Privacy Policy
Privacy Policy
Last Updated: June 15, 2026
Carrington, Coleman, Sloman & Blumenthal, L.L.P. (“CCSB,” the “Firm,” “we” or “us”) has developed this Privacy Policy to describe how we collect, use, disclose, and protect personal information about individuals who visit or interact with our website at ccsb.com, including our firm-branded blogs and newsletters regardless of the domain on which they are hosted (collectively, the “Website”), visit any of our offices or locations, request or receive our legal services, contract with us to provide services, or otherwise interact or conduct business with us.
This Privacy Policy applies to “Consumers” as defined under various U.S. state consumer privacy laws, including the Texas Data Privacy and Security Act (the “TDPSA”), and other U.S. state consumer privacy laws as applicable (collectively, “U.S. Privacy Laws”).
This Privacy Policy does not apply to:
- Information collected from or about job applicants regarding their application for employment or candidacy. Job applicants may request our Job Applicant Privacy Notice by contacting us at privacy@ccsb.com.
- Current and former Firm employees, partners, contractors, and their family members, dependents, and beneficiaries.
For the purposes of this Privacy Policy, “personal information” means any information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household, as defined under applicable U.S. Privacy Laws. Personal information does not include publicly available information, deidentified or aggregated information, or information lawfully made available from government records.
Table of Contents
- Personal Information We Collect
- Categories of Sensitive Personal Information
- Sources of Personal Information
- To Whom We Disclose Personal Information
- Purposes for Collecting, Using and Disclosing Personal Information
- Retention of Personal Information
- Sale and Sharing of Personal Information
- Opt-Out of Sale and Sharing
- Opt-Out Preference Signals
- Protection of Personal Information
- External Links and Co-Branded Services
- Cookie Policy
- U.S. Consumer Privacy Rights
- Submitting a Consumer Request
- Use of AI Technology
- Children Under the Age of 18
- Compliance with Law and Safety
- Business Transfers
- Changes to Our Privacy Policy
- Consumers with Disabilities
- How to Contact Us
1. Personal information We Collect
The personal information we collect and the purposes for which we use it depend on your relationship with the Firm. In the preceding 12 months, we have collected the following categories of personal information based on your specific transactions with us or the Website. The categories of third parties to whom we have disclosed each category of personal information, the business or commercial purposes for which we collect it, and whether we “sell” or “share” that information (as those terms are defined under applicable U.S. Privacy Laws) are indicated in each table.
The examples provided are illustrative and not exhaustive.
| Category | Personal Identifiers |
|---|---|
| Examples | Name, alias, postal address, email address, telephone number, online identifier, IP address, account name, driver’s license number, passport number, social security number, and other similar identifiers. |
| Disclosed To | Affiliates; service providers (IT, hosting, marketing, event management, communication vendors); professional advisors; corporate clients; government agencies; authorities and others as required by law. |
| Business Purposes | Service delivery; client intake and conflict checks; responding to inquiries; marketing communications; event registration; billing and payment; security; legal compliance. |
| Sold or Shared | Data collected through the Website may be shared with data analytics vendors. Data collected through other channels is not sold or shared. |
| Category | Contact Information |
|---|---|
| Examples | Postal address, email address, telephone number, company name, job title. |
| Disclosed To | Affiliates; service providers; professional advisors; marketing and event co-sponsors. |
| Business Purposes | Responding to inquiries; delivering requested services, alerts, and publications; event registration and management; marketing; billing and payment. |
| Sold or Shared | Data collected through the Website may be shared with data analytics vendors. Data collected through other channels is not sold or shared. |
| Category | Professional or Employment-Related Information |
|---|---|
| Examples | Job title, employer, work history, professional licenses, education, areas of professional interest. |
| Disclosed To | Affiliates; service providers; professional advisors; corporate clients. |
| Business Purposes | Client intake and conflict checks; responding to inquiries; delivering legal services; marketing communications tailored to professional interests. |
| Sold or Shared | Not sold or shared. |
