Privacy Policy / Document 01
Your inquiry data has defined uses.
- Version
- 1.0
- Effective date
- Last updated
A legal consultation inquiry in Bridgeport, Connecticut can involve sensitive information. This policy explains the website's handling of inquiry forms and support chat, including the advertising identifiers that accompany paid visits. Do not send confidential case records through these channels.
Clause 01 / Responsibility
Who operates the site
The website operator and controller is Paolettilawe, trading at paolettilawe.com. This is the website for Paoletti & Gusmano, Attorneys at Law. The controller's postal address is 3301 MAIN ST, BRIDGEPORT, Connecticut 06606, BRIDGEPORT, Connecticut, United States.
The practice's scope of work is described separately. This policy covers website information; it does not make an inquiry an attorney-client relationship or replace terms agreed for legal representation.
Clause 02 / Collection
What reaches the site
The inquiry form records your name, phone, email, address, kind of enquiry, message, requested specification and consent tick. You choose what to include in the optional fields. A name and consent are required, along with either a phone number or email address for a reply.
The submission also records the IP address, browser user-agent string, referring URL, the moment the form was rendered and the moment it was sent. Server and access logs contain technical request information used to operate the site and investigate faults or misuse.
Support chat keeps the conversation, the contact details you supply and a token in your browser so you can return to the conversation. The consent choice is stored in the browser under site_consent_v2; no other site mechanism persists that choice. Cookie and advertising identifiers include gclid, msclkid and fbclid, which can arrive in a link or referring URL.
There is no account, password, payment or card-data collection. Nothing is sold through this site and no payment is taken. Please leave identity documents and private medical records out of an initial message.
Clause 03 / Purposes
Why information is used
Contact details let the firm respond. The matter category and message help assess whether a conversation about the inquiry is appropriate. An address or requested specification can provide context where you elect to include it. The consent tick records permission to process and respond to that inquiry.
Chat messages and the browser token preserve continuity within a conversation. Technical records help detect automated abuse and diagnose delivery problems. The recorded consent choice applies storage preferences. Advertising click identifiers connect visits to campaigns and support campaign measurement under the applicable consent controls; an inquiry is not consent to personalised advertising.
Clause 04 / Legal basis
The basis depends on the purpose
US state privacy law applies where its conditions are met. For visitors protected by European data protection law, the following bases distinguish a requested response from optional advertising processing. Contract here includes steps requested before a potential contract, not a statement that a web message retains the firm.
| Purpose | Information involved | Legal basis |
|---|---|---|
| Respond to an inquiry | Contact fields, matter details and consent tick | Consent to submission; contract-related steps at your request where applicable |
| Maintain a requested conversation | Chat messages, supplied contact details and return token | Legitimate interest in delivering the conversation you request; consent for supplied details |
| Protect and operate the site | IP address, user agent, referring URL and timestamps | Legitimate interest in preventing abuse and maintaining reliable delivery |
| Apply privacy choices | Consent record and opt-out signal | Legal obligation where applicable and legitimate interest in respecting choices |
| Advertising storage and measurement | Click identifiers and permitted advertising or analytics storage | Consent for optional storage and related processing where required |
Clause 05 / Paid traffic
Advertising links carry identifiers
Google Ads, Microsoft Advertising and Meta Ads send traffic here. Google Ads attaches gclid, Microsoft Advertising attaches msclkid, and Meta Ads attaches fbclid to advertising links. These identifiers distinguish ad clicks; they are not case numbers or a description of a visitor's legal circumstances.
The labels google ads and microsoft advertising identify those advertising services, not endorsements of the firm. A click identifier can be present in the arriving URL before any optional storage permission is given. The cookie statement explains browser storage and related controls.
Clause 06 / Visitor choice
Storage begins with permission
Consent Mode v2 uses consent mode signals to communicate the visitor's choice. ad_storage, ad_user_data, ad_personalization and analytics_storage are held denied until the visitor allows storage. They are set back to denied the moment the visitor declines or withdraws permission.
Use Cookie choices in the footer to reopen the controls. Declining storage does not prevent reading the website or making an inquiry. A denied storage signal does not mean an incoming advertising link loses its identifier or that all technical network communication stops. Consent to respond to a message remains separate from permission for optional advertising storage.
Clause 07 / Recipients
Who receives information
Google Ireland Ltd / Google LLC provides Google Ads, attaches gclid to a click and receives consent signals. Its processing is also governed by its own privacy terms.
Microsoft Ireland Operations Ltd provides Microsoft Advertising, which attaches msclkid. Read its handling practices in the Microsoft privacy statement at privacy.microsoft.com.
Meta Platforms Ireland Ltd provides Meta Ads and attaches fbclid where a campaign runs there. Platform processing follows the relevant platform's terms and applicable privacy choices.
The hosting provider serves this website and stores the enquiry database. The mail provider carries inquiry notifications to the operator's inbox. Their roles are infrastructure and message delivery, not deciding the merits of a legal matter. Provider names not supplied here can be requested through the data-request route.
Clause 08 / Location
Information can cross borders
The operator is in the United States. A visitor outside the United States sends information to a US-based practice. Hosting, mail and advertising services can also process data outside the country where it was collected.
