Last Updated: July 3, 2026
1. Introduction and Scope
Who We Are
TKA Law Firm PLLC (“TKA,” “we,” “our,” or “us”) is a New York-based law firm. Our principal place of business is 244 Fifth Avenue, Suite E128, New York, NY 10001, United States. TKA is responsible for the personal information described in this Privacy Policy.
What This Privacy Policy Covers
This Privacy Policy describes how we collect, use, disclose, and protect personal information when you:
- Visit our website at tkalawfirm.com (the “Website”)
- Submit inquiries through our contact forms or by email, telephone, or postal mail
- Subscribe to our newsletter or other marketing communications
- Engage with us on social media platforms
- Attend our events, webinars, or other programs
- Otherwise interact with us as a prospective client or business contact
This Privacy Policy applies to website visitors, prospective clients, newsletter subscribers, and other individuals who interact with us but have not yet entered into an engagement for legal services (“Leads” or “Contacts”).
What This Privacy Policy Does Not Cover
If you become a client of TKA, the collection, use, and protection of information related to your legal matter will be governed by our engagement agreement and applicable rules of professional conduct. This Privacy Policy does not modify or supersede any terms in an engagement agreement or our professional obligations to clients.
Applicability Across Jurisdictions
This Privacy Policy is designed to comply with applicable privacy and data protection laws, including:
- The New York SHIELD Act
- The California Consumer Privacy Act, as amended by the California Privacy Rights Act (“CCPA/CPRA”)
- Other U.S. state privacy laws (Virginia, Colorado, Connecticut, and others as applicable)
Our Website and services are intended for individuals and businesses located in the United States. If you access our Website from outside the United States, please be aware that any information you provide will be transferred to, stored, and processed in the United States, which may not offer the same level of data protection as the laws of your country. By using our Website, you consent to this transfer.
Agreement to This Privacy Policy
By accessing or using our Website, submitting information to us, or otherwise interacting with TKA, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our practices as described herein, please do not use our Website or provide us with your personal information.
2. Information We Collect
We collect personal information in several ways when you interact with us. “Personal information” means information that identifies, relates to, or could reasonably be linked to you or your household.
Information You Provide Directly
We collect information you voluntarily provide to us, including when you:
- Submit an inquiry through our website contact forms
- Send us an email, call us, or contact us by postal mail
- Subscribe to our newsletter or other marketing communications
- Request information about our services
- Register for or attend our events or webinars
- Interact with us on social media
This information may include:
- Contact information (name, email address, telephone number, mailing address)
- Professional information (company name, job title, industry)
- The content of your communications with us, including the subject matter of your inquiry
- Any other information you choose to provide
Information Collected Automatically
When you visit our Website, we automatically collect certain information from your browser or device, including:
- IP address
- Browser type and version
- Operating system
- Device type
- Date and time of your visit
- Pages viewed and links clicked
- Referring website or source
- General location information (derived from IP address)
This information is typically not personally identifiable on its own, but we may combine it with other information we collect to identify you or link it to information that does identify you.
Cookies and Similar Technologies
We use cookies and similar technologies to collect information about your interactions with our Website. Cookies are small data files placed on your device that help us understand how visitors use our Website, remember your preferences, and improve your experience. We use the following types of cookies:
- Strictly Necessary Cookies: Required for the Website to function properly. These cannot be disabled.
- Analytics Cookies: Help us understand how visitors interact with our Website, including through Google Analytics. For more information on Google Analytics’ data practices and to opt out, visit Google’s privacy page.
You can control cookies through your browser settings. Note that disabling certain cookies may affect Website functionality.
Information from Third Parties
We may receive information about you from third parties, including:
- Social media platforms (Facebook, LinkedIn, Instagram, X/Twitter) when you interact with our pages or use social features on our Website
- Marketing partners and advertising networks
- Publicly available sources
- Referral sources who recommend our services
Payment Information
If you purchase services from us, you provide payment information directly to our third-party payment processors. We do not have access to or store sensitive payment card information, including full credit card numbers or card authentication data.
Sensitive Personal Information
We do not intentionally collect sensitive personal information (such as social security numbers, financial account numbers, precise geolocation, racial or ethnic origin, or health information) through our Website. If you submit an inquiry that contains sensitive information, we will treat it in accordance with this Privacy Policy and applicable law.
