Last Updated: January 2, 2026
1. Introduction and Scope
Who We Are
TKA Law Firm PLLC (“TKA,” “we,” “our,” or “us”) is a New York-based law firm. Our principal place of business is 244 Fifth Avenue, Suite E128, New York, NY 10001, United States. For purposes of applicable data protection laws, TKA is the “data controller” (or equivalent term under applicable law) responsible for the personal information described in this Privacy Policy.
What This Privacy Policy Covers
This Privacy Policy describes how we collect, use, disclose, and protect personal information when you:
- Visit our website at tkalawfirm.com (the “Website”)
- Submit inquiries through our contact forms or by email, telephone, or postal mail
- Subscribe to our newsletter or other marketing communications
- Engage with us on social media platforms
- Attend our events, webinars, or other programs
- Otherwise interact with us as a prospective client or business contact
This Privacy Policy applies to website visitors, prospective clients, newsletter subscribers, and other individuals who interact with us but have not yet entered into an engagement for legal services (“Leads” or “Contacts”).
What This Privacy Policy Does Not Cover
If you become a client of TKA, the collection, use, and protection of information related to your legal matter will be governed by our engagement agreement and applicable rules of professional conduct. This Privacy Policy does not modify or supersede any terms in an engagement agreement or our professional obligations to clients.
Applicability Across Jurisdictions
TKA is based in the United States. If you access our Website or provide personal information to us from outside the United States, including from the European Economic Area (“EEA”), United Kingdom (“UK”), or other jurisdictions with data protection laws, please be aware that your information will be transferred to, stored, and processed in the United States.
We describe the safeguards we use for such transfers in Section 10 (International Data Transfers) of this Privacy Policy.
This Privacy Policy is designed to comply with applicable privacy and data protection laws, including:
- The New York SHIELD Act
- The California Consumer Privacy Act, as amended by the California Privacy Rights Act (“CCPA/CPRA”)
- Other U.S. state privacy laws (Virginia, Colorado, Connecticut, and others as applicable)
- The General Data Protection Regulation (“GDPR”) for individuals in the EEA
- The UK General Data Protection Regulation (“UK GDPR”) for individuals in the United Kingdom
Certain sections of this Privacy Policy contain jurisdiction-specific disclosures. If you are a resident of California or another U.S. state with comprehensive privacy legislation, or if you are located in the EEA or UK, please review Section 9 (Your Privacy Rights) for information about your specific rights.
Agreement to This Privacy Policy
By accessing or using our Website, submitting information to us, or otherwise interacting with TKA, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our practices as described herein, please do not use our Website or provide us with your personal information.
2. Information We Collect
We collect personal information in several ways when you interact with us. “Personal information” means information that identifies, relates to, or could reasonably be linked to you or your household.
Information You Provide Directly
We collect information you voluntarily provide to us, including when you:
- Submit an inquiry through our website contact forms
- Send us an email, call us, or contact us by postal mail
- Subscribe to our newsletter or other marketing communications
- Request information about our services
- Register for or attend our events or webinars
- Interact with us on social media
This information may include:
- Contact information (name, email address, telephone number, mailing address)
- Professional information (company name, job title, industry)
- The content of your communications with us, including the subject matter of your inquiry
- Any other information you choose to provide
Information Collected Automatically
When you visit our Website, we automatically collect certain information from your browser or device, including:
- IP address
- Browser type and version
- Operating system
- Device type
- Date and time of your visit
- Pages viewed and links clicked
- Referring website or source
- General location information (derived from IP address)
This information is typically not personally identifiable on its own, but we may combine it with other information we collect to identify you or link it to information that does identify you.
Cookies and Similar Technologies
We use cookies and similar technologies to collect information about your interactions with our Website. Cookies are small data files placed on your device that help us understand how visitors use our Website, remember your preferences, and improve your experience. We use the following types of cookies:
- Strictly Necessary Cookies: Required for the Website to function properly. These cannot be disabled.
- Analytics Cookies: Help us understand how visitors interact with our Website, including through Google Analytics. For more information on Google Analytics’ data practices and to opt out, visit Google’s privacy page.
- Marketing Cookies: Used to deliver relevant advertisements and track the effectiveness of our marketing campaigns.
