Privacy Policy

---

PRIVACY POLICY

Last Updated: January 16, 2026.

1. INTRODUCTION

This Privacy Policy describes how Zimmerman Law LLC ("Firm," "we," "us," or "our") collects, uses, discloses, and protects the personal information of users of our website Zimslaw.com and related services (collectively, the "Services"). This Privacy Policy applies to information we collect when you use our Services or otherwise interact with us.

We respect your privacy and are committed to protecting your personal information. Please read this Privacy Policy carefully to understand our policies and practices regarding your information and how we will treat it. If you do not agree with our policies and practices, your choice is not to use our Services.

By accessing or using our Services, you agree to this Privacy Policy. This Privacy Policy may change from time to time. Your continued use of our Services after we make changes is deemed to be acceptance of those changes, so please check the policy periodically for updates.

2. KEY TERMS

For the purposes of this Privacy Policy, the following terms have these meanings:

Personal Information: Information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household.

Sensitive Personal Information: Personal information that reveals a consumer's social security number, driver's license number, state identification card, passport number, financial account information, precise geolocation, racial or ethnic origin, religious or philosophical beliefs, union membership, contents of mail, email and text messages, genetic data, biometric information, health information, or sex life or sexual orientation.

Processing: Any operation or set of operations performed on personal information, whether or not by automated means.

Service Provider: A person or entity that processes information on behalf of the Firm and to which the Firm discloses a consumer's personal information for a business purpose pursuant to a written contract.

Third Party: A person or entity that is not the Firm, a service provider, or the consumer.

3. PERSONAL INFORMATION WE COLLECT ABOUT YOU

We collect several types of information from and about users of our Services, including:

Categories of Personal Information

We may collect the following categories of personal information:

• Identifiers: Such as name, postal address, email address, telephone number, unique personal identifier, online identifier, Internet Protocol address, account name, or other similar identifiers.

• Protected classification characteristics: Such as age, race, color, ancestry, national origin, citizenship, religion or creed, marital status, medical condition, physical or mental disability, sex (including gender, gender identity, gender expression, pregnancy or childbirth and related medical conditions), sexual orientation, veteran or military status, genetic information.

• Commercial information: Such as records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.

• Internet or other similar network activity: Such as browsing history, search history, information on a consumer's interaction with a website, application, or advertisement.

• Geolocation data: Such as physical location or movements.

• Professional or employment-related information: Such as current or past job history or performance evaluations.

• Education information: Such as education records directly related to a student maintained by an educational institution or party acting on its behalf.

• Inferences drawn from other personal information: Such as profile reflecting a person's preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.

Sensitive Personal Information

We may collect the following categories of sensitive personal information:

• Financial account information (in limited circumstances related to payment for services)

• Contents of communications with the Firm (including emails, text messages, and other communications)

• Health information (when relevant to legal representation)

4. HOW YOUR PERSONAL INFORMATION IS COLLECTED

We collect personal information from various sources, including:

• Directly from you: When you provide it to us, such as when you contact us, register for an account, sign up for newsletters, fill out forms, or otherwise provide information to us.

• Automatically as you navigate through our Services: Information collected automatically may include usage details, IP addresses, and information collected through cookies, web beacons, and other tracking technologies.

• From third parties: We may receive personal information about you from various third parties, such as:

• Publicly accessible sources (e.g., court records, property records);

• Third parties (e.g., sanctions screening providers, credit reporting agencies, customer due diligence providers);

• Third parties with your consent (e.g., your bank, other advisors);

• Cookies on our website; and

• Our IT systems, including:

• Door entry systems and reception logs;

• Automated monitoring of our websites and other technical systems, such as our computer networks and connections, communications systems, email and instant messaging systems; and

5.  WHY WE USE YOUR PERSONAL INFORMATION

Purposes for Using Personal Information

We use the personal information we collect for various purposes, including:

• Providing our legal services: To provide and deliver the legal services you request, process transactions, and send you related information. Client relationship management: To manage our relationship with you, including communicating with you about our Services, responding to your inquiries, and providing customer service. Marketing and promotional purposes: To provide you with information about our Services, events, or other materials that may be of interest to you. Improving our Services: To improve our website, Services, marketing, customer relationships, and experiences. Security and fraud prevention: To detect, prevent, or investigate security breaches, fraud, and other unauthorized or illegal activities. Compliance with legal obligations: To comply with legal obligations, including responding to court orders, subpoenas, or other legal processes. Business operations: To conduct business planning, reporting, and forecasting. Auditing related to interactions: Counting ad impressions to unique visitors, verifying positioning and quality of ad impressions, and auditing compliance. Debugging: Identifying and repairing errors that impair existing intended functionality. Short-term, transient use: Including, but not limited to, non-personalized advertising shown as part of your current interaction with us. Performing services: Including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, providing advertising or marketing services, providing analytic services, or providing similar services. Internal research: For technological development and demonstration. Quality and safety activities: Undertaking activities to verify or maintain the quality or safety of a service or device that is owned, manufactured, manufactured for, or controlled by us, and to improve, upgrade, or enhance the service or device.

