Privacy Policy

This notice (this “Privacy Policy”) describes the personal data or personally identifiable information subject to protection under applicable data protection laws (“Personal Information”) that Luke A. Herbig, PLLC d/b/a Herbig Law Office (together, “Herbig Law Office”, “our”, “we”, or “us”) may collect from you when you visit www.herbiglawoffice.com (our “Website”), sign up for or interact with our informational or marketing services (such as newsletters, articles, webinars, continuing legal education programs, or live events), receive or interact with any of our electronic communications, or receive from you or others when entering into an agreement that expressly incorporates this Privacy Policy. Personal Information includes information that identifies, relates to, describes, or can be reasonably linked to, directly or indirectly, a particular individual, household, or device.

This Privacy Policy describes the kinds of Personal Information we collect about you, how we protect that information, and the circumstances in which that information may be disclosed to third parties. This Privacy Policy also describes the choices you have regarding the collection and use of your Personal Information, such as when visiting our Website. We may also receive or process additional categories of Personal Information from our clients in the course of our legal representation of those clients, and such Personal Information may be subject to separate agreements with our clients as well as our ethical obligations of confidentiality owed to clients under applicable rules of professional responsibility.

Please note that this Privacy Policy may be updated by us at any time. We will notify you of material changes to this Privacy Policy by posting the updated notice on our Website.

  • Personal Information We Collect About You

We may collect Personal Information when you visit our Website or otherwise provide such Personal Information to us.

In the last twelve (12) months, the categories of Personal Information we have collected from individuals under this Privacy Policy include:

  1. Identifying information, such as your name, address, place of employment, job title, gender, social security number, phone number, date of birth, and geolocation data;
  2. Demographic information, such as your city, state, and country of residence, gender, and date of birth;
  3. Contact information, such as your email address, mailing address and phone number;
  4. Communications information based on our exchanges with you, such as copies of communications that we receive in the course of a client engagement or when you contact us through the Website, social media, or otherwise;
  5. Professional and Employment Information, such as your resume or CV, education, work experience, work authorization status, job title, employer information, and citizenship status;
  6. Financial Information, such as payment history, bank account information, insurance information and invoicing details;
  7. Internet Information, such as information regarding your use of our Website, including your usernames and passwords for any of our Websites, the specific pages and URLs you visit on our Website, search terms you enter on our Website, referring URLs, or information collected via tracking technologies such as your browser type, computer operating system, device identifiers, or IP Address;
  8. Marketing information, such as your preferences for receiving our marketing communications and emails, and information about your interactions with those communications, such as the links clicked on and whether the messages were received, opened, or forwarded; and
  9. Audio, electronic, and visual information, such as security camera recordings in our offices and audio/visual recordings of meetings and presentations;
  10. Location information, such as your work location, records when you visit our offices, or location of your IP Address.
  11. Inferences based on our interactions with you, such as your preferences.
  12. Other information not specifically listed, as disclosed to you at the time of collection, you or others provide to us during the client relationship with us, or as reasonably necessary for the Herbig Law Office to provide you with legal services or employment opportunities.
  • How We Collect Your Personal Information

Direct Interactions With You

To help us serve you, we collect Personal Information from you when you directly interact with us. For example, we collect Personal Information from you when you submit information via forms on our Website, when you register for or attend our events, when you interact with our communications, when you apply for employment at the Herbig Law Office, or when you share information with us in connection with our legal services.

Automatically via Technology

We may also collect Personal Information from you through automated technologies such as “cookies” and “tracking pixels” (which are also called pixel tags or pixels) or by tracking IP Addresses. Additional information about these technologies is provided in Section 9 (“Cookies”) below.

Through Third Parties

We may also collect your Personal Information from various third parties. For example, we may collect Personal Information from service providers in connection with the operation of our services, such as marketing, advertising, or data analytics partners. Additional information about third-party marketing, advertising, or data analytics partners is provided in Section 9 (“Cookies”) below.

Other examples of third parties from whom we may collect your personal information include background check service providers when you apply for employment at the Herbig Law Office, or other professional services providers with whom we have jointly arranged presentations or other events. We may also collect Personal Information from third parties in the course of the provision of services to you, such as documents we receive from other law firms, counterparties, or regulatory agencies.

