Privacy policy

Types of Personal Information We Collect

The types of personal information we collect will depend on the services you request and, if you are a client, the nature of our representation or your case. The table below describes the categories (with non-exhaustive examples) of personal information we may collect about you. We may also collect other personal information that is not specifically listed here, which we will use as described in this Privacy Policy or as otherwise disclosed at the time of collection.

We may collect the categories of personal information described above from the following sources:

Personal Information You Provide Us

We collect the personal information that you provide to us while using our Platform, including contacting us, creating an account, or otherwise. Further, where expressly designated by MM, some portions of the Services may be used by active MM clients to communicate pursuant to an attorney/client relationship. You may choose whether or not to provide such information; however, the information may be required to respond to your request.

Personal Information Collected Automatically

We and our third party providers may use cookies and other technologies to collect personal information about you automatically when you use our Platform. Such information includes online identifiers, device information, and online activity information. To facilitate automatic collection, we may use the following technologies:

• Cookies. A cookie is a small piece of data stored by your web browser on your computer or mobile device. We use cookies to collect information regarding your usage of the Platform in order to remember user preferences and settings, personalize your experience, facilitate online advertising, and for security purposes. You may opt-out by referring to your web browser or mobile device options or settings menu. Each browser is different, so check the "Help" menu of your browser to learn how to change your cookie preferences or visit allaboutcookies.org.
• Pixels. Pixels (also known as "web beacons" or "clear GIFs") are typically used to determine whether a webpage or email was accessed or opened, or that certain content was viewed or clicked. Data collected from pixels is often used to compile statistics about usage of websites and the success of email marketing campaigns.
• SDKs. Software development kits (SDKs) are third-party computer codes used in connection with the App for various purposes, including to provide analytics, integrate with social media, add features or functionality, or facilitate online advertising. SDKs may enable third parties to collect information directly via the App.
• Session Replay Technologies. Session-replay technologies are third-party software used to record a video replay of users' interactions with the Site, including clicks, mouse movements, scrolls, mobile app touches, typing, and other activity. We use these replays for research and development purposes, such as to help us troubleshoot problems with the Site and identify areas for improvement.
• Local Storage. Local storage is used to save data on a visitor's device. We use data from local storage to enable web navigation, store multimedia preferences, customize what we show you based on past interactions, remember your preferences, and measure ad effectiveness.
• Chat Technologies. Our Site may have chat features or a digital "chatbot" to respond to your inquiries. Our chat vendors and other third parties may access and use the identifiers and internet activity described above, and monitor and record your chats, for the purposes described in this Privacy Policy.

Personal Information Collected from Third Parties

We may also collect or receive personal information from third parties, which may include:

• Our business partners, such as third-party data providers, advertising partners, and service providers.
• Public sources, such as social media platforms and publicly available records.
• Individuals or entities involved in our clients' legal matters, such as doctors, other parties, and other individuals that you may direct to provide us with information.
• Referral sources, such as members of our referral network, website submissions, and other referral sources.

We may merge or combine such personal information with the personal information we collect from you directly or automatically.

Online Analytics

We may use third party analytics tools, such as Google Analytics and Mouseflow, in order to better understand your use of our Platform and how we can improve it. These tools collect information sent by your browser or mobile device, including the pages you visit and other usage information.

• For more information regarding how Google collects, uses, and shares your information, please visit Google's Partner Sites policy. To opt out of Google Analytics, download the browser add-on at tools.google.com/dlpage/gaoptout.
• For more information on Mouseflow's privacy practices, please visit mouseflow.com/legal/privacy-policy. You can opt out of Mouseflow analytics at mouseflow.com/opt-out.

Use of Personal Information

We may use the personal information we collect for the following purposes and as otherwise described in this Privacy Policy or at the time of collection:

To Provide Our Platform

We use personal information to provide our services, including the Platform. For example, we use personal information to:

• Facilitate your requests for a free case evaluation and determine your legal needs;
• Provide you with legal and other services, content, and features you request;
• Create, manage, and monitor your account;
• Respond to your inquiries and communicate with you, including placing calls or sending texts using any automated technology, including prerecorded messages;
• Operate, troubleshoot, and improve the Platform;
• Process your transactions, invoices, and settlement payments;
• Understand your interests, personalize your experience on the Platform, and deliver information about products and services relevant to your interests;
• Respond to your inquiries and requests for customer support, including to investigate and address your concerns and monitor and improve our responses; and
• Enable security features of the Platform, such as by sending you security codes via email or SMS, and remembering devices from which you have previously logged in.