Legal Bases for Processing Personal Information

We process your personal information based on one or more of the following legal bases:

• Consent: Where you have given us consent to process your personal information for specific purposes.

• Contract: Where processing is necessary for the performance of a contract with you or to take steps at your request before entering into a contract.

• Legal obligation: Where processing is necessary for compliance with our legal and regulatory obligations.

• Legitimate interests: Where processing is necessary for our legitimate interests or those of a third party, provided those interests are not overridden by your interests or fundamental rights and freedoms.

A legitimate interest is when we have a business or commercial reason to use your information, so long as this is not overridden by your own rights and interests. The following table explains what we use (process) your personal information for and our reasons for doing so:

What we use your personal information for: 

Providing legal services to you, to perform our contract with you or to take steps at your request before entering into a contract, conducting conflict checks for our legitimate interests or those of a third party (to ensure we can take on new clients without conflicts of interest), Gathering and providing information required by or relating to audits, inquiries, or investigations by regulatory bodies To comply with our legal and regulatory obligations, ensuring business policies are adhered to, e.g., policies covering security and internet use for our legitimate interests or those of a third party (to ensure compliance with our policies), operational reasons, such as improving efficiency, training, and quality control for our legitimate interests or those of a third party (to be as efficient as we can), ensuring the confidentiality of commercially sensitive information, statistical analysis to help us manage our practice, e.g., in relation to our financial performance, client base, work type, or other efficiency measures, preventing unauthorized access and modifications to systems, updating and enhancing client records, and to perform our contract with you or to take steps at your request before entering into a contract. 

6. WHO WE SHARE YOUR PERSONAL INFORMATION WITH

We may share your personal information with:

Our affiliates: Including companies within the Zimmerman Law LLC group.

Service providers: We use to help deliver our Services to you, such as hosting providers, IT service providers, marketing and advertising partners, and payment processors.

Other third parties we use to help us run our business: Such as website analytics providers, customer relationship management systems, and practice management software providers.

Third parties approved by you: Including social media sites you choose to link your account to or third-party payment processors.

Professional advisors: Such as lawyers, bankers, auditors, and insurers who provide consultancy, banking, legal, insurance, and accounting services.

Regulators and other authorities: Who require reporting of processing activities in certain circumstances.

Courts and tribunals: In connection with court proceedings or legal claims.

Law enforcement agencies: To comply with our legal and regulatory obligations.

We only allow our service providers to handle your personal information if we are satisfied they take appropriate measures to protect your personal information. We also impose contractual obligations on service providers to ensure they can only use your personal information to provide services to us and to you.

We may disclose and exchange information with law enforcement agencies and regulatory bodies to comply with our legal and regulatory obligations.

"Mobile Opt in, SMS Consent,  and phone numbers collected for SMS communication purposes will not be shared with any third party or affiliates for marketing purposes."

7. CATEGORIES OF PERSONAL INFORMATION WE SOLD OR SHARED

In the preceding 12 months, we have not sold any personal information to third parties.

8. HOW LONG YOUR PERSONAL INFORMATION WILL BE KEPT

We will keep your personal information while you have an account with us or while we are providing Services to you. Thereafter, we will keep your personal information for as long as is necessary:

• To respond to any questions, complaints, or claims made by you or on your behalf;

• To show that we treated you fairly; or

• To keep records required by law.

We will not retain your personal information for longer than necessary for the purposes set out in this policy. Different retention periods apply for different types of personal information. When it is no longer necessary to retain your personal information, we will delete or anonymize it.

In some circumstances, we may anonymize your personal information (so that it can no longer be associated with you) for research or statistical purposes, in which case we may use this information indefinitely without further notice to you.

9. YOUR RIGHTS UNDER APPLICABLE PRIVACY LAWS

Rights Under Privacy Laws

Depending on your location, you may have additional rights under other privacy laws, such as:

Right to access: You have the right to request a copy of the personal information we hold about you.

Right to rectification: You have the right to request that we correct any inaccurate personal information we hold about you.

Right to erasure: You have the right to request that we delete your personal information in certain circumstances.

Right to restrict processing: You have the right to request that we restrict the processing of your personal information in certain circumstances.

Right to data portability: You have the right to request that we transfer your personal information to another service provider in certain circumstances.

Right to object: You have the right to object to the processing of your personal information in certain circumstances.

Rights related to automated decision-making: You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.

10. HOW TO EXERCISE YOUR RIGHTS

To exercise your rights described above, please submit a verifiable consumer request to us by:

• Calling us at 503-868-5128;

• Visiting Zimslaw.com; or

• Emailing us at steven@zimslaw.com

Please note that you may only make a verifiable consumer request for access or data portability twice within a 12-month period.