Where European transfer rules apply, transfers require a lawful mechanism, such as an applicable adequacy decision or standard contractual clauses with required supplementary safeguards. Consent to optional storage is not a substitute for those safeguards. Contact the operator to ask which mechanism applies to a particular recipient and to request information about the safeguards; this policy does not assert a certification for an unnamed provider.
Clause 09 / Retention schedule
Records have set periods
| Record | Retention period |
|---|---|
| Enquiries and their email copies | 36 months |
| Chat transcripts | 6 months |
| Server and access logs | 60 days |
| Record of a consent choice | 6 months |
These periods describe the website's inquiry and technical records, not a retained client's legal case file. Advertising platforms apply their own retention rules to data they hold; their policies govern those separate records. Clearing browser storage can remove the local chat token or consent choice but does not by itself delete a submitted inquiry or transcript.
Clause 10 / Protection
Limit what you send
The public site uses HTTPS to protect data in transit. Inquiry handling includes validation and anti-spam checks; operator records are kept outside public navigation behind access controls. These measures reduce exposure but do not make a web form or email an appropriate place for unrestricted confidential records.
No internet transmission or storage system is risk-free. Do not send passwords, card information or identification documents. If you believe a message has reached the wrong person or a privacy incident has occurred, contact the firm using the details below without repeating the sensitive material.
Clause 11 / European visitors
Rights under the GDPR
For visitors protected by the General Data Protection Regulation, the gdpr rights include access to personal data and rectification of inaccurate information; erasure and restriction of processing; portability of eligible data; objection to processing based on legitimate interests; and withdrawal of consent.
You may withdraw consent without affecting the lawfulness of processing before withdrawal. Portability concerns data processed by automated means on consent or contract grounds. Rights are subject to legal conditions and exceptions, including obligations to preserve certain records. Ask for an explanation if a request cannot be fulfilled in full.
Clause 12 / US state law
State privacy rights
US state privacy law applies, including California's CCPA/CPRA and other state laws in force, where their coverage requirements are met. The ccpa framework gives eligible California residents rights to know and access personal information, request deletion, correct inaccurate information and opt out of sale or sharing, including sharing for cross-context behavioural advertising.
Applicable state rights can also include obtaining a portable copy, opting out of targeted advertising or certain profiling, limiting qualifying uses of sensitive personal information, and appealing a denied request. Exercising a right does not result in unlawful discrimination. Advertising disclosures can fall within statutory definitions of sharing even without a cash sale; use the opt-out controls or contact the operator rather than assuming those definitions do not apply.
Clause 13 / Browser signal
Global Privacy Control is honoured
The site honours global privacy control, including the Sec-GPC header, as an opt-out without asking again. This applies to sale or sharing and targeted advertising where applicable. You can also decline storage through Cookie choices; a browser signal is not a request to delete an inquiry already sent to the firm.
Clause 14 / Age
This site is not for children
The website is intended for adults and does not knowingly collect personal information from children. Children should not submit forms or use the chat. If a parent or guardian believes a child has supplied information, contact the operator so the record can be located and removed as required, without sending further sensitive information about the child.
Clause 15 / Complaints
You may contact an authority
You may complain to your state Attorney General and, in California, to the California Privacy Protection Agency. European visitors may complain to a competent data protection authority, including the authority in their habitual residence, place of work or the place of an alleged infringement.
You do not need to contact the firm before exercising that right. If you want the operator to investigate first, identify the privacy concern and a safe reply method. Avoid including unrelated case facts.
Clause 16 / Request route
Request access or a change
Send a data request to [email protected] or write to Paolettilawe, 3301 MAIN ST, BRIDGEPORT, Connecticut 06606, BRIDGEPORT, Connecticut, United States. State which right you wish to exercise and identify the contact details used for the original inquiry. A data request is answered within 10 days.
The operator may need proportionate information to confirm identity before releasing or changing a record. Do not send a copy of an identity document with the initial request. An authorised agent should explain their authority. If a request is refused, ask for the reason and how to appeal where applicable.
Deleting browser history does not withdraw an inquiry. To request deletion of a stored message, use this route and give enough information to locate it.
Access / Alternative contact
Ask for accessible assistance
If a form or page prevents you from using this site, call 203-371-1000 or email [email protected]. Identify the page and the part that caused difficulty. A description of your browser or assistive technology can help, but you do not need to disclose a disability or medical history.
You may ask for website information in a different format or use phone or email instead of the online form. The site provides a skip link and keyboard-operable controls, and respects reduced-motion preferences. These design choices are not a claim that every combination of device and assistive technology has been certified.
Clause 17 / Revisions
Changes are dated here
A revised policy is published on this page with an updated version and last-updated date in the document masthead. Material changes are identified in a notice on this site. Where a change requires fresh consent, the operator requests it before relying on that consent for the new purpose.
Clause 18 / Human contact
Reach the operator
For privacy questions, accessibility assistance or a data request, email [email protected] or call 203-371-1000. Postal correspondence reaches the operator at 3301 MAIN ST, BRIDGEPORT, Connecticut 06606, BRIDGEPORT, Connecticut, United States.
Connecticut law governs this policy, and disputes are heard in the courts of BRIDGEPORT, Connecticut, United States.
For a legal matter, use the contact page. Read the Website Terms for inquiry boundaries and the Cookie Policy for storage controls. Sending a privacy request does not ask the firm to represent you.