Privacy Policy

Effective Date: August 13, 2026
Last Updated: August 13, 2026

Introduction and Scope

This California Privacy Policy (this “Privacy Policy”) describes how Boutin Jones Inc. (“Boutin Jones,” the “Firm,” “we,” “us,” or “our”) collects and processes Personal Information (as defined below) about our consumers who reside in California.  The California Consumer Privacy Act, as amended by the California Privacy Rights Act (collectively, the “CCPA”) requires us to provide our California consumers with a privacy policy that contains a comprehensive description of our online and offline practices regarding our collection, use, sharing, and retention of their Personal Information, along with a description of the rights they have regarding their Personal Information.  This Privacy Policy provides the information the CCPA requires, together with other useful information regarding our collection and use of Personal Information.  Any terms defined in the CCPA have the same meaning when used in this Privacy Policy.

This Privacy Policy applies to Personal Information we collect in connection with (1) the employment of our current employees, (2) the evaluation and hiring of job applicants, (3) the provision of legal services to our clients, (4) the use of the Boutin Jones website, and (5) other interactions involving the collection of Personal Information, including but not limited to events or visits to our office (collectively, “Covered Interactions”).

This Privacy Policy is supplemented by our Notice at Collection, which provides additional details regarding our privacy practices, and by our Cookie Policy, which provides additional details about the cookies and similar tracking technologies used on the Boutin Jones website, including the categories of cookies, their purposes, the third parties that may provide them, and available controls.  The Cookie Policy does not replace or limit this Privacy Policy and should be read together with it.  This Privacy Policy does not form part of any employment, engagement, or other contract and may be updated from time to time.

Personal Information Collected

We collect and use information that identifies, relates to, describes, references, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household (“Personal Information”).  Personal Information does not include the following:

  • Publicly available information, including from government records, through widely distributed media, or that the consumer made publicly available without restricting it to a specific audience;
  • Lawfully obtained, truthful information that is a matter of public concern;
  • Deidentified or aggregated consumer information; and
  • Information excluded from the CCPA’s scope, like:
    • health or medical information covered by the Health Insurance Portability and Accountability Act (HIPAA) and the California Confidentiality of Medical Information Act (CMIA), clinical trial data, or other qualifying research data; or
    • personal information covered by certain sector-specific privacy laws, including the Fair Credit Reporting Act (FCRA), the Gramm-Leach-Bliley Act (GLBA), California Financial Information Privacy Act (FIPA), and the Driver’s Privacy Protection Act.

Personal Information Categories Chart

The chart below identifies the categories of Personal Information we collected from our consumers within the last 12 months and the Business Purposes (as defined in the CCPA) for which we collected such information.

[PERSONAL INFORMATION CATEGORIES CHART FOLLOWS]

Category Examples Collected? Business Purpose
A. Identifiers. A real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, Social Security number, driver’s license number, passport number, or other similar identifiers. YES Performing services for you, including operating and improving the website;

as reasonably necessary and proportionate, to ensure security and integrity;

debugging to identify and repair errors;

quality control, analytics, customization, measuring website performance and marketing effectiveness, and, where applicable, supporting third-party advertising, targeting, or measurement technologies where enabled through website cookies.
B. Personal Information categories listed in the California Customer Records statute (“California Customer Records”). A name, signature, Social Security number, address, telephone number, passport number, driver’s license or state identification card number, insurance policy number, education, employment, employment history, membership in professional organizations, professional licenses and certifications, bank account number, credit card number, debit card number, or any other financial information, medical information, or health insurance information.  Some Personal Information included in this category may overlap with other categories. YES Performing services for you; and

quality control.
C. Protected classification characteristics under California or federal law (“Protected Classes”). Age (40 years or older), race, color, ancestry, national origin, citizenship, religion or creed, marital status, sex (including gender, gender identity, gender expression, pregnancy or childbirth and related medical conditions), sexual orientation, reproductive health decision-making, military and veteran status, or genetic information (including familial genetic information). YES Performing services for you; and

