Privacy Policy

Effective Date: February 24, 2026

Thanks for visiting CGL! CGL, LLP (“CGL,” “we,” “us,” and/or “our”) is a full-service virtual law firm. This Privacy Notice describes how CGL handles personal information we collect from and about you when you use this website (the “Site”); engage with us through our newsletters, emails, and branded social media accounts; or otherwise interact with us. It also describes how we handle personal information we receive in the course of managing our business and providing legal services to our clients (collectively, the “Services”).

For purposes of this Privacy Notice, “Personal Information” means information about an identified or identifiable individual, as defined by applicable law. This includes information that alone or in combination with other information may be used to identify, contact, track, or locate you. Personal Information includes “personal data” as defined by the European Union’s General Data Protection Regulation (“GDPR”) and “personal information” as defined by the California Consumer Privacy Act (“CCPA”). Some information that is automatically disclosed to us or collected by us through your use of our Services meets this definition.

Please read this notice carefully. In addition, please review our Terms of Use, which govern your use of the Services and any content you submit to us in connection with the Services.

Please be aware that if you have entered into an attorney-client relationship with CGL, the terms of additional agreements between you and CGL may apply and will govern in the event of a conflict with this Privacy Notice.

Information We Collect

Information You Voluntarily Provide to Us

We collect some information directly from you in the following ways:

Filling in forms on our website: When you fill in forms on our Site, including when you contact us to explore a potential legal relationship we may require that you provide us with certain information such as your name, email address and other contact information, company name, job title, and the name and affiliation of the person who referred you to us, if applicable.
Registering for an event or webinar: If you register for an event sponsored by our firm, we may collect Personal Information from you including your name, email address and other contact information, company name, job title, and any specific information relevant to the event for which you are registering.
Signing up for our newsletters, client alerts, and legal blogs or completing a survey: From time to time, we may offer newsletters, client alerts, legal blogs, and other informational materials that address legal, regulatory, and industry trends. When you sign up to receive any of these materials, we may collect your name, email address and other contact details, company name, job title, the practice areas and industries that you are interested in, and any additional information you choose to provide. If you agree to participate in a survey we conduct, we will collect any information you provide in connection with that survey.
Contacting us: When you contact us by email; through our branded social media accounts; through our integrated chat providers; or by telephone, SMS, or physical mail, we may collect your name, username, email address and other contact information, company name, job title, and the contents of your communication, which can include any information you choose to provide.
Communicating with us about a legal matter: If you are client of our firm, we will collect your name; email address and other contact information; company name; job title; payment information; the name and affiliation of the person who referred you to us, if applicable; and any other information pertinent to the legal matter you have asked us to help you with. Because of the nature of our legal services, this could include any type of Personal Information. Common types of information we collect in the course of providing our legal services include information about our clients’ employees, customers, and vendors; communications with our clients; and information we obtain from third parties such as public bodies or opposing counsel.
Applying to work with us: If you apply to work with us, we will collect any information you chose to share in your application, which may include your name, email address and other contact information, employment history, and education history.

Information We Collect Automatically

We also collect certain information about you automatically as you navigate our Site or interact with our emails.

To collect this information, we, or our third-party service providers, may use cookies or similar technologies. A “cookie” is a small text file that websites send to a visitor’s computer or other internet-connected device to uniquely identify the visitor’s browser or to store information or settings in the browser. We, and our third-party service providers, use cookies in order to do things such as recognize you when you return to our website, save your preferences (including your preferences regarding cookie handling), understand which sections and features of our Services you find most interesting, ensure our Services are working properly, and prevent fraud. We use both session cookies (which expire when you close your browser) and persistent cookies (which stay on your computer until you delete them or until they expire).

Certain pages on the Services may contain “web beacons” (also known as Internet tags, pixel tags, tracking beacons and clear GIFs). A web beacon is a transparent graphic image placed on a web page or in an email, which indicates that a page or email has been viewed or that an email has been forwarded. In addition, a web beacon allows third parties to obtain information such as the IP address of the computer that downloaded the page on which the beacon appears, the URL of the page on which the beacon appears, the time the page containing the beacon was viewed, the type of browser used to view the page, and the information in cookies set by the third party. A web beacon may also tell your browser to get content from another server.