Publicly Available Information

We may collect your Personal Information through publicly available sources, such as through regulatory authorities, court reports, social media or other internet-based resources.

  • How We Use Your Personal Information

We may use your Personal Information for one or more of the following business purposes:

  1. Providing legal services to our clients;
  2. Responding to requests, inquiries, or complaints received;
  3. Communicating with potential clients about our firm and our services;
  4. Facilitating our recruiting efforts, including evaluating and responding to applications for employment;
  5. Interacting with and keeping track of our alumni;
  6. Marketing and promoting our services, which includes publishing announcements, legal memoranda, publications, and personalized information about seminars and other Herbig Law Office events;
  7. Improving our Website and related services, including auditing and monitoring their use;
  8. Conducting administrative or operational processes within our business, including keeping business records;
  9. Conducting “Know Your Client”, anti-money laundering, terrorist financing, conflict checks, and client due diligence checks;
  10. Conducting reviews of our performance and managing our business relationships;
  11. Complying with legal, regulatory or professional obligations, managing legal disputes, and responding to requests from governmental or other regulatory authorities;
  12. Enforcing our Terms of Use;
  13. Identifying and deterring illegal, harmful, or unauthorized activity, including phishing attacks, cyberattacks, and identity theft; and
  14. Managing the safety and security of our employees, contractors, and visitors.

We may also use your Personal Information for purposes not outlined in this Privacy Policy if permitted by law and if those uses are reasonably aligned with the original purpose for which we collected it. In some situations, we may specifically request your consent to collect, use, store, transmit, or share your Personal Information, especially when required by law. However, we may use anonymous, de-identified, or aggregate information that does not reasonably identify you for any purpose, as permitted by applicable law.

  • How We Protect Your Personal Information

We have implemented and maintain reasonable physical, electronic, and procedural safeguards designed to protect your Personal Information from unauthorized access or use consistent with applicable laws.

We will retain your Personal Information for so long as required for legitimate business purposes, to perform contractual obligations, or as required or permitted by applicable law, including for the purposes of satisfying any legal, accounting, or reporting requirements.

  • Sharing of Personal Information

We do not sell, rent, or trade your Personal Information.

We may share or disclose your Personal Information with the following third parties:

Service Providers. We may share your Personal Information with service providers to perform certain services on the Herbig Law Office’s behalf, such as IT service providers, suppliers, mailing services, insurers, vendors or event organizers. This also includes our legal support vendors, such as e-discovery and deposition services. We require these third-party service providers to use Personal Information only for the purposes for which it was disclosed and subject to appropriate confidentiality and security obligations;

Professional Advisors. We may share your Personal Information with professional advisors, such as local counsel, accountants, and auditors.

Social Networks. We may share your Personal Information with social networks when you use your credentials to log in to some of our services (e.g., if you use your LinkedIn credentials).

Clients and other Parties. We may share Your Personal Information with clients, prospective clients, and parties that may be involved in our client engagements.

Marketing and Data Analytics Partners. We may share your Personal Information with marketing or data analytics partners, such as through our use of Google Analytics, or other similar tools we may deploy on the Website.

Authorities and Others. We may disclose your Personal Information when we reasonably believe that such disclosure is required by law, when requested by a governmental authority, agency, regulator, or court, or if it is necessary to establish, exercise or defend legal claims or protect your, our, or others’ rights, property, or safety;

Business Transferees. We may disclose your Personal Information in connection with a sale or transfer of assets, or if the Herbig Law Office is otherwise involved with a reorganization or merger or gains a new Herbig Law Office affiliate; and

Third Parties You Specify. We may share your Personal Information when you expressly consent to share your Personal Information with third parties that you specify or for whom we have obtained your permission to disclose your Personal Information.

Although we are committed to maintaining the confidentiality of your Personal Information, if demanded by compulsory process or otherwise required by law, we reserve the right to disclose such information without additional notice to you.

Over the last twelve (12) months, we have disclosed the categories of Personal Information discussed in Section 1 (“Personal Information We Collect About You”) of this Privacy Policy with the third parties discussed in this section. For any inquiries, please contact us using the details in Section 10 (“Contact Us”) of this Privacy Policy.

