Who We Are

Libutti Law is the business responsible for the personal information collected through this website.

Data Controller: Libutti Law
Email: teressa@libuttilaw.com
Address: 888 Prospect St, Ste 200, La Jolla, CA 92037-4261

What Data We Collect

We collect the following categories of personal information through libuttilaw.com:

Consultation form information: first name, last name, email address, phone number, and the description you provide about how we can help (so an attorney can respond to your inquiry).

Cookie preference information: your cookie consent preferences and related records (we use our own consent management system, Trustwards, to record and manage these preferences).

Device and connection information: IP address and basic browser/device information that is necessary to load and secure the website and to communicate with your device.

Sources of personal information:
We collect information directly from you when you submit the free consultation form.
We collect certain information automatically when you access the website (such as IP address and browser/device information).
We collect cookie preference information when you set or update your cookie choices through our consent tool.

Whether providing information is mandatory or optional:
Submitting the consultation form is optional. If you choose to submit it, the requested contact details and message are needed so we can respond to your inquiry.
Device and connection information is collected automatically as part of providing and protecting the website.

How We Use Your Data

We use personal information for the following purposes:

To respond to your consultation request and communicate with you about your inquiry (legal basis: contract).

To provide legal services when you engage us (legal basis: contract).

To operate, maintain, and protect the website, including monitoring for security threats and abuse and troubleshooting technical issues (legal basis: legitimate-interest).

To record and apply your cookie preferences (legal basis: consent).

Who We Share Your Data With

We do not list any third-party service providers based on the information available from our website scan, other than our own internal systems used to operate the website and respond to inquiries.

We use our own consent management system (Trustwards) to record and manage your cookie preferences. This data is processed internally and not shared with third parties.

We may disclose personal information when required by law, court order, or other valid legal process, or when necessary to protect the rights, safety, and security of our firm, our clients, and the public.

International Data Transfers

No third-party providers were identified from the website scan for purposes of assessing international data transfers.

Our consent management system (Trustwards) is based in Spain (EU), so consent data is not transferred internationally.

How Long We Keep Your Data

Consultation form submissions, case files, and client records are retained only as long as necessary to respond to inquiries, provide legal services, and meet applicable legal and professional recordkeeping requirements for attorneys practicing in California.

Cookie consent records: 10 years (to demonstrate compliance and address potential claims within legal limitation periods).

Security logs and technical records: 12 months.

Your Rights

If you are a California consumer, you have the following rights under the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA), subject to certain exceptions:

Right to know: you can request information about the personal information we collected about you, including the categories of personal information, the categories of sources, the purposes for collecting it, and the categories of third parties with whom we disclose it.

Right to access: you can request a copy of specific pieces of personal information we have collected about you.

Right to delete: you can request that we delete personal information we collected from you, subject to exceptions allowed by law.

Right to correct: you can request that we correct inaccurate personal information we maintain about you.

Right to opt-out of sale or sharing: you can direct a business not to sell or share your personal information. Libutti Law does not sell personal information and does not share personal information for cross-context behavioral advertising, but you may still submit an opt-out request.

Right to limit the use and disclosure of sensitive personal information: you can request limits on the use and disclosure of sensitive personal information in certain circumstances. We do not collect special categories of data through this website as described in this policy.

Right to non-discrimination: you have the right not to receive discriminatory treatment for exercising your privacy rights.

How to exercise your rights:
To submit a request, contact us at teressa@libuttilaw.com. We will take steps to verify your identity before fulfilling certain requests, and we will respond within the timeframe required by applicable law (generally 45 days for CCPA/CPRA, with an extension available in certain cases).

Automated Decision-Making

We do not use automated decision-making or profiling that produces legal effects or similarly significantly affects you.

Children's Privacy

Our services are not directed at children under 16 years of age. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately.

Data Security

We implement appropriate technical and organizational measures designed to protect personal information against unauthorized access, disclosure, alteration, or destruction. However, no method of transmission over the Internet or method of electronic storage is 100% secure, and we cannot guarantee absolute security.

Data Breach Notification

We maintain procedures to detect, report, and investigate security incidents. If we become aware of a personal data breach that poses a high risk to your rights and freedoms, we will notify you without undue delay and provide information about the nature of the incident, the likely consequences, and the measures taken or proposed to address it. If you suspect a security issue involving your information, please contact us at teressa@libuttilaw.com.

How to Lodge a Complaint

We encourage you to contact us first so we can try to resolve your concern.

California consumers may also submit a complaint to the California Privacy Protection Agency (CPPA) or the California Attorney General. CPPA website: https://cppa.ca.gov/

Updates to This Policy

We review and update this policy periodically to reflect changes to our practices, technology, or legal requirements. The “Last updated” date at the top of this policy indicates when it was last revised. If we make significant changes, we will provide notice by posting an update on this website and, where appropriate, by email. Changes take effect from the date indicated at the top of this policy. Where processing is based on your consent, we will request new consent when required.

Contact Us

Email: teressa@libuttilaw.com
Address: 888 Prospect St, Ste 200, La Jolla, CA 92037-4261
Data Controller: Libutti Law

California Privacy Rights (CCPA/CPRA)

This section applies to California consumers and describes our practices for the 12 months preceding the “Last updated” date above.

Notice at Collection (categories collected):
Identifiers: first name, last name, email address, phone number, IP address.
Internet or other electronic network activity information: basic device and browser information and related technical data necessary to operate and secure the website.
Consumer-provided content: the information you include in your consultation request description.
Cookie preference information: records of your cookie choices and related consent status.

Business or commercial purposes for collection:
To respond to consultation requests and communicate with prospective clients.
To provide legal services when you engage us.
To operate, maintain, and secure the website and prevent fraud, abuse, and security incidents.
To record and apply your cookie preferences.

Sale and sharing of personal information:
We do not sell personal information.
We do not share personal information for cross-context behavioral advertising.

Your CCPA/CPRA rights and how to submit requests:
You may request to know, access, delete, and correct your personal information by contacting teressa@libuttilaw.com.
You may also submit a request to opt-out of the sale or sharing of personal information by contacting teressa@libuttilaw.com. We honor Global Privacy Control (GPC) signals as valid opt-out requests for sale/sharing where applicable.

Verification of requests:
To protect your information, we will take reasonable steps to verify your identity before fulfilling certain requests. The verification steps will depend on the nature of the request and the sensitivity of the information involved, and may include confirming access to the email address or phone number you provided to us and requesting additional information as needed to match our records.

Response timing:
We will respond to verifiable consumer requests within 45 days. If we need more time, we may extend the response period by an additional 45 days and will notify you of the reason for the extension.

Non-discrimination:
We do not discriminate against you for exercising your CCPA/CPRA rights.