Privacy Policy

1. Introduction

Welcome to LawMillion ("we", "our", "us"). We operate an online attorney directory and lead-referral platform located at https://www.lawmillion.com/ (the "Platform"), connecting individuals seeking legal services ("Clients") with licensed attorneys and law firms ("Attorneys") across the United States.

This Privacy Policy describes how we collect, use, store, disclose, and protect your personal information when you visit, browse, or interact with the Platform. By using LawMillion, you agree to the terms described in this Privacy Policy. If you do not agree, please do not use the Platform.

This policy applies to all users, including Clients, Attorneys, and casual visitors. It is supplemented by our Terms & Conditions.

Effective Date: April 21, 2026

2. Information We Collect

We collect information in three broad categories: information you provide directly, information collected automatically, and information received from third parties.

2.1 Information You Provide

• Consultation Requests: When you submit a request to contact an attorney, we collect your name, email address, phone number, ZIP code, legal issue description, and any additional case details you choose to share.
• Attorney Profile Data: Attorneys who list their practice provide name, bar number, state of licensure, law firm name, office address, email, phone, practice areas, years of experience, education, professional photo, biography, and fee structure.
• Account Information: If you create an account, we collect your username, hashed password, and profile preferences.
• Reviews & Ratings: Client-submitted reviews, star ratings, and written testimonials about attorneys.
• Communications: Emails, support tickets, chat messages, and any correspondence you send to us.
• Payment Data: For paid attorney subscriptions, we collect billing name, address, and payment card information processed securely via our PCI-compliant payment processor. We do not store full card numbers on our servers.

2.2 Information Collected Automatically

• Usage Data: Pages visited, time spent, clicks, search queries, practice areas browsed, attorneys viewed, and navigation paths.
• Device & Browser Data: IP address, browser type, operating system, device identifiers, screen resolution, and referral URLs.
• Location Data: Approximate location derived from IP address to show relevant local attorneys. We do not collect precise GPS location unless you explicitly opt in.
• Cookies & Pixels: See Section 5 for details.

2.3 Information from Third Parties

• State bar associations and official legal directories (for attorney verification).
• Analytics providers (Google Analytics, etc.).
• Social login providers if you sign in via Google, Facebook, or similar services.
• Public records and business data vendors for verification of attorney credentials.

3. How We Use Your Information

We use your information for the following purposes:

• To match you with attorneys: Routing your consultation request to relevant licensed attorneys based on location and practice area.
• To operate the Platform: Providing search functionality, displaying profiles, processing reviews, and maintaining account security.
• Attorney verification: Confirming bar admission, licensure status, and disciplinary history via state bar records.
• Communications: Sending transactional emails, consultation confirmations, review requests, and service updates.
• Marketing (with consent): Sending newsletters, legal guides, and promotional content — you may opt out anytime.
• Analytics & improvement: Understanding how users interact with the Platform to improve features and SEO.
• Legal compliance: Responding to subpoenas, court orders, regulatory requests, and enforcing our Terms.
• Fraud prevention: Detecting and blocking abusive behavior, fake reviews, and spam.

4. Information Sharing & Disclosure

We do not sell your personal information. We share information only as described below:

• With Attorneys: When you submit a consultation request, your name, contact details, and case summary are forwarded to the attorney(s) you select. The attorney may contact you directly to discuss your matter.
• Service Providers: We use trusted third parties to assist with hosting, email delivery, analytics, payment processing, and customer support. These providers are contractually bound to protect your data.
• Legal Requirements: We may disclose information if required by law, subpoena, court order, or to protect the rights, property, or safety of LawMillion, our users, or the public.
• Business Transfers: If LawMillion is acquired, merged, or sells assets, your information may be transferred to the successor entity under the same privacy protections.
• With Your Consent: For any other disclosures, we will obtain your explicit consent first.

5. Cookies & Tracking Technologies

We use cookies and similar technologies to enhance your experience and analyze site traffic. Types of cookies we use:

• Essential Cookies: Required for the Platform to function (login sessions, security, preferences).
• Analytics Cookies: Help us understand how users interact with the Platform (Google Analytics 4).
• Advertising Cookies: Used for retargeting and measuring ad performance on Meta, Google Ads, and similar networks.
• Preference Cookies: Remember your language, state, and practice area preferences.

You can control cookies through your browser settings. Disabling essential cookies may limit Platform functionality.

6. Attorney Profile Information

Attorneys who list their practice on LawMillion acknowledge that significant portions of their profile — including name, firm, address, practice areas, bar admission, biography, and client reviews — are publicly displayed and may be indexed by search engines.

Attorneys may update, request corrections to, or request removal of their profile at any time by contacting attorneys@lawmillion.com. Removal requests are typically processed within 7 business days.

7. Data Security

We implement industry-standard security measures to protect your data, including:

• 256-bit SSL/TLS encryption for all data in transit.
• Encrypted storage of passwords using industry-standard hashing (bcrypt / Argon2).
• Regular security audits and vulnerability scanning.
• Access controls, role-based permissions, and audit logs for internal staff.
• PCI-DSS compliant payment processing through vetted third-party providers.

However, no method of internet transmission or electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security. In the event of a data breach affecting your personal information, we will notify you in accordance with applicable law.

8. Data Retention

We retain personal information only as long as necessary for the purposes described in this policy or as required by law:

• Consultation requests: Retained for 3 years to resolve disputes and improve matching.
• Attorney profiles: Retained for the duration of the listing plus 2 years after cancellation.
• Account data: Retained until you request deletion, plus 30 days for backup purges.
• Financial records: Retained for 7 years to comply with US tax and accounting laws.
• Anonymized analytics: Retained indefinitely for statistical purposes.

9. Your Privacy Rights

9.1 California Residents (CCPA / CPRA)

If you are a California resident, you have the right to:

• Know what personal information we collect about you.
• Request a copy of your personal information.
• Request deletion of your personal information.
• Correct inaccurate personal information.
• Opt out of the sale or sharing of personal information (we do not sell data).
• Non-discrimination for exercising your privacy rights.

9.2 EU / UK Residents (GDPR)

If you are located in the European Union or United Kingdom, you have additional rights under GDPR, including the right to access, rectify, erase, restrict processing, data portability, and object to processing. You also have the right to lodge a complaint with your local data protection authority.

9.3 How to Exercise Your Rights

To exercise any of these rights, email us at privacy@lawmillion.com with "Privacy Request" in the subject line. We will respond within 30 days (or 45 days with notice for complex requests). We may require verification of your identity before fulfilling certain requests.

10. Children's Privacy

LawMillion is not directed to individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe a child has provided us personal information, please contact us at privacy@lawmillion.com and we will delete it promptly.

11. Third-Party Links & Services

The Platform may contain links to third-party websites (attorney firm websites, legal resources, etc.). This Privacy Policy does not apply to those sites. We encourage you to read the privacy policies of any third-party site you visit.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. We will notify you of material changes by posting a prominent notice on the Platform and updating the "Last Updated" date at the top of this policy. Continued use after changes constitutes acceptance of the updated policy.

13. Contact Us

If you have any questions, concerns, or complaints about this Privacy Policy or our data practices, please contact us: