Privacy Policy

Effective Date: June 22, 2026. Last Updated: June 22, 2026.

This Privacy Policy (“Policy”) describes how TALG, LTD, TALG NV, LTD, TALG PC, TALG AZ, and TALG NY (collectively, “TALG,” “we,” “us,” or “our”) collect, use, disclose, and otherwise process personal information in connection with our website, www.talglaw.com (the “Site”), and related online services. This Policy does not constitute legal advice, and nothing in this Policy is intended to create or does create an attorney-client relationship between TALG and any visitor to the Site.

No Attorney-Client Relationship or Confidentiality

Submitting information through the Site—including through contact forms, consultation request forms, or other online communications—does not establish an attorney-client relationship or any duty of confidentiality on the part of TALG. Do not submit confidential or sensitive information through the Site unless you have been specifically instructed to do so by a TALG attorney with whom you have an existing engagement. Any information submitted through the Site prior to the establishment of a formal engagement may not be treated as confidential or privileged.

Client and Matter Information

This Policy is general in scope. Information provided by existing clients in connection with active legal matters, through a client portal or otherwise, may be governed by separate engagement letters, client portal terms of use, applicable rules of professional conduct, confidentiality and privilege obligations, court rules, and other legal or regulatory requirements. In the event of a conflict between this Policy and such obligations, the more protective obligation shall control with respect to client and matter information.

1. INFORMATION WE COLLECT

We may collect the following categories of personal information depending on how you interact with the Site:

a. Information You Provide Directly

Contact and Inquiry Information. Name, email address, phone number, organization or company name, and the content of your message when you submit a contact or consultation request form.
Newsletter and Marketing Subscriptions. Name and email address when you subscribe to our newsletters, publications, or event invitations.
Recruiting and Job Applicant Information. Name, contact details, resume or CV, cover letter, work history, education, references, and any other information you choose to include in a job application.
Client Portal Submissions. Documents, communications, and other information submitted through any authenticated client portal in connection with legal matters (subject to separate terms and professional obligations as noted above).

b. Information Collected Automatically

Device and Browser Information. IP address, browser type and version, operating system, device identifiers, screen resolution, and language preferences.
Usage Data. Pages viewed, links clicked, referring and exit URLs, date and time of visits, and session duration.
Cookies, Pixels, Session Replay, Chat, and Similar Technologies. Information collected through cookies, pixels, web beacons, software development kits, session replay or similar analytics tools, chat or messaging tools, and similar tracking technologies (see Section 6 below).

c. Information From Third-Party Sources

We may receive personal information about you from publicly available sources (e.g., bar association records, court filings), professional references, background check providers (for recruiting), referral sources, and analytics or advertising platforms.

2. HOW WE USE PERSONAL INFORMATION

We use personal information for the following purposes:

Responding to inquiries and consultation requests.
Evaluating potential new client matters (conflict checks, intake).
Providing legal services to existing clients (governed by engagement terms).
Sending newsletters, legal alerts, event invitations, and other marketing communications (with consent where required).
Processing and evaluating job applications and recruiting candidates.
Operating, maintaining, and improving the Site and its functionality.
Analyzing Site traffic and usage to improve user experience.
Detecting, preventing, and addressing fraud, security incidents, and technical issues.
Complying with legal obligations, court orders, and regulatory requirements.
Establishing, exercising, or defending legal claims.
Fulfilling any other purpose disclosed to you at the time of collection.

3. HOW WE DISCLOSE PERSONAL INFORMATION

We may disclose personal information to the following categories of recipients:

Service Providers. Third parties that perform services on our behalf, such as website hosting, IT support, email delivery, analytics, CRM, client portal platform provider, marketing platforms, cloud storage, and background check providers. These providers are contractually obligated to use personal information only to perform services for us.
Professional Advisers. Accountants, auditors, insurers, bankers, and other professional advisers as necessary for our business operations.
Co-Counsel and Referral Attorneys. Other law firms or attorneys in connection with legal matters, with client consent or as permitted by professional rules.
Courts, Tribunals, and Government Authorities. When required by applicable law, regulation, legal process, subpoena, court order, or governmental request.
Business Transfers. In connection with any merger, acquisition, reorganization, dissolution, or similar transaction involving all or part of our business.
With Your Consent. To any other third party where you have provided consent or directed us to share your information.

No Sale or Sharing. TALG does not sell personal information. TALG does not share personal information for purposes of cross-context behavioral advertising or targeted advertising as those terms are defined under applicable law.

4. DATA RETENTION

We retain personal information for as long as reasonably necessary to fulfill the purposes for which it was collected, including to satisfy legal, regulatory, accounting, or reporting requirements. Retention periods may vary depending on the context:

Contact form inquiries and consultation requests: retained for five (5) years from the date of submission, or as required by applicable statutes of limitations or regulatory obligations.
Newsletter subscriber information: retained until you unsubscribe or request deletion.
Recruiting and applicant information: retained for five (5) following the conclusion of the application process, unless a longer retention period is required by law or you consent to continued retention for future opportunities.
Client and matter information: retained in accordance with our records retention policy, engagement agreements, applicable rules of professional conduct, and legal or regulatory requirements.
Website analytics and cookie data: retained for five (5) years from collection.

When personal information is no longer needed, we securely delete or de-identify it in accordance with applicable law and our internal policies.

5. DATA SECURITY

We implement reasonable administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, alteration, disclosure, or destruction. These measures include, without limitation, access controls, encryption of data in transit, secure hosting environments, and employee training on data handling practices.

No method of transmission over the Internet or electronic storage is completely secure. While we strive to protect personal information, we cannot guarantee absolute security. If you have reason to believe your interaction with us is no longer secure, please contact us immediately using the information in Section 12 below.

6. COOKIES AND SIMILAR TECHNOLOGIES

The Site may use cookies, pixels, web beacons, local storage, session replay or similar analytics tools, chat or messaging tools, and other similar technologies to operate the Site, enhance your browsing experience, analyze Site traffic, understand usage patterns, and, where applicable, measure marketing effectiveness. We do not use these technologies to record or eavesdrop on confidential communications without consent, and we configure them in a manner designed to avoid collecting sensitive, privileged, or confidential information through the Site.

Strictly Necessary Cookies. Required for the Site to function (e.g., session management, security).
Analytics Cookies and Similar Tools. Help us understand how visitors interact with the Site, which may include information about pages viewed, links clicked, approximate location derived from IP address, device and browser information, and interactions with Site content. We use Complianz for this purpose.
Functional Cookies. Remember your preferences and settings to improve your experience.
Marketing Cookies, Pixels, and Similar Technologies. Used to deliver relevant content, measure campaign effectiveness, and understand interactions with our marketing communications. We use Complianz for this purpose.

You can manage cookie preferences through your browser settings and, where available, through our cookie preference tool. Most browsers allow you to block or delete cookies. Please note that blocking certain cookies may affect the functionality of the Site. Where required by applicable law, we will obtain consent before using non-essential cookies or similar technologies and will honor legally required opt-out preference signals, such as Global Privacy Control, where applicable.

We use Complianz to manage your cookie preferences. You may update your preferences at any time by visiting the following URL: https://talglaw.com/opt-out-preferences/.

CIPA and Communications Privacy

To the extent the California Invasion of Privacy Act or similar laws apply, we will not intentionally intercept, eavesdrop on, record, or use session replay, chat, call recording, analytics, or similar technologies to capture the contents of communications with California users unless we have provided legally sufficient notice and obtained consent where required. Do not submit confidential, privileged, or sensitive information through Site forms, chat features, or other online communications unless specifically instructed to do so by a TALG attorney through an appropriate channel.

If we offer telephone, video, chat, messaging, or similar communications that may be recorded or monitored, we will provide notice and obtain consent where required before recording or monitoring such communications. We do not authorize third-party analytics, advertising, or technology providers to use Site communications for their own purposes except as permitted by applicable law and our agreements with them.

7. MARKETING COMMUNICATIONS

If you subscribe to our newsletters, legal alerts, or event invitations, we will send you communications using the contact information you provide. You may opt out of marketing communications at any time by:

Clicking the “unsubscribe” link in any marketing email;
Contacting us at clientservices@talglaw.com; or
Updating your preferences here: https://talglaw.com/opt-out-preferences/.

