or sought any court order authorizing such installations.

5.5 Your consent and your choices.

When you first visit the Website, we display a cookie consent banner that allows you to accept or decline non-essential cookies. Non-essential cookies are not placed on your device until you click "Accept." You may change your preferences at any time by clicking the "Cookie Preferences" link in the Website footer. You may also manage cookies through your browser settings; instructions for doing so are available in your browser's help documentation.

We respond to Global Privacy Control (GPC) signals where supported by our website platform. If your browser sends a GPC signal, we will treat that signal as a request to opt out of any sale or sharing of personal information for cross-context behavioral advertising — although, as described above, we do not engage in either practice. We do not honor browser "Do Not Track" signals because no consistent industry standard governs how they should be interpreted.

6. How We Share Personal Information

We share personal information only as described below. We do not sell personal information for monetary consideration. We do not share personal information for cross-context behavioral advertising. We have not done so in the preceding twelve (12) months and we have no plans to do so.

·     **Service providers.** We share information with service providers who help operate the Website and respond to inquiries, including our website hosting platform (Squarespace, Inc.), our analytics provider (Google LLC, as described in Section 5), and our email service provider. Each service provider is contractually limited to processing personal information only as necessary to provide services to us.

·     **Professional advisors and successor entities.** We may share information with professional advisors (such as accountants, insurers, and outside counsel) under duties of confidentiality, and with any successor entity in connection with a merger, sale, or other transfer of the practice.

·     **Legal compliance.** We may disclose information when we believe in good faith that disclosure is necessary to comply with applicable law, a court order, subpoena, or other legal process, or to protect the rights, safety, or property of the Firm, our clients, or others.

·     **With your direction.** We may disclose information as you direct or consent.

7. Data Retention

We retain personal information for the periods set forth below, after which we delete or de-identify the information unless a longer retention period is required by law or professional obligation:

·     Inquiry and consultation records (where no engagement results): up to two (2) years from the date of last contact

·     Client matter records: as required by the Rules Regulating The Florida Bar and applicable law, generally six (6) years following the conclusion of the matter

·     Website analytics data: aggregated and retained in accordance with our analytics provider's data retention settings, currently set to fourteen (14) months for event-level data

·     Email communications: retained in our email systems for the period necessary to provide responses and as required for our records, generally seven (7) years

8. Data Security

We maintain reasonable administrative, technical, and physical safeguards to protect personal information against loss, theft, unauthorized access, disclosure, alteration, and destruction. These safeguards include HTTPS/TLS encryption of Website traffic, password and access controls on systems containing personal information, and periodic review of our security practices. No method of transmission over the Internet or method of electronic storage is one hundred percent secure, and we cannot guarantee absolute security. Communications sent through the Website prior to the establishment of an attorney-client relationship may not be protected by the attorney-client privilege.

9. Your Rights

Depending on where you reside, you may have rights with respect to your personal information. We honor the rights described below for all U.S. visitors, regardless of state, where it is reasonable to do so:

·     **Right to know / access:** You may request that we provide a copy of the personal information we have about you.

·     **Right to correct:** You may request that we correct inaccurate personal information about you.

·     **Right to delete:** You may request that we delete personal information about you, subject to exceptions for information we are required to retain by law or professional obligation.

·     **Right to opt out of sale or sharing:** As stated above, we do not sell or share personal information for cross-context behavioral advertising. You nonetheless retain the right to direct us not to do so, which we will honor automatically.

·     **Right to limit use of sensitive personal information:** Where applicable. As stated above, we do not collect sensitive personal information through the Website.

·     **Right to non-discrimination:** We will not discriminate against you for exercising any privacy right.

·     **Right to appeal:** If we deny a privacy request, you may appeal our decision by contacting us through the channels in Section 13.

9.1 How to exercise your rights.

To exercise any right described above, contact us using any of the channels in Section 13. You may also designate an authorized agent to act on your behalf, in which case we may require verification of the agent's authority. We will respond to verified requests within 45 days, with an extension of up to 45 additional days if reasonably necessary. We do not charge a fee for processing requests except in cases of manifestly excessive or repetitive requests.

9.2 State-specific provisions.

**California (CCPA/CPRA), Colorado (CPA), Connecticut (CTDPA), Virginia (VCDPA), Utah (UCPA), Texas (TDPSA), Oregon (OCPA), Delaware (DPDPA), and other states with comprehensive privacy laws.** Residents of these states have the rights described in Section 9 above as applicable under their respective state laws. We honor verified consumer requests regardless of state of residence.

**Florida Digital Bill of Rights (FDBR).** The FDBR generally applies to controllers with more than $1 billion in global gross annual revenues that meet additional criteria. The Firm does not meet the FDBR's applicability thresholds. We nonetheless extend the rights described in Section 9 to Florida residents on a voluntary basis.

**California "Shine the Light" Law (Cal. Civ. Code § 1798.83).** As stated in Section 6, we do not share personal information with third parties for those third parties' direct marketing purposes, so no "Shine the Light" disclosure is required. We will nonetheless respond to requests submitted to info@lubinlawfirm.com.

**Nevada (Senate Bill 220).** Nevada residents may request that we not sell certain personal information. As stated above, we do not sell personal information.

10. Children's Privacy

The Website is intended for individuals 18 years of age and older. It is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13 without verifiable parental consent, we will delete that information promptly. If you believe we may have collected information from a child under 13, please contact us using the channels in Section 13.

11. International Visitors

The Website is operated from the United States and is intended for visitors located in the United States, primarily in Florida. If you access the Website from outside the United States, you do so on your own initiative, and you are responsible for compliance with local laws. We do not target individuals in the European Economic Area, the United Kingdom, or other international jurisdictions. We do not transfer personal information to international recipients in the ordinary course of operations, except where our service providers may process limited data on globally distributed infrastructure subject to their own privacy frameworks.

12. Changes to This Policy

We may update this Policy from time to time to reflect changes in our practices or in applicable law. When we make material changes, we will update the "Effective Date" and "Last Updated" date at the top of this Policy and may provide additional notice through the Website. Your continued use of the Website after a material change becomes effective constitutes acknowledgement of the updated Policy. We encourage you to review this Policy periodically.

13. Contact Us

If you have questions about this Policy or wish to exercise any of the rights described above, please contact us by any of the following methods:

·     Email: info@lubinlawfirm.com

·     Telephone: (954) 660-3556

·     Postal mail: Law Office of Seth D. Lubin, P.A., 2645 Executive Park Drive #422, Weston, FL 33331

We will make every reasonable effort to address your concerns and to respond to verifiable consumer requests in a timely manner.