Richt Firm PrivacyNotice | How We Process Data

Privacy Notice

September 2026

RICHT LAW FIRM PLLC (“RICHT,” the “Firm,” “we,” “our,” or “us”) is committed to protecting personal information and information entrusted to us in connection with our legal practice.

This Privacy & Cookie Notice (this “Notice”) explains how we collect, use, disclose, retain, and otherwise process personal information when you:

• Visit RICHTFirm.com or another website or online service that links to this Notice;
• Contact us or submit an inquiry;
• Seek, receive, or support the provision of legal services;
• Communicate or interact with us in connection with a client matter;
• Subscribe to our publications or attend an event;
• Apply for a position or otherwise pursue a professional relationship with us; or
• Interact with us as a vendor, referral source, business contact, counterparty, witness, or representative of another organization.

This Notice also applies to personal information we receive from clients, service providers, public sources, and other third parties in connection with these activities.

Relationship to Our Professional Obligations

As a law firm, RICHT is subject to professional duties that differ from and may be broader than obligations imposed under privacy laws.

“Personal information” or “personal data” generally refers to information that identifies, relates to, describes, or can reasonably be linked to an individual. “Confidential information,” “attorney–client privileged information,” and “attorney work product” are separate legal concepts. Information may qualify under more than one of these concepts, or under one but not another.

When we represent a client, information relating to that representation may be protected by applicable rules of professional conduct, attorney–client privilege, the attorney work-product doctrine, court orders, contractual obligations, or other law. Our professional duty of confidentiality may protect information that is not itself attorney–client privileged and may apply regardless of the source from which the information was obtained.

Nothing in this Notice:

• Waives or limits any attorney–client privilege, work-product protection, duty of confidentiality, or other legal protection;
• Expands any privilege or creates a privilege where one would not otherwise exist;
• Creates an attorney–client relationship; or
• Changes the terms of an engagement agreement between RICHT and a client.

If this Notice conflicts with an applicable professional obligation, court order, engagement agreement, or other legal requirement governing information in our possession, the applicable professional or legal obligation will control.

Communications and Prospective Clients

Contacting RICHT, submitting an online form, or sending us information does not by itself create an attorney–client relationship. RICHT accepts a representation only after completing any necessary review, including a conflicts analysis, and expressly agreeing to the representation, ordinarily through a written engagement agreement.

Before we confirm that we are prepared to receive detailed information, please provide only the information reasonably necessary to identify the relevant parties, describe the general nature of the matter, and allow us to evaluate the inquiry. Please do not send documents or highly sensitive information unless requested.

Depending on the circumstances, applicable professional-conduct rules may protect certain information received from a prospective client even if no attorney–client relationship ultimately results. We will handle such information in accordance with our applicable professional obligations. We may nevertheless use information submitted during the intake process to evaluate the proposed engagement, conduct conflicts checks, communicate with you, and maintain appropriate records of the inquiry.

Personal Information We Collect

Depending on how you interact with us, we may collect the following categories of personal information:

Contact and Identification Information

This may include your name, email address, telephone number, mailing address, employer, job title, account information, and other identifying or contact information.

Inquiry and Communications Information

This may include information contained in emails, telephone calls, contact forms, consultation requests, correspondence, meeting notes, and other communications with us.

Client and Matter Information

In connection with legal services, we may receive information concerning clients, prospective clients, client personnel, consumers, employees, contractors, counterparties, witnesses, experts, government personnel, and other individuals.

This information may include factual, legal, commercial, technical, financial, employment, transaction, dispute, investigation, regulatory, or litigation-related information.

Financial and Transaction Information

This may include billing contacts, invoices, payment status, transaction records, and limited payment-related information. Payment-card information may be collected directly by a third-party payment processor rather than by RICHT.

Professional and Business Information

This may include employment history, professional background, organizational affiliations, business interests, referral information, and information relevant to an existing or potential professional relationship.