| Category | Commercial and Transactional Information |
|---|---|
| Examples | Records of services purchased or inquired about; billing records; engagement information. |
| Disclosed To | Affiliates; financial institutions; service providers; professional advisors. |
| Business Purposes | Providing legal services; billing and collection; transaction records; audit and compliance. |
| Sold or Shared | Not sold or shared. |
| Category | Financial and Payment Information |
|---|---|
| Examples | Billing contact details, payment records, bank account or wire transfer information, credit card information. |
| Disclosed To | Financial institutions; payment processors; affiliates; service providers; professional advisors. |
| Business Purposes | Processing payments for legal services; retainers; client matter expenses; fraud prevention. |
| Sold or Shared | Not sold or shared. |
| Category | Internet, Network, and Device Activity Information |
|---|---|
| Examples | IP address; browser type; device type; operating system; pages visited; links clicked; referring URLs; search queries; session identifiers; cookies and similar identifiers. |
| Disclosed To | Service providers (hosting, security); data analytics vendors. |
| Business Purposes | Operating and securing the Website; analytics; improving user experience; marketing; fraud prevention. |
| Sold or Shared | Data collected through the Website is shared with data analytics vendors (including, without limitation, Google Analytics). This constitutes “sharing” and may constitute “selling” for non-monetary valuable consideration under applicable U.S. Privacy Laws. |
| Category | Geolocation Data |
|---|---|
| Examples | General location derived from IP address (city, state, region). |
| Disclosed To | Service providers; data analytics vendors. |
| Business Purposes | Analytics; security. |
| Sold or Shared | Data collected through the Website may be shared with analytics vendors. |
| Category | Communications Content |
|---|---|
| Examples | Content of email, contact form submissions, blog comments, and other communications you direct to us. |
| Disclosed To | Affiliates; service providers (email, hosting); professional advisors. |
| Business Purposes | Responding to your inquiries; client intake and conflict checks; delivering requested services. |
| Sold or Shared | Not sold or shared. |
| Category | Marketing and Engement Data |
|---|---|
| Examples | Preferences for marketing communications; engagement with our emails, alerts, and publications (opens, clicks, forwards). |
| Disclosed To | Affiliates; service providers (marketing and email vendors); joint marketing partners and event co-sponsors. |
| Business Purposes | Delivering requested publications and alerts; personalizing marketing communications; event promotion. |
| Sold or Shared | Not sold or shared. |
| Category | Audio, Visual, and Similar Information |
|---|---|
| Examples | Photographs; video recordings; audio recordings of calls or virtual meetings (as disclosed to you at the time of the call); security camera footage at our offices and events. |
| Disclosed To | Service providers (security vendors, call recording and transcription vendors); law enforcement as required. |
| Business Purposes | Physical security; documentation of events; transcription and summarization of meetings; legal compliance. |
| Sold or Shared | Not sold or shared. |
| Category | Inferences |
|---|---|
| Examples | Inferences drawn from the above categories regarding your professional interests, service preferences, and engagement patterns. |
| Disclosed To | Affiliates; service providers. |
| Business Purposes | Marketing; service improvement; analytics. |
| Sold or Shared | Not sold or shared. |
2. Categories of Sensitive Personal Information
Of the above categories, the following constitute “Sensitive Personal Information” under applicable U.S. Privacy Laws, to the extent collected:
- Personal identifiers such as driver’s license number, passport number, social security number or state identification number (if collected for identity verification);
- Account log-in credentials in combination with any required password or security credential;
- Precise geolocation (if collected; the Firm does not collect precise geolocation through the Website);
- Racial or ethnic origin, religious beliefs, or union membership (if voluntarily disclosed);
- Contents of mail, email, or text messages where the Firm is not the intended recipient (not intentionally collected);
- Personal Information collected from a known child (not intentionally collected in connection with the Firm’s business operations, though such information may be collected in the scope of client representation, as agreed between the Firm and its clients; see Section 16);
The Firm does not use or disclose Sensitive Personal Information for purposes that give rise to the right to limit such use and disclosure under the state privacy law.
