Privacy Notice

Introduction

This Privacy Policy describes how Levi & Korsinsky, LLP & CORE (an affiliated entity)(“L&K,” “we,” “us,” or “our”) collects, uses, stores, discloses, and protects your (“you” or “your”) personal information when you access or interact with our websites, including zlk.com, mydatabreachattorney.com, consumer.zlk.com, suewallst.com, compensationrecovery.com, and any other L&K-operated websites, blogs, newsletters, social media pages, and online services where this Privacy Policy is referenced (collectively, the “Services”).

Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact our Data Protection Officer, Amier Metwaly, via any of the methods described in Section 13.

By using our Services or providing your information, you acknowledge and consent to the collection and use of your data as described in this Privacy Policy. Your continued use of the Services indicates your acceptance of these terms and practices. If you do not agree with our policies and practices, please discontinue your use of the Services and do not provide us with any personal information.

We may update this Privacy Policy periodically. We encourage you to review this policy regularly.

Attorney-Client Confidentiality

If you contact us through our Services in connection with a potential legal matter, any information you submit may be protected by attorney-client privilege and/or the duty of confidentiality under applicable rules of professional conduct. Such information is governed by our professional responsibility obligations, not solely by this Privacy Policy.

Specific implications of this for our data practices:

• Information submitted does not create an attorney-client relationship, but will still be treated in accordance with applicable confidentiality obligations where appropriate.
• Our standard data retention schedules may be extended or modified for client matter files in accordance with applicable bar rules, legal hold requirements, or ongoing litigation.
• To the extent we use technology tools - including AI-assisted intake, document review, or case management systems - in connection with legal representation, we implement safeguards consistent with applicable rules of professional conduct and ethics guidance to protect client confidentiality.
• If you believe you have shared information with us in the context of seeking legal advice, please contact us at [email protected] to discuss how your information is being handled.
• In the course of representing clients, we may collect, use, and disclose personal information about consumers as necessary to comply with our legal obligations or to exercise or defend legal claims. Pursuant to our professional responsibility obligations, we may be unable to identify the categories of such information, its sources, or the nature of such disclosures, and we may be unable to comply with certain consumer requests regarding such information where doing so would conflict with our professional responsibilities.

1. Information We Collect

1.1 Information You Provide Directly

We collect personal information that you voluntarily provide when you complete a form on our website, submit a case inquiry, subscribe to a newsletter, contact us, or otherwise interact with our Services. This may include your name, contact information, and any other information you choose to provide. We also gather data indirectly when you engage with our attorneys, personnel, or social media platforms, or when you interact with our marketing materials. If you post content on any community forum or blog on our Services, that information may be publicly viewable.

Some personal information you provide may be considered sensitive under applicable privacy laws. We only collect sensitive personal information for purposes allowed by law or with your consent. You may have the right to limit the use and disclosure of your sensitive personal information (see Section 5).

While providing personal information is not mandatory to use our Services, choosing not to provide certain requested information may limit your access to specific features or our ability to respond effectively to your inquiries.

1.2 Information Collected Automatically

When you use our Services, we may automatically collect certain technical and behavioral data through cookies, analytics tracking software, advertising pixels, and similar technologies. This information does not directly reveal your specific identity but may include:

• Log and usage data: pages viewed, referring URLs, access timestamps, browsing activity within our Services, search history, and interaction with advertisements.
• Device data: IP address (or proxy server), device type, operating system, browser type, hardware model, mobile device identifiers (including MAC address), internet service provider, and system configuration information.
• Geolocation data: general location information derived from your IP address or device settings. You can opt out of location data collection by disabling the location setting on your device.

These tools help us understand how visitors interact with our Services, maintain website security, analyze traffic, customize content, and improve user experience.

1.3 Information from Other Sources

We may obtain information about you from publicly available sources, such as social media posts that mention or tag L&K, that may reveal your specific identity.

1.4 Automated Intake Tools and AI-Assisted Processing

Our Services may use automated tools, including AI-assisted screening, routing, or case evaluation technologies, to help to assist with intake, routing, or evaluation. If you are subject to an automated intake decision that has a significant effect on your ability to receive Services, you may request human review of that decision by contacting [email protected]. Please be aware that any data collected from you, to the extent permitted by law, may be used to train our AI models in connection with our use of AI.

If you have questions about how automated tools were used in processing your inquiry, please contact us.

2. Cookies and Tracking Technologies

We may use cookies, pixels, gifs, web beacons, log files, and similar technologies to automatically collect certain information when you use the Services or interact with our digital content. This data collection enables us to track user behavior, determine when content is accessed, and tailor user experiences to your preferences.

