Privacy policy

Who we are

This website, elahilaw.com, is run by Elahi Law & Mediation Firm PLLC, which practices as Elahi Law (“we”, “us”). Shayan Elahi is the responsible attorney. We decide what information is collected and why, so we are the business (or “controller”) responsible for it under the laws in this policy.

Elahi Law, 3010 LBJ Fwy #1450, Dallas, TX 75234. Phone (972) 765-6715. Email shayan@elahilawfirm.com.

What this policy covers

This policy covers elahilaw.com, the forms, calendar, and chat shown on it, and the texts and emails we send because of them.

If you hire us, your engagement agreement and our duty of confidentiality under the lawyer conduct rules of Texas and Florida govern what you share about your matter. Those duties are stricter than this policy.

Contacting us does not make you our client

Sending a form, booking a call, chatting, texting, emailing, or calling us does not create an attorney-client relationship. We represent you only after we confirm in writing that we do.

Please do not send confidential details through the form or chat. Until we confirm in writing that we represent you, share only enough for us to understand the type of problem. We still keep what you send private and use it only as this policy describes.

Notice at collection

This short notice applies whenever we collect information through our forms, calendar, chat, cookie banner, texts, email, or phone. The sections linked below give the full details.

• What we collect. Contact details, what you tell us about your legal matter, and information about your device and your visit. See What we collect.
• Why. To reply to you, check for conflicts of interest, book calls, text you about your inquiry and appointments if you agree, send occasional marketing texts only if you tick that separate optional box, keep the site secure, learn which pages help people, and, if you allow marketing cookies, measure and show our ads. See How we use your information.
• Sale and sharing. We do not sell your information for money. If you allow analytics or marketing cookies, Microsoft and Meta receive data about your visit, which some state laws treat as a sale, sharing, or targeted advertising. Opt out here.
• Sensitive information. Health or other sensitive details you choose to send are used only to respond to you and provide legal services. They are never sold, shared, or used for advertising.
• How long we keep it. Until we no longer need it for the purpose we collected it for, for conflict checks, or to meet our legal duties. See How long we keep it.

What we collect, who collects it, and why

We collect information from 3 sources. You, when you fill in a form, book, chat, text, email, or call. Your browser and device, automatically, when you visit. Our providers, which give us reports, such as Google Search Console totals and Meta ad reports.

We ask only for what we need. The phone number is required on the case review form because most matters need a call.

Health and other sensitive information

People often tell us about injuries, medical treatment, health conditions, money problems, or how they were treated at work, because those facts are part of a legal matter. Some state laws call this “sensitive data” or “consumer health data”.

• We collect it only when you choose to send it. We use it only to understand your matter, respond to you, and provide the legal services you ask for. By sending it, you agree to that use.
• We never sell it, never share it for advertising, and never send it to Google Analytics, Microsoft Clarity, or Meta.
• It stays in our contact system and our email, where only the people named in How we protect it can open it.
• We do not use geofencing or track where you are.
• You can ask us to delete it at any time. We keep only what we need for conflict checks or our legal duties, and we tell you what we kept.

Washington's My Health My Data Act and Nevada's consumer health data law cover businesses that operate in or target those states. We practice in Texas and Florida, but we give everyone the protections above. They also meet Connecticut's rules against selling consumer health data and geofencing.

How we use your information

• To respond to your request and arrange a case review.
• To check for conflicts of interest before we discuss your matter.
• To send texts about your inquiry, only if you agreed. See our SMS terms.
• To keep the site secure and block spam and abuse.
• To understand which pages help people and fix the ones that do not, only if you allow analytics cookies.
• To measure our Facebook and Instagram ads and show them to people who have visited our site, only if you allow marketing cookies.
• To meet our legal and professional duties, including lawyer conduct rules and record keeping.

We do not use your information to make automated decisions that have legal or similar effects on you, and we do not profile you for such decisions. We do not use your information to train AI models, and we do not sell it for that purpose.

