Privacy Policy

1. Data Controller

Valstone Law
11 Broadway, Suite 615
New York, NY 10004
United States
Email: [email protected]

2. Scope of This Privacy Policy

This Privacy Policy explains how personal information is collected, used, and protected when you visit this website or contact Valstone Law.

We collect and process personal information only as necessary to operate this website, respond to inquiries, and provide legal services in accordance with applicable data protection laws, including the General Data Protection Regulation (GDPR) for individuals in the European Union and European Economic Area.

3. Information We Collect

Depending on how you interact with this website, we may collect:

  • Contact information such as your name and email address
  • Information you voluntarily provide through contact forms or scheduling tools
  • Basic technical information such as IP address, browser type, and device information

We do not intentionally collect sensitive personal information through this website unless you choose to provide it.

4. How We Use Information

We use collected information to:

  • Respond to inquiries and communicate with you
  • Provide legal services where applicable
  • Maintain and improve the functionality of this website
  • Ensure the security of our systems

When processing personal information of individuals in the European Union or European Economic Area, we rely on the following legal bases:

  • Legitimate interests – to respond to inquiries and operate this website
  • Contract performance – to provide legal services where an attorney-client relationship exists
  • Legal obligation – to comply with applicable legal and regulatory requirements
  • Consent – where you have provided explicit consent for specific processing activities
  • Representation in legal and immigration proceedings – for sensitive information a client matter requires, such as medical exam results or police certificates, under Articles 9(2)(f) and 10 GDPR

6. Third-Party Service Providers

We may use trusted third-party service providers for services such as website hosting, appointment scheduling, and email communication.

These providers process information only as necessary to perform their services and are contractually obligated to protect your data.

7. Cross-Border Data Transfers

Personal information collected through this website may be transferred to and processed in the United States and other jurisdictions where our service providers operate.

If you are located in the European Union or European Economic Area, we take appropriate measures, including the use of standard contractual safeguards where applicable, to ensure your information receives adequate protection in accordance with applicable data protection laws.

8. Cookies

This site sets no cookies by default. Your cookie choices are stored in your browser so that the banner is not shown again. Two optional categories can be switched on in the banner, each separately:

  • Analytics: Google Analytics sets two cookies (_ga and _ga_9MRG0ZL5KQ, up to 2 years) to count visits, see which pages are viewed and whether the contact form was sent. The contents of your message are never sent to Google Analytics. Google processes this data on our behalf under Google's data processing terms and keeps data linked to these cookies for 2 months after your last visit; only aggregated statistics that do not identify you are kept longer.
  • Advertising: Google Ads sets one cookie (_gcl_au, 90 days) to record whether an inquiry followed a Google advertisement. For this purpose Google acts as an independent controller under its own Privacy Policy.

The legal basis for both is your consent (Article 6(1)(a) GDPR). Data may be transferred to the United States, where Google LLC is certified under the EU-U.S. Data Privacy Framework; Google's terms also include the EU Standard Contractual Clauses as a fallback. You can change or withdraw your choices at any time using “Cookie preferences” in the footer; withdrawal does not affect processing before it. Contact form submissions are checked for automated entries by a hidden form field; no CAPTCHA service is used.

9. Data Retention

We keep a record of every inquiry, including what we were told, for as long as the firm practices, to check for conflicts of interest. Documents from people who do not engage us are deleted within 12 months. Client files are kept at least seven years after a matter ends, as New York's professional rules require for certain records, and longer if you may need them for later immigration filings. Website data is kept as described in Section 8. On request, we delete your information, except what we need for conflict checks, the records New York rules require, and possible legal claims.

10. Data Security

We implement reasonable technical and organizational measures to protect personal information from unauthorized access, disclosure, or misuse.

11. No Attorney-Client Relationship

Submitting information through this website does not create an attorney-client relationship. Such a relationship is established only through a formal agreement.

12. Your Rights

If you are located in the European Union or European Economic Area, you have the right to:

  • Access the personal information we hold about you
  • Request correction of inaccurate information
  • Request deletion of your information
  • Restrict or object to processing of your information
  • Request data portability
  • Withdraw consent where processing is based on consent

If you are located in other jurisdictions, you may have additional rights under applicable local laws.

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within the timeframe required by applicable law.

If you are located in the European Union or European Economic Area and believe we have not adequately addressed your concerns, you have the right to lodge a complaint with your local data protection supervisory authority.

13. Changes to This Policy

This Privacy Policy may be updated from time to time. Any updates will be posted on this page.