3. Sources of Personal Information
We may collect personal information from the following sources:
- Directly from you (for example, when you submit a form, send us an email, subscribe to a publication, register for an event, or engage or inquire about engaging the Firm); automatically when you visit the Website (through cookies and similar technologies described in Section 12);
- From our clients and representatives in connection with our legal engagements;
- From third parties and public sources (including co-counsel, referral sources, opposing counsel, court filings, and publicly available sources)
- Automatically through our Website, including through the use of cookies and similar technologies on the Website.
- From service providers and vendors who assist with the Firm’s operations, including, without limitation, IT, hosting, cybersecurity, marketing, analytics, event management, payment processing, and communications vendors.
- Surveillance cameras at our physical locations.
4. To Whom We Disclose Personal Information
We may disclose personal information to the following categories of recipients:
- Affiliates, including any parent entities, subsidiaries, and related entities.
- Service providers and contractors, including, without limitation, IT, hosting, cybersecurity, marketing, analytics, event management, video and telephone conference, payment processing, artificial intelligence, and communications vendors.
- Professional advisors, including auditors, insurers, and outside counsel.
- Clients and other parties involved in our client engagements and their representatives, vendors, and advisors.
- Financial institutions, payment processors, and credit/consumer reporting agencies.
- Government agencies, law enforcement, and regulators, as required by law or as we believe in good faith is necessary or appropriate.
- Joint marketing partners and event co-sponsors, with whom we may communicate about events and topics of mutual interest.
- Business transferees, in the event of a merger, acquisition, reorganization, financing, sale of assets, bankruptcy, or similar transaction.
5. Purposes for Collecting, Using and Disclosing Personal Information
We collect, use, and disclose personal information for the following purposes:
- To provide legal services to our clients and administer client matters;
- To conduct client intake, conflict checks, and engagement letter processes;
- To respond to inquiries, requests, and communications from clients, prospective clients, and other individuals;
- To register and host you at events;
- To deliver publications, alerts, and marketing communications you have requested or that may be of interest to you;
- To operate, administer, secure, and improve the Website;
- To conduct analytics regarding Website usage and user preferences;
- To process payments and manage billing;
- To detect, investigate, and prevent security incidents, fraud, and other unlawful activity;
- To comply with applicable law, legal process, and regulatory requirements;
- To establish, exercise, or defend legal claims;
- To enforce our Terms of Use and other agreements;
- To evaluate, negotiate, and effect corporate transactions, including mergers, acquisitions, and financings; and
- Any other purpose disclosed to you at the time of collection or with your consent.
6. Retention of Personal information
We retain each category of personal information for the period reasonably necessary to fulfill the purposes described in this Privacy Policy, taking into account: the business purposes for which the personal information was collected; applicable federal, state, and local recordkeeping requirements; applicable statutes of limitation and legal preservation obligations; and professional conduct obligations applicable to attorneys. We periodically review personal information in our possession and will delete, deidentify, or anonymize personal information when the business purposes for retention, and any legal obligations to retain it, have expired.
7. Sale or Sharing of Personal Information
We do not sell your personal information for monetary consideration. However, when you visit the Website, certain personal information in the categories identified above in Section 1 (principally Personal Identifiers, Contact Information, Internet/Network/Device Activity Information, and Geolocation Data) may be disclosed to data analytics vendors (such as Google Analytics) for non-monetary valuable consideration. Under applicable U.S. Privacy Laws, these disclosures may constitute “selling” and/or “sharing” of personal information.
Except as described above, we do not and will not sell or share your Personal Information.
8. Opt-Out of Sale and Sharing
You have the right to opt out of our “selling” or “sharing” of your personal information, as those terms are defined under applicable U.S. Privacy Laws, without fear of discrimination. To exercise this right, you may:
- Click the “Do Not Sell or Share My Personal Information” link located in the footer of the Website
- Email us at privacy@ccsb.com with the subject line “Do Not Sell or Share”
- Call our privacy line at 888-614-5250.
- Use the Global Privacy Control signal or a Universal Opt-Out Mechanism) as described below, see Section 9.