to comply with legal obligations.
D. Commercial information. Records of legal services purchased, obtained, considered, or provided, engagement terms, and other service-related histories or tendencies. YES Auditing;

performing services for you; and

quality control.
E. Biometric information. Genetic, physiological, behavioral, and biological characteristics, or activity patterns used to extract a template or other identifier or identifying information, such as fingerprints, faceprints, and voiceprints, iris or retina scans, keystroke, gait, or other physical patterns, and sleep, health, or exercise data. NO N/A
F. Internet or other similar network activity. Interactions with the Boutin Jones website, device and browser information, system usage, electronic communications with us, and information collected through cookies and similar technologies, including pages viewed, links and features used, embedded content interactions, IP addresses, online identifiers, pixels, and local or session storage.

The specific first- and third-party cookies and related technologies used on the website, including essential, performance and functionality, analytics and customization, advertising, and unclassified categories, are described in the Cookie Policy.

In connection with Google Analytics, these technologies include the _ga, _ga_#, _gid, and _gat# cookies, which may store or generate identifiers, distinguish users or sessions, record website-usage information, calculate visits and sessions, generate statistical data, and regulate the rate of requests.

 YES Auditing;

performing services for you;

operating, maintaining, securing, and improving the Boutin Jones website and its functionality;

as reasonably necessary and proportionate, to ensure security and integrity;

using analytics and customization information to understand website use, measure traffic, and improve the user experience;

where applicable, supporting third-party advertising, targeting, or measurement technologies where enabled through website cookies;

debugging to identify and repair errors; and quality control.
G. Geolocation data. Physical location or movements, such as your zip code, the time and physical location related to use of our internet website, or other information about your location. YES Auditing;

performing services for you;

as reasonably necessary and proportionate, to ensure security and integrity;

debugging to identify and repair errors; and

quality control.
H. Sensory data. Audio, electronic, visual, or similar information, such as call or meeting recordings where notice is provided. YES Performing services for you.
I. Professional or employment-related information. Current or past job history, job title, employer, work history, qualifications, professional licenses, and performance-related information. YES Performing services for you; and

quality control.
J. Non-public education information (per the Family Educational Rights and Privacy Act) Education records directly related to a student maintained by an educational institution, such as grades or transcripts. YES Performing services for you; and

quality control.
K. Inferences drawn from other Personal Information. Profile reflecting a person’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes, including interests inferred from interactions with the website. NO *Third-party advertising, analytics, and embedded-content providers may use cookies and similar technologies on our website to collect website activity information and to create or use their own inferences or profiles for advertising or analytics purposes, as described in our Cookie Policy.

We do not collect, receive, or maintain those third-party advertising inferences or profiles, and the privacy practices of those respective third-parties govern their subsequent use of that data.
L. Sensitive Personal Information (as defined below). Further identified in the chart below. YES Performing services for you; and

as reasonably necessary and proportionate, to ensure security and integrity.

 Sensitive Personal Information Categories Chart

“Sensitive Personal Information” is a subtype of Personal Information consisting of the specific information categories listed in the chart below.  Importantly, the CCPA only treats this information as Sensitive Personal Information when we collect or use it to infer characteristics about a consumer.

The chart below identifies which Sensitive Personal Information categories, if any, we have collected from consumers to infer characteristics about them in the last 12 months.

[SENSITIVE PERSONAL INFORMATION CATEGORIES CHART FOLLOWS]