For visitors from the European Economic Area or United Kingdom: We will obtain your consent before placing non-essential cookies on your device. You can control cookies through your browser settings. Note that disabling certain cookies may affect Website functionality.
Information from Third Parties
We may receive information about you from third parties, including:
- Social media platforms (Facebook, LinkedIn, Instagram, X/Twitter) when you interact with our pages or use social features on our Website
- Marketing partners and advertising networks
- Publicly available sources
- Referral sources who recommend our services
Payment Information
If you purchase services from us, you provide payment information directly to our third-party payment processors. We do not have access to or store sensitive payment card information, including full credit card numbers or card authentication data.
Sensitive Personal Information
We do not intentionally collect sensitive personal information (such as social security numbers, financial account numbers, precise geolocation, racial or ethnic origin, or health information) through our Website. If you submit an inquiry that contains sensitive information, we will treat it in accordance with this Privacy Policy and applicable law.
Categories of Personal Information (California Residents)
For purposes of the CCPA/CPRA, we have collected the following categories of personal information in the preceding 12 months:
| Category | Examples | Collected |
|---|---|---|
| Identifiers | Name, email address, IP address, phone number | Yes |
| Personal information under Cal. Civ. Code § 1798.80(e) | Name, address, telephone number | Yes |
| Commercial information | Records of services purchased or considered | Yes |
| Internet or network activity | Browsing history, interactions with our Website | Yes |
| Geolocation data | General location derived from IP address | Yes |
| Professional or employment information | Job title, company name | Yes |
| Inferences | Preferences and interests based on Website activity | Yes |
| Sensitive personal information | N/A | No |
3. How We Use Your Information
We use the personal information we collect for the following purposes:
Responding to Inquiries and Providing Services
- To respond to your requests for information about our services
- To evaluate potential engagements and conduct conflict checks
- To communicate with you about your inquiry or our services
- To provide legal services if you become a client (subject to a separate engagement agreement)
Website Operations and Improvement
- To operate, maintain, and improve our Website
- To manage and analyze the usage, performance, content, functionality, and efficiency of our Website
- To personalize your experience on our Website
- To understand how visitors interact with our Website
Marketing and Business Development
- To send you newsletters, legal updates, event invitations, and other marketing communications that may be of interest to you or your business
- To deliver targeted advertisements on social media platforms
- To measure the effectiveness of our marketing campaigns
- To invite you to complete surveys, provide feedback, or participate in promotions
You may unsubscribe from marketing communications at any time by clicking the unsubscribe link in any email or by contacting us. Some communications are considered transactional or service communications (for example, important notifications and billing information). You agree to receive these transactional and service communications as a condition of any products or services that we provide to you.
Administrative and Operational Purposes
- To process payments for services
- To maintain our business records
- To manage our relationship with you
- To contact you regarding information and notices related to your use of our Website
Legal and Compliance Purposes
- To comply with applicable laws, regulations, and legal processes
- To respond to lawful requests from governmental authorities
- To establish, exercise, or defend legal claims
- To protect the rights, property, or safety of TKA, our clients, or others
- To prevent or respond to actual or suspected fraud or illegal activity
4. Legal Basis for Processing
This section applies to individuals located in the EEA or UK. Under the GDPR and UK GDPR, we must have a valid legal basis to process your personal information. The legal bases we rely on depend on the type of information and how we use it:
| Processing Activity | Legal Basis | Explanation |
|---|---|---|
| Responding to your inquiries | Performance of a contract or steps prior to entering a contract | When you contact us about potential legal services, we process your information to evaluate your inquiry and determine whether we can assist you. |
| Sending marketing communications | Consent | We send newsletters and promotional materials only with your consent. You may withdraw consent at any time by unsubscribing or contacting us. |
| Operating and improving our Website | Legitimate interests | We have a legitimate interest in understanding how visitors use our Website, maintaining its security, and improving its functionality. |
| Analytics and performance tracking | Consent (for non-essential cookies) or legitimate interests (for aggregated, non-identifying analytics) | For visitors in the EEA or UK, we obtain consent before placing non-essential cookies. |
| Delivering targeted advertising | Consent | We obtain your consent before using your information for targeted advertising on social media platforms. |
| Complying with legal obligations | Legal obligation | We process information when required to comply with applicable laws, regulations, or legal processes. |
| Protecting our rights and interests | Legitimate interests | We may process information to establish, exercise, or defend legal claims or to protect the rights, property, or safety of TKA, our clients, or others. |
| Preventing fraud | Legitimate interests | We have a legitimate interest in detecting and preventing fraudulent or illegal activity. |
Legitimate Interests
Where we rely on legitimate interests as a legal basis, we have assessed that our interests do not override your fundamental rights and freedoms. You have the right to object to processing based on legitimate interests. If you do so, we will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or where processing is necessary for the establishment, exercise, or defense of legal claims.