You may designate an authorized agent to submit an opt-out request on your behalf. The authorized agent must provide written, signed permission from you, and we may require verification of your identity and the agent’s authority. We may deny a request if we have a good-faith, reasonable, and documented belief that the request is fraudulent, and we will inform you of our decision and the reasons.
9. Opt-Out Preference Signals
Opt-out preference signals provide Consumers with a simple and easy-to-use method by which to exercise the right to opt-out of the selling and sharing of their information. Global Privacy Controls (GPC) or Universal Opt-Out Mechanism (UOOM) are user-enabled opt-out preference signals which can communicate a user’s “Do Not Sell or Share” request on behalf of the person or device.
We honor the Global Privacy Control and/or other UOOM mechanisms recognized under applicable law, as a valid request to opt out of the sale or sharing of personal information and of targeted advertising. We process these signals automatically and do not require additional verification when a recognized signal is detected. We currently do not connect browser use to particular Consumers and, as such, you will need to use GPCs or UOOMs on all browsers in which you access our website and use our opt-out form to opt-out of offline sales.
10. Protection of Personal information
We maintain administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, disclosure, alteration, and destruction, including:
- Using commercially reasonable tools to protect against unauthorized access to our systems.
- Maintaining separation of automatically collected data and voluntarily collected data where practicable.
- Limiting access to personal information to personnel who require such access in the course of their duties for the Firm.
- Utilizing encryption on personal information in transit and at rest, where technically feasible and appropriate to the sensitivity of the information.
No security program is perfect, and we cannot guarantee absolute security.
11. External Links and Co-Branded Services
Our Website contains links to other websites that are not controlled by the Firm. We are not responsible for the privacy practices or the content of such websites. To help ensure the protection of your privacy, we recommend that you review the privacy policy of any site you visit via a link from our Website.
From time to time, we may offer co-branded services or events in partnership with third parties that are not owned by or affiliated with us. Personal information you provide in connection with a co-branded service may be shared with the co-branding partner, whose privacy practices will govern their use of the information.
12. Cookie Policy
The Website uses cookies and similar technologies (including pixels, tags, and web beacons) to collect information automatically.
First-Party Cookies. We use first-party cookies to enable the Website to function as expected, remember your preferences, and analyze performance.
Third-Party Cookies. We also incorporate cookies and similar technologies from third-party vendors for purposes including analytics.
Categories of Cookies:
- Essential Cookies are necessary for the Website to function and cannot be switched off in our systems. They are usually only set in response to actions made by you which amount to a request for services, such as setting your privacy preferences, logging in or filling in forms. You can set your browser to block or alert you about these cookies, but blocking these cookies will prevent the website from working correctly or might prevent the Website from working at all.
- Non-Essential Cookies are not essential to the website functionality but serve some other unique purpose in three subcategories:
- “Performance” cookies (sometimes referred to as static cookies) collect information about the user’s behavior on the website without collecting personal information.
- “Functional” cookies (sometimes called preference cookies) track and remember the user’s preferences and past choices;
- “Targeting” cookies track content you view and links you follow, and enable advertising based on your interests.
Information on Some of the Cookies in Use on our Website
For information on some of the cookies we use on our site and apps, please review the policies from some of our vendors:
Managing your cookie settings: When you first visit our Website, you will be presented with a cookie banner that allows you to accept or decline non-essential cookies. Essential cookies, which are necessary for the Website to function, do not require your consent. You may change your cookie preferences at any time.
You can also control and manage cookies associated with your browser. If you are interested in controlling and managing cookies from your browser including any set by our Website, please refer to http://www.allaboutcookies.org/manage-cookies/index.htm for information on different ways to configure your browser’s cookie settings.
If you want to clear all cookies left behind by the websites you have visited, here are links where you can download three third party programs that clean out tracking cookies.
- https://www.adaware.com/ad-blocker/
- http://www.webroot.com/consumer/products/spysweeper http://www.spybot.info/en/download/index.html
You may delete cookies from your web browser at any time or block cookies on your equipment, but this may affect the functioning of or even block the website. You can prevent saving of cookies (disable and delete them) by changing your browser settings accordingly at any time. It is possible that some functions will not be available on our Website when use of cookies is deactivated. Check the settings of your browser. Below you can find some guidance. Otherwise you should use the ‘Help’ option in your internet browser for more details.