Sensitive Personal Information Category Collected to Infer Characteristics? Purpose
L.1. Government identifiers, such as your Social Security number (SSN), driver’s license, state identification card, or passport number. NO N/A
L.2. Complete account access credentials, such as usernames, account logins, account numbers, or card numbers combined with required access/security code or password. NO N/A
L.3. Precise geolocation, such as GPS data from a consumer’s mobile device that can provide its location in a geographic area, with an approximate radius of 1,850 feet. NO N/A
L.4. Racial or ethnic origin. NO N/A
L.5. Citizenship or immigration status. NO N/A
L.6. Religious or philosophical beliefs. NO N/A
L.7. Union membership. NO N/A
L.8. Mail, email, or text messages not directed to the Firm. NO N/A
L.9. Genetic data. NO N/A
L.10. Neural Data, such as information generated by measuring a consumer’s central or peripheral nervous system’s activity that is not inferred from nonneural information. NO N/A
L.11. Unique identifying biometric information. NO N/A
L.12. Health information. NO N/A
L.13. Sex life or sexual orientation information. NO N/A
L.14. Children’s Personal Information (under age 16). NO N/A

Sources of Personal Information

We obtain the categories of Personal Information listed above from the following categories of sources:

  • Directly from you, such as when you apply for a position, commence employment, engage us for legal services, visit our website, attend an event, or otherwise communicate with us;
  • Indirectly from you, such as through your interactions with the Boutin Jones website, including information collected through cookies and similar technologies described in the Cookie Policy, and from social media platforms;
  • From our service providers and vendors who support our operations, including providers of website hosting, security, consent management, analytics, embedded content, and advertising, as well as recruiting, payroll, benefits administration, IT, and practice management platforms;
  • From referring parties, such as other attorneys, clients, or contacts who refer you to us; and
  • From other third parties as permitted by law.

Retention of Personal Information

We retain Personal Information for as long as reasonably necessary to fulfill the purposes described in this Notice.  Retention periods depend on the nature of the information, the purpose for which it was collected, and applicable legal and ethical requirements.  Client files and records are retained in accordance with our records retention policy and applicable rules governing the retention of client files by California law firms, including the California Rules of Professional Conduct.  Employee and applicant records are retained as required by applicable federal and state employment laws.  For Website cookies and similar technologies, the Cookie Policy describes the applicable retention or expiration periods for the specific technologies.  You may request deletion of your Personal Information, subject to technical feasibility and our legal and ethical obligations and legitimate interests, including obligations to retain records under applicable rules of professional conduct, court orders, and other laws.

How We Use Personal Information

Personal Information Collection, Use, and Disclosure Purposes

We may use and disclose the Personal Information, including Sensitive Personal Information, we collect to advance the Firm’s business and commercial purposes, depending on the Covered Interaction, specifically to:

  • provide, manage, and improve our legal services to clients;
  • meet our obligations and enforce our rights arising from any contracts with you, including for billing or collections, or to comply with legal requirements;
  • fulfill the purposes for which you provided your Personal Information or that were described to you at collection;
  • manage the employment relationship, including payroll, benefits administration, performance management, training, and compliance with applicable employment laws;
  • evaluate job applicants and manage our recruiting and hiring processes;
  • operate, maintain, secure, and improve the Boutin Jones website, including by using cookies and similar technologies to provide essential functionality, support performance and functionality, analyze and customize website use, including through Google Analytics, support embedded content, measure marketing effectiveness, and, where applicable, supporting third-party advertising, targeting, or measurement technologies where enabled through website cookies, as described in the Cookie Policy;
  • communicate with you regarding our services, your employment or application, events, and other Firm matters;
  • comply with legal, regulatory, ethical, and contractual obligations;
  • protect our rights, security, and the integrity of our operations, including fraud prevention and information security;
  • administer and manage our business operations and internal processes; and
  • for other purposes described at the time of collection or as otherwise permitted by law.

Sensitive Personal Information Use and Disclosure Purposes

We may use or disclose Sensitive Personal Information for the following statutorily approved reasons (“Permitted SPI Purposes”):

  • Performing actions that are necessary for our consumer relationship and that an average consumer in a relationship with us would reasonably expect;
  • Preventing, detecting, and investigating security incidents that compromise the availability, authenticity, integrity, or confidentiality of stored or transmitted Personal Information;
  • Defending against and prosecuting those responsible for malicious, deceptive, fraudulent, or illegal actions directed at the Firm;
  • Ensuring physical safety;
  • Services performed for the Firm, including maintaining or servicing accounts, processing or fulfilling transactions, verifying consumer information, processing payments, or providing financing, analytic services, storage, or similar services for the Firm;
  • Activities required to:
    • verify or maintain the quality or safety of a product, service, or device that we own or control; or
    • improve, upgrade, or enhance the service or device that we own or control.
  • Collecting or processing Sensitive Personal Information that we do not use for the purpose of inferring characteristics about a consumer.

