Privacy Policy

Last Modified: September 2, 2026 | Version 5.0

Fisher Stone, P.C. (“Fisher Stone,” “we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you visit FisherStoneLaw.com, use our online intake and scheduling tools (including pages hosted for us by Lawmatics at app.lawmatics.com), call phone numbers displayed on the Site, or communicate with us electronically (collectively, the “Site”).

This Policy is drafted to comply with the laws in effect as of September 2026, including the New York SHIELD Act (as amended, effective March 21, 2025), the California Consumer Privacy Act as amended by the CPRA and its 2026 regulations, the twenty U.S. state comprehensive privacy laws currently in effect, the TCPA, CAN-SPAM, and the FTC Act.

Scope of This Policy

This Policy applies to information collected through the Site and through electronic communications you send in connection with it. It does not apply to information we collect offline in the course of representing you (which is governed by our engagement agreement and professional obligations), to information collected by third parties through their own sites or apps (including Google, Meta, OpenAI, and Super Lawyers), or to other websites we operate that do not link to this Policy.

1. Information We Collect

1.1 Information You Provide

When you book a consultation, complete an intake form, subscribe to updates, call us, text us, or email us, we collect the information you provide, which may include:

• Name, email address, and phone number(s);
• The practice area and a description of your legal or advisory matter;
• Business information (entity name, revenue range, role) for business-law inquiries;
• Property information for real-estate inquiries;
• Family, financial, and — for elder law, Medicaid, special-needs, or guardianship inquiries — health, disability, or benefits information you choose to provide;
• The content of calls (which may be recorded), texts, and emails.

1.2 Sensitive and Health-Related Information

Some intake questions for estate planning, elder law, Medicaid planning, special-needs planning, and guardianship may call for health, disability, or financial information. Providing it is voluntary at the intake stage. We collect it only to evaluate your matter and check for conflicts, we do not sell it, share it for advertising, or use it to build advertising audiences, and we protect it as “private information” under the New York SHIELD Act and as “sensitive personal information” under applicable state law. Where required by law we will obtain your affirmative consent before processing it.

1.3 Information Collected Automatically

When you visit the Site we and our service providers automatically collect device and usage information — IP address, approximate location, browser and device type, operating system, referring URL, pages viewed, time on page, clicks and scrolls, and the advertisement or search that brought you to us — using the technologies described in Section 4.

1.4 Call Data

Phone numbers on the Site may be dynamic tracking numbers supplied by a call-tracking provider. When you call, we collect your phone number, the number you dialed, date, time, duration, the marketing source associated with the number, and — where you are notified at the start of the call — a recording and transcript of the call.

1.5 Information from Third Parties

We receive information from Lawmatics (our intake and CRM platform), Google (Analytics, Ads, Business Profile reviews), Meta, OpenAI advertising, and our call-tracking provider about how you found us and interacted with our advertising, and from public sources and conflict-check databases as needed to evaluate a matter.

2. Notice at Collection (California and Other States)

The following summary is provided at or before the point of collection as required by the CCPA regulations effective January 1, 2026, and satisfies comparable notice requirements in other states:

3. How We Use Information

• To respond to inquiries, run conflict checks, evaluate matters, and provide flat-fee quotes;
• To communicate with you by email, phone, and text (Section 7);
• To send legal updates and firm news you have agreed to receive;
• To measure, optimize, and retarget our advertising on Google, Meta, and ChatGPT/OpenAI, and to attribute calls and inquiries to the campaigns that generated them;
• To operate, secure, and improve the Site;
• To review call recordings for intake accuracy, quality, and training;
• To comply with law, professional-responsibility rules, and record-keeping obligations, and to enforce our Terms.

We do not use automated decision-making technology to make decisions with legal or similarly significant effects about you. Every matter is evaluated by a licensed attorney.

4. Cookies, Pixels, and Tracking Technologies

We use the following technologies on the Site. Several of them share Site activity with advertising partners. Strictly necessary items are set immediately, and the others are set when you arrive; you can turn them off at any time through our cookie-consent banner or the “Cookie Settings” link in the Site footer, and they are suppressed when we detect a Global Privacy Control (GPC) signal or you opt out.

You can change your choices at any time through the “Cookie Settings” link in the Site footer, through your browser settings, through the Google Analytics opt-out add-on (tools.google.com/dlpage/gaoptout), through Meta’s ad settings, or by enabling GPC in your browser. Disabling cookies may affect Site functionality.

5. Attorney-Client Privilege Notice

Information you submit before a written engagement agreement is signed is not protected by attorney-client privilege and may be reviewed by firm staff, including non-attorney personnel, for intake and conflict purposes. Communications regarding accounting and tax services may not be privileged even after engagement. Existing clients should use the secure channels designated by their attorney for sensitive material.

6. New York SHIELD Act

Fisher Stone, P.C. maintains reasonable administrative, technical, and physical safeguards under the SHIELD Act, including need-to-know access controls, encryption in transit and where feasible at rest, credential management and multi-factor authentication, staff training, vendor contracts requiring appropriate safeguards, and an incident-response plan.

“Private information” under the amended SHIELD Act includes a name or identifier combined with a Social Security number, driver’s license or ID number, financial account information, biometric data, a username or email with password, and — since the 2024 amendments — medical and health-insurance information. If a breach of private information of New York residents occurs, we will notify affected individuals within thirty (30) days of discovery and notify the New York Attorney General, Department of State, Division of State Police, and, where applicable, the Department of Financial Services, as required by General Business Law § 899-aa.

7. Email, Phone, and Text Communications

7.1 Consent

By submitting any form on the Site or our Lawmatics-hosted pages, you consent to be contacted by Fisher Stone, P.C. by email, phone (including automated or pre-recorded calls where permitted), and text message, for transactional and marketing purposes, as described in Section 3 of our Terms and Conditions. Consent is not a condition of hiring us.

7.2 Opting Out

Reply STOP to any text, click “unsubscribe” in any marketing email, tell us on a call, or email info@fisherstonelaw.com. We honor opt-outs made by any reasonable method within ten (10) business days (immediately for SMS). Transactional messages about an active matter continue unless you ask that all communications stop.

7.3 CAN-SPAM

Our marketing emails identify Fisher Stone, P.C. as the sender, include our postal address (42 Broadway, Suite 1744, New York, NY 10004), and include a working unsubscribe link.

7.4 Call Recording

Calls to Site phone numbers may be recorded and transcribed. You will be notified at the start of any recorded call and may ask that recording be stopped. Recordings are used for intake accuracy, quality, training, and attribution; are retained for 12 months unless made part of a client file; and are not shared with advertising partners.

8. California Residents (CCPA/CPRA)

California residents have the following rights. To exercise them, email legal@fisherstonelaw.com with the subject “California Privacy Request,” call (212) 256-1877, or use the “Do Not Sell or Share My Personal Information” link in the Site footer. We will verify your identity, confirm receipt within 10 business days, and respond within 45 days (extendable once by 45 days with notice). You may use an authorized agent.

• Right to know the categories and specific pieces of personal information we collect, the sources, purposes, and the categories of third parties with whom we share it;
• Right to delete, subject to legal and professional-responsibility exceptions (including our obligation to retain client files);
• Right to correct inaccurate information;
• Right to opt out of sale or sharing — we do not sell, but we share Site activity with advertising partners; use the footer link or GPC to opt out;
• Right to limit use of sensitive personal information — we use sensitive information only to evaluate and perform services, which does not require a limit-use link, and we never use it for advertising;
• Right to non-discrimination for exercising your rights;
• Right to access information about, and opt out of, automated decision-making technology used for significant decisions — we do not use ADMT for such decisions; if that changes, we will provide the pre-use notice required by January 1, 2027.

We do not knowingly sell or share the personal information of consumers under 16. Categories of third parties receiving shared data: advertising networks (Google, Meta, OpenAI). Categories of service providers: CRM and intake, analytics, call tracking, cloud and email hosting, website hosting and design.

9. Residents of Other States

As of September 2026, comprehensive consumer privacy laws are in effect in California, Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Florida, Montana, Delaware, Iowa, Nebraska, New Hampshire, New Jersey, Tennessee, Minnesota, Maryland, Indiana, Kentucky, and Rhode Island, with Oklahoma and Alabama laws taking effect in 2027. Many of these laws apply only to businesses that process the data of a threshold number of that state’s residents, and Fisher Stone, P.C. — a New York firm serving New York clients — may fall below those thresholds. Regardless, if you are a resident of any of these states you may ask us to access, correct, delete, or port your personal information, or to opt out of targeted advertising, sale, or profiling, by contacting legal@fisherstonelaw.com, and we will honor your request in accordance with the applicable law. We honor GPC signals as a universal opt-out where required.

9.1 Nevada

We do not sell covered information as defined in NRS Chapter 603A. Nevada residents may submit opt-out requests to legal@fisherstonelaw.com with the subject “Nevada Privacy Request.”

9.2 New York

New York does not currently have a comprehensive consumer privacy statute. Your rights as a New York resident arise under the SHIELD Act (Section 6), the TCPA and New York telemarketing law (Section 7), and, for health-related information, any law enacted in the future such as the New York Health Information Privacy Act, which we will comply with upon its effective date.

10. Third Parties: Service Providers, Advertising Partners, and Disclosures

10.1 Service Providers (act on our instructions; may not use your data for their own purposes)

10.2 Advertising Partners (receive Site activity via pixels; act as independent businesses)

Google (Ads), Meta Platforms (Facebook and Instagram), and OpenAI (ChatGPT advertising) receive cookie and pixel data about your visit to measure and retarget our ads. They use this data under their own privacy policies. We do not send them intake form contents, call recordings, or health or financial information. You can opt out as described in Sections 4 and 8.

10.3 Legal Process and Protection

We may disclose information to comply with a court order, subpoena, or legal process; to respond to a government or bar regulator request; to enforce our Terms or collect fees; or when we believe disclosure is necessary to protect the rights, property, or safety of the firm, our clients, or others. We will attempt to notify you before disclosing your information in response to legal process unless prohibited.

10.4 Business Transfers

If Fisher Stone, P.C. merges, is acquired, sells assets, or dissolves, personal information may be transferred to a successor, subject to this Policy and to the rules governing the transfer of client files, and we will provide notice as required by law.

11. Data Security

We use commercially reasonable safeguards described in Section 6. No transmission or storage method is completely secure; email and text messages in particular are not encrypted end-to-end, so use judgment about what you send us before a secure channel is established. You are responsible for safeguarding any credentials issued to you. If you believe your information has been compromised, contact legal@fisherstonelaw.com immediately.

12. Data Retention

We retain personal information for as long as reasonably necessary for the purposes in this Policy, considering our legal and professional obligations, the risk of harm, and the sensitivity of the information, and then delete, destroy, or de-identify it:

13. Children

The Site is intended for adults. We do not knowingly collect personal information from anyone under 18, and we do not knowingly sell or share the personal information of anyone under 16. If you believe a minor has provided us information, contact legal@fisherstonelaw.com and we will delete it.

14. Do Not Track and Global Privacy Control

The Site honors Global Privacy Control (GPC) browser signals as a request to opt out of sale/sharing and targeted advertising. Because there is no uniform standard for legacy “Do Not Track” signals, we do not respond to them separately.

15. Client Portal

When we launch a client portal (expected to be provided through Lawmatics), it will be available only to clients who have signed an engagement agreement, will be governed by additional terms presented at registration, and will be covered by this Policy and by our professional confidentiality obligations. Information in the portal is never used for advertising.

16. Changes to This Policy

We may update this Policy at any time by posting a revised version with a new “Last Modified” date. For material changes affecting your rights, we will take reasonable additional steps to notify you, such as a notice on the Site or an email to the address on file. Continued use after posting constitutes acknowledgment.

17. Contact Us

For privacy questions or to exercise your rights:

Privacy requests may be submitted by email to legal@fisherstonelaw.com, by phone at (212) 256-1877, or in writing to the principal office. We confirm receipt of rights requests within 10 business days and respond within 45 days.

© 2026 Fisher Stone, P.C. All Rights Reserved.