The information we collect automatically can include the following:

Device information: We may collect information about the mobile device you use to access our Services, including the internet protocol (IP) address, hardware model, operating system and version, unique device identifiers and mobile network information.
Log information: may collect information about such as the date, time, length of stay, specific pages or features accessed during your visit and search terms used to reach our Services. We use this information to determine the popularity of certain content, to save your preferences, and to improve the Services.
Usage information: This includes the number and frequency of visitors to our Services.
Location information: We may collect general location information inferred from your IP address.

Information We Collect from Other Sources

Business partners and vendors: We may collect your Personal Information, including your name, contact details, and payment information from our business partners and vendors in the context of the partner or vendor relationship. For instance, when you pay for services, we may receive limited financial details from our payment processors, such as the last four digits of your payment card, the country of issuance, and the expiration date.
Referral partners: We may receive your Personal Information, which includes your name and business contact details from other professional advisors such as attorneys, accountants, and investors who refer clients to us from time to time.
Event partners: We may receive Personal Information about you from our event partners. For instance, if you register for an event or webinar which we sponsor, the organizer may provide us with your name and contact information in accordance with the disclosure they made to you so that we can communicate with you about future events and provide news and information we think will be of interest to you.
Another individual at your organization: We may collect your Personal Information from another individual at your organization who may provide us with your business contact information in the course of communicating with us about a legal matter.
Social media platforms: We may offer social sharing features and other integrated tools such as widgets, which allow you to share content on our Site with third-party social media platforms like Facebook, Twitter, or LinkedIn. If you choose to use these social sharing features, the provider of the third-party social media platform may make certain information available to us. This can include information necessary to facilitate the integration as well as any additional information the provider chooses to share with us or which you have permitted the provider to share through your privacy settings. We encourage you to check the privacy settings and privacy policies of these third-party social media platforms to understand what information might be shared with us.
Professional services organizations: We may collect Personal Information about you from professional services organizations such as PR firms and other law firms in the course of providing you with legal services and marketing our business.
Government entities and opposing counsel: If you are a client of our firm, we may receive Personal Information about you from government entities and opposing counsel in relation to the legal matter with which we are assisting you.
Other sources: We may also obtain Personal Information about you from other sources, including third parties that help us update, expand, and analyze our records and prevent and detect fraud. For example, we may use information from LinkedIn to update information about you in our contact database.

We may combine the information we collect about you from these various sources. If a combination of information that we collect identifies you as an individual, we will treat the combined information as Personal Information.

How We Use Your Information

CGL collects the data described above so that we can:

Determine whether to enter into a business relationship with you;
Provide you with legal services if you are or become a client of CGL, including maintaining or servicing accounts, providing legal advice, processing payments, and verifying client information;
Send client alerts, newsletters, and other communications to our clients and business contacts. We will send you communications that are relevant to you, based for example on the practice areas and industries you select when you subscribe to receive our communications. We may also use your Personal Information to register you for and confirm your attendance at events; furnish biographical details to other attendees; and assess the effectiveness of our events, promotional campaigns, and publications;
Post testimonials, with your consent;
Operate and improve our Site, including monitoring and analyzing usage, trends, and activities related to the Site;
Respond to your requests, inquiries, comments, and suggestions;
Send you technical notices, updates, security alerts, and support and administrative messages;
Identify, fix, and troubleshoot bugs and service errors;
Enhance our communications and the experience we offer you, including requesting feedback about the Site and Services;
Improve our educational, networking, marketing, social, and recruiting strategies;
Support our general business operations (including assessing and communicating with job applicants, maintaining our business and legal recordkeeping, processing invoices, and managing our business relationships with clients, vendors, business partners, cooperating law firms, and other contractors);
Notify you about any changes to our Services;
Protect against, identify, investigate, and respond to misuse of our Services or other unlawful behavior; and
Carry out any other purpose described to you at the time the information was collected.