Website and Device Information

When you use our website or online services, we and our service providers may automatically collect information such as:

• IP address;
• Browser and device type;
• Operating system;
• Referring and exit pages;
• Pages viewed and links selected;
• Approximate location derived from an IP address;
• Date, time, and duration of visits;
• Cookie, advertising, or device identifiers; and
• Information about interactions with our website or advertisements.

Marketing and Preference Information

This may include subscription choices, event participation, communication preferences, interests, and interactions with our publications or marketing communications.

Applicant Information

If you apply for a position or professional opportunity, we may collect your résumé, employment and education history, references, qualifications, and other information you provide during the application process.

Sensitive Personal Information

Depending on the nature of a legal matter, we may receive information considered sensitive or specially protected under applicable law, including government identifiers, financial information, health information, precise location information, account credentials, information concerning alleged wrongdoing, and information concerning an individual’s racial or ethnic origin, religious beliefs, or other protected characteristics.

We ask that you not provide sensitive personal information through a general website inquiry.

Sources of Personal Information

We may collect personal information:

• Directly from you;
• From our clients and their personnel or representatives;
• From prospective clients;
• From counterparties, witnesses, experts, consultants, co-counsel, and other participants in legal matters;
• From courts, regulators, government agencies, and public records;
• From publicly available websites, databases, and social media;
• From referral sources and professional contacts;
• From service providers and business partners; and
• Automatically through cookies and similar technologies.

Because legal representations commonly involve multiple parties, we may possess personal information about an individual even when we did not collect it directly from that individual.

How We Use Personal Information

We may use personal information to:

• Evaluate inquiries and potential engagements;
• Conduct conflicts checks and related professional reviews;
• Provide legal advice and other legal services;
• Communicate with clients, prospective clients, and others;
• Manage client and professional relationships;
• Prepare, administer, and enforce engagement agreements;
• Process payments, maintain records, and administer billing;
• Operate, maintain, secure, troubleshoot, and improve our website and services;
• Monitor website performance and understand how visitors use our website;
• Provide publications, event information, firm updates, and other communications;
• Conduct advertising and measure its effectiveness via analytics;
• Recruit and evaluate applicants;
• Detect, investigate, and prevent fraud, misuse, security incidents, and other harmful activity;
• Establish, exercise, or defend legal claims;
• Comply with laws, court orders, professional-conduct rules, regulatory obligations, and recordkeeping requirements; and
• Carry out other purposes disclosed when information is collected or authorized by the affected individual or an applicable client.

We do not use the contents of client matter files or confidential legal communications for targeted advertising.

Legal Bases for Processing

Where laws requiring identification of a legal basis apply, we process personal information as appropriate:

• To enter into or perform a contract;
• To provide requested legal services;
• To comply with legal and professional obligations;
• For our legitimate interests or those of a client or other party, where those interests are not overridden by applicable individual rights;
• To establish, exercise, or defend legal claims;
• With consent, where consent is required or otherwise appropriate; or
• On another basis permitted by applicable law.

Where we process sensitive or specially protected information, we rely on an applicable legal basis, such as the establishment, exercise, or defense of legal claims, compliance with legal or professional obligations, explicit consent where appropriate, or another basis permitted by law.

How We Disclose Personal Information

We may disclose personal information in the following circumstances, subject to applicable professional obligations:

Clients and Client-Authorized Recipients

We may disclose information to the client for whom we are providing services and to recipients authorized by that client.

Legal and Professional Participants

We may disclose information to co-counsel, local counsel, experts, consultants, investigators, translators, vendors, counterparties, witnesses, courts, arbitrators, regulators, government agencies, and other persons when reasonably related to a legal representation or professional obligation and, when required, with client consent.

Service Providers

We may disclose information to providers supporting our operations, including providers of website hosting, cloud storage, practice management, document management, electronic signature, communications, scheduling, payment processing, cybersecurity, professional research, analytics, marketing, and other business services.

We use providers in a manner consistent with our professional duties and, where appropriate, subject to contractual confidentiality, security, and data-use restrictions.