We do not use or disclose Sensitive Personal Information for purposes other than the Permitted SPI Purposes.  We collect Sensitive Personal Information only where necessary, with appropriate safeguards, and in accordance with applicable law.

Additional Categories or Other Purposes

We will not collect additional categories of Personal Information or use the Personal Information we collected for materially different, unrelated, or incompatible purposes without providing you notice.  If required by law, we will also seek your consent before using your Personal Information for a new or unrelated purpose.

We may collect, process, and disclose aggregated or deidentified consumer information for any purpose, without restriction.  When we collect, process, or disclose aggregated or deidentified consumer information, we will maintain and use it in deidentified form and will not to attempt to reidentify the information, except to determine whether our deidentification processes satisfies any applicable legal requirements.

Disclosing, Selling, or Sharing Personal Information

Business Purpose Disclosures

We may disclose the Personal Information we collect, including Sensitive Personal Information, to third parties for a Business Purpose.  These disclosures may include website hosting, security, consent management, analytics, embedded content, recruiting, payroll, benefits administration, IT, and practice management providers, as well as other service providers and contractors that support the Firm’s operations.  We may also disclose Personal Information collected through the website’s non-essential cookies and similar technologies to third-party analytics, advertising, targeting, and related technology providers; those disclosures are addressed in Selling or Sharing Personal Information below.  We only make these Business Purpose disclosures under written contracts that describe the purposes, require the recipient to keep the Personal Information confidential, prohibit using the disclosed information for any purpose except performing the contract, and meet the CCPA’s other contract requirements for engaging service providers or contractors.

Google Analytics

We use Google Analytics, a web analytics service provided by Google, to understand how visitors use the Boutin Jones website, measure website traffic and performance, and improve the website.  Google Analytics collects and processes information about your use of the Boutin Jones website, including device and browser information, pages viewed, links and features used, and visit and session information, through cookies and similar tracking technologies, including the _ga, _ga_#, _gid, and _gat# cookies.  These technologies may store or generate identifiers, distinguish users or sessions, record website-usage information, calculate visits and sessions, generate statistical data, and regulate the rate of requests.

Google Analytics processes this information to provide analytics and reports about website use and website performance.  No personally identifiable information is passed to Google through Google Analytics; to the extent any information that could identify an individual is collected or transmitted in connection with Google Analytics, it is hashed using industry-standard hashing methods before transmission.  For more information about how Google uses data when you use our website, see https://policies.google.com/technologies/partner-sites.  We provide this information about the Google Analytics cookies and similar tracking technologies and, where legally required, an opportunity to consent before they are stored on or accessed from your device.

Categories of Disclosure Recipients

We disclose Personal Information to the following categories of recipients, depending on the Covered Interaction, including website-related recipients described in the Cookie Policy:

  • Our attorneys and staff who require access in connection with their job responsibilities or the provision of legal services;
  • Service providers and contractors who perform services on our behalf, such as website hosting, security, consent management, analytics, embedded-content, IT, payroll, benefits administration, recruiting, and practice management services or vendors, under appropriate contractual terms;
  • Third-party analytics, advertising, targeting, video, and other technology providers, including Google through Google Analytics, whose cookies or similar technologies are used on the website, as described in the Cookie Policy, which may receive Personal Information for such third-party’s own analytics, customization, reporting, advertising, or targeting purposes;
  • Expert witnesses, consultants, and other parties as necessary in connection with the provision of legal services, subject to applicable confidentiality obligations;
  • Courts, tribunals, opposing counsel, government agencies, and other participants in legal or administrative proceedings, as necessary in the course of representing clients; and
  • Regulatory authorities, bar associations, or law enforcement, where required by law, ethical obligations, or to protect our rights.