Categories of Personal Information (California Residents)
For purposes of the CCPA/CPRA, we have collected the following categories of personal information in the preceding 12 months:
| Category | Examples | Collected |
|---|---|---|
| Identifiers | Name, email address, IP address, phone number | Yes |
| Personal information under Cal. Civ. Code § 1798.80(e) | Name, address, telephone number | Yes |
| Commercial information | Records of services purchased or considered | Yes |
| Internet or network activity | Browsing history, interactions with our Website | Yes |
| Geolocation data | General location derived from IP address | Yes |
| Professional or employment information | Job title, company name | Yes |
| Inferences | Preferences and interests based on Website activity | Yes |
| Sensitive personal information | N/A | No |
3. How We Use Your Information
We use the personal information we collect for the following purposes:
Responding to Inquiries and Providing Services
- To respond to your requests for information about our services
- To evaluate potential engagements and conduct conflict checks
- To communicate with you about your inquiry or our services
- To provide legal services if you become a client (subject to a separate engagement agreement)
Website Operations and Improvement
- To operate, maintain, and improve our Website
- To manage and analyze the usage, performance, content, functionality, and efficiency of our Website
- To personalize your experience on our Website
- To understand how visitors interact with our Website
Marketing and Business Development
- To send you newsletters, legal updates, event invitations, and other marketing communications that may be of interest to you or your business
- To deliver targeted advertisements on social media platforms
- To measure the effectiveness of our marketing campaigns
- To invite you to complete surveys, provide feedback, or participate in promotions
You may unsubscribe from marketing communications at any time by clicking the unsubscribe link in any email or by contacting us. Some communications are considered transactional or service communications (for example, important notifications and billing information). You agree to receive these transactional and service communications as a condition of any products or services that we provide to you.
Administrative and Operational Purposes
- To process payments for services
- To maintain our business records
- To manage our relationship with you
- To contact you regarding information and notices related to your use of our Website
Legal and Compliance Purposes
- To comply with applicable laws, regulations, and legal processes
- To respond to lawful requests from governmental authorities
- To establish, exercise, or defend legal claims
- To protect the rights, property, or safety of TKA, our clients, or others
- To prevent or respond to actual or suspected fraud or illegal activity
4. Legal Basis for Processing
We process your personal information based on the following grounds:
- To respond to your inquiries: When you contact us about potential legal services, we process your information to evaluate your inquiry and determine whether we can assist you.
- With your consent: We send newsletters and promotional materials only with your consent. You may withdraw consent at any time by unsubscribing or contacting us.
- For our legitimate business purposes: We have a legitimate interest in understanding how visitors use our Website, maintaining its security, improving its functionality, and managing our business relationships.
- To comply with legal obligations: We process information when required by applicable law, regulation, or legal process.
5. Information Sharing and Disclosure
We do not sell your personal information. We may share your personal information with third parties only in the circumstances described below.
Service Providers
We share personal information with third-party service providers who perform services on our behalf. These providers are contractually obligated to use your personal information only to provide services to us and to maintain the confidentiality of your information. Service providers include:
| Category | Examples |
|---|---|
| Website and technology | Hosting, maintenance, IT support, security |
| Marketing and communications | Email marketing platforms, analytics (e.g., Google Analytics) |
| Payment processing | Third-party payment processors |
| Professional services | Accountants, auditors |
Professional Advisors and Business Partners
We may share personal information with other professional service providers, counterparties in transactions, and referral sources in connection with services we provide.
Legal and Regulatory Disclosures
We may disclose personal information when we believe in good faith that disclosure is necessary to:
- Comply with applicable laws, regulations, or legal processes
- Respond to lawful requests from governmental authorities, regulators, or stock exchanges
- Establish, exercise, or defend legal claims
- Protect the rights, property, or safety of TKA, our clients, or others
- Prevent or respond to actual or suspected fraud or illegal activity
Business Transfers
In the event of a merger, acquisition, reorganization, sale of assets, or similar transaction (including divestiture, dissolution, or liquidation), we may transfer your personal information to the acquiring entity or successor. We will require such parties to provide protections equivalent to those described in this Privacy Policy.
With Your Consent
We may share your personal information with third parties when you have given us your consent to do so.