Advertising and Analytics Providers

We may permit analytics or advertising providers to collect website and device information through cookies, pixels, and similar technologies. We do not intentionally disclose to these providers the contents of client files, legal communications, client-portal submissions, or information entered into website forms. Nevertheless, public website forms are not intended for confidential, privileged, or highly sensitive information, and no web-based transmission can be guaranteed to be completely secure or free from unintended collection. Please do not submit confidential documents or highly sensitive information through a public website form. Contact us first by telephone or email so that we can identify an appropriate method of transmission, such as a secure client portal.

Legal and Protective Disclosures

We may disclose information when we reasonably believe disclosure is required or permitted by law, regulation, court order, legal process, or applicable professional-conduct rules, or is appropriate to protect the rights, safety, and security of RICHT, our clients, or others.

Business or Practice Transactions

Information may be disclosed in connection with a proposed or completed business reorganization, financing, merger, sale, transfer, or succession involving all or part of the Firm or its practice, subject to applicable professional-conduct rules and confidentiality obligations.

With Consent or at Your Direction

We may disclose information when an affected individual or applicable client has requested, authorized, or consented to the disclosure.

Sale, Sharing, and Targeted Advertising

We do not sell personal information in the ordinary sense of exchanging it for money.

Our use of certain advertising cookies, pixels, or similar technologies may, however, be treated as a “sale,” “sharing,” or processing for “targeted advertising” under some state privacy laws, even when no money is exchanged. These technologies may allow an advertising provider to collect identifiers, device information, and website activity to measure advertising or provide advertising based on activity across different websites or services.

Certain state privacy laws provide rights to opt out of the sale or sharing of personal information, targeted advertising, or certain profiling. These laws generally apply only when specified jurisdictional, revenue, data-volume, or other statutory requirements are satisfied and may not apply to RICHT or to a particular processing activity. To the extent an applicable law provides you with such a right, we will comply with its requirements. You may submit an opt-out request through a cookie-preference tool or by using the contact information below. Where required by applicable law, we will also recognize a legally valid browser-based opt-out preference signal, such as Global Privacy Control.

We do not knowingly sell or share the personal information of individuals under 18 for targeted advertising.

Cookies and Similar Technologies

Cookies are small files stored on a browser or device. We may also use pixels, tags, local storage, and similar technologies. These technologies may include:

• Strictly necessary technologies, which support security, navigation, preference management, and essential website functionality;
• Functional technologies, which remember selections and support enhanced features;
• Analytics and performance technologies, which help us understand website usage and improve performance; and
• Advertising technologies, which help us measure advertising and, depending on your settings, provide advertising based on interests or activity across services.

Where required by law, certain cookies and related technologies will be used only after you make an affirmative selection through our cookie-preference tool. You may change your selections through that tool. You may also configure your browser to block or delete cookies, although doing so may affect website functionality.

Some browsers offer a “Do Not Track” setting. Because there is not a uniform industry standard for responding to Do Not Track signals, we do not respond to them unless required by law. We treat Global Privacy Control or another legally recognized universal opt-out mechanism as an opt-out request where applicable.

Third parties may process information collected through their technologies according to their own privacy policies. Your choices may be specific to the browser and device you use.

Data Retention

We retain personal information for as long as reasonably necessary for the purposes described in this Notice, including to provide services, maintain professional and business records, satisfy legal and ethical obligations, resolve disputes, enforce agreements, and establish or defend legal claims.

Retention periods vary based on the nature and context of the information. For example:

• Client matter files may be retained in accordance with engagement terms, professional obligations, applicable law, and our records-management practices;
• Certain information may be retained for conflicts checks or to document the existence and scope of a past or proposed representation;
• Financial and trust-account records may be retained for periods required by professional or tax rules;
• Inquiry records may be retained to document communications and potential conflicts;
• Marketing information may be retained until you unsubscribe or request deletion, subject to maintaining a suppression record; and
• Website and security records may be retained for shorter periods unless needed to investigate an incident or comply with law.

Because of our professional obligations, we may need to retain certain information even after an individual requests deletion.