DAA
Many advertising companies that collect information for interest-based advertising are members of the Digital Advertising Alliance (DAA) which maintains self-regulatory programs along with websites where people can opt out of interest-based advertising from their members. To opt-out of website interest-based advertising visit the DAA’s opt-out portal available at http://optout.aboutads.info/. To opt-out of data collection for interest-based advertising across mobile applications by participating companies, download the DAA’s AppChoices mobile application opt-out offering found here: https://youradchoices.com/appchoices.
Non-Participant Opt-Out Options
- Some of our vendors may not participate in the DAA self-regulatory program for online behavioral advertising or have developed their own processes for allowing consumers to opt-out: https://branch.app.link/optout
- Some devices and apps do not have access to web-based browser cookie opt-outs. To learn more about the advertising opt-outs provided by your mobile device’s operating system (like iOS and Android) or the device manufacture, click here.
13. U.S. Consumer Privacy Rights
Depending on your state of residence, you may have the following rights under applicable U.S. Privacy Laws. These rights are not absolute and may be subject to exceptions; we will respond to valid requests in accordance with applicable law.
| Right | Description |
|---|---|
| Right to Know | Request the categories and specific pieces of Personal Information we have collected about you, the sources of collection, the purposes for collection and disclosure, and the categories of third parties to whom we have disclosed, sold, or shared it. |
| Right to Access | Receive a copy of the Personal Information you have provided to us in a portable and, to the extent technically feasible, readily usable format. |
| Right to Portability | Request the transfer of your Personal Information to another entity, to the extent technically feasible. |
| Right | Description |
|---|---|
| Right to Confirm | Confirm whether we are processing your Personal Information. |
| Right to Delete | Request that we delete Personal Information we have collected from you, subject to exceptions. |
| Right to Correct | Request that we correct inaccurate Personal Information we maintain about you. |
| Right to Opt Out of Sale or Sharing | Opt out of the sale or sharing of your Personal Information and the use of your Personal Information for targeted advertising. See Section 7. |
| Right to Limit Use of Sensitive Personal Information | Direct us to limit the use and disclosure of your Sensitive Personal Information. |
| Right to Opt Out of Profiling | Opt out of profiling in furtherance of decisions that produce legal or similarly significant effects concerning you. |
| Right to Non-Discrimination | Not be discriminated or retaliated against for exercising any of the above rights. |
| Right to Appeal | Appeal our refusal to take action on a request, where applicable under your state’s law. |
Texas-Specific Rights. If you are a Texas resident, the TDPSA provides you with the rights listed above, including the rights to access, correct, delete, and obtain a portable copy of your personal information, and to opt out of the processing of your personal information for targeted advertising, sale, or profiling in furtherance of decisions that produce legal or similarly significant effects. We recognize and honor these rights as described in this Privacy Policy. You may submit a request as described below in Section 14, and you may appeal any denial of your request by replying to our response or contacting us at privacy@ccsb.com. If your appeal is denied, you may contact the Texas Attorney General at https://www.texasattorneygeneral.gov/ to submit a complaint.
Other U.S. Privacy Law Consumer Rights. If you are a resident of California, Virginia, Colorado, Connecticut, Utah, Nebraska, or another state with a consumer privacy law, you may have some or all of the rights listed above as provided under your state’s law. California residents also may have the right to request information about our disclosure of personal information for direct marketing purposes under California’s “Shine the Light” law (Cal. Civ. Code § 1798.83). Requests under this law may be directed to privacy@ccsb.com.
We will honor such rights to the extent required by applicable law.
14. Submitting a Consumer Request
To exercise any of the rights described above in Section 13, please contact us through any of the options below:
- Email us at privacy@ccsb.com
- Call our privacy toll-free line at 888-614-5250
We will acknowledge your request and respond within the timelines required by applicable law. We may need to verify your identity before processing your request.