We do not disclose client information protected by the attorney-client privilege or work product doctrine except as authorized by the client or required by law or ethical rules.

Business Purposes Disclosure Recipient Category Chart

The chart below identifies the Personal Information categories we disclosed over the preceding 12 months, the specific business or commercial purpose for disclosing that information, and the categories of entities to whom we have disclosed our consumers’ Personal Information for a business purpose over the preceding 12 months.

[Business Purposes Disclosure Recipient Category Chart Follows]

Category of Business Purpose Disclosure Recipients Personal Information Categories Disclosed Sensitive Personal Information Categories Disclosed Business Purpose Disclosures
Website technology, analytics, embedded-content, and consent-management providers (e.g., Google Analytics) A. Identifiers;

F. Internet or other similar network activity;

K. Inferences drawn from other Personal Information.

 None. To operate, maintain, secure, and improve the website;

to manage cookie preferences and consent;

to analyze and customize website use;

to support embedded content; and

to measure website performance and effectiveness, as described in the Cookie Policy.
Service Providers (IT, payroll, benefits, recruiting, practice management) A. Identifiers;

B. California Customer Records;

I. Professional or employment-related information.

 L.1. Government identifiers. To provide, manage, and improve legal services;

to manage employment relationships; and

to administer business operations.
Courts, Tribunals, Opposing Counsel, Government Agencies A. Identifiers;

B. California Customer Records.

 L.1. Government identifiers. To provide legal services to clients; and

to comply with court orders and legal obligations.

 
Regulatory Authorities, Bar Associations A. Identifiers;

B. California Customer Records;

I. Professional or employment-related information.

 L.1. Government identifiers. To comply with legal, regulatory, and ethical obligations;

to provide legal services to clients; and

to administer business operations.
Expert Witnesses, Consultants A. Identifiers;

B. California Customer Records.

 L.1. Government identifiers (where necessary for legal services). To provide legal services to clients, subject to applicable confidentiality obligations.

 

Selling or Sharing Personal Information

While we do not sell or share Personal Information in connection with our employment, applicants, clients, legal services, events, office-visits, or other offline practices for cross-context behavioral advertising, we may share certain Personal Information collected through the website’s non-essential analytics, customization, and advertising/targeting cookies and similar technologies.  These disclosures may involve identifiers, Internet or other similar network activity, and inferences drawn from website interactions, and may be made to third-party analytics, advertising, embedded-content, and related technology providers for such third-party’s own analytics, reporting, customization, advertising, or targeting.  The privacy practices of those respective third parties govern their subsequent use of that data.  The Cookie Policy describes the categories of cookies and similar technologies used on the website and the providers and purposes associated with them.  For website-related sale or sharing, the categories of Personal Information are identified above in the Business Purposes Disclosure Recipient Category Chart.

We do not knowingly sell or share the Personal Information of consumers we know are under age 16.  We do not sell or share Personal Information collected through offline Covered Interactions for cross-context behavioral advertising.

Your Rights and Choices

If you are a California resident, the CCPA grants you the following rights regarding your Personal Information:

Right to Know and Data Portability Requests

You have the right to request that we disclose certain information to you about our collection and use of your Personal Information (the “Right to Know”), including the specific pieces of Personal Information we have collected about you (a “Data Portability Request”).  Our response will cover the 12-month period preceding the request, although we will honor requests to cover longer periods that do not extend past January 1, 2022, unless doing so would be impossible or involves disproportionate effort.  You may exercise your Right to Know twice in any 12-month period.  Once we receive your request and confirm your identity, we will disclose to you:

  • the categories of:
    • Personal Information we collected about you; and
    • sources from which we collected your Personal Information;
  • the business or commercial purpose for collecting your Personal Information and, if applicable, sharing your Personal Information;
  • if applicable, the categories of persons, including third parties, to whom we disclosed your Personal Information, including separate disclosures identifying the categories of your Personal Information that we:
    • disclosed for a Business Purpose to each category of persons; and
    • shared to each category of third parties;
  • when your Right to Know submission includes a Data Portability Request, a copy of your Personal Information, subject to any permitted redactions.

