Privacy Policy – Shreve Legal

Shreve Legal Privacy Policy

Last Updated and Effective

Date: 22 October 2025

This Privacy Policy (Privacy Policy) explains how Shreve Legal PLLC (Shreve Legal, us, our, we) collects Personal Information based on interactions with online and offline channels (Channels), how we use such information, and rights residents of states with applicable privacy laws may have with respect to such information. See Consumer Rights Under Comprehensive U.S. State Data Privacy Laws below.

The Privacy Policy applies to Personal Information we collect, which is information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a state resident or household.

Please be aware that Shreve Legal collects relatively limited amounts of consumer Personal Information subject to all of the rights and provisions under the state comprehensive privacy laws because the Personal Information we obtain is largely exempted as personal financial data subject to the federal Gramm-Leach-Bliley Act (GLBA), the Fair Credit Reporting Act (FCRA), and state based financial laws. This Privacy Policy does not make disclosures about the exempted data, and the rights as described do not apply to the exempted data. The Privacy Policy also does not apply to the Personal Information we collect about employees, independent contractors, or job applicants when applying for a position with us.

Notice at Collection: Personal Information We Collect

The following information describes the categories of Personal Information we collect and have collected about you in the past 12 months.

Personal identifiers – Name, email address, IP address, phone number, unique personal identifier, online identifier

Internet or other electronic network activity information – your browsing behavior, search history, and information regarding your interaction with our Channels and advertisements (including information such as scrolling, clicks, and length of interactions), your unique personal identifier, media access crol (MAC) address, device type, screen resolution, operating system version, and Internet browser type and version, and information about websites that referred you to our Channels.

Geolocation information – your location when you visit our Channels

We collect your Personal Information to contact you; to deliver personalized services, content, information, and advertisements to you; to inform and tailor our marketing and research efforts; to measure, analyze, understand, and improve the performance and user experience on our Channels and the digital experiences we offer.

We also use Personal Information to prevent fraud, activities that violate our Terms of Service or other contracts, or that are illegal; and to protect our rights and the rights and safety of our users or others.

For those who interact with us in a commercial capacity, we use your Personal Information to engage in business transactions with the entity you represent and market to or engage in diligence with the entities you represent.

We do not sell or share for cross-context behavioral advertising any of the other categories of Personal Information we collect.

Notice at Collection: Retention Periods

We retain the categories of Personal Information we collect for the length of time necessary to provide our Services and to comply with legal obligations or to protect our legal rights.

Sources from which Personal Information is collected

Use or Disclosure of Sensitive Personal Information for Inferring Characteristics

We do not use or disclose Sensitive Personal Information as defined under the CCPA to create profiles about or infer characteristics about individuals, or for any purposes other than providing our products or services.

Disclosure of Personal Information For Business Purposes in the Past 12 Months

The following chart describes the categories of Personal Information we disclosed to third parties for a business purpose in the 12 months prior to the date of this Policy:

Category	Whether Data Is Collected And The Source Of Collection	Business Or Commercial Purpose Collection Or Use	Category Of Third Party Recipients
A.Identifiers Examples:A name, phone number, address, email address, IP address, unique personal identifier, online identifier or other similar identifiers.	Yes • You • Your device	• Provide our Services to you • Manage, monitor, improve, and optimize our Services • Meet our contractual obligations with service providers or business partners • Respond to legal requests and meet other legal and regulatory requirements • Contact you about your account and provide customer service • Detect and protect against security events, fraud, and illegal activities • Aid us in enforcing our Terms of Use • Facilitate email communications • Process data subject requests	• Service providers • Business partners with which we jointly offer services • Recipients as required by law, regulation or judicial process or order
B. Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)). Examples: A name, signature, Social Security number, physical characteristics or description, address, telephone number, bank account number, credit card number, debit card number, or any other financial information.	Yes • You • Our customers, service providers and business partners	• Provide our Services to you • Manage, monitor, improve, and optimize our Services • Meet our contractual obligations with service providers or business partners • Respond to legal requests and meet other legal and regulatory requirements • Contact you about your account and provide customer service • Detect and protect against security events, fraud, and illegal activities • Aid us in enforcing our Terms of Use	• Service providers • Business partners with which we jointly offer services • Recipients as required by law, regulation or judicial process or order
C. Protected classification characteristics under California or federal law. Examples Age (40 years or older), race, color, ancestry, national origin, citizenship, religion or creed, marital status, medical condition, physical or mental disability, sex (including gender, gender identity, gender expression, pregnancy or childbirth and related medical conditions), sexual , veteran or military status, genetic information (including familial genetic information).	No	N/A	N/A
D. Commercial information. Examples Records of personal property, products or services purchased, or considered, or other purchasing or consuming histories or tendencies.	No	N/A	N/A
E. Biometric information. Examples: Genetic, physiological, behavioral, and biological characteristics, or activity patterns used to extract a template or other identifier or identifying information, such as, fingerprints, faceprints, and voiceprints, iris or retina scans, keystroke, gait, or other physical patterns, and sleep, health, or exercise data.	No	N/A	N/A
F. Internet or other similar network activity. Examples: Your browsing behavior, search history, and information regarding your interaction with our Channels and advertisements (including scrolling, clicks, and length of interactions), your unique personal identifier, media access control (MAC) address, device type, screen resolution, operating system version, and Internet browser type and version, and information about websites that referred you to our Channels.	Yes • Your device • Third party analytics providers	• Host our Channels and make them easier to use • Assist with other technology related functions • Improve our Services • Provide analytics information	• Service providers • Recipients as required by law, regulation or judicial process or order
G. Geolocation data. Examples:Physical location or movements.	No	N/A	N/A
H. Sensory data. Examples: Audio, electronic, visual, thermal, olfactory, or similar information.	No	N/A	N/A
I. Professional or employment-related information. Examples: Job title, business with which you are affiliated, information about your employer.	No	N/A	N/A
J. Non-public education information (per the Family Educational Rights and Privacy Act (20 U.S.C. Section 1232g, 34 C.F.R. Part 99)). Examples: Education records directly related to a student maintained by an educational institution or party acting on its behalf, such as grades, transcripts, class lists, student schedules, student identification codes, student financial information, or student disciplinary records.	No	N/A	N/A
K. Inferences drawn from other personal information. Examples: Profile reflecting a person’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.	No	N/A	N/A