Verification of Identity. To process your request, we will need to verify your identity by asking you to provide information that can be matched to records in our possession. We will request only the minimum Personal Information necessary to verify your identity, which may include your name, email address, phone number, state of residence, and information about your prior interactions with us. If we cannot verify your identity, we may decline your request and will explain the reasons.
Authorized Agents. You may designate an authorized agent to submit a request on your behalf. The authorized agent must provide either (a) a valid, verifiable power of attorney, (b) written, signed authorization from you, or (c) for certain residents, proof of registration with the Secretary of State as authorized to act on your behalf. We may require verification of your identity and may deny requests from authorized agents who do not provide sufficient proof of authorization.
Response Timing. We will respond to verifiable requests within the time required by applicable law (generally 45 days for Texas requests, and within the timeframes prescribed under other appliable U.S. Privacy Laws, with extensions permitted as allowed by law).
Appeals. Where applicable U.S. Privacy Laws provide a right to appeal, you may appeal our decision by replying to our response or contacting us at privacy@ccsb.com within the timeframe permitted by applicable law. If your appeal is denied, we will inform you of the reasons and provide information about how to file a complaint with your state’s attorney general or privacy enforcement authority.
15. Use of AI Technology
When you interact with our Website or provide information to the Firm, that information may, where appropriate, be processed using AI tools under the Firm’s direction and in furtherance of the Firm’s commitment to providing efficient and high-quality services. The Firm applies its data protection, confidentiality, and information management standards to the data provided to, processed by, or generated through AI and uses such tools in a manner designed to protect client confidentiality and comply with applicable professional and legal obligations. The details regarding our use of AI technology are further addressed in our contracts with our clients.
CCSB does not consent to, and specifically objects to, the use of the Website or any content contained on the Website to train, develop, or improve any third-party AI, machine learning, or similar technology, including large language models and generative AI systems, except as specifically authorized by CCSB.
16. Children Under the Age of 18
The Website is not directed to children under the age of 18, and we do not knowingly collect, sell, or share the personal information of children under 18. If we learn that we have collected personal information from a child under 18 without the consent of the child’s parent or guardian as required by law, we will take appropriate steps to delete the information. If you believe we may have collected personal information from a child under 18, please contact us at privacy@ccsb.com.
For purposes of applicable state privacy laws that impose heightened requirements for personal information of known children (including those under the ages of 13, 16, or 17, depending on the jurisdiction), we process such data only in the course of providing legal services and subject to the attorney-client privilege and applicable professional-responsibility rules.
17. Compliance with Law and Safety
We may disclose personal information, including Sensitive Personal Information, when we believe in good faith that disclosure is necessary to comply with applicable law, legal process, or lawful requests from government authorities; to protect the rights, privacy, safety, or property of the Firm, our clients, our personnel, or others; to investigate or prevent fraud or illegal activity; or to enforce our Terms of Use and other agreements.
18. Business Transfers
In the event of a merger, acquisition, reorganization, financing, sale of assets, bankruptcy, or similar transaction involving the Firm, personal information may be transferred as part of the transaction. We will use reasonable efforts to require the transferee to handle personal information in a manner consistent with this Privacy Policy or provide notice and choice as required by applicable law.
19. Changes to Our Privacy Policy
We encourage you to check our website frequently to see the current Privacy Policy in effect and any changes that may have been made to them. If we make material changes to this Privacy Policy, we will post the revised Privacy Policy and the revised effective date on this website. Please check back here periodically or contact us at the address listed at the end of this Privacy Policy.
20. Consumers with Disabilities
This Privacy Policy is designed to be accessible to consumers with disabilities. If you use assistive technology and are unable to access any portion of this Privacy Policy, please contact us at privacy@ccsb.com or 888-614-5250 and we will provide the information in an alternative format.
21. How to Contact Us
This Website is owned and operated by Carrington, Coleman, Sloman & Blumenthal, L.L.P., a law firm based in Dallas, Texas, U.S.A.
If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:
- Email: privacy@ccsb.com
- Phone: 888-614-5250