Analytics and advertising tools

Google Analytics

• Google Analytics loads only if you allow analytics cookies. If your browser sends Global Privacy Control, it does not load.
• It does not see what you type in our forms, and we never send it your name, email, phone, or message.
• Google uses your IP address to estimate your general location, down to city level, and to keep its service secure. Google says Analytics does not log or store IP addresses.
• Our setup switches off Google signals and ad personalization and denies Google's advertising storage. We do not link Google Analytics to any advertising account. Google handles this data for us as our service provider, under its data processing terms.
• We set Google Analytics to delete visit-level data after 14 months. Summary reports, such as monthly page view totals, are kept longer.
• Read how Google uses information from sites that use its services. Google also offers a browser add-on to opt out of Google Analytics.

Microsoft Clarity

• Clarity loads only if you allow analytics cookies. If your browser sends Global Privacy Control, it does not load.
• Our form and calendar run inside separate frames from link.elahilaw.com. Clarity does not record anything inside them, so it never sees what you type there.
• The chat is not in a frame. It runs on our page, so we mark it for Clarity to mask completely.
• Clarity hides text you type in any field on our pages. On our contact page and our legal pages we also tell it to hide all page text.
• Microsoft keeps recordings available to us for 30 days. Recordings we mark as favorites, and a random sample, are kept for up to 9 months. Heatmaps are available for up to 9 months.
• Microsoft is not our service provider for Clarity. Under the Clarity terms, Microsoft and Elahi Law each decide independently how to use Clarity data. Microsoft may collect personal data from visitors to our site and use it for its own purposes under the Microsoft Privacy Statement, including to provide Microsoft Advertising and to build profiles used for advertising.
• We tell Clarity to deny advertising storage, and we do not link it to any advertising account. That does not limit Microsoft's own rights, so we treat Clarity as a possible sale or sharing of your information, and you can opt out. See Your privacy choices.

Meta Pixel

• The Meta Pixel loads only if you allow marketing cookies. If your browser sends Global Privacy Control, it does not load.
• It sends Meta Platforms, Inc. the information listed in What we collect, including the pages you visit on our site. It sends nothing from our practice area, contact, booking, or blog article pages.
• We use it to measure whether our Facebook and Instagram ads lead to visits and to show our ads to people who have visited our site. Privacy laws call this “cross-context behavioral advertising” (California) or “targeted advertising” (most other states). We treat it as “sharing”, and possibly a “sale”, and you can opt out.
• It cannot see inside our form and calendar frames. We never send Meta your name, your contact details, or anything you write to us.
• If you are logged in to Facebook or Instagram in the same browser, Meta may link your visit to your account.
• Meta uses this data under the Meta Business Tools Terms and its own Privacy Policy, including to deliver and improve ads.

Notice about third-party tracking

Third parties, including Meta and Microsoft, may use cookies, web beacons, and similar technologies to collect or receive information from our site and elsewhere on the internet, and use it to provide measurement services and target ads. You can opt out on our site with Your privacy choices. You can opt out of interest-based ads from many companies at aboutads.info/choices and youronlinechoices.eu, and in your Facebook, Instagram, and Microsoft account settings.

Who we share it with

We do not sell your personal information for money. We share it with the recipients below, by category, and only for the purposes in this policy.

Service providers work for us under contract and may use your information only to provide their service to us. Third parties use the information for their own purposes too. Disclosures to third parties are the ones state laws may treat as a sale, sharing, or targeted advertising.

We may also share information:

• with a court, regulator, or other authority when the law or a court order requires it,
• with our professional advisers, such as an accountant or insurer, under a duty of confidentiality,
• with a successor firm if Elahi Law merges or closes, only as the lawyer conduct rules allow.

We do not share your mobile number or your SMS consent with any third party for their marketing. We do not give anyone your information for their own direct marketing.