2.1 Types of Cookies

There are different types of cookies and related technologies, which may be placed by us or by third parties:

• Essential cookies: required to display and operate the Services properly.
• Preference cookies: store your settings and preferences to improve your experience.
• Analytics cookies: help us understand how the Services are used, often collecting non-personalized data.
• Marketing/Advertising cookies: deliver personalized and targeted advertisements that may be of interest to you and others, used for business purposes (advertising to visitors of the Services) and commercial purposes (marketing to others).

Use of localStorage: We use localStorage to optimize your experience on our websites. This information remains on your device and is not transmitted to our servers.

Web Beacons: We may use web beacons to monitor email open rates, track how our websites are used, and understand visitor behavior.

2.2 Third-Party Analytics and Advertising

Unless you have opted out or modified your browser’s cookie settings, we automatically receive the device and browsing data described in Section 1.2.

We may use third-party advertising companies to display ads tailored to your interests based on your online activity and to provide ad-related services such as analytics and market research. These third parties may use cookies, web beacons, or similar technologies to collect information.

We may use Google Analytics and related advertising features to analyze website usage and deliver tailored content. Your information may be shared with Google in connection with these tools or our use of Google. To learn more or opt out, visit https://policies.google.com/privacy.

We may also use Meta pixels and cookies and tracking technologies from other advertising and social media platforms for analytics and advertising purposes. Your information from cookies may be shared with these providers.

We may share your personal information with third party advertising or joint marketing partners for the purposes described in this Privacy Policy (including interest-based advertising) or at the time of collection.

To the extent these online tracking technologies are deemed to be a “sale,” “sharing,” or “targeted advertising” as defined under applicable U.S. state privacy laws, you can opt out of these practices by submitting a request through the methods described in Section 5 below.

2.3 Your Cookie Choices and Opt-Out Options

You have control over data collection through cookies and similar technologies. Here are the ways you can manage your preferences:

• Browser settings: You can adjust your cookie preferences through your internet browser settings. Most web browsers are set to accept cookies by default. If you prefer, you can usually choose to set your browser to remove or reject cookies.
• Consent management platform: You can adjust some cookie preferences used on our Services through our consent management platform. You may also update, renew, or revoke your cookie consent at any time through the cookie settings icon on our website.
• • Global Privacy Control (GPC): We honor opt-out preference signals from the Global Privacy Control and other universal opt-out mechanisms (UOOMs) to the extent required by applicable state laws. For more information on GPC, visit https://globalprivacycontrol.org/. Please enable GPC or your preferred UOOM separately for each browser and device you use to access our Services.

If you do not wish to have cookies placed on your device, you should update your browser and device settings before accessing the Services, with the understanding that certain features of the Services may not function properly as a result.

2.4 Managing Your Cookie and Tracking Preferences

You can opt out of interest-based advertising by visiting allaboutcookies.org or the Network Advertising Initiative Opt-Out page.

Google

To manage how Google uses your data for advertising, visit Google Ads Settings. To opt out of Google Analytics tracking, you can install the Google Analytics Opt-Out Browser Add-On. For more information about how Google handles data, see the Google Cookie Policy.

Meta (Facebook)

To learn more about how Meta uses your data and to manage your preferences, see the Meta Cookie Policy and visit Facebook Ad Preferences.

Mobile Devices

On mobile devices, you can manage tracking by adjusting your device’s advertising and privacy settings. On iOS, go to Settings > Privacy & Security > Tracking. On Android, go to Settings > Privacy > Ads. You may also reset your device’s advertising identifier or opt out of personalized ads through these settings.

Please note: We provide the links above for your convenience. Because third-party platforms update their tools, URLs, and policies from time to time, we cannot guarantee that these links will remain operational or that the information at those destinations will remain current. If a link is not working, we recommend visiting the relevant platform’s main privacy or settings page directly.

2.5 Do Not Track Signals

Our Services do not currently respond to Do Not Track (DNT) browser signals, as no industry or legal standard for recognizing or honoring DNT signals currently exists.

3. How We Use Your Information

We process your personal information for the following purposes:

• Providing legal services and responding to inquiries: We use personal information to evaluate potential legal matters, respond to inquiries, and deliver our Services, which may involve sharing information with co-counsel and experts.
• Marketing communications: We use your information to send email announcements, newsletters, and information about our investigations, cases, settlements, or firm news that may be of interest to you. You may unsubscribe at any time (see Section 7 below).
• Improving our Services: We use cookies and device data to enhance website functionality, customize content, conduct analytics, and perform internal research for technological development.
• Security and compliance: We use your information to protect against security threats, illegal activities, and fraud, and to ensure compliance with legal and regulatory requirements, and for other purposes disclosed at the time of data collection.
• Recruiting: We process job applicant information for evaluating candidates as permitted by law.

