J. MORGAN LEVY FIRM, PLLC PRIVACY POLICY
Effective Date: October 5, 2026
This Privacy Policy describes how J. MORGAN LEVY FIRM, PLLC (the “Firm,” “we,” “us,” or “our”) collects, uses, discloses, retains, and protects Personal Information in connection with our website located at www.jmorganlevyfirm.com (the “Website”), our legal services, and our other business activities.
This Privacy Policy applies to Website visitors, prospective clients, clients, representatives of clients and counterparties, vendors, service providers, job applicants, and other individuals who interact with the Firm. It does not replace any engagement letter, confidentiality agreement, employee notice, or other specific notice governing the Firm’s handling of information in a particular context.
Article 1 — Scope and Important Notices
Personal Information. For purposes of this Privacy Policy, “Personal Information” means information that identifies, relates to, describes, or reasonably can be associated with an identified or identifiable individual. Personal Information does not include information that has been lawfully made public, aggregated information, or information that has been deidentified so that it cannot reasonably be linked to an individual.
Attorney-Client Relationship. Visiting the Website, submitting an inquiry, or communicating with the Firm does not, by itself, create an attorney-client relationship. The Firm does not intend to form an attorney-client relationship, and does not agree to represent you, unless and until the Firm confirms the representation in a written engagement agreement or other express written confirmation.
Unsolicited Information. When contacting the Firm for the first time, please provide only the information reasonably necessary for the Firm to check for conflicts of interest and determine whether it can assist you, such as your name, the names of other parties involved, and a brief description of the matter. Please do not send detailed or highly sensitive information, documents, or time-sensitive information through any medium. If the Firm needs information about your matter, it will provide you a link to a form through our protected case management system. Information you provide while consulting with the Firm about a possible representation is protected as required by Rule 1.18 of the New York Rules of Professional Conduct (22 NYCRR Part 1200) and other applicable law, even if the Firm does not ultimately represent you. Information sent to the Firm unilaterally, without a reasonable expectation that the Firm is willing to discuss a possible representation, may not be protected as confidential or privileged. Submitting an inquiry does not guarantee that the Firm will represent you.
Client Information. When the Firm represents a client, information received in connection with that representation is also governed by the applicable engagement agreement, the Firm’s professional duties, court rules, protective orders, and other legal requirements. If this Privacy Policy conflicts with an obligation applicable to client information, the more protective applicable obligation will control.
Third-Party Information. If you provide Personal Information concerning another individual, you represent that you are authorized to provide the information to the Firm and permit the Firm to use it for the purposes described in this Privacy Policy.
Article 2 — Personal Information We Collect
Information You Provide. Depending on how you interact with the Firm, we may collect the following categories of Personal Information:
A. Identifiers and contact information, including your name, postal address, email address, telephone number, employer, job title, and professional or business affiliations.
B. Client and matter information, including information concerning legal issues, claims, disputes, transactions, investigations, court proceedings, regulatory matters, witnesses, counterparties, and other persons or entities relevant to a prospective or existing representation.
C. Identity-verification information, including dates of birth, government-issued identification information, signatures, and information used to conduct conflicts checks, client identification, due diligence, or fraud-prevention procedures.
D. Financial and transaction information, including billing addresses, payment records, bank or payment information, tax information, and information concerning funds received or disbursed in connection with a legal matter.
E. Communications, including emails, telephone messages, correspondence, documents, attachments, intake submissions, meeting information, and other communications with the Firm.
F. Professional and employment information, including employment history, education, professional credentials, references, résumés, writing samples, compensation information, and other information submitted by job applicants.
G. Sensitive Personal Information, where relevant to a legal matter or otherwise lawfully collected, including Social Security numbers, driver’s license or other identification numbers, financial account information, health information, precise location information, immigration information, and information concerning race, ethnicity, religion, sexual orientation, disability, or other legally protected characteristics.