How We Share Your Information

We may share information about you with certain third parties in the following circumstances:

Companies under common control: We may share Personal Information between and among CGL’s current and future parents, subsidiaries, affiliates, and other companies under common control and ownership.
Vendors and service providers: To conduct business operations and to deliver our legal services, we may engage vendors, consultants, and other service providers to work on our behalf. For instance, we may engage accountants, insurance companies, social media managers, and other professional experts and advisors to help us with our business operations. We also use payment processing providers, CRM service providers, and email service providers. We may share Personal Information with these third parties, but only to the extent necessary to perform these functions and provide these services.
Analytics and advertising: We allow certain third-party analytics and advertising tools to collect Personal Information, including your IP address, mobile device identifier, data about your usage, and inferences about you based on such data. These tools help us measure traffic and usage trends on our Services and to serve advertisements on our behalf across the internet. However, these third-party providers may combine the data they collect across multiple sites to improve analytics for their own purposes and others. If you live in certain U.S. states, you can opt out of this processing by clicking “My Privacy Choices.”
Business transfers: We may share your Personal Information with another company in connection with or during negotiations of any merger, acquisition, reorganization, bankruptcy, sale of all or a portion of our assets, or transition of services to another provider.
Legal requirements: We may share Personal Information when we believe it is necessary to comply with a legal obligation, to protect CGL’s rights and property, to protect the safety of our users, and to defend against legal liability.
Government agencies, regulators, or courts: We may share Personal Information as required by applicable law and/or in the context of legal proceedings.
Public: If you post information to our website or our branded social media pages, that information may be displayed and viewable by other users.
Consent: We may share Personal Information with your consent and at your direction, including if we notify you that the information you provide will be shared in a particular manner, and you provide that information. For instance, if we host a webinar, we may ask for your consent to share your Personal Information with any event partners who are co-sponsoring the webinar with us. We also rely on your consent to share information in the course of providing you with legal services, such as sharing information with opposing counsel.

We may also share aggregated or de-identified information, which cannot reasonably be used to identify you, for various purposes including compliance with various reporting obligations; for business or marketing purposes; or to assist third parties in understanding our users’ interests, habits, and usage patterns for certain programs, content, services, advertisements, promotions, and/or functionality available through our Services.

Data Retention

We only keep your Personal Information for so long as reasonably necessary for the purposes described in this Privacy Notice, as required by law, or as necessary to resolve disputes and enforce our rights and agreements. We may, however, retain data in copies made for backup or business continuity purposes for additional time. To dispose of personal data, we may anonymize it, delete it, or take other appropriate steps.

Your Rights and Choices

You have the following rights and choices related to our use of your Personal Information:

Opting out of email marketing. You can opt-out of receiving our promotional emails at any time by following the instructions included in those emails. Please be aware that it may take up to ten (10) days for us to process your request, and you may continue receiving promotional communications from us during that period. If you opt-out of receiving such communications, please note that we may continue to send you non-promotional emails (such as emails related to our business relationship or emails about changes to our legal terms).
Limiting information available through social media platforms. If you want to limit or stop receipt of information from third-party social media platforms, you can change your privacy settings on those other websites. You also may choose not to use social features we make available.
Access, update, or delete your information. To access, update, or delete information we maintain about you please contact us at privacy@cgl-llp.com. Please note that we may keep certain Personal Information as necessary to comply with our legal obligations or for legitimate business purposes, such as to resolve disputes or enforce our agreements. We may also keep cached archived copies of Personal Information for a certain period of time.

