This Privacy Policy explains how Firm Page LLC ("Firm Page," "we," "us," or "our") collects, uses, shares, and protects information when you visit our website, use our client portal, interact with our platform, or use our Services.
This Privacy Policy supplements our Terms of Service. In the event of a conflict between this Privacy Policy and the Terms of Service, the Terms of Service control.
By using our website or Services, you agree to this Privacy Policy.
1. Information We Collect
We collect the following categories of information:
A. Information You Provide Directly
This includes:
- Identifiers: your name, email address, phone number, company name, mailing address, and account login credentials
- Commercial information: billing details, payment history, subscription records, and purchase history
- Professional information: your business type, industry, role, and firm details provided through onboarding questionnaires
- Content and communications: website content and files you provide, support requests, questionnaire responses, and messages submitted through forms or the client portal
B. Information We Collect Automatically
When you use our website or platform, we may automatically collect:
- Internet and network activity: IP address, browser type, device type, operating system, pages visited, referring website, clickstream data, and usage activity
- Geolocation data: approximate location derived from your IP address
- Device identifiers: cookies, pixels, and similar tracking technologies
C. Information Related to Client Websites
If we host or manage a website for a client, we may process certain data related to that website on the client's behalf, including:
- Form submissions and contact requests submitted by website visitors
- Analytics and traffic data
- Technical and server logs
- Support and maintenance data
See Section 5 (Client Website Data) for how we handle this data.
2. How We Use Information
We use information for the following purposes:
- To provide, manage, and improve the Services
- To create and maintain client accounts
- To process payments and manage billing
- To build, host, and maintain client websites
- To respond to inquiries and support requests
- To monitor usage and protect the security of our platform
- To communicate with you about your account or the Services
- To send service-related notices
- To comply with legal obligations
- To enforce our Terms and policies
Legal Bases for Processing
We process your information based on one or more of the following legal bases:
- Contract performance: processing necessary to provide the Services you have subscribed to
- Legitimate interests: processing necessary for our legitimate business interests, such as improving our platform, preventing fraud, and ensuring security, where those interests are not overridden by your rights
- Legal compliance: processing necessary to comply with applicable law
- Consent: where you have given your consent to specific processing activities, which you may withdraw at any time
3. Cookies and Similar Technologies
We use cookies, pixels, analytics tools, and similar technologies on our website and platform. These technologies fall into the following categories:
- Essential cookies: Required for basic website functionality, such as session management, authentication, and security. These cannot be disabled.
- Functional cookies: Used to remember your preferences and settings to improve your experience.
- Analytics cookies: Used to understand how users interact with our website, measure performance, and improve the user experience. This may include tools such as Google Analytics.
- Marketing cookies: Used to measure the effectiveness of marketing campaigns. We do not currently serve targeted advertising on our website.
You can manage cookie preferences through your browser settings. You may also opt out of non-essential cookies through any cookie consent mechanism we provide on our website. Disabling certain cookies may affect website functionality.
4. How We Share Information
We do not sell your Personal Information for monetary consideration.
We do not share your Personal Information for cross-context behavioral advertising.
We may share information with:
- Service providers that help us operate the business (such as payment processors, hosting providers, email delivery services, and analytics providers)
- Software vendors and infrastructure partners
- Contractors or consultants working on our behalf
- Legal or regulatory authorities when required by law, subpoena, court order, or government request
- A buyer or successor in connection with a merger, acquisition, financing, or sale of assets
We may also share information when needed to protect our rights, enforce agreements, investigate fraud, or respond to legal process.
If our data sharing practices change in the future to include targeted advertising or other activities that may constitute a "sale" or "sharing" under applicable law, we will update this Privacy Policy and provide an opt-out mechanism.
5. Client Website Data
When Firm Page hosts or manages a client website, we process data submitted through that website on the client's behalf. In this context:
- The client is the data controller (or "business" under CCPA), responsible for determining the purposes and means of processing visitor data
- Firm Page acts as a data processor (or "service provider" under CCPA), processing visitor data only on the client's behalf and in accordance with the client's instructions
The client is responsible for the content of its website, its own privacy disclosures, and its own compliance obligations related to visitor data collection.
Data Processing Addendum
To the extent Firm Page processes Personal Information on behalf of a client in connection with the client's website, the terms of the Data Processing Addendum ("DPA") apply. The DPA is incorporated into the Terms of Service by reference and addresses:
- The scope and nature of data processing
- Categories of data processed
- Sub-processor disclosures
- Security measures
- Data breach notification procedures
- Data return and deletion upon termination
- Audit rights
Clients may request a copy of the DPA at hello@firmpage.com.
Sub-Processors
Firm Page uses the following categories of sub-processors in connection with client website hosting and data processing:
- Cloud hosting and infrastructure providers
- Analytics and monitoring tools
- Email delivery and notification services
- Content delivery networks
A current list of specific sub-processors is available upon request or as an exhibit to the DPA.
