Privacy Policy

Last Updated: 30 June 2026

Introduction

We at Spengler & Agans (“S&A”, “we”, “us” and/or “our”) value the relationship we have with you.

This Privacy Policy explains how we collect, use, share, store and otherwise process your personal data when you use s-a.law (our “Site”), in connection with your relationship with us as an S&A client/recipient of our services or your general interest in our services and publications. It also explains your rights under applicable data protection laws such as US consumer privacy laws.

Information We Collect; Purpose of Processing

We regularly collect personal data as a law firm providing professional services. The types of personal data relating to you that we may collect, and the purposes for which we process this data, depends on the nature of your interaction with us. Please read the table below for more information, including the legal basis under which we are allowed to process your personal data.

When do we obtain your personal data?	Types of personal data that we may process	Purpose/legal basis for processing
When you browse or interact with us, our Site or other services	Name, title, gender Contact details (email address, physical address, phone numbers) Your employer Description of yourself, your position, your requirements or comments, and your relationship to a person Technical information (including your IP address, domain name, type of browser and operating system used) Frequency and timing of email contact and information included in email subject lines Your preferences	Legitimate interests: Getting to know clients or potential clients, and colleagues Managing business communications with our clients and prospective clients Maintaining and managing our Site Responding to your communication(s) with us Improving the quality of our communications and interaction with you Internal statistical analysis (which may include where our Site is being used geographically) Consent: When required under state privacy laws
As part of our business intake/client onboarding procedures and when providing legal services to you or to an entity with which you are associated, including as an employee, representative, authorized signatory, director, shareholder or beneficial owner and when we provide charitable, volunteer or other such services to you or the organization you are associated with	Name, title, gender Contact details (personal or business email address, telephone numbers, physical address) Company Position Information relating to any matter that you want to discuss with us that relates to you as an individual, which may include sensitive personal data Information from identification documents Any other personal data, which may include sensitive personal data, disclosed to us during the onboarding process and the provision of legal services, including personal data relating to a corporate client's or another's employees, customers and other individuals	Legal obligation: Acting in compliance with applicable legal obligations, such as legal privilege Legitimate interests: In order to fulfill our contractual obligations to you when you are an entity and the processing relates to natural persons; provided you have undertaken to inform such persons of this privacy policy and obtained any necessary consents Contract: Fulfilling our obligations under our engagement or other agreement with you Consent: When processing special categories of personal data; unless another condition applies, such as processing that is necessary for the establishment, exercise or defense of legal claims or for carrying out our obligations under employment, social security and social protection laws When processing personal data relating to criminal convictions and offences or related security measures, unless another condition applies under applicable law, such as protecting an individual's vital interests, personal data manifestly made public by the data subject, or processing in connection with legal proceedings, legal advice or legal rights
When you apply for a job, summer placement, or internship	Name, title, gender, date of birth, NIN, SSN Results of background checks including references, qualifications, and to the extent permitted by law, criminal background checks (unspent convictions) Passport, work permit, visa, or other immigration documentation Contact details (personal, business or educational institution email address, telephone numbers, physical address) CV, including relevant skills and experience Special requirements (such as, or relating to, a disability/health issue) Any other personal data that you may provide to us through the application process, such as views and preferences that you disclose to us in interviews, your responses to questions, and demonstration of your skills	Legitimate Interests: Fulfilling our staffing requirements Ensuring potential recruits of any kind are appropriately qualified for positions at the firm Consent: On the basis of any consent that we are required to obtain under applicable law, in relation to our criminal background checks Legal obligation: Verifying your right to work lawfully in the relevant country applicable to your application

When do we obtain your personal data?

Types of personal data that we may process

Purpose/legal basis for processing

When you browse or interact with us, our Site or other services

Name, title, gender
Contact details (email address, physical address, phone numbers)
Your employer
Description of yourself, your position, your requirements or comments, and your relationship to a person
Technical information (including your IP address, domain name, type of browser and operating system used)
Frequency and timing of email contact and information included in email subject lines
Your preferences

Legitimate interests:

Getting to know clients or potential clients, and colleagues
Managing business communications with our clients and prospective clients
Maintaining and managing our Site
Responding to your communication(s) with us
Improving the quality of our communications and interaction with you
Internal statistical analysis (which may include where our Site is being used geographically)

Consent:

