Building windows

California Privacy Notice

Effective Date: January 1, 2020

This California Privacy Notice (“Notice”) applies to “Consumers” as defined in the California Consumer Privacy Act (“CCPA”) and supplements Jeffer Mangels Butler & Mitchell LLP’s (“JMBM,” “us,” “we,” or “our”) other privacy policies and notices. If there is a conflict between this Notice and any other JMBM policy, statement or notice, this Notice will control.

This Notice covers our collection, use, disclosure, and sale of California Consumers’ “Personal Information” (“PI”) as defined by the CCPA. As a law firm, much of the data we collect and process is not subject to CCPA Consumer rights. In particular, PI that is subject to an evidentiary privilege, such as the attorney-client privilege or attorney work product protection, is not subject to the right of a Consumer to know, delete, or opt-out under the CCPA as described in Section 2.

1. COLLECTION AND USE OF PERSONAL INFORMATION

We collect the following PI about California Consumers:

CategoryExamples of PI CollectedPurposes for PI CollectionCategories of Recipients
IdentifiersName, postal address, email address, telephone numbers, identification numbers
  • Processing Interactions and Transactions;
  • Managing Interactions and Transactions;
  • Performing Services;
  • Research and Development;
  • Quality Assurance; and
  • Security

For example, these purposes include to contact you, to verify your identity, to provide services, for business management and planning, and to comply with our legal obligations.

Clients, Government Entities, Tribunals, and Service Providers
Personal Characteristics or TraitsMarital / familial status, race, religion, disabilities
  • Processing Interactions and Transactions;
  • Managing Interactions and Transactions;
  • Performing Services;
  • Research and Development;
  • Quality Assurance; and
  • Security

For example, these purposes include to provide benefits to our partners, and services to our clients.

Clients, Data Subjects, Government Entities, Tribunals, and Service Providers
Commercial Information / Account DetailsPurchase history and preferences
  • Processing Interactions and Transactions;
  • Managing Interactions and Transactions;
  • Performing Services
  • Research and Development;
  • Quality Assurance; and
  • Security

For example, these purposes include to provide benefits to our partners and services to our clients.

Clients, Data Subjects, Government Entities, Tribunals, and Service Providers
Internet Usage InformationInformation regarding interactions with our website, computer systems, and/or devices
  • Processing Interactions and Transactions;
  • Managing Interactions and Transactions;
  • Performing Services
  • Research and Development;
  • Quality Assurance;
  • Security; and
  • Debugging

For example, these purposes include to improve our services, including providing users more relevant content, and to secure our network and protect our personnel.

Service Providers
Professional, Employment and Education InformationJob title, employer, practice area or industry focus
  • Processing Interactions and Transactions;
  • Managing Interactions and Transactions;
  • Performing Services
  • Research and Development; and
  • Quality Assurance

For example, these purposes include to evaluate hiring prospective employees, provide benefits to our partners and to market them to clients and prospective clients.

Clients, Data Subjects, Government Entities, Tribunals, Service Providers, and the General Public
Inferences from PI CollectedCustomer profiles reflecting preferences
  • Processing Interactions and Transactions;
  • Managing Interactions and Transactions;
  • Performing Services
  • Research and Development; and
  • Quality Assurance

For example, for business management and planning and to provide services.

Service Providers

In addition, we may collect, use, and disclose PI as required or permitted by applicable law. We do not treat de-identified data or aggregate consumer information as PI, and we reserve the right to convert, or permit others to convert, PI into de-identified data or aggregate consumer information.

We may share your PI with our Service Providers, including Service Providers that facilitate our advertising and marketing, and other categories of recipients as described in the table above, for the same purposes as the collection purposes set forth in that chart. Subject to the CCPA’s restrictions and obligations, our Service Providers also may use your PI for some or all of the above-listed business purposes. Our Service Providers may themselves engage service providers or subcontractors to enable them to perform services for us; such subprocessing is an additional business purpose for which we are providing you notice.

JMBM does not sell and has not sold (as the term “sale” is defined by the CCPA) Consumer PI.

2. CALIFORNIA PRIVACY RIGHTS

Under the CCPA, California Consumers have certain rights which they may exercise independently or through an authorized agent. As permitted by the CCPA, any request you submit to us is subject to a verification process, which will depend on the nature of the request and the PI requested and will be further explained in response to a request. We will not fulfill your CCPA request unless you have provided sufficient information for us to be satisfied that you are the Consumer about whom we collected the applicable PI. Please promptly respond to any follow-up inquiries so that we may verify your identity. If you request that we provide you with specific pieces of information about you, or that we delete sensitive PI, we may apply heightened verification standards than what we would apply to other types of requests. Authorized agents who meet the agency requirements of the CCPA may submit requests on behalf of Consumers, which will also be subject to a verification process.

Some PI we maintain about Consumers (e.g., clickstream data) is not sufficiently associated with enough PI about Consumers for us to be able to verify that it is a particular Consumer’s PI. Accordingly, we will not include such information in response to Consumer requests. If we cannot comply with a request, we will explain the reasons in our response. We will use PI provided in your request only to verify your identity or authority to make the request and as necessary to track and document requests and responses, unless you also provided the PI to us for another purpose.

We will make commercially reasonable efforts to identify Consumer PI that we collect, use, store, disclose, or otherwise process and to respond to your California Consumer privacy rights requests. In some cases, particularly with voluminous or typically irrelevant data, we may provide you with a summary of your PI and give you the opportunity to elect whether you want us to provide the entire data set. Alternatively, we may direct you on how to access and copy responsive PI yourself. We may charge a reasonable fee or refuse to act upon a request if the request is excessive, repetitive, unfounded, or overly burdensome. If we determine that the request warrants a fee, or that we may decline to comply with the request, we will give you notice explaining why we made that decision. In the case of a fee, we will provide a cost estimate and the opportunity to accept such fees before charging you for responding to your request.

We may collect, use, and disclose your PI as required or permitted by applicable law, which may override your CCPA rights. Please also note we are not obligated to comply with Consumer requests to the extent that doing so would infringe on our rights, or any other person’s or party’s rights, or conflict with applicable law.

Your California Consumer privacy rights are described below. To make a request, contact us or call us and provide us with your name, e-mail address, phone number, the nature of your inquiry, and, if you are disabled, any accessibility accommodations you require.

Information Rights

You have the right to send us a request, no more than twice in a twelve-month period, for any of the following for the period that is twelve months prior to the request date:

  1. The categories of PI we have collected about you.
  2. The categories of sources from which we collected your PI.
  3. The business or commercial purposes for our collecting or selling your PI.
  4. The categories of third parties to whom we have shared your PI.
  5. The specific pieces of PI we have collected about you.
  6. A list of the categories of PI disclosed for a business purpose in the prior twelve months, or a statement that no disclosure occurred.
  7. A list of the categories of PI sold about you in the prior twelve months, or that no sale occurred. If we sold your PI, we will explain:
    1. The categories of your PI we have sold.
    2. The categories of third parties to whom we sold PI, by categories of PI sold for each third party.

For your specific pieces of information, as required by the CCPA, we will apply the heightened verification standards set forth below and may exclude that information if you cannot meet those standards. If we cannot verify you to a reasonable degree of certainty, we will not deliver the category information, but will refer you to the disclosures in Section 1 above.

Please note that PI is retained by us for various time periods, so we may not be able to fully respond to what might be relevant going back twelve months prior to the request.

Obtaining Copies of PI

You have the right to make or obtain a transportable copy, no more than twice in a twelve-month period, of your PI that we have collected in the period that is twelve months prior to the request date and that we are maintaining. In order to protect the privacy and data security of Consumers, we will require a high degree of certainty that we have verified that a requester is the requesting Consumer or the Consumer’s authorized agent. In addition, consistent with the CCPA and our interest in the security of your PI, we will not deliver to you your social security number, driver’s license number, or other government-issued identification number, financial account number, any health or medical identification number, an account password, or security questions or answers in response to a CCPA request.

Please note that PI is retained by us for various time periods, so we may not be able to fully respond to what might be relevant going back twelve months prior to the request.

“Do Not Sell” Rights

We may disclose your PI for the following purposes, which are not a sale: (i) if you direct us to share PI; (ii) to comply with your requests under the CCPA; (iii) as part of a merger or asset sale; and (iv) as otherwise required or permitted by applicable law.

We do not sell California Consumer PI as “sale” is defined in the CCPA.

Deletion Rights

You may request that we delete your PI that we have collected directly from you. Under the CCPA, we may decline to delete your PI under certain circumstances, including: if we need the PI to complete transactions or provide services you have requested or that are reasonably anticipated; for security purposes; for internal business purposes (including maintaining business records); to comply with law; or to exercise or defend legal claims. Note also that we are not required to delete your PI that we did not collect directly from you. We require a reasonable or high degree of certainty that the requester is the Consumer for which a deletion request is applicable, depending on the sensitivity of the PI.

Non-Discrimination

We will not discriminate against you in a manner prohibited by the CCPA because you exercise your CCPA rights.

Other California Privacy Rights

We do not share personal information as defined by California Civil Code Section 1798.83 (“Shine the Light law”) absent your consent. If you are a California resident, you may request information about our compliance with the Shine the Light law by contacting us here or by sending a letter to JMBM: 1900 Avenue of the Stars, 7th Floor, Los Angeles, CA 90067 (Attention: [Privacy Inquiry]). Any such request must include “California Privacy Rights Request” in the first line of the description and include your name, street address, city, state, and ZIP code. Please note that we are only required to respond to one request per customer each year, and we are not required to respond to requests made by means other than through this email address or mail address.

When you visit our online services, we and third parties may use tracking technologies to collect usage information based on your device for a variety of purposes, including serving you advertising, based on your having visited our services or your activities across time and third-party locations. Some browsers may enable you to turn on or off a so-called “Do Not Track” signal. Because there is no industry consensus on what these signals should mean and how they should operate, we do not look for or respond to “Do Not Track” signals. For more information on tracking and targeting and your choices regarding these practices, see our online

Please note that “Shine the Light” rights and CCPA rights are established under different legal regimes and must be exercised separately.

3. CONTACT US

For more information regarding your California privacy rights, please contact JMBM at resources@jmbm.com, or call us at (888) 810-0411, or send us a letter to JMBM: 1900 Avenue of the Stars, 7th Floor, Los Angeles, CA 90067 (Attention: Privacy Inquiry).