  • Third-Party Links

For your convenience, our Website might contain links to third-party websites (e.g., LinkedIn) whose information practices might differ from ours and are governed by their own privacy procedures, policies, and security measures. When you go to these other sites, the information you choose to provide will be used as described in, and subject to, the privacy policy and terms of use provided by such other sites. For instance, we may provide links to seminars, articles, and events offered or hosted by third parties. If you choose to visit any linked websites, we encourage you to review the applicable privacy policies, data protection standards, and security procedures before you submit any information via those sites, as we have no control over data submitted to, or collected by, those third parties.

  • State Privacy Rights

This section describes additional rights provided to individuals in states with privacy laws that provide additional rights to their residents, including but not limited to, the Colorado Privacy Act, the Virginia Consumer Data Protection Act, the Connecticut Personal Data Privacy and Online Monitoring Act, the Texas Data Privacy Act, and other state privacy laws (collectively, the “State Privacy Laws”).

For the purposes of this section, “Personal Information” has the meaning given to “personal data,” “personal information” or other similar terms in applicable State Privacy Laws, and does not include information exempted from the scope of applicable State Privacy Laws.

The State Privacy Laws may provide residents with some additional rights. However, please note that some State Privacy Laws do not provide these rights or all of these rights to their residents. Therefore, we may decline your request in certain cases as permitted by applicable state law. These rights include:

Right to Know. You may have the right to know whether we are processing your Personal Information and request how we collect and use your Personal Information;

Right to Access. You may have the right to request a copy of your Personal Information that we process;

Right to Appeal. You may have the right to appeal if we deny your validly submitted request;

Right to Correct. You may have the right to require the correction of any mistake in your Personal Information, whether incomplete or inaccurate, that we hold about you;

Right to Delete. You may have the right to request the deletion of your Personal Information in certain situations, such as when you withdraw your consent or if we no longer need your Personal Information;

Right to Opt-Out of Certain Advertising. You may have the right to opt-out of processing of your Personal Information for purposes of targeted/cross-contextual advertising or profiling; and

Right to Non-Discrimination. You are entitled to all of the other rights described above free from discrimination.

If you are a resident of a state that has a State Privacy Law that provides you with additional rights, you have the right to file a complaint with your state’s data privacy authority if you believe that we have not followed your applicable State Privacy Law.

More information about your rights as a consumer may be found on your State’s Department of Justice Website. For more information about how to exercise your rights or make a request under your applicable State Privacy Law, please reference Section 8 (“How to Exercise Your Rights”) below.

  • How to Exercise Your Rights

To exercise any of your privacy rights, please submit a verifiable consumer request to us through email. Though we never sell data, we may use third-party marketing tools on our Website for targeted or cross-contextual advertising or profiling, and we may use performance analytics tools such as Google Analytics to measure and improve our Website. You can opt-out of our use of these tools by visiting the opt-out link provided in Section 9 (“Cookies”) below. You may also manage your cookie preferences at any time through the consent management tool accessible via the link located in the footer of our Website.

We will contact you to confirm receipt of your request under State Privacy Laws or other data protection laws and request any additional information necessary to verify your request. We verify requests by matching the information provided in connection with your request to the information contained in our records. Depending on the sensitivity of the request and the varying levels of risk in responding to such requests (for example, the risk of responding to fraudulent or malicious requests), we may request that you verify your identity. You may also designate an authorized agent to make a request under certain privacy laws on your behalf, provided that you provide a signed agreement verifying such authorized agent’s authority to make requests on your behalf, and we may verify such authorized person’s identity using the procedures above.

The verifiable consumer request must:

  • Provide sufficient information to allow us to reasonably verify you are the person about whom we collected Personal Information, or an authorized representative.
  • Describe your request with sufficient detail to allow us to understand, evaluate, and respond to it properly.

We will not be able to respond to your request or provide you with specific pieces of Personal Information if we cannot verify your identity and authority to make the request.

We will respond to verifiable privacy requests within the timeline required by applicable law. If we cannot meet that timeline, we will inform you in writing. Please contact us with any questions about this Privacy Policy.