Additional Disclosures for Residents of the EEA, UK, and Switzerland

The laws in the European Economic Area (EEA), United Kingdom (UK), and Switzerland require businesses to disclose certain information, including (i) the controller(s) of your Personal Information, (ii) the legal bases relied on to use or disclose your Personal Information, (iii) your legal rights with respect to your Personal Information, (iv) safeguards used for transferring your Personal Information outside of these jurisdictions, and (v) the contact details of the controller and/or data protection officer. To the extent those laws apply, our answers are as follows:

Controller	In most cases, under the GDPR and similar data protection laws, CGL is considered the “data controller” of the Personal Information that we handle under this Privacy Notice, though we may handle certain Personal Information as a “processor” for clients. Where we act as a processor on behalf of a client, we process the Personal Information pursuant to our contract and legal obligations.
Legal Bases	Legitimate Interest. We handle Personal Information to support legitimate business activities including: Providing services under client contracts Processing billing and payments Marketing our services Protecting clients, personnel, and property Analyzing and improving our business Processing applications Addressing legal and ethical issues Legal Compliance. Processing to meet regulatory obligations. Contractual Commitments. Processing required to fulfill obligations. Consent. Processing based on consent such as newsletters or cookies.
Legal Rights	Right to Access & Portability: Request access or transfer of your data. Right to Correction: Request updates to inaccurate data. Right to Restrict Processing: Limit how we use information. Right to Deletion: Request deletion subject to legal obligations. Right to Object: Object to certain processing. Right to Withdraw Consent: Withdraw consent anytime.
Safeguards	CGL operates globally and may store Personal Information in countries with different data protection laws. We implement safeguards such as contractual protections to ensure data security.
Contact Information for Controller/DPO	CGL, LLP 1035 Fountain Drive West Sacramento, CA 95605 privacy@cgl-llp.com

Additional Disclosures for U.S. Residents

Under certain state laws, we are required to provide the following additional disclosures:

California (In Effect)

Notice at Collection	While this information is covered in greater detail above, the categories of Personal Information collected include: Identifiers: Name, email, address, IP address collected directly or indirectly. Other individual records: Phone, billing address, education, employment, payment info. Commercial information: Invoicing and service engagement. Demographic information: Age and gender. Biometric information: Voice recordings. Internet activity: Pages visited and interactions. Geolocation data: General location from IP. Employment information: Company and job title. Inferences: Interests and preferences. Sensory information: Photos or recordings.
Business or Commercial Purpose	We collect Personal Information for the purposes described in the “How We Use Your Information” section.
Categories of Sources	Collected directly from you, automatically, or via third parties.
Categories Disclosed	We have disclosed the categories listed above as described in our sharing practices.
Selling and Sharing	We do not sell Personal Information for money but may share data such as IP address and usage with analytics or advertising vendors.
Right to Opt Out	You may opt out via “My Privacy Choices” or Global Privacy Control settings.
Right to Limit Use of SPI	You may limit certain uses of sensitive personal information via privacy settings.
Other Rights	Right to access your Personal Information Right to correct or update information Right to request deletion
Right of Appeal	You may appeal decisions regarding your requests.
Notice of Financial Incentive	If incentives are offered, details will be provided and participation is voluntary.
De-Identified Data Disclosure	We may use de-identified data without attempting re-identification.
Do Not Track Disclosure	Our Services do not currently respond to “Do Not Track” signals. You may configure browser cookie settings.

Colorado (Effective: July 1, 2023)

Legal Rights	You have the following rights with respect to your Personal Information: The right to access your Personal Information The right to have your Personal Information rectified, corrected, or updated The right to have your Personal Information deleted, including from third parties where it has been shared
Right to Opt Out of Sales	We do not sell Personal Information under Colorado law, but we may share data such as IP address and device identifiers with analytics and advertising vendors. You may opt out via “My Privacy Choices”.
Right to Opt Out of Profiling	You may opt out of profiling that produces legal or significant effects. CGL does not use Personal Information for profiling.
Sensitive Data Inferences	We do not collect or share sensitive data or draw inferences from it.
Right to Appeal	If we deny your request, we will provide instructions on how to appeal.

