Privacy Policy

  WEBSITE PRIVACY POLICY FOR THICKSTUN LAW LLC
 

Last Updated: February 8, 2025

1. INTRODUCTION AND SCOPE

This Privacy Policy ("Policy") describes how Thickstun Law LLC ("Firm," "we," "us," or "our") collects, uses, discloses, and protects information obtained through our website www.thickstunlaw.com (the "Site"). This Policy applies to all visitors, users, and others who access the Site. By using the Site, you agree to the terms of this Policy.
 

This Policy is designed to comply with applicable Indiana and federal laws, including the Indiana Personal Information Protection Act (Ind. Code § 24-4.9 et seq.) and the Indiana Disclosure of Security Breach Act (Ind. Code § 24-4.9-3 et seq.). It is subject to and does not supersede the attorney-client privilege or our ethical obligations under the Indiana Rules of Professional Conduct.

2. INFORMATION WE COLLECT

2.1 Personal Information: We may collect personal information that you provide directly to us, including:
 a) Contact information (e.g., name, email address, phone number)
 b) Professional or employment-related information (e.g., job title, company name)
 c) Case-related information (subject to attorney-client privilege), such as:

• Details about your legal issue or inquiry

• Documents or evidence related to your case

• Information about opposing parties or witnesses

2.2 Automatic Data Collection: We collect certain information automatically when you visit the Site, including:
 a) Usage details (e.g., traffic data, location data, logs)
 b) IP address
 c) Browser type and operating system
 d) Referring/exit pages
 e) Date/time stamps of visits
 

2.3 Cookies and Tracking Technologies: We use cookies and similar tracking technologies to collect information about your browsing activities on our Site. For more information, please see our Cookie Policy at www.thickstunlaw.com/cookie-policy.

3. USE OF INFORMATION

We use the information we collect:
 a) To provide and maintain our Site
 b) To respond to inquiries and provide requested information about our legal services
 c) To evaluate potential client matters and determine conflicts of interest
 d) To comply with legal and ethical obligations
 e) To improve our Site and services
 f) To analyze usage patterns and trends
 g) For any other purpose with your consent
 

We will not use information provided by potential clients for any purpose other than to consider whether to form an attorney-client relationship, unless otherwise expressly agreed.

4. DISCLOSURE OF INFORMATION

4.1 We may disclose personal information:
 a) To our employees and partners as necessary to provide legal services
 b) To third-party service providers who assist in operating our Site or conducting our business, including:

• IT and cybersecurity service providers (e.g., firewall and antivirus software providers)

• Cloud storage providers (e.g., secure document storage services)

• Practice management software providers (e.g., case management and billing systems)

• Marketing and analytics providers (e.g., email marketing services, website analytics tools)

c) To comply with legal obligations or respond to lawful requests
 d) To protect the rights, property, or safety of our Firm, our clients, or others
 

4.2 Any disclosure of information will be made in compliance with the Indiana Rules of Professional Conduct and other applicable ethical standards.

5. DATA SECURITY

5.1 We have implemented reasonable security measures to protect your personal information, as required by Ind. Code § 24-4.9-3-3.5, including:
 a) Encryption of data in transit and at rest using industry-standard protocols (e.g., TLS, AES-256)
 b) Access controls and multi-factor authentication procedures
 c) Regular security assessments and penetration testing
 d) Employee training on data protection, confidentiality, and cybersecurity best practices
 e) Physical security measures for our offices and data centers
 

5.2 Data Breach Notification: In the event of a data breach involving personal information, we will notify affected individuals and the Indiana Attorney General without unreasonable delay, but no later than forty-five (45) days after discovery of the breach, as required by Ind. Code § 24-4.9-3-3. Our notification will include:
 a) A description of the incident and the type of personal information involved
 b) Steps we have taken to protect your information from further unauthorized access
 c) Measures you can take to protect yourself from potential harm
 d) Contact information for our Firm and relevant authorities

6. DATA RETENTION

We retain personal information for as long as necessary to fulfill the purposes for which it was collected, comply with our legal obligations, resolve disputes, and enforce our agreements. Retention periods may vary based on the type of information and its purpose, in accordance with our professional obligations and applicable laws, including Ind. Code § 24-4.9-3-3.5(c).
 