  • Cookies / Tracking Technologies

When you visit our Website, we use cookies to improve your Website experience, provide additional security, and remember your preferences. A cookie is a small electronic file that is placed on your computer or mobile device when you use our Website. Cookies do not contain or collect information about your personal identity. Instead, they record unique identifying information about the internet browser that you use, help us distinguish you from other visitors, and provide information about your browsing history on our Website. There are two broad categories of cookies: session cookies, which expire when you close your browser, and persistent cookies, which remain on your device for a pre-defined period of time.

Our Website uses the following types of cookies:

Strictly Necessary Cookies. These cookies are necessary for the Website to function and cannot be switched off without impairing the functioning of our Website. They are set to respond to actions you take or requests you make, such as setting your privacy preferences, logging in, or filling out forms. You can set your browser to block or alert you about these cookies, but some parts of the Website will not work without them.

Performance Cookies. These cookies count visits and traffic sources so that we can measure and improve the performance of our Website. They help us learn which pages are the most and least popular and how visitors move around the Website. The information collected through these cookies is used for reporting purposes and may be based on User ID, Device ID, and modeling; however, we have not enabled User-provided data collection or Google signals for enhanced or personalized data. If you block these cookies, we will not know when you have visited our Website and will not be able to monitor its performance.

Functional Cookies. These cookies enable the Website to provide enhanced functionality and personalization. They may be set by us or by third-party providers whose services we have added to our pages. If you do not allow these cookies, some or all of these services might not function properly.

Targeting Cookies. These cookies may be used to build a profile of your interests and show you relevant content on other sites. They uniquely identify your browser and internet device.

Social Media Cookies. These cookies are set by social media services that we may use or embed on our Website, such as share buttons or plug-ins that display social media content. These cookies may enable the relevant social media provider to recognize your device or browser and collect information about your interactions with those services, including when you interact with embedded content.

You can control cookies through your browser settings by deleting cookies or preventing them from being placed on your device. If you delete or block cookies that are strictly necessary for the performance of our Website, the Website might not function correctly, and you may not be able to access certain areas of it.

Our Website uses Google Analytics, a web analytics service provided by Google, Inc. (“Google”). Google Analytics uses cookies to help us analyze how users navigate our site and what resources they access. Google Analytics is currently configured to use the blended reporting method (User ID, Device ID, and modeling) for reporting purposes.  The information generated by the cookie about your use of our Website will be transmitted to and stored by Google on servers in the United States. Google will use the information on our behalf for the purpose of evaluating use of our Website, compiling reports on Website activity for us, and providing us with other services relating to Website activity and internet usage.  You may refuse to accept these cookies via our consent management tool by clicking on this link and toggling off “Performance Cookies”. Please visit the Google Analytics privacy policy available here for additional information about how Google processes and protects your data through Google Analytics.

Our Website may use tracking tools provided by LinkedIn, Facebook, and Instagram. These tracking tools allow us to attribute particular user actions on our Website (e.g., registering for a CLE or reading an article) to third-party profiles and materials posted on third-party social media platforms.

Your browser may offer you a “Do Not Track” option. Our Website honors such requests.

When you interact with the Herbig Law Office through the Zoom video conference platform for events or conference calls, we may have access to the following additional information:

  • Geolocation data;
  • IP Address;
  • Computer hardware used to access the platform; and
  • Internet service provider.

We may use this information for troubleshooting, security, and other legitimate business purposes.

  • Contact Us

If you have questions about this Privacy Policy or requests relating to the exercise of your rights under State Privacy laws or other applicable data protection laws, please contact us immediately.

If you are making a request under State Privacy Laws or other data protection laws, we will contact you to confirm that we have received your request. We may need additional information to verify your request, which could involve confirming your identity ourselves or using a third-party service. We verify requests by comparing the information you provide with our records. Depending on the nature of the request and the potential risks involved in responding to it (such as the risk of responding to a fraudulent or malicious request), we may ask for more information in order to verify your request. If you want to designate someone to make a request on your behalf, they must meet certain requirements set by your applicable data protection law. We may verify the identity of this authorized person using the procedures mentioned above.

 

Last Updated: August 24, 2026