6. Data Retention
We retain information for the periods described below, or as otherwise required by law:
- Account and subscription data: retained for the duration of your active service plus two (2) years following termination
- Billing and payment records: retained for seven (7) years in accordance with IRS record-keeping requirements
- Server and technical logs: retained for ninety (90) days
- Client website visitor data (form submissions, analytics): retained for the duration of the client's active service and deleted within sixty (60) days following termination, unless the client requests an export during the Wind-Down Period
- Support and communication records: retained for the duration of service plus one (1) year
- Legal compliance and dispute records: retained as long as reasonably necessary to resolve disputes, enforce agreements, or comply with legal obligations
We may retain anonymized or aggregated data that can no longer identify you for analytical and business purposes.
7. Data Security
We use reasonable administrative, technical, and organizational measures to protect information, including encryption in transit and at rest, access controls, regular security assessments, and employee training. No system is perfectly secure, and we cannot guarantee absolute security.
8. Your Rights and Choices
Depending on your location and applicable law, you may have the following rights with respect to your Personal Information:
- Right of access: You may request confirmation of whether we process your Personal Information and a copy of the data we hold about you.
- Right to correction: You may request that we correct inaccurate Personal Information.
- Right to deletion: You may request that we delete your Personal Information, subject to legal and operational exceptions.
- Right to data portability: You may request a copy of your Personal Information in a portable, machine-readable format.
- Right to opt out of targeted advertising: You may opt out of the processing of your Personal Information for targeted advertising purposes. We do not currently engage in targeted advertising.
- Right to opt out of sale: You may opt out of the sale of your Personal Information. We do not currently sell Personal Information.
- Right to opt out of profiling: You may opt out of automated decision-making or profiling that produces legal or similarly significant effects. We do not currently engage in such profiling.
- Right to non-discrimination: We will not discriminate against you for exercising your privacy rights.
How to Exercise Your Rights
To make a privacy request, contact us at hello@firmpage.com. We will verify your identity before processing your request. We will respond to verifiable requests within forty-five (45) days. If we need additional time, we will notify you of the extension and the reason.
Right to Appeal
If we deny your privacy request, you may appeal by contacting us at hello@firmpage.com with the subject line "Privacy Appeal." We will respond to appeals within forty-five (45) days. If your appeal is denied, you may contact the Texas Attorney General or other applicable regulatory authority.
9. Third-Party Services
Our website or platform may include links to third-party websites or services. We are not responsible for the privacy practices of third parties. We encourage you to review the privacy policies of any third-party services you use.
10. Children's Privacy
Our Services are intended for business users and are not directed to children under 13. We do not knowingly collect Personal Information from children under 13. If we learn that we have collected Personal Information from a child under 13, we will take steps to delete that information promptly.
11. State Privacy Rights
Texas Data Privacy and Security Act (TDPSA)
If you are a Texas resident, you have the rights described in Section 8 of this Privacy Policy under the Texas Data Privacy and Security Act (Tex. Bus. & Com. Code §§ 541.001–541.205). These include the right to access, correct, delete, and obtain a portable copy of your Personal Information, as well as the right to opt out of targeted advertising, the sale of Personal Information, and profiling. To exercise these rights, contact us at hello@firmpage.com. You may appeal a denied request as described in Section 8.
California Consumer Privacy Act (CCPA/CPRA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act as amended by the California Privacy Rights Act. These include the right to know what Personal Information we collect and how we use it, the right to delete, the right to correct, the right to opt out of the sale or sharing of Personal Information, and the right to limit the use of sensitive Personal Information. We do not currently sell or share Personal Information as those terms are defined under the CCPA. To exercise your rights, contact us at hello@firmpage.com.
Other State Privacy Laws
Residents of other states with applicable privacy laws (including but not limited to Virginia, Colorado, Connecticut, and other states with comprehensive privacy legislation) may have similar rights. To exercise any applicable rights, contact us at hello@firmpage.com. We will respond in accordance with applicable law.
12. Do Not Track
Our website does not currently respond to "Do Not Track" browser signals. There is no industry consensus on how to respond to these signals, and we will update this policy if a uniform standard is established.
13. International Visitors
Firm Page is based in the United States. If you access our website or Services from outside the United States, your information may be transferred to and processed in the United States. By using the Services, you consent to the transfer of your information to the United States. If you are located in the European Economic Area, the United Kingdom, or another jurisdiction with data transfer restrictions, additional safeguards may apply as described in the DPA.
14. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. If we make material changes, we will provide at least thirty (30) days' prior written notice by email or through the client portal. If you do not agree to the revised Privacy Policy, you may cancel your subscription without penalty before the changes take effect.
Non-material changes (such as corrections, formatting, or clarifications) may take effect immediately upon posting.
Your continued use of the Services after an updated Privacy Policy becomes effective means you accept the revised Privacy Policy.
15. Contact
If you have questions about this Privacy Policy, contact:
Firm Page LLC
4900 Woodway Dr., Ste. 1050
Houston, Texas 77056
hello@firmpage.com