Information Collected Automatically. When you use the Website, the Firm and its service providers may automatically collect information such as:
A. Internet Protocol address and approximate geographic location;
B. Browser type, device type, operating system, language, and device identifiers;
C. The date and time of access, pages viewed, links selected, referring page, and Website navigation activity;
D. Information collected through cookies, pixels, tags, server logs, and similar technologies; and
E. We use Google Analytics and similar analytics technologies to understand Website traffic and improve Website performance. Information collected through these services may include IP address, browser information, pages viewed, session duration, and device information.
Information from Other Sources. The Firm may receive Personal Information from clients, prospective clients, adverse parties, witnesses, courts, governmental authorities, public records, professional advisers, investigators, experts, referral sources, vendors, service providers, social or professional networks, and other lawful sources.
Information Required for Services. You may decline to provide requested Personal Information. However, if the information is necessary to evaluate or perform a representation, satisfy legal or professional obligations, process a payment, respond to a request, or provide Website functionality, the Firm may be unable to proceed.
Article 3 — How We Use Personal Information
Legal Services and Matter Administration. We may use Personal Information to:
A. Evaluate requests for legal services and conduct conflicts checks;
B. Establish, manage, and perform attorney-client relationships;
C. Provide legal advice and representation;
D. Investigate facts, conduct due diligence, prepare documents, communicate with relevant persons, and manage proceedings or transactions;
E. Maintain files, calendars, deadlines, trust-account records, billing records, and other matter-management information; and
F. Comply with engagement terms, professional responsibilities, court orders, and legal obligations.
Business Operations. We may use Personal Information to:
A. Operate, maintain, secure, and improve the Website and the Firm’s systems;
B. Respond to inquiries, schedule consultations, and communicate with you;
C. Process invoices and payments and maintain financial records;
D. Select and manage vendors, consultants, experts, and service providers;
E. Conduct audits, quality reviews, data analysis, and business planning;
F. Recruit personnel and evaluate employment applications;
G. Maintain physical and information security, prevent fraud, and investigate suspected misconduct or security incidents; and
Legal and Protective Purposes. We may use Personal Information to establish, exercise, or defend legal rights; respond to lawful process; comply with applicable law; enforce Firm policies and agreements; protect the safety, rights, property, or security of the Firm or others; and cooperate with courts, regulators, disciplinary authorities, law enforcement, or other governmental bodies when appropriate. Any use of information relating to a client or prospective client for these purposes is limited to uses permitted by Rules 1.6, 1.9, and 1.18 of the New York Rules of Professional Conduct.
Communications and Marketing. Subject to applicable law and professional rules, we may use contact information to send legal updates, event notices, Firm announcements, or other communications that may be relevant to you. Communications that constitute attorney advertising are labeled and retained as required by Rule 7.1 of the New York Rules of Professional Conduct. You may request that we stop sending promotional email communications by using the method stated in the communication or by contacting us as provided in Article 12, and we will honor such requests within ten (10) business days. Even if you opt out of promotional communications, we may continue sending administrative, transactional, security, or legal communications.
Additional Purposes. We may use Personal Information for another purpose disclosed when the information is collected, with your authorization, or as otherwise permitted or required by law.
Article 4 — Cookies and Similar Technologies
Use of Technologies. The Website may use cookies and similar technologies to provide Website functions, remember preferences, maintain security, understand Website usage, diagnose technical problems, and improve performance.
Types of Cookies. Depending on the Website’s configuration, we may use:
A. Strictly necessary cookies required for security and core Website operation;
B. Preference cookies that remember selections or settings;
C. Analytics cookies that help us understand Website traffic and use; and
Cookie Choices. You may be able to manage cookies through your browser or device settings and through the cookie-consent assistant on the Website. When you first visit, a chat assistant will ask whether you accept or decline non-essential cookies, such as analytics cookies, and the Firm will set those cookies only according to your choice. You may change your choice at any time by reopening the assistant from the Cookie Preferences on any page. Strictly necessary cookies, which are required for the Website to function, cannot be declined through the assistant. Blocking certain cookies may impair Website functionality.
Browser Privacy Signals. The Website’s response to browser-based privacy signals is as follows: the Website does not currently respond to “Do Not Track” signals, Global Privacy Control signals, or similar browser-based privacy signals. Because the Firm does not sell Personal Information or use it for targeted or cross-context behavioral advertising, these signals would not change how the Firm uses your information. You may manage cookies as described in Section III of this Article. Because signal standards and legal requirements continue to develop, the Firm may update its response practices as appropriate.
