Privacy Policy

Introduction

Compass Law Group ("we," "our," or "us") is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our legal services.

We understand that when you engage legal counsel, you entrust us with sensitive and confidential information. We take this responsibility seriously and have implemented robust measures to protect your data in accordance with applicable laws, including the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and the Utah Consumer Privacy Act (UCPA).

Information We Collect

Personal Information You Provide

We collect information that you voluntarily provide to us when you:

• Complete our contact or consultation request forms
• Subscribe to our newsletter or legal updates
• Engage our legal services
• Communicate with us via email, phone, or other channels
• Attend our events or webinars

This information may include:

• Contact Information: Name, email address, phone number, mailing address
• Professional Information: Employer, job title, business address
• Case-Related Information: Details about your legal matter, relevant documents, and communications
• Financial Information: Billing address, payment method details (processed securely through third-party payment processors)

Information Collected Automatically

When you visit our website, we automatically collect certain information, including:

• Device Information: IP address, browser type, operating system, device identifiers
• Usage Data: Pages visited, time spent on pages, click patterns, referring URLs
• Location Data: General geographic location based on IP address
• Cookies and Tracking Technologies: Information collected through cookies, pixels, and similar technologies (see our Cookie Policy)

How We Use Your Information

We use the information we collect for the following purposes:

Legal Services

• Providing legal advice and representation
• Managing attorney-client relationships
• Conducting conflict checks
• Processing payments and maintaining billing records
• Communicating about your case or legal matters

Business Operations

• Responding to inquiries and consultation requests
• Improving our website and services
• Analyzing website traffic and user behavior
• Ensuring website security and preventing fraud
• Complying with legal obligations and professional responsibilities

Communications

• Sending legal updates and newsletters (with your consent)
• Providing information about our services
• Sending SMS messages you opted in to receive, such as inquiry follow-up, appointment confirmations, and account or customer-care notices
• Notifying you of changes to our policies or practices

Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, we process your personal data based on the following legal grounds:

• Contract Performance: Processing necessary to provide legal services you have requested
• Legal Obligation: Processing required to comply with professional and legal requirements
• Legitimate Interests: Processing for our legitimate business interests, such as improving our services and marketing (balanced against your rights)
• Consent: Processing based on your explicit consent, which you may withdraw at any time

How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

• Service Providers: Third-party vendors who assist with website hosting, payment processing, email delivery, and analytics (bound by confidentiality agreements)
• Legal Requirements: When required by law, court order, or governmental authority
• Professional Obligations: As necessary to fulfill our professional responsibilities as attorneys
• With Your Consent: When you have given explicit permission to share information with specific parties
• Business Transfers: In connection with a merger, acquisition, or sale of assets (with continued protection of your data)

SMS / Text Messaging

No mobile information will be shared with third parties/affiliates for marketing/promotional purposes. Information sharing to subcontractors in support services, such as customer service, is permitted. All other use case categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

Information We Collect

When you opt in to receive SMS messages from Compass Law Group, we collect the following information through our opt-in form:

• Phone number (required for messaging)
• First and last name (used for personalized messaging)
• Email address (for account communications)
• Service needed and any additional information you voluntarily provide about your legal matter
• SMS consent and the time you provided it

This information is collected solely to deliver the SMS messages you have consented to receive and to maintain a record of your consent. We retain this information for as long as you remain opted in, plus a reasonable period afterward to respond to support requests or comply with legal record-keeping requirements.

Data Security

We protect user information through the following measures:

• Encryption in transit (TLS / HTTPS for all data transmission between user devices, our website, and our service providers)
• Access controls limiting data to authorized personnel on a need-to-know basis
• Secure third-party processors including our website host and GoHighLevel (CRM and messaging platform), each of which maintains industry-standard security practices
• Regular review of access logs and data handling practices

No system is perfectly secure, but we treat user information with the same care we would expect for our own.

Opt-Out

You may opt out of SMS messages at any time by replying STOP to any message. You will receive one final confirmation message and will not receive further SMS messages from us. To opt out by other means or if you have questions about opting out, contact us at support@compasslawgrp.com or (888) 828-0590.

Contact

For privacy questions related to our SMS program, contact us at support@compasslawgrp.com or (888) 828-0590. Our mailing address is 2825 E Cottonwood Pkwy, #500, Cottonwood Heights, UT 84121. SMS program terms are also described in our Terms and Conditions.

Data Protection Measures

We implement comprehensive security measures to protect your personal information:

• Encryption: SSL/TLS encryption for data in transit; encryption at rest for sensitive data
• Access Controls: Role-based access restrictions limiting data access to authorized personnel
• Secure Infrastructure: Enterprise-grade hosting with regular security audits and monitoring
• Employee Training: Regular privacy and security training for all staff members
• Incident Response: Established procedures for detecting, reporting, and responding to data breaches
• Data Minimization: Collection of only information necessary for stated purposes

Your Privacy Rights

Rights Under GDPR (EEA/UK Residents)

If you are located in the European Economic Area or United Kingdom, you have the following rights:

• Right of Access: Request a copy of the personal data we hold about you
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data (subject to legal retention requirements)
• Right to Restrict Processing: Request limitation of how we use your data
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Object: Object to processing based on legitimate interests or for direct marketing
• Right to Withdraw Consent: Withdraw consent at any time for consent-based processing

Rights Under CCPA/CPRA (California Residents)

If you are a California resident, you have additional rights under the California Consumer Privacy Act and California Privacy Rights Act:

• Right to Know: Request information about the categories and specific pieces of personal information we have collected
• Right to Delete: Request deletion of your personal information
• Right to Correct: Request correction of inaccurate personal information
• Right to Opt-Out: Opt out of the sale or sharing of your personal information (we do not sell personal information)
• Right to Non-Discrimination: Not be discriminated against for exercising your privacy rights
• Right to Limit Use: Limit the use and disclosure of sensitive personal information

Rights Under UCPA (Utah Residents)

Utah residents have rights including access, deletion, data portability, and the right to opt out of targeted advertising and sales of personal data.

Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required by law. Factors we consider include:

• The duration of our attorney-client relationship
• Legal and professional obligations requiring record retention
• Statute of limitations periods for potential legal claims
• Business needs and legitimate interests

Client files and related records are typically retained for a minimum of seven (7) years after the conclusion of representation, in accordance with professional responsibility requirements.

Children's Privacy

Our website and services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately so we can delete such information.

International Data Transfers

Your information may be transferred to and processed in the United States, where our servers are located. If you are located outside the United States, please be aware that data protection laws may differ from those in your jurisdiction. By using our website or services, you consent to the transfer of your information to the United States. For EEA/UK residents, we implement appropriate safeguards such as Standard Contractual Clauses to protect your data during international transfers.

Third-Party Links

Our website may contain links to third-party websites or services. We are not responsible for the privacy practices of these external sites. We encourage you to review the privacy policies of any third-party sites you visit.

Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or applicable laws. When we make material changes, we will notify you by posting the updated policy on our website with a new "Last Updated" date. We encourage you to review this policy regularly.

Contact Us

If you have questions about this Privacy Policy, wish to exercise your privacy rights, or have concerns about our data practices, please contact us:

We will respond to your request within the timeframe required by applicable law (typically 30-45 days).