Draft for John's review · Effective date: when published · Last updated October 13, 2026
Privacy Policy Draft
How Green Law Group collects, uses and shares personal information when you use this website, call us or email us, and the choices and rights you have under California law.
Draft for review by John: not yet approved by Green Law Group
This draft describes the website's actual tools as tested on October 13, 2026. Please confirm or decide:
- Whether the firm is a CCPA "business" (gross revenue above $26,625,000, or buying, selling or sharing personal information of 100,000+ California consumers or households a year). This policy is written to the CCPA standard either way.
- Retention periods for non-client inquiries, calculator answers, form-notification emails, call recordings, Netlify form data and the BigQuery analytics copy, and who sets the deletion schedules (stated below as criteria for now).
- Whether CallRail call recording, its recording greeting, and any AI transcription are on. The "Call tracking and recording" section is worded for recording with a greeting.
- The privacy contact email (steven@greeninjury.com for now; confirm or replace with a dedicated firm address), and whether the privacy pages' phone number should be excluded from CallRail number swapping.
- Whether the forms should keep saying "Free and confidential" (see "Prospective clients" below), whether to keep any reference to "sale", and who will approve a Spanish translation.
- Security: whether multi-factor sign-in is on for Netlify, CallRail, Google Analytics/Tag Manager and the inbox that receives form notifications (if so, the Security section can say so).
- Service-provider contracts: Google's data processing terms (U.S. state privacy addendum), CallRail's and Netlify's terms, and an agreement with the firm's marketing agency.
- Opt-out model: this site uses California's opt-out approach (tracking runs until a visitor opts out). Confirm this is acceptable given California Invasion of Privacy Act litigation risk, or switch to opt-in (one setting).
This policy covers greeninjury.com and this website (together, the "site"), and the calls, emails and messages you send us. "Green Law Group," "we" and "us" mean Green Law Group, Inc., a California law corporation, 4275 Executive Square, Suite 200, San Diego, CA 92037.
Prospective clients: please read first
Sending us a case review form, using the settlement calculator, calling or emailing us does not create an attorney-client relationship. We treat what you send as confidential and use it only to respond to you and to decide whether we can help. Until we have checked for conflicts of interest, please share only the basic facts we ask for. The service providers listed below (for example our website host and call-tracking provider) process this information for us under contract.
Notice at Collection
This table lists the categories of personal information we collect, why, whether we sell or share it, and how long we keep it. The categories follow California Civil Code section 1798.140.
| Category | Examples | Why we use it | Sold or shared? | How long we keep it |
|---|---|---|---|---|
| Identifiers | Name, phone number, email address, IP address, cookie and device identifiers, Google and Microsoft ad click IDs (gclid, gbraid, wbraid, msclkid) | To respond to you, evaluate your matter, prevent spam, measure our website and our advertising | Cookie and device identifiers, IP address and ad click IDs: shared with Google for advertising unless you opt out (see Sale and sharing). Name, phone and email: no. | Inquiry records: as long as needed to respond, check conflicts and meet our professional obligations. Analytics identifiers: 14 months in Google Analytics. |
| Customer records (Civ. Code 1798.80(e)) | Name, phone, email, accident and case details, insurance information, and financial details such as medical bills and lost wages that you choose to give us | To respond to your inquiry and evaluate your matter | No | Same as inquiry records |
| Sensitive personal information: health | Calculator answers about your injury, treatment and medical bills; injury details in forms, calls or emails | Only to respond to your inquiry and evaluate and handle your matter | No. Your answers and the injury type you choose are never sent to analytics or advertising tools | Same as inquiry records |
| Inferences | The settlement range our calculator estimates from your answers | To respond to your inquiry | No | Same as inquiry records |
| Internet or other electronic network activity | Pages viewed, the page you arrived on, the website that referred you, campaign (UTM) tags, which phone number you called from our site | To understand how people find us and measure our advertising | Shared with Google for advertising unless you opt out | 14 months in Google Analytics; up to 180 days in CallRail cookies |
| Geolocation data (approximate only) | City or region inferred from your IP address (never precise GPS location) | Analytics and spam prevention | Shared with Google for advertising unless you opt out | 14 months |
| Audio, electronic, visual or similar information | Recordings of calls to our tracking numbers, if call recording is enabled | Following up on your call, quality and training | No | Set by our call-recording retention schedule |
We collect this information directly from you (forms, the calculator, calls and email), automatically from your browser or device (cookies and similar tools, described below), and from the links and ads that bring you to our site (campaign tags and ad click IDs). Each form submission also records how you reached our site: the page, referring site, campaign tags and, unless you opted out, an ad click ID.
You can opt out of the sale or sharing of your personal information at any time on our Do Not Sell or Share My Personal Information page. This notice is part of our Privacy Policy, which explains your rights and how we handle personal information.