When required under state privacy laws

As part of our business intake/client onboarding procedures and when providing legal services to you or to an entity with which you are associated, including as an employee, representative, authorized signatory, director, shareholder or beneficial owner and when we provide charitable, volunteer or other such services to you or the organization you are associated with

Name, title, gender
Contact details (personal or business email address, telephone numbers, physical address)
Company
Position
Information relating to any matter that you want to discuss with us that relates to you as an individual, which may include sensitive personal data
Information from identification documents
Any other personal data, which may include sensitive personal data, disclosed to us during the onboarding process and the provision of legal services, including personal data relating to a corporate client's or another's employees, customers and other individuals

Legal obligation:

Acting in compliance with applicable legal obligations, such as legal privilege

Legitimate interests:

In order to fulfill our contractual obligations to you when you are an entity and the processing relates to natural persons; provided you have undertaken to inform such persons of this privacy policy and obtained any necessary consents

Contract:

Fulfilling our obligations under our engagement or other agreement with you

Consent:

When processing special categories of personal data; unless another condition applies, such as processing that is necessary for the establishment, exercise or defense of legal claims or for carrying out our obligations under employment, social security and social protection laws
When processing personal data relating to criminal convictions and offences or related security measures, unless another condition applies under applicable law, such as protecting an individual's vital interests, personal data manifestly made public by the data subject, or processing in connection with legal proceedings, legal advice or legal rights

When you apply for a job, summer placement, or internship

Name, title, gender, date of birth, NIN, SSN
Results of background checks including references, qualifications, and to the extent permitted by law, criminal background checks (unspent convictions)
Passport, work permit, visa, or other immigration documentation
Contact details (personal, business or educational institution email address, telephone numbers, physical address)
CV, including relevant skills and experience
Special requirements (such as, or relating to, a disability/health issue)
Any other personal data that you may provide to us through the application process, such as views and preferences that you disclose to us in interviews, your responses to questions, and demonstration of your skills

Legitimate Interests:

Fulfilling our staffing requirements
Ensuring potential recruits of any kind are appropriately qualified for positions at the firm

Consent:

On the basis of any consent that we are required to obtain under applicable law, in relation to our criminal background checks

Legal obligation:

Verifying your right to work lawfully in the relevant country applicable to your application

Sensitive Personal Data

If you choose to provide sensitive personal data to us, we do not use such data for purposes other than as reasonably necessary to provide legal advice or other requested services, to protect or defend our legal rights, to identify, investigate, and protect against claims, incidents, and fraud, to comply with applicable laws, or to monitor diversity and equal opportunities. Where required under applicable laws, we will obtain your explicit consent to process your sensitive data, unless the processing is required for reasons of substantial public interest.

Automatically Collected Data

The Site does not set cookies and does not run analytics or advertising trackers. Some page assets (e.g., web fonts and two animation libraries) are served from third-party networks (Google Fonts, cdnjs, and unpkg), which receive your IP address and browser type as a normal part of delivering those files. Our servers also record information (“log data”), including information that your browser automatically sends whenever you visit the Site. This log data includes your Internet Protocol (“IP”) address (from which we can discern the country you are connecting from at the time you visit the Site), browser type and settings, and the date and time of your request.

Where the information that we collect automatically on our Site or via other services (such as emails we send you) is personal data, our legal basis for the use of this information is that it is necessary for the purposes of our legitimate interests / evaluative purposes (as applicable) in maintaining the safe operation of our Site and learning how you interact with our Site and certain emails we send you to improve user experience.

Failure to Provide the Personal Data We Request

When we need your personal data to comply with business and/or legal obligations or to perform our contract, failure to provide this data may impact our ability to provide our services.

How We Share Your Personal Data

We share your information as follows:

Service providers and authorized third parties. Third parties who provide services to us have access to your personal data. For the purposes described above, we engage providers of website analytics, hosting and cloud computing services and other IT services, payroll services, auditing services, consultancy services, regulatory services, legal services, CRM, marketing and sales software solutions, software platforms and services for the legal profession, translation services, background checks, talent management and recruitment services, in addition to other administrative services. These parties may access, process or store personal data in the course of performing the services we have hired them to provide.
Administrative and legal reasons. We may disclose personal data as we deem necessary and appropriate under applicable laws, such as to comply with a subpoena, bankruptcy proceedings, or similar legal process; in response to lawful requests by public, governmental and regulatory authorities, including to meet national security or law enforcement requirements; or when we believe in good faith that disclosure is reasonably necessary to protect the property or rights of S&A, you or third parties, or the public at large.
Business transfers. We may disclose and transfer your information and data to a third party: (a) if we assign our rights regarding any of the information to a third party or (b) in connection with a corporate merger, consolidation, restructuring, sale of certain of our ownership interests, assets, or both, or other corporate change, including without limitation, during the course of any due diligence process.

