Privacy Policy

1. Introduction & Scope

This Privacy Policy explains how Vasquez Law Firm, PLLC ("Vasquez Law Firm," "we," "us," or "our") collects, uses, shares, and protects personal information when you visit vasquezlawnc.com (the "Website"), use our online tools, or contact us. We are a bilingual law firm serving immigration clients in North Carolina and Florida and personal injury clients in North Carolina, with offices in Smithfield, Raleigh, and Charlotte, North Carolina, and in Orlando, Florida.

This policy applies to information collected through the Website and related online forms and tools. It does not change or replace the attorney-client privilege or the confidentiality obligations we owe to our clients under the rules of professional conduct, which are broader than this policy.

We extend the core privacy rights described below (modeled on California's Consumer Privacy Act, as amended by the California Privacy Rights Act, together the "CCPA/CPRA") to all visitors in the United States, regardless of the state where you live.

2. Information We Collect

Depending on how you use the Website, we collect the categories of personal information described below. Some information you provide directly (for example, when you fill out a form). Other information is collected automatically when you browse general pages of the Website.

3. How We Use Your Information

We use the information we collect for the following business and legal purposes:

• To respond to your inquiries, schedule consultations, and provide legal services
• To perform the case-status lookups you request (see Section 4)
• To send the guides, newsletters, and updates you ask for, and to manage your preferences
• To operate, maintain, secure, and improve the Website
• To detect and prevent fraud, spam, and abuse, and to protect the security of our systems
• To measure and improve our general marketing (on marketing pages only, see Section 5)
• To comply with legal obligations and to establish, exercise, or defend legal claims

4. How We Handle Sensitive Immigration Information

When you enter an A-Number into our "My Case" tool, that number is transmitted directly to the federal Executive Office for Immigration Review (EOIR) to perform the case-status lookup you requested, and the result is returned to your screen. When you enter a USCIS receipt number into our case-status checker, that number is transmitted directly to the official U.S. Citizenship and Immigration Services (USCIS) system for the same purpose.

We do not store or log A-Numbers or USCIS receipt numbers, and we do not retain them after the lookup is performed. These numbers are never placed in any customer relationship management (CRM), analytics, advertising, or marketing system, and they are not shared with any third party other than the government agency performing the requested lookup, except as described under Amparo app: AI insights in section 4.

Information you choose to share with us about your legal matter through a consultation request is used only to evaluate and handle your matter and is protected by the confidentiality and attorney-client obligations described in Section 1.

Amparo app: AI insights

If you turn on AI insights in the Amparo app, the questions you type and details of your saved immigration cases (such as A-Number, case status, dates, court and judge) are sent to our AI service providers, OpenAI, Anthropic and Google, to generate answers for you. This happens only after you tap Allow, and you can turn it off at any time in the app's Settings. We do not sell this information.

5. Cookies & Tracking Technologies

We use cookies and similar technologies for different purposes. Below is a plain-language description of each category.

Your Choices: GPC & Browser Controls

We honor the Global Privacy Control (GPC). If your browser or a browser extension sends a GPC signal, we treat it as a valid request to opt out of the "sharing" of your personal information for the device or browser from which it is sent.

You can also manage cookies through your browser settings, including blocking or deleting cookies. Note that turning off essential cookies may stop parts of the Website from working.

6. How We Share Information ("Sale" & "Sharing" Disclosure)

We do not sell your personal information for money. However, on general marketing pages only, our use of advertising technology such as the Meta Pixel and, on TikTok ad pages, the TikTok pixel may involve disclosing certain online identifiers and activity to an advertising partner for cross-context behavioral advertising. In addition, when someone who came to us from a Google ad becomes a qualified lead or a client, we report that to Google Ads, as described in Section 5. Under the CCPA/CPRA, this counts as "sharing."

You have the right to opt out of this "sharing." You can do so by using the "Do Not Sell or Share My Personal Information" link in our Website footer, the Reject button in our cookie banner, or by sending a GPC signal as described in Section 5, which we honor automatically.

If you opt out, including through our cookie banner or a GPC signal when you submit a form or chat, or by asking us by phone or email, we will not report you to Google Ads, Meta or TikTok if you become a qualified lead or a client.

We also disclose information to service providers who help us operate, and to government recipients when you request a lookup or when disclosure is required by law. The table below summarizes the main recipients.

AI service providers (OpenAI, Anthropic and Google): for Amparo app users who turn on AI insights, as described in section 4.

7. Marketing Communications

We use GoHighLevel as the platform to send email and, where you have opted in, text-message communications.

8. Your Privacy Rights

We extend the following rights to all U.S. visitors. Subject to applicable law, you have the right to:

• Know and access the personal information we have collected about you
• Delete personal information we have collected, subject to legal exceptions
• Correct inaccurate personal information
• Opt out of the "sale" or "sharing" of your personal information
• Limit the use of your sensitive personal information
• Non-discrimination for exercising any of these rights

How to Exercise Your Rights

You can submit a request in two ways:

• By email to our privacy contact (see Section 15)
• By phone at 1-844-967-3536

To protect your information, we will take reasonable steps to verify your identity before responding, and may ask for information that matches what we already hold. You may use an authorized agent to submit a request on your behalf; we may require proof of the agent's authorization and verification of your identity.

We will acknowledge your request within 10 business days and provide a substantive response within 45 days. If we need more time, we may extend once by up to an additional 45 days (90 days total) and will tell you why. Opt-out requests are honored promptly.

9. Data Retention

• Contact and intake data is retained for [3–5 years — CONFIRM], then deleted or anonymized, unless a longer period is required by law or to handle your matter.
• Guide-lead data, after you unsubscribe, is kept on a suppression list for [1 year — CONFIRM] so that we can honor your opt-out.
• A-Numbers and USCIS receipt numbers are not retained, as described in Section 4.

10. Security

We maintain reasonable administrative, technical, and physical safeguards designed to protect personal information, including encryption of data in transit (TLS) and access controls that limit who can view personal information.

No method of transmission over the Internet or method of electronic storage is completely secure, so we cannot guarantee absolute security. If a security incident affecting your personal information occurs, we will notify you as required by applicable law (see Section 11).

11. Data Breach Notification

If a breach of security affecting your personal information occurs, we will notify affected individuals as required by law:

• North Carolina residents: notice will be provided without unreasonable delay (N.C. Gen. Stat. § 75-65).
• Florida residents: notice will be provided within 30 days after determining that a breach has occurred (Fla. Stat. § 501.171).

12. Children's Privacy

The Website is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, please contact us so we can delete it.

13. International & EU Visitors

Our services are intended for users in the United States. If you visit the Website from the European Union or European Economic Area, we will request your consent before placing non-essential cookies on your device.

14. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last Updated" date at the top of this page. For significant changes, we will provide a more prominent notice on the Website or, where appropriate, by email.

15. Contact Us

If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact us. Assistance is available in both English and Spanish.