Analytics and Advertising. The Firm uses Google Analytics, a web analytics service provided by Google LLC, to understand how visitors use this website, including the pages viewed, time spent on the site, the referring website, and general information about the visitor’s browser, device, and approximate location. Google Analytics uses cookies and similar technologies to collect this information, which is aggregated and used to improve the website's content and performance; the Firm does not use Google Analytics to identify individual visitors. For more information on how Google uses this data, see How Google uses information from sites or apps that use our services. You can prevent Google Analytics from collecting your data by installing the Google Analytics Opt-out Browser Add-on or by adjusting your browser’s cookie settings. Information collected through these services may be governed by the privacy practices of the relevant service provider. Information collected through these services may be governed by the privacy practices of the relevant service provider.
Article 5 — Disclosure of Personal Information
No Sale of Personal Information. The Firm does not sell Personal Information for monetary consideration. The Firm does not use Personal Information for targeted or cross-context behavioral advertising.
Service Providers. We may disclose Personal Information to vendors and service providers that perform services for the Firm, including providers of hosting, cybersecurity, document management, case management, communications, payment processing, accounting, records storage, e-discovery, research, analytics, mailing, and professional support services. We require such recipients to handle information consistently with their contractual and legal obligations. Service providers with access to Personal Information are required by contract to maintain confidentiality and implement appropriate security measures.
Legal and Professional Services. Where relevant to a matter and consistent with applicable duties, we may disclose Personal Information to co-counsel, local counsel, opposing counsel, courts, arbitrators, mediators, experts, consultants, investigators, process servers, court reporters, translators, accountants, auditors, insurers, financial institutions, governmental agencies, and other participants in legal or business matters.
Client-Directed Disclosures. We may disclose information at the direction of, or with authorization from, the applicable client or individual.
Legal Requirements and Protection. We may disclose Personal Information when we reasonably believe disclosure is necessary to comply with applicable law, legal process, professional obligations, or a court order; respond to governmental or disciplinary authorities; prevent or investigate fraud, security incidents, or unlawful conduct; or protect the rights, property, safety, or security of the Firm, our clients, or others. Disclosure of information relating to a client or prospective client under this Section is limited to disclosures permitted by Rules 1.6, 1.9, and 1.18 of the New York Rules of Professional Conduct.
Business Transactions. Subject to applicable professional duties and confidentiality requirements, Personal Information may be disclosed in connection with a merger, reorganization, succession, sale or transfer of the Firm’s practice, dissolution, or similar organizational transaction involving the Firm. Any sale of the Firm’s practice will comply with Rule 1.17 of the New York Rules of Professional Conduct, including written notice to affected clients, and client confidential information will not be disclosed in connection with any such transaction except as permitted by those Rules.
Other Disclosures. We may disclose Personal Information for a purpose disclosed at collection, with appropriate authorization, or as otherwise permitted or required by law. The Firm’s additional disclosure practices include: (A) with your consent, referring you to another attorney if the Firm is unable to assist you; (B) disclosing information to a fee dispute resolution program under 22 NYCRR Part 137, or as otherwise permitted by Rule 1.6(b) of the New York Rules of Professional Conduct to establish or collect a fee; (C) producing trust-account and bookkeeping records to disciplinary authorities as required by Rule 1.15 of the New York Rules of Professional Conduct; and (D) sharing Website usage information with Google LLC through Google Analytics, as described in Article 4.
Article 6 — Confidentiality and Information Security
Security Program. The Firm maintains administrative, technical, and physical safeguards designed to protect Personal Information against unauthorized access, acquisition, use, alteration, loss, destruction, or disclosure. These safeguards are selected in view of the Firm’s size and complexity, the nature and scope of its activities, the sensitivity of the information maintained, and reasonably foreseeable risks, and are intended to meet the requirements of New York General Business Law § 899-bb and Rule 1.6(c) of the New York Rules of Professional Conduct.
Safeguard Measures. The Firm’s safeguards may include:
A. Designating personnel responsible for information-security practices;
B. Assessing reasonably foreseeable internal and external risks;
C. Applying access controls based on business need and professional responsibility;
D. Using authentication, encryption, endpoint protection, secure transmission, backup, monitoring, and other appropriate technical controls;
E. Training personnel concerning confidentiality, phishing, account security, and proper information handling;
F. Selecting service providers capable of maintaining appropriate safeguards and requiring suitable contractual protections;
G. Maintaining incident-response and business-continuity procedures; and
H. Periodically reviewing and adjusting safeguards in light of operational changes, new risks, and relevant circumstances.
Social Security Numbers and Sensitive Information. The Firm limits access to Social Security numbers and other sensitive information, prohibits unlawful disclosure, and maintains appropriate procedures for secure storage, transmission, and disposal.
Secure Disposal. When records containing Personal Information are no longer required, the Firm uses disposal methods reasonably designed to prevent unauthorized retrieval or reconstruction, subject to applicable retention duties and litigation-hold requirements.
Security Limitations. No information system, transmission method, or storage system can be guaranteed to be completely secure. You should use caution when sending information electronically and notify the Firm promptly if you believe your interaction with the Firm or the Website may have been affected by a security incident.
Article 7 — Security Incidents and Breach Notification
Incident Response. The Firm investigates suspected unauthorized access to or acquisition of Personal Information and takes responsive measures appropriate to the circumstances.
Notifications. If the Firm determines that a security incident requires notification, the Firm will provide notice to affected individuals and appropriate governmental or other authorities in the manner and within the period required by applicable law, including New York General Business Law § 899-aa, which generally requires notice to affected New York residents within thirty (30) days after discovery of a breach. A notice may describe the incident, the types of information involved, responsive measures, available protective steps, and Firm contact information. The Firm will also inform affected current clients of a security incident involving their information as required by the Firm’s professional obligations. If you believe any password, account credential, or communication channel associated with the Firm has been compromised, please immediately contact the Firm.
Cooperation. The Firm may cooperate with clients, service providers, insurers, forensic professionals, law enforcement, and governmental authorities in investigating and responding to a security incident, subject to applicable privileges and confidentiality obligations.
Article 8 — Retention of Personal Information
Retention Criteria. The Firm retains Personal Information for as long as reasonably necessary to fulfill the purposes for which it was collected and to satisfy professional, contractual, legal, accounting, insurance, security, and records-management requirements.
Client and Matter Files. Client and matter information may be retained in accordance with the applicable engagement agreement, Firm retention policies, professional obligations, court orders, litigation holds, and the nature of the representation.
Disposition. When retention is no longer reasonably necessary, the Firm may delete, destroy, anonymize, or deidentify the information, subject to applicable obligations. Residual copies may remain in backups or archives until deleted through ordinary retention cycles.
Retention Practices. Additional retention periods or criteria applicable to the Firm are: the Firm generally retains client files in digital form for approximately seven (7) years after the conclusion of the representation, unless applicable law, a court order, or a litigation hold requires longer retention. Records required by Rule 1.15(d) of the New York Rules of Professional Conduct are retained for at least seven (7) years. Before disposing of paper records, the Firm will return, or offer to return, original documents and other property belonging to the client, such as wills, deeds, and signed original instruments.
Article 9 — Your Privacy Choices and Requests
Requests. Subject to applicable law and the limitations stated below, you may contact the Firm to request that we:
A. Confirm whether we maintain Personal Information about you;
B. Provide access to, or a copy of, certain Personal Information;
C. Correct inaccurate Personal Information;
D. Delete certain Personal Information;
E. Restrict or object to certain uses or disclosures; or
F. Update your communication preferences.
The Firm generally responds to verified privacy requests within the period required by applicable law. Nothing in this Article limits a client’s right to obtain the client’s file under applicable law and professional rules.