Please note that even after you opt out of marketing communications, we may still send you transactional or administrative communications (e.g., responses to your inquiries, updates regarding an active legal matter).

8. CLIENT PORTAL

If you access a TALG client portal to upload or exchange documents and communications related to a legal matter, that access and any information submitted through the portal is governed by the applicable engagement letter, client portal terms of use, and professional obligations of confidentiality and privilege. This Policy applies to client portal usage only to the extent not inconsistent with those separate agreements and obligations.

9. RECRUITING AND JOB APPLICANT DATA

If you apply for a position with TALG, we collect and process personal information you submit as part of the application process. This may include your name, contact information, resume or CV, cover letter, work authorization status, education and employment history, references, and any other information you choose to provide.

We use this information to evaluate your qualifications, communicate with you about the application process, comply with legal obligations (including equal opportunity reporting where required), and, if applicable, prepare for onboarding. We may share your information with third-party background check providers (with your consent where required by law).

10. CHILDREN’S PRIVACY

The Site is not directed to individuals under the age of 16, and we do not knowingly collect personal information from children under 16. If we learn that we have collected personal information from a child under 16, we will take steps to delete such information promptly. If you believe we have inadvertently collected information from a child under 16, please contact us using the information in Section 12 below.

11. INTERNATIONAL DATA TRANSFERS

TALG is based in the United States. If you access the Site from outside the United States, please be aware that your personal information may be transferred to, stored in, and processed in the United States or other jurisdictions where our service providers operate. These jurisdictions may have data protection laws that differ from those in your country of residence.

Where required by applicable law (including the General Data Protection Regulation (“GDPR”), UK GDPR, UAE Federal Decree by Law No. 45 of 2021 Concerning the Protection of Personal Data (“PDPL”), and other applicable data protection laws and regulations), we implement appropriate safeguards for international transfers of personal data, which may include Standard Contractual Clauses approved by the European Commission, the UK International Data Transfer Agreement or Addendum, UAE-recognized lawful transfer mechanisms, or other lawful transfer mechanisms. For further information about international transfers, please contact us using the information in Section 12 below.

12. CONTACT INFORMATION

If you have questions or concerns about this Policy or our privacy practices, or if you wish to exercise any of your rights described in this Policy, please contact us at:

TALG

Attn: Privacy Inquiries

5852 S. Durango Dr.
Suite 105
Las Vegas, NV 89113

Email: clientservices@talglaw.com
Tel: (702) 954-3861
Fax: (949) 266-8406

13. CHANGES TO THIS POLICY

We may update this Policy from time to time to reflect changes in our practices, legal requirements, or for other operational reasons. When we make material changes, we will update the “Effective Date” at the top of this Policy and, where required by law, provide additional notice (such as posting a notice on the Site or sending you a notification). We encourage you to review this Policy periodically. Your continued use of the Site after any changes constitutes your acceptance of the updated Policy.

14. CALIFORNIA PRIVACY NOTICE (CCPA/CPRA)

This section supplements the information above and applies solely to California residents (“consumers”) as required by the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020 (collectively, “CCPA”). Terms used in this section have the meanings given to them in the CCPA.

a. Categories of Personal Information Collected

In the preceding 12 months, we have collected the following categories of personal information:

Identifiers: Name, email address, postal address, phone number, IP address, online identifiers.
Personal information under Cal. Civ. Code § 1798.80(e): Name, address, telephone number, education, employment history (for job applicants).
Protected classification characteristics: Not collected.
Commercial information: Records of services considered or received (e.g., consultation inquiries).
Internet or other electronic network activity: Browsing history on the Site, search history on the Site, information regarding interactions with the Site.
Professional or employment-related information: Job title, employer, professional history (for contacts and applicants).
Education information: Degrees, institutions, certifications (for job applicants).
Inferences: Inferences drawn from the above to create a profile (e.g., preferred practice area of interest).

b. Sources of Personal Information

We collect personal information from the following sources:

Directly from you (e.g., forms, applications, communications).
Automatically from your device when you visit the Site.
From third-party sources (e.g., referrals, public records, analytics providers).