In Connection with Artificial Intelligence Tools

When operating our business, we may use services or applications that are supported by artificial intelligence (AI) or machine learning technologies. For example, we may use such technology to support our marketing or advertising efforts, to develop or improve new features or functionality, to enhance the efficiency and quality of work provided to our clients, to support case development and management, or to improve how we address your support requests or inquiries. Depending on how you interact with us or if you engage with an AI-powered feature, your personal information may be processed to provide relevant outputs or to improve the models we use. Unless you receive a supplemental privacy notice relating to such services, your personal information will continue to be treated in the same ways described in this Privacy Policy.

For Direct Marketing

We may use your personal information to send you newsletters, legal updates, event information, marketing communications, and other information that may interest you. You may opt-out of our marketing communications as described in the "Your Choices" section below.

For Research and Development

We use personal information for research and development purposes and to understand how people are using the Platform, including by generating and analyzing statistics, preferences, and usage trends, to make our Platform and other offerings better, diagnose technical issues, and develop new features and functionality. As part of these activities, we may create aggregated, de-identified or other anonymous data from personal information we collect. We make personal information into anonymous data by removing information that makes the data personally identifiable to you. We may use this anonymous data and share it with third parties for our lawful business purposes, including to analyze and improve the Platform and promote our business.

For Compliance, Fraud Prevention, and Safety

• To enforce our Terms of Use and other agreements we may have;
• To comply with applicable laws, regulations, lawful requests, and legal processes;
• To protect our, your, or others' rights, privacy, safety, or property (including by making and defending legal claims);
• To maintain the security and integrity of our business, the Platform, users, our third party business partners and service providers, our databases and other technology assets;
• Audit our internal processes for compliance with legal and contractual requirements and internal policies; and
• Prevent, identify, investigate and deter fraudulent, harmful, unauthorized, unethical or illegal activity, including cyberattacks and identity theft.

For Targeted Advertising

We, our service providers, and our third party advertising partners may collect and use certain categories of your personal information for targeted advertising purposes, which is also sometimes referred to as "cross-context behavioral advertising" under certain state privacy laws. We may contract with third-party advertising companies and social media companies to help us advertise our services, identify potential customers, and display ads on our Platform and other sites and services, including through the use of targeted advertising. These companies may use cookies and similar technologies to collect information about you over time across our Platform and other sites and services or your interaction with our emails, and use that information to serve ads that they think will interest you. You can learn more about your choices for limiting targeted advertising under "Advertising Choices" in the "Your Choices" section below.

Disclosure of Personal Information

In addition to the specific situations discussed elsewhere in this Privacy Policy, we may disclose personal information with the following categories of recipients:

• Service Providers. MM may share your personal information with third-party service providers that perform services for us or on our behalf, such as web-hosting companies, mailing vendors, SMS providers, analytics providers, event hosting services, and information technology providers. These third-party service providers have limited access to personal information as needed to perform their functions on our behalf and for no other purpose. No mobile information will be shared with third parties for marketing or promotional purposes, but such information may be shared with our service providers to provide texting services or as legally required.
• Other Law Firms or Lawyers. MM may share, at your direction or with your permission, your personal information with other law firms and/or other lawyers where we jointly represent a client and when we refer cases or potential cases to other counsel, or as otherwise required in connection with our legal representation of you. Personal information provided pursuant to an attorney/client relationship may not be shared with third parties except as is done with precautions to preserve confidentiality and any attorney/client privilege.
• Authorities, Law Enforcement, and Private Parties. MM may disclose personal information to comply with laws, regulations or other legal obligations, to assist in an investigation, to protect and defend our rights and property, or the rights or safety of third parties, to enforce our agreements, or for crime-prevention purposes. If you are a client of the firm or involved in a case represented by MM, we may disclose certain personal information to the courts, police, and law enforcement agencies.
• Business Transactions. MM may disclose your personal information to service providers, advisors, potential transactional partners, or other third parties in connection with the consideration, negotiation, or completion of a transaction such as a corporate divestiture, financing, merger, consolidation, acquisition, reorganization, sale, or other disposition of all or any portion of the business or assets of, or equity interests in, MM or our related companies (including in connection with a bankruptcy or similar proceedings).
• Advertising Partners. We may share your personal information with third party advertising or joint marketing partners for the purposes described in this Privacy Policy or at the time of collection. Mobile information will not be shared with third parties for marketing or promotional purposes.
• Other Users and the Public. When you submit feedback, reviews, or other content to the Services, we may identify you by displaying information such as your name along with the content you submit. We do not control how other users or third parties use any personal information that you make available to other users or the public.
• Professional Advisors. We may disclose your personal information to our professional advisors, such as lawyers, bankers, auditors, and insurers, where necessary in the course of the professional services that they render to us.
• Affiliates and Related Companies. We may share your personal information with companies that are affiliated with us or may be affiliated with us in the future for the purposes described in this Privacy Policy.
• Consent. MM may otherwise disclose your personal information in accordance with your prior direction or, in some cases, we may specifically ask you for your consent, such as when required by law.