Your privacy choices: opt out of sale, sharing, and targeted ads

You have the right to opt out of the sale of your personal information, its sharing for cross-context behavioral advertising, and its use for targeted advertising. On this site, that means switching off the Meta Pixel and Microsoft Clarity. Google Analytics shares the analytics switch with Clarity, so it goes off too. You can use any of these 4 ways.

• Global Privacy Control. If your browser or an extension sends this signal, we treat it as a valid opt-out for this browser. Analytics and marketing stay off, and you cannot switch them on while the signal is present. You do not need to do anything else.
• Your Privacy Choices. Select “Your Privacy Choices” at the bottom of any page and choose “Opt out of sale, sharing, and targeted ads”. Your choice is saved in this browser straight away. Once we have your opt-out, from this control or from Global Privacy Control, the control shows “Opt-out request honored”.
• Cookie settings. Switch Analytics and Marketing off under “Cookie settings” at the bottom of any page.
• Email or phone. Email shayan@elahilawfirm.com with the subject “Opt out” or call (972) 765-6715. We act on it within 15 business days, and we do not need to verify your identity.

Choices made in your browser apply to that browser and device. If you clear your browser storage or use another device, make your choice again, or send Global Privacy Control.

Cookies, Global Privacy Control, and Do Not Track

Essential storage remembers your cookie choice. Everything else stays off until you allow it. Details are in our Cookie policy. Change your choice at any time with “Cookie settings” at the bottom of every page.

If you pick a theme or pause animations under Display settings at the top of a page, your browser also stores that choice. It stays on your device and is never sent to us.

We honor Global Privacy Control as described in Your privacy choices. We do not respond to the older “Do Not Track” browser signal, because there is no common standard for it. If you allow analytics or marketing cookies, Google, Microsoft, and Meta may collect information about your online activity over time and across different websites.

How long we keep it

Where no fixed period applies, we keep information only as long as we need it for the purpose we collected it for, for conflict checks, or to meet our legal and professional duties. Then we delete it.

How we protect it

The site uses HTTPS. The form, calendar, and chat send your details straight to HighLevel over an encrypted connection, so they never pass through our website's server. Only Shayan Elahi, his paralegal, and Pinn.Media staff who maintain the system can open your information.

No system is perfectly secure, so please keep confidential details for your call with us. If a security breach affects your personal information, we will tell you and the authorities as the law requires.

Your rights

Wherever you live, you can ask us to:

• confirm whether we hold personal information about you, tell you what we hold, and give you a copy in a portable format,
• tell you the categories of sources, purposes, and recipients, and the specific companies we disclosed your information to,
• correct it,
• delete it,
• opt out of any sale, sharing, targeted advertising, or profiling (see Your privacy choices),
• stop texting you (or reply STOP to any text),
• withdraw any consent you gave, including for sensitive information.

We will not treat you differently for using any of these rights. We offer no discounts or other incentives in exchange for your information.

We give these rights to everyone, whether or not a particular state law covers a firm of our size. How to make a request explains the steps.

Your state privacy rights

California

The California Consumer Privacy Act, as amended by the California Privacy Rights Act, gives California residents the right to know, delete, and correct their personal information, to opt out of its sale and sharing, to limit the use of sensitive personal information, and not to be treated differently for using these rights.

In the 12 months before the “Last updated” date at the top of this page, we collected the categories below. We used them for the purposes in How we use your information and kept them as set out in How long we keep it.

• We do not create inferences or profiles about you.
• We do not knowingly sell or share the personal information of anyone under 16.
• We use sensitive personal information only to respond to you and provide legal services, which the law allows without a right to limit. You can still ask us to stop using it or to delete it.
• We do not disclose personal information to third parties for their own direct marketing (California's “Shine the Light” law).

Texas, Florida, and other states

Residents of Texas, Florida, Virginia, Colorado, Connecticut, Utah, Oregon, Montana, Iowa, Delaware, Nebraska, New Hampshire, New Jersey, Tennessee, Minnesota, Maryland, Indiana, Kentucky, Rhode Island, and any other state with a comprehensive consumer privacy law can use the rights in Your rights. That includes the right to appeal our decision, and, in Minnesota, the right to question the result of any profiling decision. We make no such decisions.