For more on exercising this right, see Exercising the Rights to Know, Delete, or Correct below.

Right to Delete and Right to Correct

You have the right to request that we delete any of your Personal Information that we collected from you and retained, subject to certain exceptions and limitations (the “Right to Delete”).  Once we receive your request and confirm your identity, we will delete your Personal Information from our systems unless an exception allows us to retain it.  We will also notify our service providers and other recipients to take appropriate action.  Please note that the exercise of these rights may be subject to applicable limitations and exceptions under the CCPA, including where Personal Information is subject to the attorney-client privilege, the work product doctrine, or other legal protections, or where retention is required by law or ethical rules.

You also have the right to request correction of Personal Information we maintain about you that you believe is inaccurate (the “Right to Correct”).  We may require you to provide documentation, if needed, to confirm your identity and support your claim that the information is inaccurate.  Unless an exception applies, we will correct Personal Information that our review determines is inaccurate and notify our service providers and other recipients to take appropriate action.

For more on exercising this right, see Exercising the Rights to Know, Delete, or Correct below.

Right to Limit Sensitive Personal Information Use and Disclosure to Permitted SPI Purposes

You have a right to ask businesses that use or disclose your Sensitive Personal Information to limit those actions to just the CCPA’s Permitted SPI Purposes (the “Right to Limit”).  As we do not use or disclose Sensitive Personal Information beyond the CCPA’s Permitted SPI Purposes, we do not currently need to provide this consumer right and this Privacy Policy does not explain how to exercise this consumer right.  However, if our practices change, we will provide appropriate notice and mechanisms to exercise the Right to Limit.

For more on the Permitted SPI Purposes, see Sensitive Personal Information Use and Disclosure Purposes.

Right to Opt-Out or Opt-In of Personal Information Sales or Sharing

You have the right to request that we stop selling or sharing your Personal Information for cross-context behavioral advertising purposes at any time (the “Right to Opt-Out”), including through a user-enabled opt-out preference signal.  This right applies to the website-related sale or sharing described above.  Similarly, the CCPA prohibits businesses from selling or sharing the Personal Information of consumers it actually knows are under 16 years old without first obtaining consent from consumers who are between 13 and 15 years old or the consumer’s parent or guardian for consumers under age 13 (the “Right to Opt-In”).

To exercise the Right to Opt-Out for website-related cookies and similar technologies, use the website’s “Do Not Sell or Share My Personal Information” option or the Consent Preference Center, including the website’s “Consent Preferences” control, which is available through the website’s notification banner and on the website.  The Consent Preference Center lets you accept or reject available cookie categories; essential cookies cannot be rejected.  Where legally required, it also provides you with an opportunity to consent before non-essential cookies or similar technologies are stored on or accessed from your device.  You may also manage cookies through your browser controls, such as the Global Privacy Control (“GPC”).  We honor GPC signals as valid opt-out requests under the CCPA.  If you reject non-essential cookies, you may still use the website, but some functionality or areas may be restricted.  The Cookie Policy describes these controls and the specific cookie categories and related technologies.  We will process a user-enabled opt-out preference signal as required by applicable law.

Right to Non-Discrimination

You have the right not to be discriminated or retaliated against for exercising any of your privacy rights under the CCPA.

How to Exercise Your Rights

Exercising the Rights to Know, Delete, or Correct

To exercise the Rights to Know (including Data Portability Requests), Delete, or Correct described above, please submit a verifiable request to us by the methods below.  You do not need to submit a verifiable request to exercise the Right to Opt-Out of website-related sale or sharing; use the Website controls described in Right to Opt-Out or Opt-In of Personal Information Sales or Sharing above.