Your Choices

Opt-Out of Marketing Communications

If you no longer wish to receive marketing communications from us, you can let us know by sending an email to contact@forthepeople.com or by mail at the address provided in the "Contact Us" section below. The electronic marketing communications we send may also contain an opt-out mechanism. Please note that it may take up to 10 calendar days to remove your contact information from our marketing communications lists.

Text Messages

We may offer communications via SMS texts or similar technology sent by MM or our service providers. To stop receiving text messages from a short code operated by MM, reply STOP. Note that we may send you a message to confirm receipt of your STOP request. Message and data rates may apply. You can also opt-out of MM marketing texts by emailing your request and mobile telephone number to contact@forthepeople.com.

Cookies

Most browsers let you remove or stop accepting cookies from the websites you visit. To do this, follow the instructions in your browser's settings. Many browsers accept cookies by default until you change your settings. If you do not accept cookies, you may not be able to use all functionality of the Platform and our Site may not work properly. For more information about cookies, including how to see what cookies have been set on your browser and how to manage and delete them, visit allaboutcookies.org.

Advertising Choices

Some of our advertising partners are members of the Network Advertising Initiative (NAI) and are subject to the Self-Regulatory Principles for Online Behavioral Advertising published by the Digital Advertising Alliance (DAA). You can obtain more information about these companies' information collection practices and opt-out of receiving targeted advertising from participating NAI and DAA members at:

• networkadvertising.org
• optout.aboutads.info

You can also limit collection of your information for targeted ads by blocking third party cookies in your browser settings or using privacy plug-ins or ad blocking software. Some of the third party advertising companies we may work with offer their own opt-out options, such as Google and Facebook. If you opt-out of targeted advertisements, you will still see advertisements online but they may be less relevant to you.

"Do-Not-Track"

Some web browsers and devices permit you to broadcast a "Do Not Track" signal to the online services that you visit. At this time, the Site does not respond to a "Do Not Track" signal. To find out more about "Do Not Track," please visit allaboutdnt.com.

Declining to Provide Information

We need to collect personal information to provide certain services. If you do not provide the information requested, we may not be able to provide those services.

Information Security

MM takes commercially reasonable measures to secure and protect the personal information we collect. Nevertheless, no security system is impenetrable. We cannot guarantee the absolute security of your personal information. Moreover, we are not responsible for the security of information you transmit to us over networks that we do not control, including the Internet and wireless networks.

Linked Websites

This Privacy Policy does not apply to third-party websites or social media features that may be accessed through links that we provide for your convenience and information. Accessing those links will cause you to leave MM's website and may result in the collection of information about you by a third party. We do not control, endorse or make any representations about those third party websites or their privacy practices, which may differ from ours. We encourage you to review the privacy policy of any site you interact with before allowing the collection and use of your information.

Using the Platform from Outside the United States

MM is headquartered in the United States of America, and we may have affiliates and service providers in the United States and other countries. Please be aware that your personal information may be transferred to, stored or processed in the United States, where our servers are located and our central database is operated, and other locations outside of your home country. The data protection and other laws of these countries might not be as comprehensive as those in your country. By using any portion of the Platform, you understand and, where applicable law permits, consent to the transfer of your personal information to our facilities in the United States and those third parties to whom we disclose it as described in this Privacy Policy.

Children's Privacy

We do not knowingly solicit or collect personal information online from children under the age of 18. Please contact us as provided below in the "Contact Us" section if you believe we may have collected such information.

Additional Notice to Residents of Applicable U.S. States

The following disclosures supplement the information provided elsewhere in this Privacy Policy and apply to residents of certain U.S. states where local law requires us to provide additional information about our processing activities, including, but not limited to, California, Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia.

For purposes of this section, "personal information" means "personal data" or "personal information" as such term is defined under applicable U.S. state privacy law but does not include information exempted from the scope of such law.

Collection and Use of Personal Information

We describe:

• The categories of personal information we may collect in the section titled "Types of Personal Information We Collect";
• The business and commercial purposes for which we process this information in the section titled "Use of Personal Information"; and
• The categories of third parties to whom we disclose this information in the section titled "Disclosure of Personal Information."

Personal Information We Disclose, "Sell," "Share," or Use for Targeted Advertising

Each category of personal information described above may be disclosed to the parties identified in the "Disclosure of Personal Information" section to operate our business or for another business purpose as described in this Privacy Policy or at the time of collection.

