Effective as of January 9, 2024.

Thank you for visiting The Jo Law Firm. We believe that everyone has a right to privacy. This Privacy Policy (“Policy”) describes how The Jo Law Firm, PC, The Jo Law Firm Korea (Joonghan Jo’s DBA), and our affiliates (collectively, “The Jo Law Firm,” “Firm,” “we”, “us” and “our”) collect, use, share, or otherwise process personal information.

We may collect personal information through our digital or online properties or services that link to this Privacy Policy (including our website at thejolawfirm.com and other websites and resources made available to our clients and third parties, social media pages, and online data rooms that we operate), as well as through our marketing activities, services we provide to our corporate, institutional and nonprofit clients, live events, any offline business interactions you may have with us, email, text, and other electronic messages between you and this website, and other activities described in this Privacy Policy (collectively, the “Service”).

This Privacy Policy is global, meaning it applies to all The Jo Law Firm Services. We may provide additional or supplemental privacy policies for certain products or services.

This Policy may be amended or updated from time to time, so please check it regularly for updates.

 Table of Contents

1. What Personal Information We Collect or Process
2.  How We Use the Personal Information
3. With Whom We May Share the Personal Information
4. Grounds for Using Your Personal Information
5. Storage and Security of Your Personal Information
6. Your Rights, Choices, and Disclosures
7. Other Sites and Services
8. International Data Transfer
9. Privacy Policy Changes
10. Questions and Contact Information
11. Region and State-Specific Terms
    a. Notice to California Residents
    b. Notice to Colorado Residents
    c. Notice to Virginia Residents
    d. Notice to Users in China
    e. Notice to Users in Singapore
    f. Notice to European Users
    g. Notice to Users in South Korea

 

1. Personal Information We Collect or Process

 Information you provide to us. 

You may provide us with your information as follows:

• Communications, feedback and survey data, and related data. We may collect or obtain personal information such as your name, email address, telephone number and any other personal information you choose to share when you reach out to us for support, give us feedback, participate in optional surveys, attend our events, participate in product research or training, or otherwise interact or communicate with us. This information may include: call center recordings and call monitoring records, chat and text records, voicemails, photographs, and video images.
• Payment and transactional data. We may collect or obtain payment card information or bank account numbers used to bill for our services and your billing and payment history.
• Marketing data. We may collect or obtain your preferences for receiving our marketing communications and details about your engagement with them.
• Contact data. We may collect or obtain your information such as your first and last name, salutation, billing and mailing addresses, phone number, email address, professional title, and company name.
• Demographic data. We may collect or obtain your city, state, country of residence, and postal code.
• Online identifiers and account information. We may collect or obtain your usernames or passwords for any of our websites.
• Dietary information. You may provide dietary preferences that we may collect in connection with events and you may disclose to us in connection with your attendance at catered events.
• Audio, electronic, and visual information. We may collect or obtain photographs, video, and voice recordings of conversations with you as permitted by law, and security camera recordings of your activity in our offices. From time to time our interactions with you will be conducted over video-conference, and such video conferences may be recorded.
• Professional or employment-related information.  We may collect or obtain your job title, employer information, work history, and education information, such as the schools you attended.
• Other data not specifically listed here. We may collect or obtain any information which we will use as described in this Privacy Policy or as otherwise disclosed at the time of collection.

 

Third-party sources. 

Our website is designed to help you connect with other people and businesses. As a result of those connections, others may be able to input personal information about you, including other customers using the website. For example, our client may share personal information about you with us in order to use and benefit from our website. You also may be able to input or process personal information about others, for example, if you are an administrator of one of our services. If you input information about others into the website, you must only do so if you have first provided sufficient notice and received any required permissions, and have an appropriate legal basis if required by applicable law.

 We may also receive personal information about you from other third parties where you have provided consent or where permitted by applicable law. We protect and process the personal information obtained from those third parties as described in this Privacy Policy, consistent with any additional restrictions imposed by the source of the information. We may also combine personal information we receive from you with personal information we obtain from other third parties. Our third-party sources include:

• Other users. As described above, we may receive personal information about you from other users, such as your, spouse, employer, or other business customers using our website (e.g., businesses from which you buy products or services, or with which you otherwise interact). We may also collect such personal information through features like member referral programs.
• Linked third-party services. If you choose to sync a third-party account/service with your account, we will receive information from that account/service according to your settings with that account/service. This may include details of your bank account information, social media information, or purchase history. 
• Supplemental information and identity verification providers. We work with certain third parties to help us verify your identity and the specifics of your business, supplement the personal information you have provided, and ensure the accuracy of your personal information. For example, we use third-party providers to validate your contact information (e.g., name, mailing address, email address, phone number) or to provide additional details about your business. These providers may include, for example, your financial institution, telecommunications provider, or email provider.
• Public sources. We may receive information from government agencies, public records, social media platforms, and other publicly available sources.
• Private sources. We may obtain information from data providers, social media platforms, data licensors, account intelligence providers (who help us identify the types of visitors to our Service), and entities to which we provide services (which may include your employer).
• Partner organizations. We may obtain information from pro bono groups and nonprofits.
• Marketing partners. We may collect information from joint marketing partners and event co-sponsors.

 

 Automatic data collection. 