Data Security

We use administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, use, alteration, or disclosure. These safeguards are selected based on the nature of the information and the circumstances in which it is processed.

No electronic transmission or storage system is completely secure. Accordingly, we cannot guarantee absolute security. You should not use a general website form or chat tool on the website to send highly sensitive information.

Your Privacy Rights

Privacy laws may provide individuals with rights concerning their personal information. These laws generally apply only when specified jurisdictional, revenue, data-volume, or other statutory requirements are satisfied and may contain exemptions for particular organizations, information, or processing activities. Accordingly, a particular privacy law, or a particular right under that law, may not apply to RICHT, to certain information we maintain, or to a particular processing activity. 

To the extent an applicable privacy law provides you with rights concerning your personal information, we will comply with its requirements. Depending on the law and circumstances, these may include rights to:

• Confirm whether we process your personal information;
• Access or receive a copy of certain personal information;
• Correct inaccurate personal information;
• Request deletion of personal information;
• Obtain certain information in a portable format;
• Object to or restrict certain processing;
• Withdraw consent where processing is based on consent;
• Opt out of sales, sharing, or targeted advertising;
• Limit certain uses of sensitive personal information;
• Appeal a decision concerning a privacy request; and
• Lodge a complaint with an applicable privacy or data-protection regulator.

You may also unsubscribe from marketing emails using the link in the applicable communication. An unsubscribe request will not prevent us from sending nonmarketing communications concerning an inquiry, engagement, transaction, or other existing relationship.

Even where a particular privacy law does not require us to provide a requested right, we may consider and voluntarily honor reasonable requests where doing so is feasible and consistent with our professional and legal obligations.

Limitations Applicable to Privacy Requests

Privacy rights are not absolute. In particular, we may deny or limit a request where responding would:

• Reveal information protected by attorney–client privilege, the attorney work-product doctrine, a professional duty of confidentiality, a protective order, or another legal restriction;
• Disclose information concerning another person or a client;
• Prejudice a client’s rights or interests;
• Reveal legal advice, legal strategy, conflicts information, investigative material, or information prepared in anticipation of litigation;
• Interfere with the establishment, exercise, or defense of legal claims;
• Conflict with record-retention, evidentiary, regulatory, or professional obligations;
• Require us to delete information reasonably necessary to maintain conflicts records or defend against a claim;
• Create a security, fraud, or identity-verification risk; or
• Otherwise fall within an exception under applicable law.

Possessing personal information about an individual does not necessarily mean that we are permitted to confirm that information, identify the client or matter from which it originated, or provide the individual with access to an applicable client file.

Where appropriate, we may direct a person making a request to the client or organization primarily responsible for the relevant relationship. We may also consult with an affected client before responding where permitted and appropriate.

To protect personal information, we may require information reasonably necessary to verify your identity and authority. Authorized agents may submit requests where permitted by law, but we may require proof of authorization and identity verification.

We will not unlawfully discriminate against an individual for exercising an applicable privacy right.

International Processing and Transfers

RICHT is based in the United States. If you are located outside the United States, your information may be transferred to, stored in, and processed in the United States or another jurisdiction whose laws may differ from those of your home jurisdiction.

Where required, we use legally recognized safeguards or transfer mechanisms. Certain transfers may also be necessary to perform a contract, provide requested legal services, establish or defend legal claims, comply with law, or act with consent.

Information of Minors

Our public website and general legal services are not directed to those under 18.

We may process information concerning a minor when reasonably necessary in connection with a legal representation, when provided by a parent, guardian, client, or other authorized party, or as otherwise permitted by law.

Third-Party Websites and Services

Our website may contain links to websites, platforms, or services operated by third parties. This Notice does not govern those third parties, and we are not responsible for their privacy or security practices. We encourage you to review their applicable notices.

Changes to This Notice

We may update this Notice periodically to reflect changes in our practices, technologies, legal obligations, or services. We will post the updated Notice on this page and revise the “Last Updated” date. If required, we will provide additional notice of material changes.

---

Questions?