How we use personal information
- To answer your questions, call you back and evaluate whether we can help with your matter.
- To check for conflicts of interest, schedule consultations and, if you hire us, represent you.
- To understand how visitors use our site and which ads and listings bring us inquiries.
- To keep the site secure and filter spam form submissions.
- To comply with the law, the Rules of Professional Conduct, court orders and our record-keeping duties.
Who we disclose personal information to
Service providers. These companies process personal information for us under written contracts that limit their use of it to providing services to us:
- Website hosting and form processing: Netlify, and its spam-filtering provider Akismet (Automattic). They receive identifiers, what you enter in a form, and internet activity.
- Analytics and tag management: Google (Google Analytics 4, Google Tag Manager, and a daily copy of analytics data in Google Cloud BigQuery). Google receives cookie and device identifiers, IP address, approximate location and internet activity, never what you type in our forms.
- Call tracking: CallRail. It receives the number you called, call details and recordings (if enabled), and the pages and campaign that led to your call.
- Marketing agency: our marketing agency, which manages this site, our analytics and our advertising, and receives form notifications on our behalf.
- Email and case-management providers we use to run the firm.
Third parties. Unless you opt out, Google also uses cookie and device identifiers, ad click IDs, IP address, approximate location and the pages you view for advertising (see Sale and sharing). If you choose to load the interactive map on our office pages, Google Maps receives your IP address and device details under Google's own privacy policy.
If you hire us, we may also share information as your matter requires, for example with insurers, experts, co-counsel, medical providers and courts. We may disclose information when the law requires it or to protect our rights.
Sale and sharing of personal information
We do not sell personal information for money. Unless you opt out, we "share" personal information with Google for cross-context behavioral advertising: Google Analytics on our site is linked to our Google Ads account, and Google uses this information to measure which ads lead to inquiries. In the past 12 months we have shared these categories with Google, an advertising network: identifiers (cookie and device identifiers, IP address and ad click IDs), internet or other electronic network activity (pages viewed, referring site and campaign tags), and geolocation data (approximate location from your IP address). We do not sell or share your contact details, your form or calculator answers, or sensitive personal information.
You can opt out at any time on our Do Not Sell or Share My Personal Information page. We also treat a Global Privacy Control signal from your browser as an opt-out (see below). We do not knowingly sell or share the personal information of anyone under 16.
Sensitive personal information
Health information you give us, for example in the calculator, is sensitive personal information. We use it only to respond to your inquiry and to evaluate and handle your matter, as California law permits. We do not use it to infer characteristics about you, and we never sell or share it or send your answers to analytics or advertising tools. Unless you opt out, those tools do record which pages of our site you visit (for example, our spinal cord injuries page) and that an inquiry was sent.
Cookies and similar technologies
These are the cookies and browser storage our site uses. Analytics, call-tracking and advertising tools stay on unless you opt out (or your browser sends a Global Privacy Control signal). You can change your choice at any time on the privacy choices page.
| Name | Provider | Purpose | Category | Duration |
|---|---|---|---|---|
| glg_consent | Green Law Group | Remembers your privacy choices | Strictly necessary | 12 months |
| glg-attr (session storage) | Green Law Group | Remembers how you arrived (landing page, referring site, campaign tags and, if you allow advertising, ad click IDs) so it can be attached to your inquiry | Lead attribution | Until you close the tab |
| _ga, _ga_2JXF4S6G3E | Google Analytics | Tells visits apart and measures how the site is used | Analytics | Up to 2 years (many browsers cap this at about 13 months); deleted when you opt out |
| _gcl_aw, _gcl_ag, _gcl_gb, _gcl_dc, _gcl_au | Stores the Google Ads click ID and, after an inquiry, a conversion identifier, so an inquiry can be matched to the ad that led to it | Advertising | 90 days; deleted when you opt out of advertising | |
| _gcl_ls (local storage) | Backup copy of the Google Ads click ID | Advertising | Until cleared (the click ID inside expires after 90 days); deleted when you opt out of advertising | |
| calltrk_referrer, calltrk_landing, calltrk_session_id (cookies); calltrk-calltrk_referrer, calltrk-calltrk_landing (local storage) | CallRail | Shows the right tracking phone number and records the referring site and the first page you landed on, including campaign tags in its address | Analytics (call tracking) | Cookies up to 180 days; local storage until cleared; both deleted when you opt out |
| Google Maps cookies | Only if you click "Load the interactive map"; set and read by Google under its own privacy policy | Third-party content | Set by Google |
Your choices: opt-out, Global Privacy Control and Do Not Track
- Opt out: use the notice shown on your first visit, or the Do Not Sell or Share My Personal Information link at the bottom of every page. Your choice takes effect right away in that browser: we delete our analytics, advertising and call-tracking cookies, and from the next page Google's tags and CallRail no longer run. The footer then shows that your opt-out was honored.
