1. Introduction

Sunshine State Law, PLLC ("we," "us," or "our") is a law firm providing legal services. This Privacy Policy explains how we collect, use, disclose, and protect personal information and device data when you visit our website at www.sunshinestatelawoffice.com, use our mobile application Sunshine State Law, PLLC (the "App"), or otherwise interact with our online services (collectively, the "Services").

We are committed to transparency, especially regarding sensitive user data and device information. This Policy applies to information collected through the Services and does not govern information obtained offline or in the course of an attorney-client relationship (which is protected by applicable professional rules of confidentiality and privilege). Clients should also refer to our engagement letters and terms of representation.

By using the Services, you acknowledge the practices described in this Policy. If you do not agree, please do not use the Services.

2. Information We Collect

We collect information in the following categories:

A. Information You Provide Directly

• Contact and identity details (name, email address, phone number, postal address).
• Inquiry or consultation information submitted via contact forms, chat, or email.
• Account registration details (if the App or website offers accounts).
• Payment or billing information (processed by third-party providers; we generally do not store full payment card details).
• Any other information you choose to submit (e.g., résumé materials for career inquiries, event registrations).

B. Sensitive Personal Information

Depending on the nature of your inquiry or the Services used, we may collect or process sensitive data, including (but not limited to):

• Government identifiers (e.g., Social Security numbers, driver's license numbers) when required for conflicts checks, client intake, or legal compliance.
• Financial account information.
• Health or medical information (if relevant to a matter).
• Precise geolocation data (if enabled in the App).
• Biometric data (only if explicitly collected and with required consents/notices).
• Other data classified as "sensitive personal information" or "special category data" under applicable law.

We collect sensitive data only when necessary for legitimate legal services, compliance, or with your consent, and we apply heightened safeguards.

C. Device and Technical / Automatically Collected Information

When you use the website or App, we (and our service providers) may automatically collect:

• Device identifiers (device ID, advertising ID, MAC address).
• IP address, browser type and version, operating system, device type and model.
• App usage data (features accessed, session duration, crash logs).
• Approximate or precise location data (if permission is granted).
• Log data, referring/exit pages, clickstream data, and interaction metrics.
• Cookie and similar technology data (see Section 7).

D. Information from Third Parties

We may receive information from analytics providers, advertising partners, public records, or other sources to support conflicts checks, marketing, or service improvement (subject to applicable law).

We do not knowingly collect personal information from children under 13 (or the applicable age of digital consent). If we learn we have done so, we will delete it promptly.

3. How We Use Information

We use the information we collect for the following purposes:

• To respond to inquiries, schedule consultations, and provide requested information or services.
• To perform conflicts checks and client intake.
• To operate, maintain, and improve the website and App (including troubleshooting, analytics, and security).
• To personalize content and communications.
• To send administrative or service-related notices.
• For marketing and promotional communications (with opt-out available).
• To detect, prevent, and respond to fraud, security incidents, or illegal activity.
• To comply with legal, regulatory, ethical, and professional obligations (including court orders and bar rules).
• For internal research, analytics, and business operations (often using de-identified or aggregated data).

Legal bases for processing (where required, e.g., under GDPR) may include: performance of a contract, legitimate interests (e.g., site security and improvement), consent, and compliance with legal obligations.

4. How We Share Information

We do not sell personal information in the traditional sense. We may share information in these limited circumstances:

• Service providers / processors – Trusted vendors who assist with hosting, analytics, email delivery, payment processing, security, or App functionality, under contractual obligations to protect the data.
• Professional advisors and co-counsel – As needed for legal representation or firm operations.
• Legal and compliance purposes – When required by law, court order, subpoena, or to protect rights, safety, or property (ours or others'), or in connection with a merger, acquisition, or asset sale.
• With your consent or at your direction.
• Aggregated or de-identified data that cannot reasonably identify you.

We require service providers to implement appropriate security measures. For California residents and under certain other state laws, we provide disclosures regarding "sale" or "sharing" for cross-context behavioral advertising if applicable (see Section 8).

5. Data Security

We implement reasonable administrative, technical, and physical safeguards designed to protect personal information and sensitive data against unauthorized access, disclosure, alteration, or destruction. These may include encryption in transit and at rest, access controls, multi-factor authentication, employee training, and regular security assessments.

No method of transmission or storage is 100% secure. We cannot guarantee absolute security. In the event of a data breach affecting your information, we will provide notice as required by applicable law.

6. Data Retention

We retain personal information only as long as necessary for the purposes described in this Policy, to fulfill our legal and ethical obligations (including document retention requirements for legal matters), to resolve disputes, and to enforce agreements. Retention periods vary by data type and legal requirements. When no longer needed, we securely delete or de-identify the data.

7. Cookies, Tracking Technologies, and Device Data

We and our partners use cookies, pixels, web beacons, SDKs, and similar technologies to collect device and usage data, remember preferences, analyze traffic, and support advertising/analytics.

You can manage cookie preferences through your browser settings or, where available, our cookie consent tool. The App may request device permissions (location, notifications, etc.); you can control these in your device settings. Disabling certain technologies may affect functionality.

8. Your Privacy Rights

Depending on your location, you may have rights including:

• Access / Know – Request details about the personal information we hold about you.
• Correction / Rectification – Request correction of inaccurate data.
• Deletion / Erasure – Request deletion (subject to legal exceptions, including retention for legal matters).
• Opt-out of sale/sharing or targeted advertising (California and certain other states).
• Limit use of sensitive personal information (where applicable).
• Portability – Receive a copy of your data in a portable format.
• Withdraw consent (where processing is based on consent).
• Object or restrict processing (GDPR and similar laws).
• Non-discrimination for exercising rights.

How to exercise rights: Contact us at the details in Section 11. We will verify your identity and respond within the timeframes required by law. Authorized agents may submit requests on your behalf with proper authorization.

California residents (CCPA/CPRA): We provide the required notices regarding categories of personal information collected, sources, purposes, and disclosures in the preceding 12 months. We do not sell personal information of consumers under 16 with actual knowledge.

EEA/UK residents: You also have the right to lodge a complaint with your local supervisory authority.

9. International Data Transfers

If you are located outside the United States, your information may be transferred to and processed in the United States or other countries that may have different data-protection standards. Where required, we use appropriate safeguards (such as Standard Contractual Clauses) for such transfers.

10. Third-Party Links and Services

The Services may contain links to third-party websites or integrate third-party services. This Policy does not apply to those third parties. We encourage you to review their privacy policies.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last Updated" date at the top will reflect changes. Material changes will be notified by posting the revised Policy or by other appropriate means. Continued use of the Services after changes constitutes acceptance of the updated Policy.

12. Contact Us

If you have questions, concerns, or wish to exercise your rights, please contact us:

Sunshine State Law, PLLC 2058 Cottage Street, Fort Myers, Florida 33901 Email: info@sunshinestatelawoffice.com Phone: 239-790-4477