Consent
Where we rely on consent, you have the right to withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing that occurred before you withdrew consent. To withdraw consent for marketing communications, you may unsubscribe via the link in any email or contact us directly. To withdraw consent for cookies, you may adjust your browser settings.
5. Information Sharing and Disclosure
We do not sell your personal information. We may share your personal information with third parties only in the circumstances described below.
Service Providers
We share personal information with third-party service providers who perform services on our behalf. These providers are contractually obligated to use your personal information only to provide services to us and to maintain the confidentiality of your information. Service providers include:
| Category | Examples |
|---|---|
| Website and technology | Hosting, maintenance, IT support, security |
| Marketing and communications | Email marketing platforms, analytics (e.g., Google Analytics) |
| Payment processing | Third-party payment processors |
| Professional services | Accountants, auditors |
Professional Advisors and Business Partners
We may share personal information with other professional service providers, counterparties in transactions, and referral sources in connection with services we provide.
Legal and Regulatory Disclosures
We may disclose personal information when we believe in good faith that disclosure is necessary to:
- Comply with applicable laws, regulations, or legal processes
- Respond to lawful requests from governmental authorities, regulators, or stock exchanges
- Establish, exercise, or defend legal claims
- Protect the rights, property, or safety of TKA, our clients, or others
- Prevent or respond to actual or suspected fraud or illegal activity
Business Transfers
In the event of a merger, acquisition, reorganization, sale of assets, or similar transaction (including divestiture, dissolution, or liquidation), we may transfer your personal information to the acquiring entity or successor. We will require such parties to provide protections equivalent to those described in this Privacy Policy.
With Your Consent
We may share your personal information with third parties when you have given us your consent to do so.
We Do Not Sell or Share Your Personal Information
We do not sell, license, or otherwise disclose your personal information to third parties for their own marketing purposes without your consent. For purposes of the CCPA/CPRA:
- We do not “sell” personal information as defined under California law.
- We do not “share” personal information for cross-context behavioral advertising as defined under California law.
Third-Party Websites and Services
Our Website may contain links to third-party websites or integrate features from third-party platforms, including social media platforms such as Facebook, LinkedIn, Instagram, and X (formerly Twitter). These third parties have their own privacy policies. We do not control and are not responsible for their privacy practices. If you submit information to us via a third-party social media platform, you do so at your own risk.
Disclosure Categories (California Residents)
In the preceding 12 months, we have disclosed the following categories of personal information for business purposes:
| Category Disclosed | Categories of Recipients |
|---|---|
| Identifiers | Service providers, professional advisors |
| Personal information under Cal. Civ. Code § 1798.80(e) | Service providers, payment processors |
| Commercial information | Service providers |
| Internet or network activity | Analytics providers |
| Professional or employment information | Service providers |
We have not sold or shared personal information in the preceding 12 months.
6. Client Relationships
This Privacy Policy applies to website visitors, prospective clients, newsletter subscribers, and other individuals who interact with us but have not entered into an engagement for legal services. If you become a client of TKA, the collection, use, and protection of information related to your legal matter will be governed by our engagement agreement and our obligations under the applicable Rules of Professional Conduct, including rules regarding confidentiality of information. This Privacy Policy does not modify or supersede any terms in an engagement agreement or our professional obligations to clients.
7. Data Security
We implement physical, technical, organizational, and administrative safeguards designed to protect your personal information from unauthorized access, improper use, unauthorized disclosure, and unlawful alteration or destruction.
Security Measures
Our security program includes:
- Access controls that limit access to personal information to authorized personnel who need it to perform their job functions
- Encryption of personal information in transit and at rest where appropriate
- Secure storage of electronic records
- Physical security measures for our offices and equipment
- Regular assessment of risks to the security of personal information
- Training on data protection and security practices
- Vendor management procedures requiring service providers to maintain appropriate security measures
Third-Party Service Providers
Any third parties we engage to process your personal information are required to adhere to policies regarding the confidentiality and security of such information.