Specific retention periods include:
 a) Contact information for potential clients: 2 years from last contact
 b) Case-related information for non-clients: 1 year from last contact
 c) Client files: 7 years after case closure, unless otherwise required by law or client agreement
 d) Marketing communications preferences: Until you opt-out or request deletion
 e) Website usage data: 2 years from collection

7. YOUR RIGHTS AND CHOICES

Under Indiana law, you have the right to:
 a) Request access to your personal information
 b) Request correction of inaccurate personal information
 c) Request deletion of your personal information, subject to certain exceptions
 d) Opt-out of certain data sharing practices
 

To exercise these rights, please contact us using the information provided in Section 12. We will respond to verifiable requests within a reasonable timeframe, not to exceed 30 days. To verify your request, we may ask you to provide:
 a) Your name, email address, and phone number
 b) A description of your relationship with our Firm
 c) Specific details about the information you are requesting
 

We will not discriminate against you for exercising your rights under this Policy.

8. INTERNATIONAL DATA TRANSFERS

Thickstun Law LLC primarily operates in Indiana and does not routinely transfer personal data internationally. In the rare event that international transfer becomes necessary (e.g., for cross-border legal matters), we will ensure appropriate safeguards are in place, such as:
 a) Standard contractual clauses approved by relevant data protection authorities
 b) Consent from the individual for the specific transfer
 c) Compliance with applicable international data transfer regulations
 

We will comply with all applicable laws and regulations governing international data transfers.

9. CHANGES TO OUR PRIVACY POLICY

We may update this Policy from time to time. If we make material changes, we will post the updated Policy on this page and change the date at the top of this Policy. For significant changes, we will provide a prominent notice on our Site or send you an email notification. We encourage you to review this Policy periodically.

10. INDIANA-SPECIFIC PROVISIONS

10.1 Attorney-Client Privilege: Nothing in this Policy is intended to waive or limit the attorney-client privilege. Information protected by attorney-client privilege will be handled in accordance with applicable legal and ethical standards, including the Indiana Rules of Professional Conduct.
 

10.2 Professional Conduct: This Policy is subject to and does not supersede our ethical obligations under the Indiana Rules of Professional Conduct, including our duty of confidentiality to clients (Rule 1.6).
 

10.3 Electronic Communications: By using our Site or communicating with us electronically, you acknowledge that electronic communications may not always be secure. We take reasonable precautions to protect the confidentiality of electronic communications, but you should exercise caution when sending sensitive information electronically.

11. DISPUTE RESOLUTION

In the event of a privacy-related dispute:
 a) We encourage you to contact us first to attempt to resolve the issue informally.
 b) If we cannot resolve the dispute informally, you may have the right to file a complaint with the Indiana Attorney General's Office or pursue other legal remedies.
 c) Any legal action arising from this Policy shall be governed by Indiana law and subject to the exclusive jurisdiction of the courts in Monroe County, Indiana.

12. CONTACT INFORMATION

To exercise your privacy rights, ask questions, or comment about this Policy and our privacy practices, contact us at:
 

Thickstun Law LLC
P.O. Box 5244
Bloomington, Indiana 47407
Phone: 812-727-3120

 

13. GLOSSARY OF TERMS

To help you better understand this Policy, we provide the following definitions:

• Personal Information: Information that identifies, relates to, describes, or is reasonably capable of being associated with a particular individual.

• Cookies: Small text files placed on your device to collect and store information about your browsing habits.

• Data Breach: Unauthorized access to or disclosure of personal information.

• Encryption: The process of converting information into a code to prevent unauthorized access.

• IP Address: A unique numerical label assigned to each device connected to a computer network.

14. ACKNOWLEDGMENT

By using the Site, you acknowledge that you have read this Privacy Policy and agree to its terms.

15. CALIFORNIA CONSUMER PRIVACY ACT (CCPA) NOTICE

While our firm primarily serves Indiana residents, we recognize that some of our clients or website visitors may be California residents. If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA). For more information about your CCPA rights and how to exercise them, please visit our CCPA Privacy Notice at www.thickstunlaw.com/ccpa-privacy-notice.