We Do Not Sell or Share Your Personal Information
We do not sell, license, or otherwise disclose your personal information to third parties for their own marketing purposes without your consent. For purposes of the CCPA/CPRA:
- We do not “sell” personal information as defined under California law.
- We do not “share” personal information for cross-context behavioral advertising as defined under California law.
Third-Party Websites and Services
Our Website may contain links to third-party websites or integrate features from third-party platforms, including social media platforms such as Facebook, LinkedIn, Instagram, and X (formerly Twitter). These third parties have their own privacy policies. We do not control and are not responsible for their privacy practices. If you submit information to us via a third-party social media platform, you do so at your own risk.
Disclosure Categories (California Residents)
In the preceding 12 months, we have disclosed the following categories of personal information for business purposes:
| Category Disclosed | Categories of Recipients |
|---|---|
| Identifiers | Service providers, professional advisors |
| Personal information under Cal. Civ. Code § 1798.80(e) | Service providers, payment processors |
| Commercial information | Service providers |
| Internet or network activity | Analytics providers |
| Professional or employment information | Service providers |
We have not sold or shared personal information in the preceding 12 months.
6. Client Relationships
This Privacy Policy applies to website visitors, prospective clients, newsletter subscribers, and other individuals who interact with us but have not entered into an engagement for legal services. If you become a client of TKA, the collection, use, and protection of information related to your legal matter will be governed by our engagement agreement and our obligations under the applicable Rules of Professional Conduct, including rules regarding confidentiality of information. This Privacy Policy does not modify or supersede any terms in an engagement agreement or our professional obligations to clients.
7. Data Security
We implement physical, technical, organizational, and administrative safeguards designed to protect your personal information from unauthorized access, improper use, unauthorized disclosure, and unlawful alteration or destruction.
Security Measures
Our security program includes:
- Access controls that limit access to personal information to authorized personnel who need it to perform their job functions
- Encryption of personal information in transit and at rest where appropriate
- Secure storage of electronic records
- Physical security measures for our offices and equipment
- Regular assessment of risks to the security of personal information
- Training on data protection and security practices
- Vendor management procedures requiring service providers to maintain appropriate security measures
Third-Party Service Providers
Any third parties we engage to process your personal information are required to adhere to policies regarding the confidentiality and security of such information.
Data Breach Notification
In the event of a security breach involving your personal information, we will notify you and any applicable regulatory authorities as required by law.
Limitations
Although we strive to protect your information, we cannot guarantee the security of any information that you transmit to us through this Website, email, or otherwise. You transmit such information at your own risk.
8. Data Retention
We retain your personal information only as long as reasonably necessary for the purposes described in this Privacy Policy or as required by applicable law.
Retention Periods
| Category of Information | Retention Period |
|---|---|
| Contact form inquiries | 3 years from last contact, unless you become a client |
| Newsletter subscribers | Until you unsubscribe, plus 1 year for suppression list purposes |
| Website analytics data | 26 months (Google Analytics default) |
| Marketing campaign data | 3 years from collection |
| Payment records | 7 years (for tax and accounting purposes) |
| Correspondence | 3 years from last contact, unless you become a client |
Factors Affecting Retention
We may retain your information for longer periods if:
- Required by applicable law, regulation, or legal process
- Necessary to establish, exercise, or defend legal claims
- You have an ongoing relationship with us
- Retention is required for our legitimate business purposes, such as fraud prevention
Deletion
When personal information is no longer needed, we will securely delete or anonymize it. If deletion is not immediately possible (for example, because information is stored in backup archives), we will securely store the information and isolate it from further processing until deletion is possible.
9. Your Privacy Rights
You may have certain rights regarding the personal information we hold about you, subject to applicable law. For your privacy and security, we will require you to verify your identity before we respond to any request to exercise these rights.
Rights Available to All Individuals
Regardless of where you are located, you may:
- Request access to the personal information we maintain about you
- Request correction of your personal information if it is incomplete or inaccurate
- Request deletion of your personal information
- Withdraw your consent to processing (where we rely on consent as the legal basis)
- Unsubscribe from marketing communications at any time by clicking the unsubscribe link in any email or by contacting us
For each of these rights, we may have valid legal grounds to refuse your request and will inform you if such grounds apply.