Connecticut (Effective: July 1, 2023)

Legal Rights	You have the following rights with respect to your Personal Information: The right to access your Personal Information The right to have your Personal Information rectified, corrected, or updated The right to have your Personal Information deleted, including from third parties where it has been shared
Personalized Advertising Opt Out	We do not sell Personal Information under Connecticut law, but we may share IP address and usage data with analytics and advertising vendors. You may opt out via “My Privacy Choices”.
Right to Opt Out of Profiling	You may opt out of profiling that produces legal or significant effects. CGL does not use Personal Information for profiling.
Contact Information	CGL, LLP 1035 Fountain Drive West Sacramento, CA 95605 privacy@cgl-llp.com

Delaware (In Effect)

“Do Not Track” Disclosure

Our Services are not currently designed to respond to web browser “do not track” signals. However, you can configure most browsers to reject cookies or to notify you when you are sent a cookie, giving you a chance to decide whether or not to accept it. You can consult the help section of your browser to find out how to do this. Please note that if you choose to remove or reject cookies, this could affect the availability and functionality of our Services. In the event that a universally accepted standard emerges on how organizations should respond to “do not track” signals, we will assess and provide an appropriate response to those signals.

Utah (Effective: December 31, 2023)

Legal Rights

You have the following rights with respect to your Personal Information:

The right to access your Personal Information
The right to have your Personal Information deleted, including from any third parties where your Personal Information has been sold, shared, or disclosed

Personalized Advertising Opt Out

We do not sell Personal Information as that term is defined under Utah law. However, we do share your IP address and device identifiers, along with details about your usage of our Services to third-party analytics and advertising vendors. If you would like to opt out of this sharing, please click “My Privacy Choices” and select your preferences.

Virginia (In effect)

Legal Rights	You have the following rights with respect to your Personal Information: The right to access your Personal Information The right to have your Personal Information rectified, corrected, or updated The right to have your Personal Information deleted, including from third parties where it has been shared
Right to Opt Out of Profiling	You may opt out of processing for profiling that produces legal or significant effects. CGL does not use Personal Information for profiling.
Personalized Advertising Opt Out	We do not sell Personal Information under Virginia law, but we may share IP address and usage data with analytics and advertising vendors. You may opt out via “My Privacy Choices”.
Right to Appeal	If we deny your request, you may appeal within a reasonable period. We will respond within sixty (60) days and provide a written explanation. If denied, you may contact the Attorney General of Virginia.

Children’s Privacy

Our Services are intended for adults and we do not knowingly collect Personal Information from children. If you are a parent or legal guardian and think your child under the age of 13 (or a higher age threshold where applicable) has given us Personal Information without your consent, please contact us at privacy@cgl-llp.com.

Links to Other Websites and Third-Party Content

We may provide links to third-party websites, services, and applications that are not operated or controlled by CGL. This Privacy Notice does not apply to the privacy practices of those third parties. The fact that we link to a website, service, or application is not an endorsement, authorization, or representation of our affiliation with that third party. We encourage you to review the privacy policies of any third-party service before providing any information to or through them.

Security

CGL uses generally accepted administrative and technical safeguards we believe are appropriate to protect the confidentiality, integrity, and availability of your Personal Information. Although we make reasonable efforts to protect Personal Information from loss, misuse, or alteration by third parties, you should be aware that there is always some risk in any system for transmitting and storing information electronically. CGL cannot and does not guarantee absolute security. If you believe your Personal Information has been compromised through your use of our Services, please contact us immediately at privacy@cgl-llp.com.

Changes to Our Privacy Notice

We may change this Privacy Notice from time to time to reflect changes in our practices or in the law. If we make changes to this notice, we will post the updated Privacy Notice on our Site and indicate when it was last revised. You are advised to review this notice periodically to stay informed of our practices.

If we make material changes, we may provide you with additional notice, such as posting a statement on our homepage or sending you an email notification, if we have your email address on file. Your continued use of the Services after the revised Privacy Notice has become effective indicates that you have read, understood, and agreed to the current version of this Privacy Notice, to the extent permitted by law.

Contacting CGL

If you have any questions about our Privacy Notice or how we protect your Personal Information, please contact us at privacy@cgl-llp.com or you may write us at 355 S. Grand Ave, Suite 2450, Los Angeles, CA 90071. 1035 Fountain Drive, West Sacramento, CA 95605.