We do not sell sensitive data. Third parties to whom we may be treated as selling personal information are Meta Platforms, Inc. and Microsoft Corporation, as described above.

Nevada

We do not sell covered information as Nevada law defines it. Nevada residents can still send us a request not to sell, by email to shayan@elahilawfirm.com, and we will honor it.

How to make a request

Ask. Email shayan@elahilawfirm.com or call (972) 765-6715. Tell us what you want and the state you live in. Requests are free.

We confirm who you are. For requests to know, correct, or delete, we match at least 2 details you gave us before. For a copy of specific sensitive information, we may also ask for a third detail and a signed statement that you are the person. We use these details only to verify you. Opt-out requests need no verification.

Someone can ask for you. An authorized agent may make a request with your signed permission or a power of attorney. We may ask you to confirm your identity with us directly.

Timing. We confirm we received your request within 10 business days. We answer within 45 days. If we need up to 45 more days, we tell you why within the first 45. We act on opt-out requests within 15 business days.

What we may keep. Some information we must keep, for example records needed for conflict checks, records the lawyer conduct rules require, or information needed for a legal claim. If so, we tell you what we kept and why. If requests are clearly unfounded or excessive, we may decline or charge a reasonable fee where the law allows, and we will explain why.

If we say no. You can appeal by replying to our decision with the word “Appeal”. We answer within 45 days in writing and explain our reasons. If you are still not satisfied, you can contact your state attorney general. Texas residents can file a complaint at texasattorneygeneral.gov/consumer-protection/file-consumer-complaint.

Children and teens

Our site is for adults. It is not meant for children under 13, and we do not knowingly collect their information online.

We do not knowingly sell or share the information of anyone under 18, or use it for targeted advertising. If you are under 18, please do not allow marketing cookies, and ask a parent or guardian to contact us for you.

If a matter involves a child, a parent or guardian should contact us. If you think a child under 13 has sent us information, email us and we will delete it.

Visitors from outside the US

Our site is aimed at people in Texas and Florida. Our providers handle information mainly in the United States. HighLevel's support team in India may open records, and Bunny Fonts is based in Slovenia. If you visit from outside the US, your information will be handled in those countries.

If UK or EU data protection law applies to you, we rely on these legal bases.

You can withdraw consent at any time. Withdrawing does not affect what we did before. You also have the rights in Your rights, and you can complain to your data protection authority.

Laws this policy is written for

• California Consumer Privacy Act as amended by the California Privacy Rights Act, the California Online Privacy Protection Act, and California's “Shine the Light” law.
• Texas Data Privacy and Security Act, Florida Digital Bill of Rights, and the comprehensive privacy laws of the other states named in Your state privacy rights.
• Nevada's online privacy law (NRS 603A), Washington's My Health My Data Act, and Connecticut's and Nevada's consumer health data rules.
• Children's Online Privacy Protection Act (COPPA).
• CAN-SPAM Act for email.
• Telephone Consumer Protection Act (TCPA) and Texas and Florida telemarketing law for texts.
• State data breach notification laws, including those of Texas and Florida.
• UK GDPR and EU GDPR, for the rare visitor they cover.
• Texas Disciplinary Rules of Professional Conduct and Rules Regulating The Florida Bar, for confidentiality and advertising.

Links to other sites

Our site links to other sites, such as Google Maps. Their privacy policies apply when you use them.

Changes to this policy

We review this policy at least once every 12 months. When we change it, we update the “Last updated” date at the top. We update it before we add any new tool that collects information.

If a change affects how we use information you already gave us, we will ask for your consent where the law requires it.

Contact

Elahi Law, 3010 LBJ Fwy #1450, Dallas, TX 75234

Phone (972) 765-6715

Email shayan@elahilawfirm.com