Additional Information About How We May Disclose Personal Information and Purposes for Disclosures

We may also disclose your Personal Information as required or permitted by law to comply with a subpoena or similar legal process or government request, or when we believe in good faith that disclosure is legally required or otherwise necessary to protect our rights and property or the rights, property, or safety of others, including to law enforcement agencies, and judicial and regulatory authorities. We may also disclose your Personal Information to third parties to help detect and protect against fraud or data security vulnerabilities. And we may disclose or transfer your Personal Information to a third party in the event of an actual or potential sale, merger, reorganization of our entity or other restructuring.

Our Use of Cookies and Other Tracking Technologies

The functionality of our Channels is based, in part, on your browser’s ability to accept cookie files. Cookies are pieces of information that a website transfers to your hard drive that allow you to navigate a website more easily and customize website features that are updated each time you visit a website.

Cookies also help us track repeat visits to our Channels. Most browsers are initially set up to accept cookies. You may set your preferences to refuse cookies; however, this may limit your access to some areas of our Channels.

Personal Information of Minors

Our products, services and Channels are not directed to minors under the age of 13 and we do not knowingly sell or share for purposes of behavioral advertising the Personal Information of minors, including minors under 16 years of age.

Do Not Track Signals

Industry standards are currently evolving, and we may not separately respond to or take action with respect to any “do not track” (“DNT”) configuration you have enabled in your internet browser. At this time, we do not respond to the DNT signal.

Links to Other Websites / Social Media Buttons

For your convenience, our Channels may contain links to other websites, including social media buttons that may direct you to other sites or platforms. This does not imply any affiliation with, or an endorsement, authorization, sponsorship or promotion of a non-Shreve Legal website, application, platform, or the owner thereof. Shreve Legal accepts no responsibility for the content, products, or services provided on linked websites. If you choose to access such non-Shreve Legal websites, applications, or platforms, you do so at your own risk, and you should be aware that those websites, applications, and platforms are governed by their own terms and conditions and privacy policies.

How We Keep Your Personal Information Secure

We implement and maintain reasonable security appropriate to the nature of the Personal Information that we collect, use, retain, transfer or otherwise process. However, there is no perfect security, and reasonable security is a process that involves risk management rather than risk elimination. While we are committed to maintaining a reasonable information security program, no such program can be perfect; in other words, all risk cannot reasonably be eliminated. Data security incidents and breaches can occur due to factors that cannot reasonably be prevented. Accordingly, it cannot be assumed that the occurrence of any given incident or breach results from our failure to implement and maintain reasonable security.

Consumer Rights Under Comprehensive U.S. State Data Privacy Laws

State privacy laws in some states give their residents specific rights regarding the Personal Information we collect about them, with some exceptions. We list below the rights that may be applicable to our business under the state laws:

Right to Know: The right to confirm whether we are processing a resident’s Personal Information and to access such data. Laws in some states provide the right to know more detailed information.

California’s privacy law gives residents the right to request the following additional information collected since January 1, 2022: Categories of Personal Information we have collected about them; categories of sources from which such Personal Information was collected; categories of Personal Information that the business sold or disclosed for a business purpose about the consumer; categories of third parties to whom the Personal Information was sold or disclosed for a business purpose; and the business or commercial purpose for collecting or selling your Personal Information

Right to Access / Copy: The right to access or request a copy of the Personal Information we have collected from the resident, subject to certain exceptions.

