Our Privacy Policy
ShinyRise PLLC (”ShinyRise”, “SR”, “we”, or “us”) is committed to safeguarding the personal data that you provide us, that we collect in the course of our business, or that we receive from you after you have visited the SR Website.
This privacy policy (“SR Privacy Policy”) explains to you how we collect and process your personal data and your rights in relation to your personal data that we process. It is a global policy that applies to all SR offices.
Please note, if you reply to one of our marketing emails or otherwise send a communication to us, that communication does not create an attorney-client relationship with us. Please do not send any information that you consider confidential unless and until we have agreed in writing to represent you with respect to a matter. Any information provided to us prior to an agreement may not be protected from disclosure and may not be subject to applicable privileges.
Personal Data
Personal data is any information that enables us to identify you and that is related to an identified or identifiable natural person, such as your name, identification number(s), business or residential address, certain commercial information, online identifiers, and educational and employment history. It does not include data that is anonymized or de-identified.
Personal Data We Collect From or About You
From time to time, we collect and process the following types of personal data from you:
-
Contact Data: this includes, for example, your name, your home or business address, your email address, your phone number, and your social media handles.
-
Client Data: this includes, for example, personal data provided to us by or on behalf of our clients and personal data that we collect in the course of providing our services to our clients, such as personal data provided by third parties.
-
Technical Data: this includes, for example, personal data that we collect from you when you interact with our website, applications, and email communications, such as your IP address and device ID.
-
Financial Data: this includes, for example, your bank account, payment card, and other related financial data.
-
Recruitment Data: this includes, for example, your CV, professional history, educational background, and related qualifications.
-
Other Data: any other personal data that you provide to us and which can be reasonably used to identify you.
How We Use Your Personal Data
We process and use your personal data to the extent permitted by applicable law. This means:
-
We process your personal data if you have given us consent to process for one or more specific purposes;
-
We process your personal data if it is necessary for compliance with a legal obligation to which we are subject; and/or
-
We process your personal data if it is necessary for the purposes of our or a third-party’s legitimate interests where those interests are not overridden by your interests or fundamental rights and freedoms that require protection of your personal data.
How and to Whom We Share Your Personal Data
We share your personal data within SR and with our contracted third-party processors and/or service providers who assist us in the administration and operation of SR, and in providing our legal services to our clients. In addition, we share your personal data when required by law.
Third-party processors and service providers with whom we may share your personal data include:
-
Our information technology and telecommunications service providers, including data centers and cloud storage providers.
-
Our marketing service providers.
-
Our litigation support service providers.
-
Professional services organizations (for example, law, accountancy, auditing, insurance, forensic, and company formation service providers).
-
Expert witnesses and jury consultants.
-
Cybersecurity service providers.
-
Other service providers to whom we outsource aspects of the provision of our legal services and the administration and operation of SR.
-
Third parties when we believe it is required by, or necessary to comply with, applicable law, such as opposing parties in litigation.
We do not sell or rent your personal data to third parties for monetary or other valuable consideration and have not done so in the prior 12 months since the effective date of this privacy policy.
Your California Legal Rights
If you are a resident of California, you may have certain rights under applicable data protection laws in relation to your personal data, including the California Consumer Privacy Act of 2018 (CCPA), as amended by Proposition 24 (approved by California voters in November 2020, and effective January 1, 2023). Subject to certain exceptions and limitations, these rights include:
-
The Right to Know. You have the right to request certain information about parties to whom we have disclosed or sold your personal data in the prior calendar year and a description of the categories of personal data shared.
-
The Right to Data Portability. A subset of the Right to Know, this requires us to provide you the specific personal data about you that we collect and process in a portable and, to the extent technically feasible, readily useable format that allows you to transmit the information to another entity without hindrance.
-
The Right to Delete. Subject to exceptions, the right to delete requires us to delete or de-identify your personal data.
-
The Right to Opt-Out. This right allows you to opt-out of the disclosure of your personal data when that disclosure (also known as a “sale” as defined in the CCPA) is made by us in exchange for valuable consideration (whether for money or otherwise). Though you may submit such a request, we do not sell or rent your personal data to third parties for monetary or other valuable consideration and have not done so in the prior 12 months since the effective date of this privacy policy.
-
The Right to Request a Record of Third-Party Direct Marketing Disclosures: Also known as the “Shine the Light” law, this permits California residents to request and obtain from us a list of what personal data we disclosed to third parties for direct marketing purposes in the preceding calendar year and the names and addresses of those third parties.
-
The Right to Correct. This right allows you to correct any inaccurate personal information that we may have about you.
-
The Right to Limit. This right allows you to limit the use and disclosure of the personal information that we may have about you, such as limiting its use to providing you with the services you requested.
If you exercise your applicable California rights, SR will not discriminate against you. Requests to know, port, or delete your personal data will be honored within 45 days. Requests to opt-out of the sale of personal data will be honored, to the extent applicable, within 15 calendar days. Requests for a record of direct marketing disclosures will be honored within 30 calendar days. If more time is needed to respond, we will notify you.