Privacy Policy

What we collect

We do not operate a consumer lead form. We do not collect contact information from visitors who simply browse the directory. We only receive personal information when someone chooses to submit one of our forms:

• Claim requests. When an attorney submits a claim for a listing through /get-started, we collect the name, bar number, firm, professional email, and any verification information the submitter chooses to provide. These records are stored in our database (Supabase) in the ibl_claim_requests table.
• Removal requests. When someone submits a removal request through /removal, we collect the information needed to verify the request (name, email, the listing in question, the stated reason, and, if you are signed in, your account). These records are stored in the ibl_removal_requests table. A removed listing is hidden everywhere on the site; its record is kept so the firm is not added again.
• Direct email. If you email us at an address listed on the site, we will receive whatever information you include in that message.

Analytics and cookies

We use Vercel Analytics for aggregate traffic measurement. Vercel Analytics is a first-party, privacy-preserving analytics product that does not set cookies, does not fingerprint visitors, and does not track individuals across websites.

We also use Ahrefs Web Analytics for aggregate traffic statistics.

Our own page-view log. On attorney profile pages, the pricing page, and the claim and unsubscribe pages reached from our emails, we log a short entry when the page loads and when a visitor first interacts with it or keeps it open. On a profile we also log a click on the firm’s phone number, website or email link (which kind of link, never the number or address itself). Each entry records the page (and, for a profile, which listing), the time, the kind of event, a one-way keyed hash of the first part of your IP address (the first three of its four numbers, or the first 48 bits of an IPv6 address; we never store the address itself), and a coarse browser category (for example “browser” or “bot”) instead of your full user-agent string. When the visit comes from a link in an email we sent a law firm, the entry also records which of our emails it came from and a hash of the link’s code, so we can tell a firm’s click from an automated mail scanner. We use this log to count listing views and contact clicks and to measure our email outreach. It sets no cookies, stays in our own database, and is deleted after 180 days (a weekly cleanup removes older entries). We do not count a signed-in firm’s visits to its own listing.

We do not run third-party advertising pixels, retargeting scripts, or behavioral tracking against visitors who do not submit a form. We do not sell personal information to anyone, ever.

On form pages we load Cloudflare Turnstile as a spam-prevention challenge. Turnstile is used only at the moment of form submission.

Data retention

• Claim requests are retained until they are approved or rejected, then kept for an additional two (2) years as a record of the ownership decision.
• Removal requests are acted on within five (5) business days. A record of the request (and our response) is retained for one (1) year as an audit trail so we can respond if the same listing is later re-sourced.
• Email correspondence is retained only as long as needed to resolve the underlying matter, unless retention is required by law.
• Page-view log entries (see our own page-view log) are deleted after 180 days.

Your rights

Regardless of where you live, you can email hello@injuryburnlawyer.com to ask us to:

• Confirm what information we hold about you.
• Provide you with a copy of that information.
• Correct information that is inaccurate.
• Delete information, subject to any legal retention obligation we have.

We aim to respond to all requests within thirty (30) days. We may ask you to verify your identity before acting on a request — for example, by replying from the email address on file for the listing.

California residents (CCPA / CPRA)

California residents have the right to know what categories of personal information we collect, the right to request deletion of that information, and the right not to be discriminated against for exercising those rights. We honor these rights for any California resident who makes a verifiable request. We do not sell personal information and we do not share it for cross-context behavioral advertising.

EU / UK residents (GDPR / UK GDPR)

If you are located in the European Economic Area, the United Kingdom, or Switzerland, you have the rights of access, rectification, erasure, restriction, portability, and objection under the GDPR and UK GDPR. Our lawful basis for processing claim and removal requests is the performance of the task you asked us to perform (Art. 6(1)(b)) and our legitimate interest in maintaining an accurate, lawful attorney directory (Art. 6(1)(f)). You have the right to lodge a complaint with your local supervisory authority.

Third-party processors

We rely on a small set of vendors to operate the site. Each is named below along with what they see:

• Supabase — hosts our database. Claim and removal request records are stored here.
• Vercel — hosts the website and provides first-party, cookieless analytics.
• Ahrefs — Ahrefs Web Analytics, aggregate traffic statistics.
• OpenAI — used to draft a profile biography when the owner of a claimed listing opens its profile editor. We send the text of the firm’s own public website and the firm and attorney names on the listing, and nothing else from the listing or the owner’s account. The owner can edit or discard the draft; nothing is published unless the owner publishes it.
• Firecrawl — used to collect publicly posted information about attorneys from the open web. We do not send any user-submitted personal information to Firecrawl.
• Cloudflare Turnstile — used to protect our forms from automated spam.

Security

We use commercially reasonable technical and organizational safeguards to protect the information we hold, including transport encryption (HTTPS), encrypted database storage, and access controls. No system is perfectly secure; if we ever learn of a breach affecting your information, we will notify you consistent with applicable law.

Children

This site is intended for adults. We do not knowingly collect information from children under the age of 16.

Changes to this policy

We may update this policy from time to time. Material changes will be reflected in the “Last updated” date at the top of this page. Continued use of the directory after a change indicates acceptance of the updated policy.

Contact

Privacy questions or requests: hello@injuryburnlawyer.com
Removals: hello@injuryburnlawyer.com