c. Business or Commercial Purposes for Collection

We collect personal information for the business and commercial purposes described in Section 2 above.

d. Categories Disclosed for a Business Purpose

In the preceding 12 months, we have disclosed the following categories of personal information to service providers and other third parties for a business purpose:

Identifiers (e.g., to email delivery, hosting, and analytics providers).
Internet or other electronic network activity (e.g., to analytics providers).
Professional or employment-related information (e.g., to background check providers for recruiting).

e. No Sale or Sharing

TALG does not sell personal information, and has not sold personal information in the preceding 12 months. TALG does not share personal information for cross-context behavioral advertising as defined under the CCPA.

If our practices change and we sell or share personal information, we will update this Policy, provide any required “Do Not Sell or Share My Personal Information” mechanism, and honor legally required opt-out preference signals. We do not have actual knowledge that we sell or share personal information of consumers under 16 years of age.

f. Sensitive Personal Information

TALG does not collect or process sensitive personal information (as defined by the CCPA) for purposes of inferring characteristics about consumers. To the extent we collect such sensitive personal information, such information is processed solely for purposes authorized under the CCPA, such as performing services requested by the consumer, ensuring security and integrity, resisting malicious or illegal actions, ensuring the quality or safety of our services, and complying with legal obligations.

g. Retention

We retain each category of personal information for the periods described in Section 4 above, or as otherwise required to fulfill the business or commercial purpose for which it was collected.

We do not retain personal information or sensitive personal information for longer than reasonably necessary, and proportionate to achieve the disclosed purposes, unless a longer retention period is required or permitted by applicable law, professional obligations, dispute resolution, or the establishment, exercise, or defense of legal claims.

h. Your California Privacy Rights

Subject to applicable exceptions and verification requirements, California consumers have the following rights under the CCPA:

Right to Know/Access. You may request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources, the business or commercial purposes for collection, and the categories of third parties to whom we have disclosed your personal information.
Right to Delete. You may request that we delete personal information we have collected from you, subject to certain exceptions (e.g., information necessary to complete a transaction, detect security incidents, comply with legal obligations, or exercise legal claims).
Right to Correct. You may request that we correct inaccurate personal information we maintain about you.
Right to Opt Out of Sale/Sharing. Because TALG does not sell or share personal information, no opt-out mechanism is required based on current practices. Should our practices change, we will update this Policy, provide a “Do Not Sell or Share My Personal Information” link or other required mechanism, and provide an opt-out mechanism.
Right to Limit Use of Sensitive Personal Information. Because TALG does not use sensitive personal information for purposes beyond those authorized under the CCPA, no limitation mechanism is required based on current practices. Should our practices change, we will provide a “Limit the Use of My Sensitive Personal Information” mechanism or other required method.
Right to Non-Discrimination. We will not discriminate against you for exercising your CCPA rights. We will not deny you services, charge different prices, provide a different quality of service, or suggest that you will receive different treatment for exercising your rights.

i. How to Submit a Request

To exercise your rights under the CCPA, you may submit a verifiable consumer request by:

Emailing us at clientservices@talglaw.com;
Calling us at (702) 954-3861; or
Submitting a request through https://talglaw.com/opt-out-preferences/.

Where required by the CCPA, we will provide at least two designated methods for submitting requests, taking into account the ways in which we interact with consumers. We will confirm receipt and respond to verifiable consumer requests within the time periods required by applicable law.

You may only submit a request to know twice within a 12-month period.

j. Verification

When you submit a request to know, delete, or correct, we will verify your identity by matching identifying information you provide with information we have on file. We may ask you to provide additional information for verification purposes. If we cannot verify your identity, we may deny your request.

k. Authorized Agents

You may designate an authorized agent to submit a request on your behalf. To do so, you must provide the agent with signed, written permission and we may require you to verify your identity directly with us and confirm that you authorized the agent. Alternatively, an agent may submit a request with a power of attorney valid under California Probate Code sections 4000–4465.

l. California Shine the Light

Under California Civil Code Section 1798.83 (“Shine the Light”), California residents may request information regarding the disclosure of personal information to third parties for their direct marketing purposes. Because TALG does not disclose personal information to third parties for their direct marketing purposes, no further disclosure is required. If our practices change, we will update this Policy accordingly.