Right to Delete: The right to request deletion of their Personal Information that we have collected from or about the resident and to have such information deleted, subject to certain exceptions.

Right to Correct: The right to request that we correct inaccuracies in the resident’s Personal Information, considering the nature of personal data and purposes of processing such information.

Right to Opt Out: Various rights to request that we stop using the resident’s Personal Information for one or more of the following purposes:

◯ Sale of Personal Information: The right to request that we stop selling their Personal Information, consistent with the definition of “sale” in each law.

◯ Targeted Advertising: The right to request that we stop processing their Personal Information for targeted advertising, subject to exceptions in some state laws.

◯ Sharing for Cross-Context Behavioral Advertising: California’s law provides the right to request that we stop sharing Personal Information for cross-context behavioral advertising.

◯ Profiling: Minnesota law grants a right to opt-out from processing Personal Information for profiling involved in automated decision-making that has legal or similarly significant effects on a consumer.

Please note, California’s law is the only law that applies to all state residents, irrespective of the context in which they interact with us (e.g., a customer, a business contact, a vendor). Laws in other states apply only to people when acting in an individual or household context.

Exercising Your Rights

We will respond to requests from residents of states with data privacy laws that apply to us and to the rights that are provided under the requestor’s state law as of the effective date of that law.

Rights to Know, Delete, Correct or relating to Profiling

To exercise your rights to know, delete, correct or in relation to profiling, please email us at admin@shreve.legal.

Only you, or someone legally authorized to act on your behalf, may make a verifiable consumer request related to your Personal Information. You may also make a verifiable consumer request on behalf of your minor child.

Opt-out Preference Signals and Do Not Track

An opt-out preference signal is sent by a platform, technology, or mechanism on behalf of consumers and communicates a consumer’s choice to opt out of the sale and sharing of Personal Information for cross-context behavioral advertising with all businesses that recognize the signal, without having to make individualized requests. The signal can be set on certain browsers or through opt-out plug-in tools.

We recognize the Global Privacy Control signal and do so at the browser level. This means that if the signal is sent through a specific browser, we will recognize it for that browser only, and only with respect to the identifiers for that browser. If you would like more information about opt-out preference signals, including how to use them, the Global Privacy Control website has such information
(https://globalprivacycontrol.org/).

We will respond to opt-out requests as soon as feasibly possible, but no later than 15 business days after receipt of your request. If we require additional information or time to process your requests, we will contact you.

Exercising Your Rights Using Authorized Agents

Agents may submit opt-out requests on behalf of individuals under several state data privacy laws. Additionally, California residents can designate an agent to submit all types of data requests.

If the agent submits an opt-out request on your behalf, the agent will need to provide us with your signed permission indicating the agent has been authorized to submit the opt-out request on your behalf.

If you are a California resident and you use an agent to submit other types of requests, the agent will need to provide us with your signed permission indicating the agent has been authorized to submit the request on your behalf. You will also be required to verify your identity directly with us or confirm with us that you provided the agent with permission to submit the request. Agents can submit requests on behalf of California residents (other than opt-out request).

Please note that this subsection does not apply when an agent is authorized to act on your behalf pursuant to a valid power of attorney. Any such requests will be processed in accordance with state law pertaining to powers of attorney.

Verification of Requests

When you make a Request to Know, Request to Delete or Request to Correct, we will take steps to verify your identity. These steps may include asking you for information that we or our identity verification knows about you. If we are unable to verify your identity with the degree of certainty required, we will not be able to respond to the request. We will notify you to explain the basis of any denial.

We cannot respond to your request or provide you with Personal Information if we cannot verify your identity or authority to make the request and confirm the Personal Information relates to you. In limited circumstances, we may need to contact you to obtain additional information to process your request.

We will only use Personal Information provided in a verifiable consumer request to verify your identity or authority to make the request.

When We Do Not Act on a Request – Appeal Process

In some cases, we may not act on your requests (e.g., if we cannot do so under other laws that apply). When this is the case, we will explain our reasons for not providing you with the information or taking the action (e.g., correcting data) you requested.

Additionally, you have the right to appeal our decision by contacting us at admin@shreve.legal within 30 days after your receipt of our decision.

Non-Discrimination

If you exercise any of the rights explained in this Privacy Policy, we will continue to treat you fairly. If you exercise your rights under this US State Privacy Notice, you will not be denied or charged different prices or rates for goods or services or provided a different level or quality of goods or services than others

Changes to this Notice

Shreve Legal reserves the right to change this Notice at our discretion and at any time. Changes are effective upon posting to our Channels. If we make a material change to the Notice, we will be notified through a notice on our website and by changing the effective date at the beginning of this Notice.