We, our service providers, and our business partners may automatically log information about you, your computer or mobile device, and your interaction over time with the Service, our communications, and other online services, such as:

• Usage information. We may collect information about your use of our website, such as the pages you viewed, the services and features you used or interacted with, your browser type, and details about any links or communications with which you interacted.
• Online behavioral data. We may automatically collect certain personal information about your use and interactions with our website, customers’ websites or e-commerce stores, social media websites, and marketing campaigns that we or our customers organize, including device information (such as your IP address and unique device IDs), page view information and search results, links, and if you are a customer contact, whether or not a campaign presented or sent to you using our offerings has been viewed, delivered, opened, clicked on, whether it has bounced or was treated as spam.
• General location data. Certain features on our website may collect your precise location information, device motion information, or both.
• Device data. We may collect or obtain your computer or mobile device’s operating system type and version, manufacturer and model, browser type, screen resolution, RAM and disk size, CPU usage, device type (e.g., phone, tablet), IP address, unique identifiers (including identifiers used for advertising purposes), language settings, mobile device carrier, radio/network information (e.g., Wi-Fi, LTE, 3G), and general location information such as city, state or geographic area.
• Internet activity or electronic network activity information. We may collect or obtain information about your interaction with our websites, emails, and other online content, such as the pages you viewed, emails you opened, links you clicked, how long you spent on a page, navigation paths between pages or screens, information about your activity, your preferences, access times, and duration of access. In addition, if you are given a key card, a key fob, or remote entry access to our offices, we log information about when and where you use the key card, key fob, or other access method.
• Communication interaction data. We may collect or obtain information about your interaction with our email, chat messages, voicemail, text, or other communications (e.g., whether you open and/or forward emails) – we may do this through the use of pixel tags (which are also known as clear GIFs), which may be embedded invisibly in our emails.

 Cookies and similar technologies

Pixel Tags or Clear GIFs, also known as Web Beacons or Web Bugs, are transparent graphical images placed on a website. We may use these items on our website to permit us, for example, to count users who have visited those pages or opened an email and for other related Website statistics (for example, recording the popularity of certain Website content and verifying system and server integrity).

We use Google Analytics, a web analytics service of Google Inc. (“Google”) which uses cookies to identify the frequency of use of certain areas of our website and to identify preferences. For more information regarding how Google collects, uses, and shares your information please visit http://www.google.com/policies/privacy/partners/. The information regarding your use of this Website that is generated by the Cookie (including your truncated IP address) is transferred to a Google server in the United States and stored there. Google will use this information to analyze your use of the Website, compile reports on activity for us, and perform further services associated with Website use and Internet use. Google may also transmit this information to third parties where required by law or to the extent that third parties process these data on behalf of Google. You can deactivate Google Analytics using a browser add-on if you do not wish the analysis to take place. You can download the add-on here:  https://tools.google.com/dlpage/gaoptout?hl=en.

 

Children

 

We do not knowingly collect information from users of our website under the age of 18 and/or their internet usage, and such persons are not authorized to use the website. By using the website, you represent that you are at least 18 years old. You also represent, by accessing or using the website, that you are of legal age to enter into legal agreements.  If we learn we have collected or received personal information from a child under 18 without verification of parental consent, we will delete that information. If you believe we might have any information from or about a child under 18, please contact us at communication@thejolawfirm.com.

 

2.      How We Use the Personal Information

We may use your personal information in a number of ways or as otherwise described at the time of collection:

 

Service delivery and operations.

We may use your personal information to:

• Manage our business, including security, facilities access, firm systems, compliance, and database use.
• Provide legal services to our clients, handle their files and bills, and collect their payments.
• Provide and operate the Service.
•  Fulfill your event registration requests, communicate with you about the events, and host you at the events.
• Register visitors to our offices for security reasons and manage non-disclosure agreements that visitors may be required to sign.
•  Communicate with you, including to provide support for the Service and to respond to your requests, questions and feedback.

 

Research and development.

We may use your personal information to improve and develop our products, Service, and our business by analyzing how they are used and interacted with, by training artificial intelligence models and other machine learning models, as well as by assessing the use of and interactions with our website and certain content our customers send or display through the website, including by conducting data analytics to develop insights about you, your needs, and your preferences, so we can make more informed predictions, recommendations, and products for our customers. As part of these activities, we may create aggregated, de-identified and/or anonymized data from personal information we collect. We make personal information into de-identified or anonymized data by removing information that makes the data personally identifiable to you. We may use this aggregated, de-identified or otherwise anonymized data and share it with third parties for our lawful business purposes, including to analyze and improve the Service and promote our business and will not attempt to reidentify any such data.

 

Marketing and advertising.

We, our service providers, our third-party advertising partners, third parties with whom we co-sponsor events may collect and use your personal information to:

• Market services, products and experiences, including to deliver gifts and promotional materials, product recommendations and other non-transactional communications via email, post, telephone, SMS, or push notifications, in accordance with your marketing preferences.
•  Personalize your experience and tailor recommendations, advertising, and offers presented to you, including through the development of insights about you and your needs based on your interactions with our website’s products, services, and offerings. These advertisements may be displayed to you on our digital properties, including our websites and mobile apps, media platforms, connected devices, or other third-party platforms and channels.

You may opt-out of our marketing communications as described in the Opt-out of communications section below. 

 

Automated processing.

When you use or interact with features on our website like Google Forms, chatbots, digital assistants, or similar features, we may process your personal information using automated and manual (human) methods. For example, when we use automated processing on your personal information to provide a more personalized and enhanced experience on our website, you may see instantly tailored recommendations and insights. Or when we analyze personal information and transactions we have collected or received about you, we can provide you with personalized advice, predictions, recommendations and experiences. Certain laws may provide you with the right to object to the automated processing of your personal information. Please review these rights in the Region and State-Specific Terms section below.

 

Service improvement and analytics. 

We may use your personal information to analyze your usage of the Service, improve the Service, improve the rest of our business, help us understand user activity on the Service, including which pages are most and least visited and how visitors move around the Service, as well as user interactions with our emails, and to develop new products and services. 

 

Compliance and protection. 

We may use your personal information to:

• Protect our, your or others’ rights, privacy, safety or property (including by making and defending legal claims); 
•  Comply with applicable laws, lawful requests, and legal processes, including to provide information in response to subpoenas, investigations, and requests from public authorities, or to cooperate with them;
•  Enforce the terms and conditions that govern the Service;
•  Prevent, identify, investigate, and deter fraudulent, harmful, unauthorized, unethical, or illegal activity, including cyberattacks and identity theft; and
• Audit our internal processes for compliance with legal and contractual requirements or our internal policies;

 

Use for new purposes. 

In some cases, we may specifically ask for your consent to use your personal information, such as when required by law. We may use your personal information for reasons not described in this Privacy Policy where permitted by law and when the reason is compatible with the purpose for which we collected it.

 

3. With Whom We Share Personal Information

We may share information with internal personnel and our affiliates in order to provide our products and services.  We may also share your personal data with third parties (within or outside your country of residence) who perform services on our behalf, including: 

 

 

• Affiliates. Our affiliates.
• Clients and other parties. Clients, prospective clients, and parties that may be involved in our client engagements or interactions with prospective clients, and their representatives, vendors, and advisors.
• Business and marketing co-sponsors. With your consent, we may share your personal information with third parties who are jointly providing features, sales initiatives, promotions, or events with us.
• Service providers. We may share your personal information with third parties that provide services on our behalf or help us operate the Service or our business (such as information technology and software services, mailing services, API services, marketing services, event management services, and cyber and physical security services). This also includes our legal support vendors, including e-discovery and deposition services and litigation support, as well as other experts, consultants, and other professionals who assist in connection with our representation of our clients.
• Third parties designated by you. We may share your personal information with third parties where you have instructed us or provided your consent to do so. We will share personal information that is needed for these other companies to provide the services that you have requested. 
• Professional advisors. We may share your personal information with our professional advisors, such as lawyers, auditors, bankers, and insurers, in the course of the professional services that they render to us.
• Authorities and others. We may provide your personal information to law enforcement, government authorities, and private parties, as we believe in good faith to be necessary or appropriate for the Compliance and protection purposes described above. 
•  Business transferees. If we are involved with a merger, asset sale, financing, liquidation, bankruptcy, or the acquisition of all or part of our business to another company, we may share your personal information with that company and its advisors before and after the transaction date.

We may obtain your written consent from time to time in electronic form by using online agreements or other acknowledgments on the Services, including for any other contemplated uses of your personal data not addressed in this Privacy Policy. Please read all online agreements carefully before accepting them. 

 

4.Grounds for Using Your Personal Information

We rely on the following legal grounds to process your personal information:

 

• Consent. Some uses of your personal data as described in this Privacy Policy are subject to your consent, such as the use of Cookies. To withdraw your consent, please contact us at communication@thejolawfirm.com. You may also refrain from providing, or withdraw, your consent for Cookies via your browser and mobile settings.
• Performance of a Contract. We may need to collect and use your personal information to enter into a contract with you and to perform services that you request. 
• Legitimate Interests. We may use your personal information for our legitimate interests to provide our products and services and to improve our website and the content contained thereon.  We may use technical information as described in this Privacy Policy and use personal information for our marketing purposes consistent with our legitimate interests and any choices that we offer or consents that may be required under applicable law. 
•  Compliance with Legal Obligations. We may use your personal information as necessary to comply with our legal obligations.
  

5.Storage and Security of Your Personal Information

 

 We retain personal information for as long as necessary to fulfill the purposes for which we collected it, including for the purposes of satisfying any legal, accounting, or reporting requirements, to establish or defend legal claims, or for compliance and protection purposes. To determine the appropriate retention period for personal information, we may consider factors such as the amount, nature, and sensitivity of the personal information, the potential risk of harm from unauthorized use or disclosure of your personal information, the purposes for which we process your personal information and whether we can achieve those purposes through other means, and the applicable legal requirements. When we no longer require the personal information we have collected about you, we may either delete it or de-identify, aggregate, or anonymize it. If we de-identify, aggregate or anonymize your personal information (so that it can no longer be associated with you), we may use this information indefinitely without further notice to you.

 

No Internet or e-mail transmission is ever fully secure or error-free, however.  We therefore cannot guarantee absolute security of your data, and we are not responsible for processes and networks that we do not control. Users assume the risk of security breaches and the consequences resulting from them. Please be careful in deciding what information you send to us via email or over the Internet. 

 

6.Your Rights, Choices, and Disclosures

You have the rights and choices as described below:

•  Opt-out of communications. You may opt out of marketing-related emails by emailing us at communication@thejolawfirm.com or calling us at +1 415 275 0665. Please note that if you choose to opt-out of marketing-related emails, you may continue to receive service-related and other non-marketing emails. 
• Cookies. You may be able to opt out of interest based advertising by visiting https://thenai.org/opt-out/. If you reside in California, Connecticut, Colorado or Virginia, please refer to the relevant sections below under Region and State-Specific Terms for more information about opting out of tracking for targeted advertising purposes, or opting-out of sales and/or sharing. 

• Do Not Track. Some Internet browsers may be configured to send “Do Not Track” signals to the online services that you visit. We currently do not respond to “Do Not Track” signals. To find out more about “Do Not Track,” please visit http://www.allaboutdnt.com. 

• Declining to provide information. We need to collect personal information to provide certain services. If you do not provide the information we identify as required or mandatory, we may not be able to provide those services.

 The Region and State-Specific Terms below provide information about your additional rights if you are a qualified individual.

 

7. Other Sites and Services

Our website may contain links to other websites for your convenience or information.  These websites may be operated by companies unaffiliated with us, and we are not responsible for the content or privacy practices of those websites.  Linked websites may have their own terms of use and privacy policies, and we encourage you to review those policies whenever you visit the websites. 

In particular, certain providers may be located in or have facilities that are located in a different jurisdiction than either yours or ours. So if you elect to engage the services of a third-party provider, then your information may become subject to the laws of the jurisdiction(s) in which that third-party provider or its facilities are located. Once you leave our website or are redirected to a third-party page, website or application, you are no longer governed by this Privacy Policy or our website’s Terms of Service.

  

8. International Data Transfer

Our headquarters is located in the United States, and we engage with service providers internationally. Consequently, your personal information may be transferred to the United States or other locations where privacy laws may not be as protective as those in your state, province, or country.

If you are located in the EEA or the UK, see the Notice to European Users below.

  

9. Privacy Policy Changes

We may update this Privacy Policy from time to time and without prior notice to you to reflect changes in our information practices, and any such amendments shall apply to information already collected and to be collected. Your continued use of the Website after any changes to our Privacy Policy indicates your agreement with the terms of the revised Privacy Policy.  Please review this Privacy Policy periodically especially before you provide personal data to us.  If we make material changes to this Privacy Policy, we will notify you here, by email, or by means of a notice on our home page.  The date of the last update of the Privacy Policy is indicated at the top of this Privacy Policy. 

 

10. Questions and Contact Information

If you would like to access, correct, amend or delete any personal information we have about you, register a complaint, or request more information, contact us by emailing at communication@thejolawfirm.com or calling us at +1 415 275 0665.

  

11. Region and State-Specific Terms

Additional terms may apply to you based on where you live or what products or services you use.

 

 Notice to California Residents

 Scope. This section describes how we collect, use, and share Personal Information of California residents under the California Consumer Privacy Act (“CCPA”) and your rights with respect to that Personal Information. In case of any inconsistencies between this section and the rest of this Privacy Policy, this section prevails. The scope of this section is the following:

• California Residents. This section applies only to California residents. Please note that not all rights listed below may be afforded to all users and that if you are not a California resident, you may not be able to exercise these rights. In addition, we may not be able to process your request if you do not provide us with sufficient detail to allow us to confirm your identity or understand and respond to it.
• Personal Information. For purposes of this section, the term “Personal Information” has the meaning given in the CCPA but does not include information exempted from the scope of the CCPA. Please note that we may claim legal exemptions for certain types of personal information and certain our companies from all or certain parts of the CCPA. In some cases, we may provide a different Privacy Policy to certain categories of California residents, such as employees and job applicants, in which case that notice will apply instead of this section. “Sensitive Personal Information” has the meaning given to such term or similar terms in the CCPA.

 Your California privacy rights. As a California resident, you have the rights listed below. However, these rights are not absolute, and in certain cases we may decline your request as permitted by law.

• Information/Know. You may request that we confirm whether or not we are processing your Personal Information and request the following information about how we have collected and used your Personal Information during the past 12 months:
  • The categories of Personal Information that we have collected.
  • The categories of sources from which we collected Personal Information.
  • The business or commercial purpose for collecting Personal Information.
  • The categories of third parties with which we share Personal Information.
  • The categories of Personal Information that we disclosed for a business purpose.
  • The categories of third parties to whom the Personal Information was disclosed for a business purpose.
• Access. You may request a copy of the Personal Information that we have collected about you.
• Appeal. You may have the right to appeal our denial of any request validly submitted. 
• Correction. You may ask us to correct inaccurate Personal Information that we have collected about you.
• Deletion. You may ask us to delete certain Personal Information that we have collected from you.
• Nondiscrimination. You are entitled to exercise the rights described above free from discrimination as prohibited by the CCPA.

 Exercising your right to know, access, appeal, correct, and delete Personal Information. You may submit requests to exercise your right to information/know, access, appeal, correction, or deletion by emailing at communication@thejolawfirm.com or calling us at +1 415 275 0665.

 Verification. In order to protect your personal information from unauthorized access or deletion, we may require you to verify your credentials before you can submit a rights request. If you do not have an account with us, or if we suspect your account has been accessed without your authorization, we may ask you to provide additional personal information for verification. If we are subsequently unable to confirm your identity, we may refuse your rights request.

 Authorized agents. You may use an authorized agent to submit a rights request. If you do so, the authorized agent must present signed written authorization to act on your behalf, and you will also be required to independently verify your own identity directly with us and confirm with us that you provided the authorized agent permission to submit the rights request. This verification process is not necessary if your authorized agent provides documentation showing that the authorized agent has power of attorney to act on your behalf under Cal. Prob. Code §§ 4121 to 4130.

 Personal Information that we collect, use and disclose. The chart below summarizes the Personal Information we collect by reference to the categories of Personal Information specified in the CCPA, and describes our practices currently and during the 12 months preceding the effective date of this Privacy Policy. Information you voluntarily provide to us, such as in free-form webforms, may contain other categories of personal information not described in this chart. We are voluntarily providing this supplemental Privacy Policy to give California consumers additional information required by the CCPA. Under the CCPA, California consumers have the right to know the categories of Personal Information collected during the preceding 12 months, the categories of sources from which Personal Information is collected, the purpose for collecting and disclosing Personal Information, the categories of third parties to whom each category of Personal Information is disclosed for a “business purpose,” and the categories of third parties to whom each category of Personal Information is “sold” or “shared.” We may use each of the categories of Personal Information below for the purposes identified in the How We Use the Personal Information section of this Privacy Policy above (except for any Sensitive Personal Information, which will only be processed for the purposes for which it was collected and as otherwise specifically permitted by applicable law, including CCPA).

 

Personal Information (“PI”) we collect	CCPA Statutory Category	Categories of third parties to whom we “disclose” PI for a business purpose
· Communications, feedback and survey data, and related data	· Identifiers · Commercial information · California customer records · Internet or Network Information	· Any of the parties identified in the How we share your personal information section above
· Payment and transactional data	· Commercial information · California consumer records · Financial information	·  Any of the parties identified in the How we share your personal information section above
· Marketing data	· Identifiers · Commercial information · California customer records · Internet or Network Information	· Any of the parties identified in the How we share your personal information section above
· Contact data	· Identifiers · Commercial information ·California customer records	· Any of the parties identified in the How we share your personal information section above
· Demographic data	·Identifiers ·  California customer records	· Any of the parties identified in the How we share your personal information section above
·  Online identifiers and account information	·Identifiers	· Any of the parties identified in the How we share your personal information section above
· Dietary information	·  Identifiers ·  Commercial information · California customer records	·Affiliates · Service providers · Third parties designated by you · Professional advisors ·Authorities and others · Business transferees
· Audio, electronic, and visual information	· Sensory Information ·Identifiers · California consumer records	· Affiliates · Service providers · Third parties designated by you · Professional advisors · Authorities and others ·Business transferees
·Professional or Employment-related data	· Identifiers ·California consumer records	·Any of the parties identified in the How we share your personal information section above
·Data about others	· Identifiers · California consumer records	·Any of the parties identified in the How we share your personal information section above
·Device data	·Identifiers · Internet or Network Information	· Any of the parties identified in the How we share your personal information section above
· Online behavioral data and usage information	·Identifiers ·Commercial information · Internet or Network Information	·Any of the parties identified in the How we share your personal information section above
· General location data	·Geolocation data	·Any of the parties identified in the How we share your personal information section above
·Communication interaction data	·Identifiers ·Commercial information ·California consumer records  ·Internet or Network Information	·Any of the parties identified in the How we share your personal information section above
·Data derived from the above	·Inferences	·Affiliates ·Service providers ·Clients and other parties ·Professional advisors ·Authorities and others ·Business transferees ·Business and marketing co-sponsors
· Other Sensitive Personal Information We do not require that you provide this information, but it may be revealed in identity data or other information we collect, or as voluntarily disclosed by you	·Protected Classification Characteristics	· N/A

  

Notice to Colorado Residents

 

Scope. This section describes how we collect, use, and share Personal Data of Colorado residents under the Colorado Privacy Rights Act (“CPA”) and your rights with respect to that Personal Data. In case of any inconsistencies between this section and the rest of this Privacy Policy, this section prevails. The scope of this section is the following:

• Colorado Residents. This section applies only to Colorado residents. Please note that not all rights listed below may be afforded to all users and that if you are not a Colorado resident, you may not be able to exercise these rights. In addition, we may not be able to process your request if you do not provide us with sufficient detail to allow us to confirm your identity or understand and respond to it.
• Personal Data. For purposes of this section, the term “Personal Data” has the meaning given in the CPA but does not include information exempted from the scope of the CPA. Please note that we may claim legal exemptions for certain types of personal information and certain our companies from all or certain parts of the CPA. In some cases, we may provide a different Privacy Policy to certain categories of Colorado residents, such as employees and job applicants, in which case that notice will apply instead of this section.

 Your Colorado privacy rights. As a Colorado resident, you have the rights listed below. However, these rights are not absolute, and in certain cases we may decline your request as permitted by law.

 

• Information/Know. You may request that we confirm whether or not we are processing your Personal Information and request the following information about how we have collected and used your Personal Information during the past 12 months:
  • The categories of Personal Information that we have collected.
  • The categories of sources from which we collected Personal Information.
  • The business or commercial purpose for collecting Personal Information.
  • The categories of third parties with which we share Personal Information.
  • The categories of Personal Information that we disclosed for a business purpose.
  • The categories of third parties to whom the Personal Information was disclosed for a business purpose.
• Access. You may request a copy of the Personal Information that we have collected about you.
• Appeal. You may have the right to appeal our denial of any request validly submitted. 
• Correction. You may ask us to correct inaccurate Personal Information that we have collected about you.
• Deletion. You may ask us to delete certain Personal Information that we have collected from you.
• Nondiscrimination. You are entitled to exercise the rights described above free from discrimination as prohibited by the CPA.

 Exercising your right to know, access, appeal, correct, and delete Personal Information. You may submit requests to exercise your right to information/know, access, appeal, correction, or deletion by emailing at communication@thejolawfirm.com or calling us at +1 415 275 0665.

 Verification. In order to protect your personal information from unauthorized access or deletion, we may require you to verify your credentials before you can submit a rights request. If you do not have an account with us, or if we suspect your account has been accessed without your authorization, we may ask you to provide additional personal information for verification. If we are subsequently unable to confirm your identity, we may refuse your rights request.

 

Notice to Connecticut Residents

 Scope. This section describes how we collect, use, and share Personal Data of Connecticut residents under the Connecticut Data Privacy Act (“CDPA”) and your rights with respect to that Personal Information. In case of any inconsistencies between this section and the rest of this Privacy Policy, this section prevails. The scope of this section is the following:

• Connecticut Residents. This section applies only to Connecticut residents. Please note that not all rights listed below may be afforded to all users and that if you are not a Connecticut resident, you may not be able to exercise these rights. In addition, we may not be able to process your request if you do not provide us with sufficient detail to allow us to confirm your identity or understand and respond to it.
•  Personal Data. For purposes of this section, the term “Personal Data” has the meaning given in the CDPA but does not include information exempted from the scope of the CDPA. Please note that we may claim legal exemptions for certain types of personal information and certain our companies from all or certain parts of the CDPA. In some cases, we may provide a different Privacy Policy to certain categories of Connecticut residents, such as employees and job applicants, in which case that notice will apply instead of this section.

 Your Connecticut privacy rights. As a Connecticut resident, you have the rights listed below. However, these rights are not absolute, and in certain cases, we may decline your request as permitted by law.  

• Information/Know. You may request that we confirm whether or not we are processing your Personal Information and request the following information about how we have collected and used your Personal Information during the past 12 months:
  • The categories of Personal Information that we have collected.
  • The categories of sources from which we collected Personal Information.
  • The business or commercial purpose for collecting Personal Information.
  • The categories of third parties with which we share Personal Information.
  • The categories of Personal Information that we disclosed for a business purpose.
  • The categories of third parties to whom the Personal Information was disclosed for a business purpose.
• Access. You may request a copy of the Personal Information that we have collected about you.
• Appeal. You may have the right to appeal our denial of any request validly submitted. 
• Correction. You may ask us to correct inaccurate Personal Information that we have collected about you.
• Deletion. You may ask us to delete certain Personal Information that we have collected from you.
• Nondiscrimination. You are entitled to exercise the rights described above free from discrimination as prohibited by the CDPA.

 Exercising your right to know, access, appeal, correct, and delete Personal Information. You may submit requests to exercise your right to information/know, access, appeal, correction, or deletion by emailing at communication@thejolawfirm.com or calling us at +1 415 275 0665.

 Verification. In order to protect your personal information from unauthorized access or deletion, we may require you to verify your credentials before you can submit a rights request. If you do not have an account with us, or if we suspect your account has been accessed without your authorization, we may ask you to provide additional personal information for verification. If we are subsequently unable to confirm your identity, we may refuse your rights request.

 

Notice to Virginia Residents

 Scope. This section describes how we collect, use, and share Personal Data of Virginia residents under the Virginia Consumer Data Protection Act (“VCDPA”) and your rights with respect to that Personal Data. In case of any inconsistencies between this section and the rest of this Privacy Policy, this section prevails. The scope of this section is the following:

• Virginia Residents. This section applies only to Virginia residents. Please note that not all rights listed below may be afforded to all users and that if you are not a Virginia resident, you may not be able to exercise these rights. In addition, we may not be able to process your request if you do not provide us with sufficient detail to allow us to confirm your identity or understand and respond to it.
• Personal Data. For purposes of this section, the term “Personal Data” has the meaning given in the VCDPA but does not include information exempted from the scope of the VCDPA. Please note that we may claim legal exemptions for certain types of personal information and certain our companies from all or certain parts of the VCDPA. In some cases, we may provide a different Privacy Policy to certain categories of Virginia residents, such as employees and job applicants, in which case that notice will apply instead of this section.

Your Virginia privacy rights. As a Virginia resident, you have the rights listed below. However, these rights are not absolute, and in certain cases, we may decline your request as permitted by law.

 

• Information/Know. You may request that we confirm whether or not we are processing your Personal Information and request the following information about how we have collected and used your Personal Information during the past 12 months:
  • The categories of Personal Information that we have collected.
  • The categories of sources from which we collected Personal Information.
  • The business or commercial purpose for collecting Personal Information.
  • The categories of third parties with which we share Personal Information.
  • The categories of Personal Information that we disclosed for a business purpose.
  • The categories of third parties to whom the Personal Information was disclosed for a business purpose.
• Access. You may request a copy of the Personal Information that we have collected about you.
• Appeal. You may have the right to appeal our denial of any request validly submitted. 
• Correction. You may ask us to correct inaccurate Personal Information that we have collected about you.
• Deletion. You may ask us to delete certain Personal Information that we have collected from you.
• Nondiscrimination. You are entitled to exercise the rights described above free from discrimination as prohibited by the VCDPA.

 

Exercising your right to know, access, appeal, correct, and delete Personal Information. You may submit requests to exercise your right to information/know, access, appeal, correction, or deletion by emailing at communication@thejolawfirm.com or calling us at +1 415 275 0665.

 

Verification. In order to protect your personal information from unauthorized access or deletion, we may require you to verify your credentials before you can submit a rights request. If you do not have an account with us, or if we suspect your account has been accessed without your authorization, we may ask you to provide additional personal information for verification. If we are subsequently unable to confirm your identity, we may refuse your rights request.

  Notice to Users in South Korea

Please refer to Notice to Users in South Korea available at https://thejolawfirm.com/.

 Notice to Users in China

 Scope. This section describes how we collect, use, and share Personal Information of individuals located in the People’s Republic of China (“China”) under applicable Chinese laws, including China’s Personal Information Protection Law (“PIPL”) and your rights with respect to that Personal Information. In case of any inconsistencies between this section and the rest of this Privacy Policy, this section prevails. For purposes of this section, the term “Personal Information” means various kinds of information related to identified or identifiable natural persons recorded by electronic or other means, excluding anonymized information.

 Processing of sensitive Personal Information. Your payment and transactional data and dietary information may be considered sensitive Personal Information. We process your sensitive Personal Information only to the extent necessary for purposes as described in the How We Use the Personal Information section above. We employ technical, organizational and physical safeguards designed to protect the personal information we collect.

 Sharing and disclosure of your Personal Information. In the event that we need to share your Personal Information with business transferees as described in the How we share your personal information section of this Privacy Policy, we will inform you of the name and contact information of the recipient of your Personal Information. The recipient shall comply with this Privacy Policy when processing your Personal Information. If the processing methods and purposes of the recipient fall beyond the scope of this Privacy Policy, such a recipient shall obtain your consent.

 We will not publicly disclose your Personal Information unless we have obtained your prior consent or the public disclosure is required by applicable Chinese laws, legally binding enforcement actions or court orders.

 International transfer of your Personal Information. We are headquartered in the United States and may use service providers that operate in other countries. We may transfer your Personal Information outside China for necessary purposes as described in the How we use your personal information section of this Privacy Policy. We will adopt the lawful transfer mechanism(s) required under applicable Chinese laws and take measures to ensure the overseas recipients can provide the same level of protection as required under the PIPL.

 Your rights. You have the right to access, correct, restrict or object to processing, withdrawal of consent, and obtaining a copy of your Personal Information retained by us.

 If we have not deleted your Personal Information, you also have the right to request to delete your Personal Information under the following circumstances:

• The purposes of processing have been achieved or cannot be achieved, or your Personal Information is no longer necessary for achieving the purposes of processing;
• We cease to provide our services, or the retention period has expired;
• You have withdrawn your consent;
• Our processing is in violation of applicable Chinese laws or the agreements with you; or
• Other circumstances as provided by applicable Chinese laws.

Contact us. To request to exercise your rights or if you have any questions about this section or how we process your Personal Information, please contact us at communication@thejolawfirm.com. We will respond to your request in a timely manner after verifying your identity.

 Notice to Users in Singapore

Scope. In this Section, references to “Personal Information” in this Privacy Policy are equivalent to “Personal Data” governed by Singaporean laws. For purposes of this section, the term “Personal Data” means data, whether true or not, about an individual who can be identified from that data or from that data and other information to which the organization has or is likely to have access. This section describes how we collect, use, and share Personal Data of individuals located in Singapore under applicable Singaporean laws, including the Personal Data Protection Act (“PDPA”) and your rights with respect to that Personal Data. In case of any inconsistencies between this section and the rest of this Privacy Policy, this section prevails.

 International transfer of your Personal Data. We are headquartered in the United States and may use service providers that operate in other countries. We may transfer your Personal Data outside Singapore for necessary purposes as described in the How we use your personal information section of this Privacy Notice. We will take such necessary measures to ensure that the overseas recipients of your Personal Data are bound by legally enforceable obligations to ensure that these overseas recipients provide a standard of protection to the Personal Data so transferred that is comparable to the protection under the PDPA.

 Your rights. You may request that we provide access to your Personal Data that is in our possession or under our control as well as information about the ways in which your Personal Data has been used or disclosed by us within a year before the date of your request. You may also request that we correct your Personal Data that is in our possession or under our control, unless an exception to the correction request applies, or we are satisfied on reasonable grounds that a correction should not be made.

 Contact us. To request to exercise your rights or if you have any questions about this section or how we process your Personal Data, please contact us at communication@thejolawfirm.com. We will respond to your request in a timely manner after verifying your identity.

 

 Notice to European Users

Scope. In this Section, references to “Personal Information” in this Privacy Policy are equivalent to “Personal Data” governed by EU and UK data protection laws. For purposes of this section, the term “Personal Data” means information about an individual, where that individual is either directly identified or can be identified. It does not include ‘anonymous data’ (i.e., information where the identity of an individual has been permanently removed). The information provided in this section applies only to individuals in the United Kingdom (“UK”) and the European Economic Area (“EEA”) (hereafter collectively referred to as “Europe”).

 Controller. We are responsible for your personal data. The Jo Law Firm comprises The Jo Law Firm, PC, a California professional law corporation incorporated under the laws of the State of California, United States of America, and registered with the register of the State Bar of California, The Jo Law Firm Korea (Joonghan Jo’s DBA) is formed under Korean laws with an office in South Korea. Information on our affiliated practices can be found https://thejolawfirm.com/eng/offices/. For the purposes of European data protection legislation, your data will be controlled by our affiliate or subsidiary undertaking that you have instructed or that is providing services to you or communicating to you and each such entity is regarded as an independent data controller of your personal data.

Data Protection Officer. Our data protection officer can be contacted at: communication@thejolawfirm.com or at the following postal address: The Jo Law Firm, 2261 Market Street, STE 10522, San Francisco, CA 94114, USA.