3.1 Legal Bases for Processing (EEA, UK, and Swiss Residents)

If you are located in the European Economic Area (EEA), United Kingdom (UK), or Switzerland, the General Data Protection Regulation (GDPR) and UK GDPR require us to explain the valid legal bases we rely on to process your personal information. We may rely on the following:

• Consent: We may process your information if you have given us permission to use it for a specific purpose. You can withdraw your consent at any time by emailing [email protected].
• Performance of a contract: We may process your information when we believe it is necessary to fulfill our contractual obligations to you, including providing our Services or at your request prior to entering into a contract.
• Legitimate interests: We may process your information when reasonably necessary to achieve our legitimate business interests, provided those interests do not outweigh your rights and freedoms. Examples include improving and marketing our Services and preventing fraud.
• Legal obligations:
We may process your information where necessary for compliance with our legal obligations, such as cooperating with a law enforcement body or regulatory agency, or exercising or defending our legal rights.

In legal terms, we are generally the “data controller” under European data protection laws for the personal information described in this Privacy Policy.

Canadian residents: We process your information based on your express or implied consent, which you may withdraw at any time by contacting us.

4. How We Share Your Information

We may disclose your personal information in the following circumstances:

• Service providers and contractors: Third parties who perform work on our behalf under contracts that require them to safeguard your data, use it only for specified purposes, and retain it only for the period we instruct.
• Technology partners: Providers of technology services that support our operations, including analytics, advertising, hosting, and security.
• Business partners: Co-counsel, experts, strategic partners, and agents engaged in connection with our legal services.
• Affiliates: Entities affiliated with L&K, who will be required to honor this Privacy Policy.
• Legal obligations: When required by law, in response to legal process (such as a subpoena, warrant, or court order), to protect against security threats or illegal activities, or when we believe disclosure is necessary to protect our rights, the rights of third parties, or the public.
• Business transfers: In connection with any merger, acquisition, financing, bankruptcy, or sale of all or a portion of our assets.
• At your direction: At your direction or with your authorization.

We may share de-identified or aggregated information for analytics, marketing and other purposes.

5. Your Privacy Rights

Depending on your location and applicable law, you may have the following rights with respect to your personal information. We will respond to verifiable consumer requests within the timeframes required by applicable law. We will not charge a fee unless a request is manifestly unfounded or excessive, in which case we will notify you of any fee before proceeding. We will not discriminate against you for exercising any of your privacy rights.

1. Right to Access and Portability: Obtain or receive a copy of your personal information, including in a structured, commonly used, and machine-readable format.
2. Right to Correction: Request correction of inaccurate personal data.
3. Right to Deletion: Request deletion of your personal information, subject to legal limitations and exceptions.
4. Right to Restrict Processing: Limit processing of sensitive data and automated decision-making. If a decision that produces legal or similarly significant effects is made solely by automated means, we will inform you, explain the main factors, and offer notice, opt-out rights, and human review as applicable under state law.
5. Right to Opt Out: Opt out of the processing of your personal data if it is used for targeted advertising (or “sharing” as defined under applicable law), the sale of personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects.
6. Right to Non-Discrimination: Exercise your privacy rights without fear of discriminatory treatment, including being denied services or receiving a different level or quality of services.
7. Right to Withdraw Consent: Where we rely on consent as the basis for processing, you may withdraw consent at any time. This will not affect the lawfulness of processing conducted prior to withdrawal, nor processing conducted on other lawful grounds.

5.1 State-Specific Rights

Depending on your state of residence, you may have additional rights under applicable state privacy laws, including:

• The right to obtain lists of third parties to which we have disclosed or sold personal information, including categories and specific names (as permitted by applicable law).
• The right to review, understand, question, and correct how personal data has been profiled (as permitted by applicable law).
• The right to limit the use and disclosure of sensitive personal information (as permitted by applicable law).

California residents: You have additional rights under the CCPA, CPRA, and California’s “Shine the Light” law. If you are a California resident, we consider any request to opt-out of “sales” or “sharing” as a request pursuant to California’s “Shine the Light” law to stop sharing your personal information covered by that law with third parties for their direct marketing purposes.

Nevada Residents: Revised Statutes Chapter 603A allows Nevada residents to opt-out of the “sale” of certain types of personal information. Subject to several exceptions, Nevada law defines “sale” to mean the exchange of certain types of personal information for monetary consideration to another person. If you are a Nevada resident who wishes to exercise your “sale” opt-out rights, you may submit a request to us using the contact information listed at the end of this Privacy Policy.