Please describe your request with sufficient detail so we can properly understand, evaluate, and respond to it.  The opt-out controls described above are available without submitting a request to know, delete, or correct.  You or your authorized agent may only submit a request to know, including for data portability, twice in a 12-month period.

Verification Process and Authorized Agents

Only you, or someone legally authorized to act on your behalf, may make a request to know, delete, or correct your Personal Information.  If your minor child is our consumer, you may also make a verifiable request on their behalf.  To designate an authorized agent, provide the agent with written and signed permission to submit such request and verify your own identity directly with us.  We may request specific information from you or your authorized representative to confirm your or their identity before we can process your request to know, delete, or correct your Personal Information.

We cannot respond to your request to know, delete, or correct if we cannot verify your identity or authority to make the request and confirm the Personal Information relating to you.  We will only use Personal Information provided in the request to verify the requestor’s identity or authority to make the request.

You do not need to create an account with us to submit a request to know, correct, or delete.

 

Responding to Your Requests to Know, Delete, or Correct

We will confirm receipt of your request within ten (10) business days.  If you do not receive confirmation within the ten-day timeframe, please contact us using the contact information below.

We endeavor to substantively respond to a verifiable request within (forty-five) 45 days of its receipt.  If we require more time (up to another 45 days), we will inform you of the reason and extension period in writing.  We will deliver our written response to your verified email address.  Our substantive response will tell you whether or not we have complied with your request.  If we cannot comply with your request in whole or in part, we will explain the reason, subject to any legal or regulatory restrictions.  Applicable law may allow or require us to refuse to provide you with access to some or all of the Personal Information that we hold about you, or we may have destroyed, deleted, or made your Personal Information anonymous in compliance with our record retention policies and obligations.

Any disclosures we provide will cover information for the 12-month period preceding the request’s receipt date.  We will consider requests to provide longer disclosure periods that do not extend past January 1, 2022, unless providing the longer timeframe would be impossible or involves disproportionate effort.

For data portability requests, we will select a format to provide your Personal Information that is readily useable and should allow you to transmit the information from one entity to another entity without hindrance.

We do not charge a fee to process or respond to your verifiable request unless it is excessive, repetitive, or manifestly unfounded.  If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.

Right to Appeal

If we deny your request to know, delete, or correct your Personal Information in whole or in part, you have the right to appeal our decision.  To submit an appeal, please contact us using the contact information below within a reasonable period after receiving our decision.  We will respond to your appeal in accordance with applicable law.

How We Protect Your Personal Data

We implement reasonable and appropriate technical and organizational measures designed to protect Personal Information against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access.  These measures are informed by our professional and ethical obligations to safeguard client confidences and other sensitive information.  No security measures are perfect, and we cannot guarantee absolute security, but we continuously evaluate and seek to improve our safeguards.

The safety and security of your information also depends on you.  You are responsible for taking steps to protect your personal data against unauthorized use, disclosure, and access.

Privacy Policy Changes

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or for other operational reasons.  The Cookie Policy may be updated separately to reflect changes to the cookies or similar technologies used on the website; please review it periodically for current website tracking practices and choices.  If we make material changes to this Privacy Policy, we will notify affected individuals through appropriate means, such as posting the updated policy on our website or providing direct notice.  We encourage you to check our website periodically to review the current Privacy Policy in effect.

Contact Information

If you have any questions or comments about this Privacy Policy or our Cookie Policy, the ways in which we collect and use your information described here, your choices and rights regarding such use, or wish to exercise your rights under California law, please do not hesitate to contact us in the following ways:

Phone: 916.321.4444

Email: info@boutinjones.com

Postal Address:

Boutin Jones Inc.
Attn: Privacy
555 Capitol Mall, Suite 1500
Sacramento, CA 95814

If you need to access this Privacy Policy in an alternative format due to a disability, please contact us at info@boutinjones.com or 916.321.4444.