At Pena & Kahn, PLLC, your trust matters to us. Whether you’re a client, a prospective client, or simply visiting our website, we want you to feel confident about how we handle your information. This Privacy Policy explains what information we collect, how we use it, and the steps we take to protect your privacy.

​

1. Information We Collect
When you interact with us—whether by phone, email, online, or in person—we may collect:
• Basic contact details: name, address, phone number, and email.
• Client information: anything you share with us to help us provide legal services.
• Billing information: payment details and transaction records.
• Website data: like your IP address or browser type, collected through cookies and similar tools.
• Communication preferences: how you’d like to hear from us, including phone, email, or text messages.

​​

2. How We Use Your Information
We use your information only for reasons that help us serve you better, such as:
• Providing legal advice and representation.
• Staying in touch about your case, updates, or questions.
• Processing payments and managing billing.
• Meeting our professional and legal obligations.
• Sharing firm updates, newsletters, or event invitations (only if you’ve opted in).

​

3. Sharing Your Information
Your privacy and confidentiality are at the heart of what we do. We never sell your information. We may share it only in limited situations, such as:
• Trusted service providers: like IT support, billing, or administrative services.
• Legal or regulatory reasons: if the law requires us to disclose it.
• Professional duties: to comply with bar association rules or other ethical requirements.
• Business changes: in the unlikely event of a merger or restructuring of the firm.

👉 Important: If you’ve given us consent to send you text messages, that consent is yours alone. We do not share SMS consent with third parties or affiliates.

​

4. Your Privacy Rights
You’re in control of your information. Depending on where you live, you may have the right to:
• See the information we have about you.
• Ask us to correct or delete it.
• Tell us how (or if) you’d like us to contact you.
• Opt out of marketing messages at any time.

If you’re in a place with specific privacy protections (like the CCPA in California or GDPR in the EU), those rights apply to you, too.

You can exercise your rights anytime by emailing us at info@penakahn.com.

​

5. How We Protect Your Information

We take security seriously. We use physical, technical, and administrative safeguards to keep your personal information safe from unauthorized access or misuse.

​

6. Making This Policy Easy to Find
We don’t hide our privacy policy in the fine print. You’ll always find a link:
• On forms where we ask for your information.
• In the footer of every page on our website.

​

7. Children’s Data
We do not knowingly collect or maintain personal information from children under 13 years of age.

​

8. Attorney–Client Privilege
We also handle your information in compliance with attorney–client privilege and the New York Rules of Professional Conduct.

​

9. SHIELD Act & Breach Notification
In compliance with New York’s SHIELD Act, we maintain reasonable safeguards to protect your personal information, including encryption and secure disposal practices. If a data breach occurs that affects your information, we will notify you as required by New York law.

​

10. Data Retention
We retain client files and related personal information for a minimum of seven (7) years, or as otherwise required by New York State Bar rules and applicable law. After that period, we securely dispose of information in accordance with our retention policies.