 Legal bases for processing. We have set out below, in a table format, the legal bases we rely on in respect of the relevant Purposes for which we use your personal information and categories of personal information involved – for more information, see “How We Use the Personal Information” and “Personal Data We Collect or Process.” If you have questions about the legal basis of how we process your Personal Data, contact us at communication@thejolawfirm.com:

Processing purpose	Categories of Personal Data involved	Legal basis
Service delivery and operations	Contact data   Demographic data   Communications data   Online identifiers and account information   Payment and transactional data   Dietary information   Audio, electronic, and visual information   Professional or employment-related information   Device data   Internet activity or electronic network activity information    Other data	Processing is necessary to perform the contract governing our provision of our Service or to take steps that you request prior to signing up for the Service.
For research and development	Any and all data types relevant in the circumstances	These activities constitute our legitimate interests. We do not use your Personal Data for these activities where our interests are overridden by the impact on you.
We may need to process your Personal Data for additional purposes, such as:   To ensure access and maintenance of the Service, and to ensure their proper functioning.   For compliance, fraud prevention and safety.   For sharing your Personal Data with third parties as described in this Privacy Policy.   To disclose your Personal Data to a prospective or actual purchaser or seller in the context of a merger, acquisition or other reorganization or sale of our business or assets.    For the collection of statistical information about the use of the Service.   To protect our interests as a company, for different purposes, such as:   Enforcement of the Terms of Service.   Assess claims that any content violates the rights of third-parties.   For the establishment or exercise our legal rights or defending against legal claims.	Contact data   Demographic data   Communications data   Online identifiers and account information   Payment and transactional data   Audio, electronic, and visual information   Professional or employment-related information   Device data   Internet activity or electronic network activity information    Other data	We rely on our legitimate interests to process your Personal Data when performing these processing activities. We do not use your Personal Data for these purposes where our interests are overridden by the impact on you.
For marketing and advertising purposes	Contact data   Demographic data   Communications data   Device data   Internet activity or electronic network activity information    Marketing data   Other data	Processing is based on your consent where that consent is required by applicable law. Where such consent is not required by applicable law, we process your Personal Data for these purposes based on our legitimate interests in promoting our business.
5. Compliance with legal obligations and protection purposes	Any and all data types relevant in the circumstances.	Processing is necessary to comply with our legal obligations. Where Compliance with Law is not applicable, we and any relevant third parties have a legitimate interest in participating in, supporting, and following legal process and requests, including through co-operation with authorities. We and any relevant third parties may also have a legitimate interest of ensuring the protection, maintenance, and enforcement of our and their rights, property, and/or safety.
6. Further uses: We may use your Personal Data for reasons not described in this Privacy Policy.	Any and all data types relevant in the circumstances.	The original legal basis relied upon, if the relevant further use is compatible with the initial purpose for which the Personal Data was collected. Consent, if the relevant further use is not compatible with the initial purpose for which the Personal Data was collected.

 

Your rights. Subject to certain exemptions, and in some cases dependent upon the processing activity we are undertaking, you may have the following rights under data protection laws:

• Right of access, restriction of processing, and erasure. You may contact us to request information about the personal data we have collected from you and to request the correction, modification or deletion of such personal information, which requests we will do our best to honor subject to any legal and contractual obligations.  To make a request or to ask us a question about our data practices, please contact us via email at admin@Company.com. 
• Right to rectification. You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
• Right to withdraw your consent at any time. When we process your personal data based on your consent, you have the right to withdraw it at any time. However, this will not affect the lawfulness of any processing carried out before you withdraw your consent.
• Right to object at any time. You have the right to object at any time to receiving marketing or promotional materials from us by either following the opt-out instructions in commercial e-mails or by contacting us, as well as the right to object to any processing of your personal data based on your specific situation. In the latter case, we will assess your request and provide a reply in a timely manner, according to our legal and contractual obligations.  Some non-marketing communications are not subject to a general opt-out, such as communications about transactions and disclosures to comply with legal requirements. 
•  Right to data portability. You have the right to port a machine-readable copy of your personal information to you or a third party of your choice, in certain circumstances. Note that this right only applies to automated information for which you initially provided consent for us to use or where we used the information to perform a contract with you.
• Right not to be subject to an automated decision, including profiling. We do not make automated decisions using your personal data that may negatively impact you.
• Right to lodge a complaint with a supervisory authority. If you consider that the processing of your personal data infringes your privacy rights, you have the right to lodge a complaint with a supervisory authority, in the member state of your habitual residence, place of work, or place of the alleged infringement.

 

Exercising These Rights. You may submit these requests by email to communication@thejolawfirm.com or at the following postal address: The Jo Law Firm, 2261 Market Street, STE 10522, San Francisco, CA 94114, USA. We may request specific information from you to help us confirm your identity and process your request. Whether or not we are required to fulfill any request you make will depend on a number of factors (e.g., why and how we are processing your personal information), if we reject any request you may make (whether in whole or in part) we will let you know our grounds for doing so at the time, subject to any legal restrictions.

Your Right to Lodge a Complaint with Your Supervisory Authority. In addition to your rights outlined above, if you are not satisfied with our response to a request you make, or how we process your personal information, you can make a complaint to the data protection regulator in your habitual place of residence.

• For users in the European Economic Area – the contact information for the data protection regulator in your place of residence can be found here: https://edpb.europa.eu/about-edpb/board/members_en
• For users in the UK – the contact information for the UK data protection regulator is below:
  • The Information Commissioner’s Office
  • Water Lane, Wycliffe House Wilmslow – Cheshire SK9 5AF
  • Tel. +44 303 123 1113
  • Website: https://ico.org.uk/make-a-complaint/

 

Cross-border data transfer. We are headquartered in the U.S. and many of our service providers, advisers, partners or other recipients of data are also based in the U.S. This means that, if you use the Service, your personal information will necessarily be accessed and processed in the U.S. It may also be provided to recipients in other countries outside Europe. In such circumstances, those parties’ processing of your personal information will involve a transfer of your personal information outside of Europe where privacy laws may not be as protective as those in your state, province, or country. Where we share your personal information with third parties who are based outside Europe, we will take steps to transfer your personal information in accordance with applicable law.

You can obtain further information or a copy of or access safeguards under which your personal information is transferred outside of the EEA and/or UK by contacting us at communication@thejolawfirm.com.