Additional Rights for California Residents
If you are a California resident, the CCPA/CPRA provides you with the following additional rights:
| Right | Description |
|---|---|
| Right to Know | You may request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources, the purposes for collection, and the categories of third parties with whom we have shared your information. |
| Right to Delete | You may request that we delete personal information we have collected from you, subject to certain exceptions. |
| Right to Correct | You may request that we correct inaccurate personal information we maintain about you. |
| Right to Opt-Out of Sale/Sharing | You have the right to opt out of the “sale” or “sharing” of your personal information. We do not sell or share personal information as defined under California law. |
| Right to Limit Use of Sensitive Personal Information | You have the right to limit the use and disclosure of sensitive personal information. We do not use sensitive personal information for purposes beyond those permitted under the CCPA/CPRA. |
| Right to Non-Discrimination | We will not discriminate against you for exercising any of your privacy rights. |
How to Submit a Request (California Residents)
You may submit a request by contacting us at team@tkalawfirm.com or by calling 844-285-2529. You may designate an authorized agent to submit a request on your behalf. We may require the authorized agent to provide proof of your written permission and may require you to verify your identity directly with us.
Response Timing
We will respond to verifiable requests within 45 days. If we require additional time (up to an additional 45 days), we will inform you of the reason and the expected response time.
Financial Incentives
We do not offer financial incentives, price differences, or service differences in exchange for the retention, sale, or sharing of your personal information.
Additional Rights for Virginia, Colorado, Connecticut, and Other U.S. State Residents
If you are a resident of Virginia, Colorado, Connecticut, or another state with comprehensive privacy legislation, you may have the following rights:
- Right to access your personal information
- Right to correct inaccuracies in your personal information
- Right to delete your personal information
- Right to obtain a copy of your personal information in a portable format
- Right to opt out of the processing of your personal information for targeted advertising
- Right to opt out of the sale of your personal information (we do not sell personal information)
- Right to opt out of profiling in furtherance of decisions that produce legal or similarly significant effects (we do not engage in such profiling)
Right to Appeal
If we decline to take action on your request, you may appeal our decision by contacting us at team@tkalawfirm.com with the subject line “Privacy Rights Appeal.” We will respond to your appeal in accordance with applicable law.
How to Exercise Your Rights
To exercise any of your privacy rights, please contact us at:
- Email: team@tkalawfirm.com
- Phone: 844-285-2529
- Mail: TKA Law Firm PLLC, 244 Fifth Avenue, Suite E128, New York, NY 10001
Please include “Privacy Rights Request” in the subject line of your communication and specify which right(s) you wish to exercise.
10. International Visitors
Our Website and services are directed to individuals and businesses in the United States. If you access our Website or provide personal information to us from outside the United States, your information will be transferred to, stored, and processed in the United States. By using our Website or providing us with your information, you consent to this transfer. Our service providers, including analytics providers (e.g., Google), may also process personal information in the United States.
11. Children’s Privacy
Our Website is not directed at children under the age of 13. We do not knowingly collect, use, or disclose personal information from children under the age of 13. If you are under the age of 13, please do not access or use this Website.
If you are a parent or guardian and believe that your child has provided personal information to us, please contact us using the information in Section 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete such information promptly.
12. Updates to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or for other operational reasons. When we make changes, we will revise the “Last Updated” date at the top of this Privacy Policy. If we make material changes that significantly affect how we handle your personal information, we will provide prominent notice on our Website or notify you by other means (such as email) prior to the changes taking effect, where required by applicable law.
We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Your continued use of our Website or services after any changes to this Privacy Policy constitutes your acceptance of the updated Privacy Policy.
13. Contact Information
If you have any questions about this Privacy Policy or wish to exercise any of your privacy rights, please contact us:
TKA Law Firm PLLC
Email: team@tkalawfirm.com
Phone: 844-285-2529
Mail: 244 Fifth Avenue, Suite E128, New York, NY 10001
Please include “Privacy Policy” or “Privacy Rights Request” in the subject line of your communication.
14. Governing Law
To the extent permitted by applicable law, this Privacy Policy and any disputes arising out of or relating to it shall be governed by the laws of the State of New York, without regard to its conflict of laws principles. Nothing in this section limits your rights under data protection laws in your jurisdiction of residence.