EEA, UK, and Swiss residents: You have rights under the GDPR and UK GDPR, including the right to lodge a complaint with your local data protection authority. For EEA residents, a list of data protection authorities is available at https://ec.europa.eu/justice/data-protection/bodies/authorities/index_en.htm. For UK residents, complaints may be directed to the Information Commissioner’s Office (ICO) at https://ico.org.uk/make-a-complaint/. For Swiss residents, you may contact the Federal Data Protection and Information Commissioner at https://www.edoeb.admin.ch/edoeb/en/home.html.

5.2 How to Exercise Your Rights

To exercise your privacy rights, you can contact us at [email protected], or using any of the methods listed in Section 13.

You may designate an authorized agent to make a request on your behalf, provided the agent submits proof of valid authorization in accordance with applicable laws.

5.3 Request Verification

We may need to verify your identity before processing your request, and may request additional information for this purpose.

5.4 Appeals

Under certain U.S. state data protection laws, if we decline to take action on your request, you may appeal our decision by emailing us at [email protected]. We will inform you in writing of any action taken or not taken in response to the appeal, including a written explanation of the reasons for our decision. If your appeal is denied, you may submit a complaint to your state attorney general. While we strive to accommodate all requests, there may be instances where we cannot fully grant them, such as when we cannot verify your identity, when we have a legal obligation to retain your data, or when an exception under applicable law applies.

6. Data Retention

We retain personal information for the length of time necessary to fulfill the purposes outlined in this Privacy Policy, unless a different retention period is requested by you or required or permitted by law. We may also aggregate, de-identify, or anonymize personal information for use in analytics, such as to analyze trends over periods of time without specifically identifying you.

We use the following criteria to determine how long we retain personal information: (a) our relationship with you, such as if there is an open matter, account, or pending request; (b) legal obligations to retain personal information for certain purposes, such as to maintain transaction records; and (c) other obligations or considerations relating to the retention of data, such as contract requirements, litigation holds, investigations, or statutes of limitation.

7. Marketing Communications

When you provide us with your contact information—such as through subscribing to our mailing lists via our Services or submitting a case inquiry—we may add your details to our contacts database and marketing lists. This allows us to send you relevant information, including newsletters, legal updates, case alerts, and information about investigations or settlements that may be of interest to you.

You have the right to opt out of receiving marketing communications from us at any time. This applies to email, telephone, and SMS/text marketing:

• Email: Click the unsubscribe link provided in every marketing email we send, or notify the sender directly.
• Phone calls: Inform the caller that you wish to opt out of future calls, and we will update our records accordingly.
• Do Not Call registries: You may register your telephone number with national Do Not Call registries.

Mobile opt-in data, SMS consent, and phone numbers collected for SMS communication purposes will not be shared with third parties for marketing purposes without your prior consent.

Call Recording: Calls to or from our offices may be recorded for quality assurance, training, and compliance purposes, with notice as required by applicable law.

Please note that even if you opt out of marketing communications, we may still need to contact you for non-marketing purposes related to our Services or your legal matter.

8. Security of Your Information

We implement comprehensive security measures to protect personal information, utilizing technical, administrative, and physical safeguards that align with reasonable security protocols and available technology. However, no system can guarantee absolute security, and we cannot assure that your personal information will always remain impenetrable. We encourage you to take precautions to protect your passwords and other sensitive information, and to promptly report any suspected breaches of your account security to us.

In the event of a data breach, we will notify affected individuals and applicable regulatory authorities as required by law.

9. International Data Transfers

Our servers are located in the United States. If you access our Services from outside the United States, your information will be transferred to, stored in, and processed within the United States. By choosing to use our Services, you consent to this transfer. We will take measures to protect your personal information in accordance with this Privacy Policy and applicable law.

10. Third-Party Websites

This Privacy Policy exclusively governs our Services. Our Services may contain links to third-party websites, platforms, or services that are not operated by L&K and that operate under their own distinct privacy policies and data collection practices. We have no control over, and assume no responsibility for, the content, privacy policies, or data handling practices of third-party services.

11. Children’s Privacy

Our Services are not directed to children under the age of 18, and we do not knowingly collect or solicit personal information from minors. If we learn that we have collected personal information from a child, we will take reasonable measures to promptly delete it. If you believe we may have collected information from a minor, please contact us at [email protected].

12. Changes to This Privacy Policy

We reserve the right to update this Privacy Policy at any time. For material changes, we will post a prominent notice on our Services. The updated version will be indicated by the effective date at the top of this page. Your continued use of our Services after any update constitutes acceptance of the revised Privacy Policy.

13. Contact Information

If you have questions about this Privacy Policy, our privacy practices, or if you wish to exercise your privacy rights, please contact our Data Protection Officer via any of these methods:

Mail:

Amier Metwaly
Levi & Korsinsky, LLP
Attn: Privacy
33 Whitehall Street, 27th Floor
New York, NY 10004
Email: [email protected]
Phone: (212) 363-7500
Online: Privacy Request Form