If you are in the European Economic Area (EEA) or the United Kingdom (UK), you have the following rights:  

 

• Access. You can request a copy of your personal information that we are processing. Additional copies may incur a reasonable fee. 

• Rectification. You can ask us to correct any incomplete or inaccurate personal information we hold about you. 

• Deletion. You can request the erasure of your personal information in certain situations, such as when it is no longer needed or if you withdraw your consent (where applicable). 

• Portability. You can receive your personal information in a structured, commonly used, and machine-readable format and have the right to transmit that data to another party in certain situations. 

• Objection. You can object at any time to the processing of your personal information for direct marketing purposes. You can also object to our processing of your personal information if the legal ground is necessary for legitimate interests pursued by us or a third party unless we demonstrate compelling legal grounds for the processing.

• Restriction. You can request that we restrict our processing of your personal information in certain circumstances, such as when you contest its accuracy. 

• Withdrawal of consent. If we rely on your consent (or explicit consent) for processing your personal information, you can withdraw that consent at any time. Explicit consent is required if we process "special categories of personal data" as defined in the GDPR. 

 

If you are in the EEA, you have the right to lodge a complaint with a local data protection authority like la Commission Nationale de l’Informatique et des Libertés (CNIL) in France. Click here for a list of local authorities in the EEA. In the UK, you can lodge a complaint with the Information Commissioner’s Office here. 

 

Some rights may be limited where we have an overriding interest or legal obligation to continue processing personal information, or where data is exempt from disclosure due to legal professional privilege or secrecy obligations. 

 

If you are in the EEA or the UK and want to exercise any of these rights, please:

 

• Email us at jm@jsmillerlaw.com. 

• Provide enough information to identify yourself (e.g., name, email address). 

• Provide proof of your identity and address (a copy of your driver’s license or passport and a recent utility or credit card bill). 

• Provide the information to which your request relates.

 

If you are a California resident, you have the following rights under the CCPA, subject to certain exceptions:  

 

• Right to Know. You can request information regarding: (i) the categories of personal information we have collected about you, (ii) the sources from which we collected your personal information, (iii) the business or commercial purposes for which we collected, shared, or sold your personal information, (iv) the categories of third parties to whom we disclose your personal information, and (v) the specific pieces of personal information we collected about you in the 12 months preceding your request. 

 

• Right to Delete. You can request the deletion of your personal information. However, we may not be able to process your request in certain instances, such as (i) due to a legal obligation, (ii) to detect and protect against security incidents or malicious activities, (iii) to complete a transaction for which your personal information was collected, or (iv) for internal uses that are reasonably aligned with your expectations and context. 

 

• Right to Correct. You can request the correction of inaccurate personal information we maintain about you, considering the nature of the personal information and the purposes of its processing. 

 

• Right to Non-Discrimination. You have the right to be free from discrimination by us for exercising your CCPA privacy rights, including protection from retaliation for employees, job applicants, or independent contractors exercising these rights. 

 

To exercise these rights, submit a request by emailing jm@jsmillerlaw.com. The CCPA requires us to verify requests. We may ask you for proof of identity, such as a copy of your driver’s license or passport and a recent utility or credit card bill. If you are a JSM Law employee or have a relationship with us, we verify you directly. Otherwise, we use a service provider to verify by asking questions based on information about you. If using an authorized agent, we may require (i) signed permission, (ii) direct identity verification with us, and (iii) confirmation that you gave the agent permission to submit the request.
 

In the preceding 12 months,  JSM Law has collected the following types of personal information about California residents:  

 

• Identifiers. Includes your real name, any previous or preferred names, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, Social Security number, driver’s license number, passport number, or other similar identifiers.

 

• Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)). Includes your name, signature, Social Security number, physical characteristics or description, address, telephone number, passport number, driver’s license or state identification card number, insurance policy number, education, employment, employment history, bank account number, credit card number, debit card number, or other financial information, medical information, or health insurance information. 

 

• Protected classification characteristics under California or federal law. Includes your age, race, color, ancestry, national origin, citizenship, religion or creed, marital status, medical condition, physical or mental disability, sex (including gender, gender identity, gender expression, pregnancy or childbirth and related medical conditions), sexual orientation, veteran or military status, and genetic information (including familial genetic information). 

 

• Internet or other electronic network activity. Includes browsing history, search history, and information on your interaction with a website, application, or advertisement. See the Policy on Computer Communications Resources and Social Media Usage for more details. 

​

• Professional or employment-related information. Includes your resume, interview records, identity documents for work eligibility verification in the United States, Bar information, offer letter, employment dates, position, salary, bonuses, benefits information, attendance records, performance evaluations, and employee relations information (e.g., disciplinary records). 

 

Disclosures for a Business or Commercial Purpose. In the preceding 12 months, JSM Law has disclosed the above categories of personal information to its service providers for specific, limited business purposes, including conducting background checks for job applicants, processing payroll, detecting data security incidents, and troubleshooting software use, among other purposes listed in the Information Usage section of this Privacy Statement.

 

No Sharing/Selling of Personal Information with Third Parties. The Firm does not “sell” or “share” any of your personal information as defined by the CCPA. Therefore, the Firm does not have actual knowledge of selling or sharing personal information of consumers under 16 years of age.

Compliance with Section 7027(m).  JSM Law does not use or disclose sensitive personal information for purposes other than those specified in Section 7027(m) of the CCPA regulations.