If you choose to contact us directly, you will need to provide us with:

• Enough information to identify you (e.g., your full name, address, and client or matter reference);

• Proof of your identity and address (e.g., a copy of your driving license or passport and a recent utility or credit card bill); and

• A description of what right you want to exercise and the information to which your request relates.

We are not obligated to make a data access or data portability disclosure if we cannot verify that the person making the request is the person about whom we collected information or someone authorized to act on such person's behalf.

Any personal information we collect from you to verify your identity in connection with your request will be used solely for the purposes of verification and will be deleted after verification is complete.

KEEPING YOUR PERSONAL INFORMATION SECURE

We have appropriate security measures in place to prevent personal information from being accidentally lost or used or accessed in an unauthorized way. We limit access to your personal information to those who have a genuine business need to access it. Those processing your information will do so only in an authorized manner and are subject to a duty of confidentiality.

We also have procedures in place to deal with any suspected data security breach. We will notify you and any applicable regulator of a suspected data security breach where we are legally required to do so.

COOKIES AND SIMILAR TECHNOLOGIES

What Are Cookies

Cookies are small data files that are placed on your computer or mobile device when you visit a website. Cookies are widely used by website owners to make their websites work, or to work more efficiently, as well as to provide reporting information.

How We Use Cookies

We use cookies for several purposes, including:

• Essential cookies: Required for the operation of our website. These include cookies that enable you to log into secure areas of our website or use e-billing services.

• Analytical/performance cookies: Allow us to recognize and count the number of visitors and to see how visitors move around our website when they are using it. This helps us to improve the way our website works.

• Functionality cookies: Used to recognize you when you return to our website. This enables us to personalize our content for you, greet you by name, and remember your preferences.

• Targeting cookies: Record your visit to our website, the pages you have visited, and the links you have followed. We will use this information to make our website and the advertising displayed on it more relevant to your interests.

Managing Cookies

Most web browsers allow you to manage your cookie preferences. You can set your browser to refuse cookies, or to alert you when cookies are being sent. The methods for doing so vary from browser to browser, and from version to version. However, if you use your browser settings to block all cookies (including essential cookies), you may not be able to access all or parts of our website.

CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time in response to changing legal, technical, or business developments. When we update our Privacy Policy, we will take appropriate measures to inform you, consistent with the significance of the changes we make. We will obtain your consent to any material Privacy Policy changes if and where this is required by applicable data protection laws.

You can see when this Privacy Policy was last updated by checking the "Last Updated" date at the top of this page.

HOW TO CONTACT US

If you have any questions about this Privacy Policy, or if you would like to exercise any of your rights, please contact us using the following details:

o Email: Steven@zimslaw.com 

o Phone: 503-868-5128

o Mail: 10260 SW Greenburg Rd. Ste 430, Portland, OR 97223.

15. HOW TO COMPLAIN

If you have a complaint about our use of your personal information, please contact us using the details above, and we will do our best to resolve the issue.

If you are not satisfied with our response, you have the right to lodge a complaint with the relevant data protection authority:

• In the United States: Federal Trade Commission (www.ftc.gov) or your state Attorney General's office

SMS TEXT MESSAGE COMMUNICATION POLICY

1- SMS Consent Communication:

The information (Phone Numbers) obtained as part of the SMS consent process will not be shared with third parties for marketing purposes.

2- Types of SMS Communications:

If you have consented to receive text messages from Zimmerman Law LLC, you may receive messages related to the following:

Customer care regarding Appointment reminders and scheduling, Follow-up messages, and Billing inquiries

Accountifications regarding updates 

Example: "Hello, this is a friendly reminder of your upcoming appointment with [Name] at [Location] on [Date] at [Time]. You can reply STOP to opt out of SMS messaging from Zimmerman Law LLC at any time."

3- Message Frequency:

Message frequency may vary depending on the type of communication. 

"Message frequency may vary. You may receive up to 2 SMS messages per week regarding your appointments or account status."

4- Potential Fees for SMS Messaging:

Please note that standard message and data rates may apply, depending on your carrier’s pricing plan. These fees may vary if the message is sent domestically or internationally.

5- Opt-In Method:

You may opt-in to receive SMS messages from Zimmerman Law LLC in the following way:

Verbally through direct conversation. 

6- Opt-Out Method:

You can opt out of receiving SMS messages at any time. To do so, simply reply "STOP" to any SMS message you receive. Alternatively, you can contact us directly to request removal from our messaging list.

7- Help:

If you are experiencing any issues, you can reply with the keyword HELP. Or, you can get help directly from us at Steven@Zimslaw.com

Additional Options:

If you do not wish to receive SMS messages, you can choose not to check the SMS consent box on our forms.

8- Standard Messaging Disclosures:

Message and data rates may apply.

You can opt out at any time by texting "STOP."

For assistance, text "HELP" or visit our Privacy Policy  https://zimslaw.com/privacy-policy 

Message frequency may vary