Limitations. The Firm may deny or limit a request when permitted or required by law, including when disclosure, correction, or deletion would:
A. Violate the rights of a client or another person;
B. Reveal privileged, confidential, proprietary, or legally protected information;
C. Conflict with professional obligations (including the Firm’s obligations to maintain conflict-check records under Rule 1.10(e) and financial records under Rule 1.15(d) of the New York Rules of Professional Conduct), court orders, litigation holds, or records-retention duties;
D. Interfere with the establishment, exercise, or defense of legal claims;
E. Create a security or fraud risk; or
F. Require action that is not legally required or reasonably feasible.
G. If we deny your request, you may appeal the decision by contacting the Privacy Contact listed below within 30 days.
Verification. We may require information reasonably necessary to verify your identity and authority before acting on a request. An authorized agent may submit a request when permitted by applicable law, but the Firm may require proof of the agent’s authority and direct verification from the individual.
Marketing Preferences. You may opt out of promotional emails or request removal from a mailing list. An opt-out does not apply to communications concerning an existing representation, transaction, payment, security issue, legal notice, or other non-promotional matter.
Request Submission. Privacy requests may be submitted to J. Morgan Levy, Esq. using the contact information in Article 12.
Article 10 — Children’s Privacy
IGeneral Audience. The Website is intended for a general audience and is not directed to children under thirteen years of age.
No Knowing Collection. The Firm does not knowingly collect Personal Information online directly from children under thirteen without legally sufficient authorization. If you believe a child has provided Personal Information to the Firm through the Website, contact us using the information in Article 12. If the Firm has actual knowledge that a Website user is under eighteen years of age, the Firm will process that user’s Personal Information only as permitted by the New York Child Data Protection Act.
Legal Representations Involving Minors. This Article does not prevent the Firm from receiving or using information concerning minors when relevant to a legal representation, provided by a parent, guardian, client, court, or other authorized source, or otherwise permitted by law.
Article 11 — Third-Party Services and External Resources
Third-Party Services. The Website may reference or provide access to third-party websites, platforms, embedded content, or services. The Firm does not control the privacy, security, or content practices of third parties.
Separate Practices. Information you provide directly to a third party is governed by that third party’s terms and privacy practices, not this Privacy Policy. The inclusion of third-party content or functionality does not constitute an endorsement of the third party’s privacy or security practices.
Social Media. Information posted on public or interactive social-media services may be visible to others. You should not use social media to send confidential or sensitive information to the Firm.
Article 12 — Contact Information
Privacy Contact. Questions, concerns, complaints, or requests concerning this Privacy Policy or the Firm’s handling of Personal Information may be directed to:
J. Morgan Levy, Esq.
J. Morgan Levy Firm, PLLC
6 N Main St, Ste 230
Fairport, NY 14450
Email: info@jmorganlevyfirm.com
Telephone: 585-678-1475
2. Accessibility. If you require this Privacy Policy in an alternative format because of a disability, contact:
J. Morgan Levy, Esq.
J. Morgan Levy Firm, PLLC
6 N Main St, Ste 230
Fairport, NY 14450
Email: info@jmorganlevyfirm.com
Telephone: 585-678-1475
Article 13 — Additional Jurisdiction-Specific Rights
Other State Privacy Laws. Individuals residing outside New York may have additional rights under the law applicable to them. To the extent such a law applies to the Firm’s processing of your Personal Information, the Firm will honor verified requests and provide disclosures required by that law.
International Information. The Firm is based in the United States. If you provide information from another country, the information may be transferred to, stored in, and processed in the United States or another jurisdiction in which the Firm or its service providers operate, subject to applicable legal and professional requirements.
Professionally Protected Information. Nothing in this Privacy Policy requires the Firm to disclose information protected by the attorney-client privilege, attorney work-product doctrine, professional confidentiality obligations, a protective order, or any other applicable legal protection.
Article 14 — Changes to This Privacy Policy
Revisions. The Firm may revise this Privacy Policy periodically to reflect changes in legal requirements, professional obligations, technology, security practices, or Firm operations.
Posting. The revised Privacy Policy will be posted on the Website with an updated Effective Date. If required by law, the Firm will provide additional notice or obtain consent before applying a material change to Personal Information previously collected.
Prior Versions. Requests for information concerning a prior version of this Privacy Policy may be directed to the privacy contact identified in Article 12.