- Global Privacy Control (GPC): if your browser or a browser extension sends a GPC signal, we treat it as a request to opt out of the sale and sharing of your personal information for that browser or device. We turn off advertising cookies and ad click IDs, and leave analytics and call tracking off unless you turn them on on our privacy choices page. If you send us a form while GPC is on, we also mark your inquiry as opted out. When we detect GPC, the bottom of every page says the opt-out was honored. To turn on GPC, see globalprivacycontrol.org or your browser's privacy settings.
- Inquiries: if you have opted out (or your browser sends GPC) when you send us a form, we record that choice with your inquiry and never upload your contact details or ad click ID to Google Ads or any other advertising platform. If you opt out by phone, email or mail, we apply your choice to the information we hold about you in the same way. Because we can't change settings in your browser, please also use our privacy choices page on each browser you use.
- Do Not Track: our site does not respond to the older "Do Not Track" browser setting, because there is no common standard for it. We do honor Global Privacy Control.
- Other parties: Google and CallRail collect information about your activity on our site over time through the tools above, and Google can combine it with information about your activity on other websites and apps that use Google services. If you opt out of everything (the Opt out button or "Opt out of all"), these tools stop collecting on our site. If you opt out only of advertising, Google Analytics and CallRail keep measuring visits, but without advertising cookies or ad click IDs.
Your California privacy rights
If you are a California resident, you have the right to:
- Know what personal information we have collected about you, where it came from, why we collected it and who we disclosed it to, and get a copy of it.
- Delete personal information we collected from you.
- Correct inaccurate personal information.
- Opt out of the sale or sharing of your personal information.
- Limit the use of sensitive personal information. We already use it only for the purposes the law permits, so no extra request is needed.
- Not be treated differently for using these rights.
You can also ask us to review or change information you sent us through the site.
How to make a privacy request
- Use our online privacy request form.
- Call us toll-free at (888) 264-3780 and say you have a privacy request.
- Email steven@greeninjury.com with "Privacy request" in the subject line.
- Write to Green Law Group, Inc., Attn: Privacy, 4275 Executive Square, Suite 200, San Diego, CA 92037.
To protect you, we verify requests to know, delete or correct by matching details you give us (such as your name, phone and email) to our records. Opt-out requests don't need verification. An authorized agent can make a request for you with your signed permission. We will confirm your request within 10 business days and respond within 45 days. If we need more time (up to 45 more days), we will tell you why. You can ask for information we collected more than 12 months ago.
When we may not be able to act on a request
We may decline or limit a request when complying would reveal information protected by the attorney-client privilege or another legal privilege, or when we must keep information to establish, exercise or defend legal claims, meet our professional-responsibility and record-keeping duties, or comply with a legal hold. If so, we will explain why.
How long we keep information
Inquiries that do not become clients (case review forms, calculator answers, and the email notifications we receive about them) are kept only as long as needed to respond to you, check conflicts and meet our professional and legal obligations, and are then deleted under our retention schedule. Client files are kept under our file-retention policy. Call recordings are kept under our call-recording retention schedule. Google Analytics keeps event data for 14 months, and the daily analytics copy in Google Cloud BigQuery is deleted under the same schedule. CallRail cookies last up to 180 days. Your privacy-choice cookie lasts 12 months.
Call tracking and recording
The phone numbers on our site may be tracking numbers from CallRail, our service provider, so we can tell which page or ad led to your call. If a call is recorded, you will hear a notice at the start of the call, before anyone answers. Recordings are used to follow up on your call and for quality and training, and you can ask us to delete them.
Security
We use reasonable safeguards, including encrypted connections (HTTPS) and access controls on the services that hold inquiries. No method of transmission or storage is completely secure, so please avoid sending highly sensitive details until we have spoken with you.
Children
Our site is not directed to children under 16, and we do not knowingly sell or share their personal information. If a child was injured, a parent or guardian should contact us.
Other websites
Our site links to other websites, such as Google reviews and maps, Facebook and the State Bar of California. Their own privacy policies apply when you visit them.
Changes to this policy
We will update this policy when our practices change, and change the "Last updated" date above. If we add new kinds of tracking, we will tell you on the site and ask for your choice again.
Accessibility and languages
If you need this policy in another format, call (888) 264-3780. ¿Necesita esta política en español? Llámenos al (888) 264-3780. See our accessibility statement.
Contact us
Questions about this policy or our privacy practices: call (888) 264-3780, email steven@greeninjury.com, use our privacy request form, or write to Green Law Group, Inc., Attn: Privacy, 4275 Executive Square, Suite 200, San Diego, CA 92037.
Hurt in an accident?
Tell us what happened. An attorney reviews every request. Free case review.