15. EEA, UK, AND SWISS PRIVACY NOTICE (GDPR / UK GDPR)

This section applies to individuals located in the European Economic Area (“EEA”), the United Kingdom (“UK”), and Switzerland, and supplements the information above. Where we process personal data subject to the General Data Protection Regulation (EU) 2016/679 (“GDPR”), the UK General Data Protection Regulation (“UK GDPR”), or the Swiss Federal Act on Data Protection, the following additional disclosures apply. We provide this information in addition to, and not in limitation of, any rights or protections available under CIPA, CCPA/CPRA, or other applicable U.S. laws.

a. Data Controller

The data controller responsible for your personal data is:

TALG NV, LTD
5852 S. Durango Dr.
Suite 105
Las Vegas, NV 89113

Email: clientservices@talglaw.com

Tel: (702) 954-3861
Fax: (949) 266-8406

b. Categories of Personal Data

We process the categories of personal data described in Section 1 above, which may include identifiers, contact information, professional information, device and usage data, and (for job applicants) employment and education history. We do not seek to collect special categories of personal data through the Site unless specifically requested through an appropriate channel and processed in accordance with applicable law.

c. Purposes and Lawful Bases for Processing

We process personal data for the purposes described in Section 2 above, relying on the following lawful bases:

Consent (Article 6(1)(a)). Where you have given consent to the processing, such as subscribing to our newsletter or consenting to non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.
Performance of a Contract (Article 6(1)(b)). Where processing is necessary for the performance of a contract with you or to take steps at your request prior to entering into a contract (e.g., processing engagement-related information for existing clients, responding to inquiries from prospective clients).
Legal Obligation (Article 6(1)(c)). Where processing is necessary to comply with a legal obligation to which we are subject (e.g., anti-money laundering, regulatory reporting, tax obligations).
Legitimate Interests (Article 6(1)(f)). Where processing is necessary for our legitimate interests or those of a third party, provided such interests are not overridden by your fundamental rights. Our legitimate interests include: operating and improving the Site; evaluating potential client matters; conducting business development; ensuring network and information security; and preventing fraud. Where we rely on legitimate interests, you have the right to object (see below).
Vital Interests (Article 6(1)(d)). In rare circumstances, where processing is necessary to protect the vital interests of a natural person.
Public Interest (Article 6(1)(e)). Where processing is necessary for a task carried out in the public interest (applicable only in limited circumstances).

d. Recipients of Personal Data

We may disclose personal data to the categories of recipients described in Section 3 above. Where we engage processors or service providers to process personal data on our behalf, we enter into appropriate contractual arrangements required by applicable law, including Article 28 of the GDPR / UK GDPR, PDPL, and other applicable data protection requirements.

e. International Transfers

Your personal data may be transferred to countries outside the EEA, UK, or Switzerland that have not been deemed to provide an adequate level of data protection. In such cases, we rely on appropriate safeguards, including:

Standard Contractual Clauses adopted by the European Commission (for transfers from the EEA);
The UK International Data Transfer Agreement or UK Addendum to the EU SCCs (for transfers from the UK);
Other lawful transfer mechanisms recognized under applicable law.

You may obtain a copy of the relevant transfer safeguards by contacting us at clientservices@talglaw.com.

Where required, we will assess international transfers and implement supplementary measures designed to provide a level of protection appropriate to the relevant transfer, taking into account the nature of the personal data, the purposes of processing, the recipient, and the destination jurisdiction.

f. Retention

We retain personal data for the periods described in Section 4 above. We determine retention periods based on: (i) the purposes for which the data was collected; (ii) applicable legal, regulatory, and professional obligations; (iii) applicable statutes of limitations; and (iv) our legitimate business needs.

g. Your Data Subject Rights

Subject to applicable law, you have the following rights with respect to your personal data:

Right of Access. You may request confirmation of whether we process personal data about you, and if so, a copy of such data.
Right to Rectification. You may request correction of inaccurate or incomplete personal data.
Right to Erasure. You may request deletion of your personal data in certain circumstances (e.g., when the data is no longer necessary for the purposes for which it was collected).
Right to Restriction. You may request that we restrict the processing of your personal data in certain circumstances.
Right to Data Portability. You may request a copy of your personal data in a structured, commonly used, machine-readable format, where processing is based on consent or contract and carried out by automated means.
Right to Object. You may object to processing based on legitimate interests or for direct marketing purposes. Where you object, we will cease processing unless we demonstrate compelling legitimate grounds that override your interests.
Right to Withdraw Consent. Where processing is based on consent, you may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.
Right Not to Be Subject to Automated Decision-Making. You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects or similarly significantly affects you.

To exercise any of these rights, please contact us using the information in Section 12 above.

h. Automated Decision-Making and Profiling

TALG does not currently engage in automated decision-making or profiling that produces legal effects concerning you or similarly significantly affects you.

i. Right to Lodge a Complaint

If you believe that our processing of your personal data infringes applicable data protection law, you have the right to lodge a complaint with a supervisory authority in the EU Member State of your habitual residence, place of work, or place of the alleged infringement. In the UK, you may contact the Information Commissioner’s Office (ICO) at https://ico.org.uk. In Switzerland, you may contact the Federal Data Protection and Information Commissioner (FDPIC).

16. UAE PRIVACY NOTICE

This section applies to individuals located in the United Arab Emirates (“UAE”) and supplements the information above. Where we process personal data subject to UAE Federal Decree by Law No. 45 of 2021 Concerning the Protection of Personal Data (PDPL) and any applicable implementing regulations, free zone data protection laws, or sector-specific UAE requirements, the following additional disclosures apply. Nothing in this section is intended to limit any rights or protections available under the GDPR, UK GDPR, CCPA/CPRA, CIPA, or any other applicable U.S. federal or state law or regulation.

a. Controller and Contact Details

The controller responsible for personal data processed under this Policy is the applicable TALG entity identified in Section 12 or otherwise communicated to you when your personal data is collected. You may contact us regarding UAE privacy matters using the contact details in Section 12.

b. Lawful Bases and Purposes

We process personal data for the purposes described in Section 2 above and only where a lawful basis is available under applicable law. Depending on the context, those bases may include your consent, performance of a contract or steps taken at your request, compliance with legal obligations, protection of public interest, establishment or defense of legal claims, or other lawful bases recognized by applicable UAE law. Where UAE law requires consent for a particular processing activity, including certain disclosures or uses of personal data, we will seek consent in accordance with applicable requirements.

c. UAE Data Subject Rights

Subject to applicable law and verification requirements, UAE data subjects may have the right to request access to personal data, correction of inaccurate personal data, deletion of personal data, restriction or cessation of processing, portability where applicable, objection to certain processing, withdrawal of consent where processing is based on consent, and information about the processing of their personal data. We will respond to requests in accordance with applicable law and will not interpret this section to reduce any broader rights available under the GDPR, UK GDPR, CCPA/CPRA, CIPA, or other applicable law.

d. Cross-Border Transfers

Because TALG is based in the United States, personal data of individuals in the UAE may be transferred to, stored in, or processed in the United States or other jurisdictions where we or our service providers operate. Where UAE law applies, we will conduct cross-border transfers only as permitted by applicable UAE law, including where an adequate level of protection is available, appropriate safeguards are implemented, an applicable derogation or exception applies, or you have provided consent where required.

e. Security, Retention, and Deletion

We maintain reasonable administrative, technical, and organizational measures designed to protect personal data against unauthorized access, disclosure, alteration, loss, destruction, or unlawful processing. We retain UAE personal data only for as long as necessary for the purposes described in this Policy, unless a longer retention period is required or permitted by law, professional obligations, dispute resolution, or the establishment, exercise, or defense of legal claims. When personal data is no longer required, we will delete, de-identify, anonymize, or otherwise securely handle it in accordance with applicable law.

f. Complaints

If you have concerns about our processing of your personal data, please contact us using the information in Section 12. Where applicable, you may also have the right to submit a complaint to the competent UAE data protection authority or other regulator with jurisdiction over the relevant processing activity.