Privacy Policy

Last updated: August 6, 2026. This page applies to dflawconsulting.com and to enquiries made through it.

1. Who we are

Deerfield & Falcone Law Consulting LLC (“we”, “us”, “the firm”) is a legal operations and compliance consulting company registered in the State of New Jersey, with its office at 4946 Deer Ridge Drive, Boonton, NJ 07005. We are the controller of the personal information described in this policy. Our privacy contact is the Managing Principal, James Harris, reachable at security@dflawconsulting.com.

2. What this policy covers

This policy explains what personal information we collect through this website and through enquiries and engagements, why we collect it, how long we keep it, who we share it with, and the choices available to you. It does not cover third-party websites we link to, each of which publishes its own policy.

3. Information we collect

3.1 Information you give us

• Enquiry details. Your name, organization, work email address, telephone number, the service you selected and the content of your message. Our website contact form opens your own email client; the message reaches us as ordinary email and is not stored on this website.
• Engagement information. If we work together, the contact details and correspondence necessary to run the engagement, plus any documents you choose to send us.
• Correspondence. Emails, letters and notes of calls, retained as a record of the advice given.

3.2 Information collected automatically

• Server logs. Our hosting provider records the IP address, browser user-agent, requested page, referring page and timestamp of each request, for security and troubleshooting.
• Cookies. A single strictly necessary cookie records your cookie choice. Optional analytics cookies are set only if you accept them. See our Cookie Policy.

3.3 Information we do not collect

We do not knowingly collect information from anyone under 16. We do not collect payment card details through this website. We do not purchase marketing lists, and we do not sell or share personal information for cross-context behavioural advertising as those terms are used under US state privacy laws.

4. Why we use your information

• To respond to your enquiry and provide a proposal (performance of, or steps toward, a contract).
• To deliver and administer consulting engagements, including invoicing.
• To keep records required for professional, tax and insurance purposes (legal obligation).
• To secure and maintain this website and detect misuse (legitimate interests).
• To send the quarterly note, where you have asked to receive it (consent, withdrawable at any time).

5. Advertising and measurement

We may advertise our services on search and content networks, including Microsoft Advertising and other providers. Where advertising or conversion measurement tags are used, they are loaded only after you accept optional cookies through the banner on this site. We do not use advertising technology to make automated decisions that produce legal or similarly significant effects about you, and we do not build advertising profiles about individuals who merely read this website.

6. Sharing your information

We share personal information only where necessary, and never in exchange for money. Recipients may include:

• Our hosting and email providers, acting under contract on our instructions.
• Professional advisers — accountants, insurers and independent attorneys — where relevant to a matter.
• Government bodies or courts where we are legally required to disclose.
• A successor entity in the unlikely event of a sale or reorganisation of the firm, subject to equivalent protection.

All personal information is processed in the United States. We do not routinely transfer client information outside the United States, and where a provider does so we require appropriate contractual safeguards.

7. How long we keep it

• Unsuccessful enquiries: 12 months from last contact.
• Engagement files and correspondence: 7 years from the close of the engagement, reflecting professional and tax record-keeping expectations.
• Client documents provided to us: returned or securely destroyed on request, and in any event within the period stated in the engagement letter.
• Server logs: typically 30–90 days depending on our hosting provider's configuration.

8. Your choices and rights

Depending on where you live — including under the New Jersey Data Privacy Act and comparable laws in other US states — you may have the right to request access to the personal information we hold about you, to correct inaccuracies, to request deletion, to obtain a portable copy, and to opt out of targeted advertising or the sale of personal information. We do not sell personal information.

To exercise any right, email security@dflawconsulting.com with the subject line “Privacy Request”. We will verify your identity using information already in our records, respond within 45 days, and tell you if we need a permitted extension. There is no charge for a first request in any 12-month period. If we decline a request you may appeal by replying to our response; we will decide the appeal within 45 days and explain our reasoning in writing.

9. Security

We use encrypted transport (HTTPS) for this website, encrypted storage for client documents, access controls limited to named personnel, multi-factor authentication on business accounts, and a documented breach-response procedure. No system is perfectly secure, and we ask that you do not send confidential or privileged material by unencrypted email before an engagement is in place.

10. Do Not Track and global privacy signals

This website does not respond to browser Do Not Track headers, because no common standard exists. Where a recognised opt-out preference signal is received, we treat it as a rejection of optional cookies.

11. Changes to this policy

We review this policy annually and whenever our practices change materially. The revision date at the top of this page always reflects the current version. Material changes affecting existing clients are notified by email.