Data Breach Notification
In the event of a security breach involving your personal information, we will notify you and any applicable regulatory authorities as required by law.
Limitations
Although we strive to protect your information, we cannot guarantee the security of any information that you transmit to us through this Website, email, or otherwise. You transmit such information at your own risk.
8. Data Retention
We retain your personal information only as long as reasonably necessary for the purposes described in this Privacy Policy or as required by applicable law.
Retention Periods
| Category of Information | Retention Period |
|---|---|
| Contact form inquiries | 3 years from last contact, unless you become a client |
| Newsletter subscribers | Until you unsubscribe, plus 1 year for suppression list purposes |
| Website analytics data | 26 months (Google Analytics default) |
| Marketing campaign data | 3 years from collection |
| Payment records | 7 years (for tax and accounting purposes) |
| Correspondence | 3 years from last contact, unless you become a client |
Factors Affecting Retention
We may retain your information for longer periods if:
- Required by applicable law, regulation, or legal process
- Necessary to establish, exercise, or defend legal claims
- You have an ongoing relationship with us
- Retention is required for our legitimate business purposes, such as fraud prevention
Deletion
When personal information is no longer needed, we will securely delete or anonymize it. If deletion is not immediately possible (for example, because information is stored in backup archives), we will securely store the information and isolate it from further processing until deletion is possible.
9. Your Privacy Rights
You may have certain rights regarding the personal information we hold about you, subject to applicable law. For your privacy and security, we will require you to verify your identity before we respond to any request to exercise these rights.
Rights Available to All Individuals
Regardless of where you are located, you may:
- Request access to the personal information we maintain about you
- Request correction of your personal information if it is incomplete or inaccurate
- Request deletion of your personal information
- Withdraw your consent to processing (where we rely on consent as the legal basis)
- Unsubscribe from marketing communications at any time by clicking the unsubscribe link in any email or by contacting us
For each of these rights, we may have valid legal grounds to refuse your request and will inform you if such grounds apply.
Additional Rights for California Residents
If you are a California resident, the CCPA/CPRA provides you with the following additional rights:
| Right | Description |
|---|---|
| Right to Know | You may request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources, the purposes for collection, and the categories of third parties with whom we have shared your information. |
| Right to Delete | You may request that we delete personal information we have collected from you, subject to certain exceptions. |
| Right to Correct | You may request that we correct inaccurate personal information we maintain about you. |
| Right to Opt-Out of Sale/Sharing | You have the right to opt out of the “sale” or “sharing” of your personal information. We do not sell or share personal information as defined under California law. |
| Right to Limit Use of Sensitive Personal Information | You have the right to limit the use and disclosure of sensitive personal information. We do not use sensitive personal information for purposes beyond those permitted under the CCPA/CPRA. |
| Right to Non-Discrimination | We will not discriminate against you for exercising any of your privacy rights. |
How to Submit a Request (California Residents)
You may submit a request by contacting us at team@tkalawfirm.com or by calling 844-285-2529. You may designate an authorized agent to submit a request on your behalf. We may require the authorized agent to provide proof of your written permission and may require you to verify your identity directly with us.
Response Timing
We will respond to verifiable requests within 45 days. If we require additional time (up to an additional 45 days), we will inform you of the reason and the expected response time.
Financial Incentives
We do not offer financial incentives, price differences, or service differences in exchange for the retention, sale, or sharing of your personal information.
Additional Rights for Virginia, Colorado, Connecticut, and Other U.S. State Residents
If you are a resident of Virginia, Colorado, Connecticut, or another state with comprehensive privacy legislation, you may have the following rights:
- Right to access your personal information
- Right to correct inaccuracies in your personal information
- Right to delete your personal information
- Right to obtain a copy of your personal information in a portable format
- Right to opt out of the processing of your personal information for targeted advertising
- Right to opt out of the sale of your personal information (we do not sell personal information)
- Right to opt out of profiling in furtherance of decisions that produce legal or similarly significant effects (we do not engage in such profiling)
Right to Appeal
If we decline to take action on your request, you may appeal our decision by contacting us at team@tkalawfirm.com with the subject line “Privacy Rights Appeal.” We will respond to your appeal in accordance with applicable law.
Additional Rights for Individuals in the European Economic Area and United Kingdom
If you are located in the EEA or UK, the GDPR or UK GDPR provides you with the following rights:
| Right | Description |
|---|---|
| Right of Access | You may request a copy of the personal information we hold about you. |
| Right to Rectification | You may request that we correct inaccurate or incomplete personal information. |
| Right to Erasure | You may request that we delete your personal information in certain circumstances. |
| Right to Restriction | You may request that we restrict processing of your personal information. |
| Right to Data Portability | You may request a copy of your personal information in a structured, commonly used, machine-readable format. |
| Right to Object | You may object to processing of your personal information based on legitimate interests or for direct marketing purposes. |
| Right to Withdraw Consent | Where we rely on consent, you may withdraw it at any time without affecting the lawfulness of prior processing. |
Automated Decision-Making
We do not use your personal information for automated decision-making, including profiling, that produces legal or similarly significant effects concerning you.
Response Timing
We will respond to requests within one month. If we require additional time (up to an additional two months), we will inform you of the reason and the expected response time.
Right to Lodge a Complaint
You have the right to lodge a complaint with a supervisory authority if you believe we have violated your data protection rights. For individuals in the EEA, you may contact the supervisory authority in your country of residence. For individuals in the UK, you may contact the Information Commissioner’s Office (ICO) at ico.org.uk.
How to Exercise Your Rights
To exercise any of your privacy rights, please contact us at:
- Email: team@tkalawfirm.com
- Phone: 844-285-2529
- Mail: TKA Law Firm PLLC, 244 Fifth Avenue, Suite E128, New York, NY 10001
Please include “Privacy Rights Request” in the subject line of your communication and specify which right(s) you wish to exercise.
10. International Data Transfers
TKA is based in the United States. If you access our Website or provide personal information to us from outside the United States, your information will be transferred to, stored, and processed in the United States.
For Individuals in the European Economic Area or United Kingdom
The United States has not received an adequacy decision from the European Commission or the UK government. This means that U.S. data protection laws may not provide the same level of protection as the laws in your country. When we transfer personal information from the EEA or UK to the United States, we rely on the following safeguards:
- Standard Contractual Clauses: We use Standard Contractual Clauses approved by the European Commission (and the UK equivalent, the International Data Transfer Agreement or UK Addendum) in our agreements with service providers that process personal information on our behalf.
- Consent: In some cases, we may transfer your information based on your explicit consent.
- Contractual Necessity: We may transfer information where necessary to respond to your inquiry or take steps at your request prior to entering into a contract.
Service Providers
Our service providers, including email marketing platforms and analytics providers (e.g., Google), may process personal information in the United States or other countries. These providers maintain their own data transfer mechanisms and privacy certifications.
Your Rights
If you are located in the EEA or UK, you have the right to request information about the safeguards we use for international transfers. To make such a request, please contact us using the information in Section 13.
11. Children’s Privacy
Our Website is not directed at children under the age of 13. We do not knowingly collect, use, or disclose personal information from children under the age of 13. If you are under the age of 13, please do not access or use this Website.
If you are a parent or guardian and believe that your child has provided personal information to us, please contact us using the information in Section 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete such information promptly.
12. Updates to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or for other operational reasons. When we make changes, we will revise the “Last Updated” date at the top of this Privacy Policy. If we make material changes that significantly affect how we handle your personal information, we will provide prominent notice on our Website or notify you by other means (such as email) prior to the changes taking effect, where required by applicable law.
We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Your continued use of our Website or services after any changes to this Privacy Policy constitutes your acceptance of the updated Privacy Policy.
13. Contact Information
If you have any questions about this Privacy Policy or wish to exercise any of your privacy rights, please contact us:
TKA Law Firm PLLC
Email: team@tkalawfirm.com
Phone: 844-285-2529
Mail: 244 Fifth Avenue, Suite E128, New York, NY 10001
Please include “Privacy Policy” or “Privacy Rights Request” in the subject line of your communication.
14. Governing Law
To the extent permitted by applicable law, this Privacy Policy and any disputes arising out of or relating to it shall be governed by the laws of the State of New York, without regard to its conflict of laws principles. Nothing in this section limits your rights under data protection laws in your jurisdiction of residence.