Retaining Your Personal Data

We retain your personal data only for as long as is necessary to fulfill the purposes for which it was collected and processed, in accordance with our retention policies, and in accordance with applicable laws or until you withdraw your consent (where applicable). To determine the appropriate retention period for your personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of your personal data, the purposes for which we use your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements. In some circumstances we may anonymize your personal data so that it can no longer be associated with you, in which case it is no longer personal data.

We do not collect more personal data than we need to fulfill our purposes stated in this Privacy Policy. We may retain your personal data for an additional period to the extent deletion would require us to overwrite our automated disaster recovery backup systems or to the extent we deem it necessary to assert or defend legal claims during any relevant retention period. For more information on our data retention policies please contact us as set out in the “How to Contact Us” section below.

Your Rights and Choices

To the extent provided for by law and subject to applicable exceptions, including but not limited to attorney-client privilege, you have the following privacy rights in relation to the personal data we collect:

Right to Information: You have a right to information about how we collect and use your personal data. We have made this information available to you without having to request it by including it in this Privacy Policy;
Right to Access: If you ask us, we will provide a copy of the personal data that we have collected about you. Where applicable, we will provide the information in a portable, machine-readable, readily usable format;
Right to Correct: If your personal data is inaccurate, incomplete, or out of date for the purpose for which we collected or use this data, you are entitled to ask that we correct or complete it;
Right to Delete: You may ask us to delete your personal data in some circumstances, such as where we no longer need it, or you withdraw your consent (where applicable) and there is no other legal basis for processing;
Additional Rights: You may object to and request that we restrict our use of your personal data; you may request to be given your personal data for transmitting to another controller; you may withdraw your consent.

Exercising Your Rights

You are entitled to exercise your rights described above free from discrimination.

If you want to exercise your rights, you can do so as described in the “How to Contact Us” section below.

In order to protect your personal information from unauthorized access or deletion, we may ask you to provide additional personal information for verification. If we cannot verify your identity, we may not provide or delete your personal information.

You may also be entitled to empower an “authorized agent” to submit requests on your behalf. We will require authorized agents to confirm their identity and authority in accordance with applicable laws.

Do Not Track

Some Internet browsers may be configured to send “Do Not Track” signals to the online services that you visit. We currently do not respond to “Do Not Track” or similar signals. To find out more about “Do Not Track,” please visit http://www.allaboutdnt.com.

Keeping Your Personal Data Secure

We take appropriate administrative, technical and organizational measures to protect against accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to, your personal data, in accordance with our internal security procedures. Personal data may be stored on our own technology systems or those of our vendors or in paper files.

Personal Data of Children

Our Site is not directed to children who are under the age of 16 and is solely intended for adults. S&A does not knowingly collect personal data from children under 16. If you have reason to believe that a child under the age of 16 has provided personal data to S&A through the Site, please contact us and we will endeavor to delete that information from our databases.

Links To Other Websites

Our Site may contain links to other sites operated by third parties, including social media websites and services. We are not responsible for information on these sites, nor for services or products offered by them. By providing these links we do not imply that we endorse or have reviewed these sites. Use of these sites, including transmitting your personal data to them, is at your own risk. The information that you share with these sites will be governed by the specific privacy policies and terms of service of these third-party sites and not by this Privacy Policy. Please contact those sites directly for information on their privacy practices and policies.

Changes to this Privacy Policy

We reserve the right to amend this Privacy Policy from time to time to reflect changing legal requirements or our processing practices. Any such changes will be posted on this Site and will be effective upon posting. If we make a material change to this Privacy Policy, we will provide you with notice in accordance with the applicable law.

How to Contact Us

If you have any questions about our Privacy Policy, or if you would like to access personal data we hold about you or exercise your other rights under the applicable law, you can email us at nathan@s-a.law. If you are in the United States, you can also call us at +1 215-337-2026 or write to us at Spengler & Agans PLLC, 352 N. Caswell Rd., Charlotte, NC 28204.