Additionally, the following categories of personal information are, or have been in the 12 months preceding the "Last Updated" date of this Privacy Policy, "sold" for monetary or other valuable consideration, shared for cross-context behavioral advertising or targeted advertising purposes: Individual Identifiers and Demographic Information (such as name, email, IP address, device ID, other online identifiers, gender, age, and marital status) and Internet or Network Activity.

We do not knowingly "sell," "share," or use for "targeted advertising" the personal information of consumers we know to be less than 18 years of age.

Your Privacy Rights

Depending on your residency and subject to certain legal limitations and exceptions, you may have the following rights relating to your personal information:

• Right to Know. The right to confirm whether we are processing personal information about you and, in some cases, to obtain certain details about our collection and use of your personal information.
• Right to Access & Portability. The right to obtain access to the personal information we have collected about you and, where required by law, the right to obtain a copy in a portable and readily usable format.
• Right to Correction. The right to correct inaccuracies in your personal information.
• Right to Deletion. The right to request the deletion of personal information that we maintain about you, subject to certain exceptions.
• Right to Opt-Out of "Sales." You can request to opt-out of the sale of your personal information within the meaning of applicable U.S. state privacy law.
• Right to Opt-Out of Targeted Advertising. You can request to opt-out of the use of your personal information for cross-context behavioral or targeted advertising.
• Right to Revoke Consent or Limit Use of Sensitive Data. Where we rely on your consent, you may revoke your consent to our processing of your sensitive data.
• Right to Non-Discrimination. The right not to receive retaliatory or discriminatory treatment for exercising any of the rights described above.

Exercising Your Privacy Rights

To exercise the privacy rights listed above where available under applicable law, please contact us by:

• Email: contact@forthepeople.com
• Phone (toll-free): 1-(844) 256-4550

If you wish to exercise your right to opt-out of "sales" or sharing of your personal information for purposes of targeted advertising as it relates to the use of cookies and other tracking technologies on our Site, please click the "Your Privacy Choices" link in the persistent footer of the Site. Where required by applicable law, the Site also recognizes the Global Privacy Control (GPC) signal.

When contacting us to exercise your rights, please:

• Tell us which right you are exercising and the personal information to which your request relates.
• Authorized Agents: If you are an authorized agent acting on behalf of another consumer, please clearly indicate this fact and your authority to act on such consumer's behalf.
• Help us verify your identity by providing information that allows us to confirm you are the person to whom the personal information relates.
• Direct our response delivery by providing an email or mailing address through which we can provide our response.

You will not have to pay a fee to access your personal information or to exercise any of the other rights. We try to respond to all legitimate requests within 45 days of your request, or as otherwise required by applicable law.

Appealing Privacy Rights Decisions

Depending on your state of residency, you may be able to appeal a decision we have made in connection with a request to exercise one of your privacy rights. All appeal requests should be submitted by emailing us at contact@forthepeople.com with the subject line, "Privacy Request Appeal." If you have concerns about the results of your appeal, you may have the ability to contact the Attorney General in your state.

Additional Notice to California Residents (Shine the Light)

If you are a California resident, we consider any request to opt-out of "sales" or "sharing" as a request pursuant to California's "Shine the Light" law to stop sharing your personal information covered by that law with third parties for their direct marketing purposes.

Additional Notice to Nevada Residents

Nevada Revised Statutes Chapter 603A allows Nevada residents to opt-out of the "sale" of certain types of personal information. If you are a Nevada resident who wishes to exercise your "sale" opt-out rights, you may submit a request to us using the contact information listed at the end of this Privacy Policy.

Deidentified Information

We may at times receive, or process personal information to create, deidentified data that can no longer reasonably be used to infer information about, or otherwise be linked to, a particular individual or household. Where we maintain deidentified data, we will maintain and use the data in deidentified form and not attempt to reidentify the data except as required or permitted by law.

Retention of Personal Information

We will only keep your personal information for as long as necessary to fulfill the purposes for which it was collected and processed, including for the purposes of satisfying any legal, regulatory, accounting, or reporting requirements. To determine the appropriate retention period, we will consider the amount, nature, and sensitivity of the personal information, the potential risk of harm from unauthorized use or disclosure, the purposes for which we process it, and the applicable legal requirements. In some circumstances we may anonymize your personal information so that it can no longer be associated with you, in which case it is no longer personal information.

Changes to This Privacy Policy

MM may change this Privacy Policy from time to time to reflect changes in our practices or in applicable law. Such changes will be effective upon posting the revised Privacy Policy on our Platform. You will be able to tell when this Privacy Policy was last updated by the Last Updated date included at the bottom of this Privacy Policy. By continuing to use our Platform, or communicating electronically with us thereafter, you acknowledge such changes to this Privacy Policy.

Contact Us

If you have any questions about this Privacy Policy or MM's information privacy practices, please contact us at: