- Personal Information We Collect
- How We Use Personal Information
- How We May Share Your Information
- Personal Information Collected Using Cookies and Other Internet Technologies
- How You Can Opt-Out of Informational Emails
- Social Media Communications
- Links to Other Websites
- How We Protect Personal Information
- United States Law Applies
- Contact Information
- Notices and Rights for California Consumers
Please read this Policy carefully before you use our website www.bipc.com, and blog sites, (collectively, the “Website”), communicate with us, or visit our offices. By accessing the Website, communicating with us online or offline, or visiting our offices, you are accepting the terms of this Policy, which may be updated and amended from time to time.
The categories and types of personal information we may collect from or about you will depend on the source and context in which we acquire your personal information.
Client information. We collect the full name, email address, postal address, phone number, and other identification and contact data from our clients. Depending on the nature and scope of the representation, we may also obtain sensitive personal information including (but not limited to): personal identifiers such as your Social Security Number; data of birth; driver’s license, passport and other government-issued numbers; financial and credit information including account numbers, salary, and other income; health and medical information including insurance; education; employment and professional information; and legally protected information such as genetic information, disability marital status, national origin, ethnicity, religion, race, gender, and gender identity.
Information about others relating to the representation of our clients. In the course of representing our clients we may obtain extensive personal information about parties, witnesses, family members, and other individuals related to a matter in which we represent our clients including (but not limited to) the categories and specific types of information identified in the preceding section.
Information you provide. We request your contact and other pertinent information when you sign up to receive our legal or legislative advisories, alerts, and publications, register for a seminar or event, post a comment on a Buchanan blog site, use the Contact Form found on our Website, apply for a job, or otherwise communicate with us, subscribe.
Records of communications. Our systems routinely log and retain records of incoming and outgoing phone calls, voicemails, emails, faxes, and text messages, as well as originals and electronic copies of letters and documents.
Office visits. When you visit our offices, we may collect your name, the date and times you visited, and who you were here to see. We may also use security cameras and other technologies to protect the physical security of our offices. If you use our guest wireless network, we may also log information about your use of that service for network administration, analysis, troubleshooting, and other operational purposes.
Payment data. We collect data necessary to process payments for legal services or event registrations. Payment card data are stored by a third party payment processing service.
Other sources. We may receive information about you from professional referrals, industry sources, and marketing research.
Buchanan may use the personal information described above for multiple purposes, including:
- Representing our clients;
- Responding to requests for information;
- Sending legal and legislative advisory emails, alerts, and publications you requested or that we believe may be of interest to you based on our communications with you;
- Inviting you to seminars, conferences, and other events hosted or sponsored by Buchanan;
- Conducting business operations including billing, auditing, and recordkeeping;
- Reviewing job applications;
- Operating the Website, including testing, usage analytics and market research, troubleshooting, and improving;
- Protecting the Website and operations against fraud, unauthorized access attempts, identity theft, or other unlawful activities;
- Defending, protecting, and enforcing our rights, interests, and property;
- Protecting the rights of and interests of our clients, personnel; and others.
- Maintaining the physical security of our offices;
- Complying with applicable laws, regulations, and other legal requirements; and
Buchanan does not sell personal information. In the course of providing legal services and managing our administrative operations, we may disclose personal information or personal information may be accessible to the following categories of third parties:
Service Providers: Third party service providers we engage to perform administrative and technology functions on our behalf may have access to personal information in order perform their functions, but they are not permitted to use personal information for their own commercial purposes. Examples include:
- Online applications (SaaS) including document management, e-discovery, time tracking, expense tracking; billing services; and job application processing;
- IT helpdesk and other technology support;
- E-mail services operation and management and filtering;
- Data center housing of our servers;
- Office services and maintenance
- Office and building security;
- Physical records duplication and storage; and
- Web hosting, contact management, and e-mail distribution of informational messages and other marketing services.
Data Analytics and Online Ad Services. We may authorize third-party data analytics and online advertising services to collect data about visitors to our Website. See the section titled “Personal Information Collected Using Cookies and Other Internet Technologies” for information about how we use and you can restrict the collection of data about your online activity.
Professional associates. We may share personal information with our auditors, other law firms, and professional service organizations.
Government entities, courts, and liability insurers. We may share personal information with government regulators and courts to comply with any law, regulation, legal process, governmental request, or where we have a good faith belief that access, use, preservation, or disclosure of such information is reasonably necessary:
- To enforce agreements;
- In connection with claims, disputes, or litigation;
- To protect our rights or interests, property or safety or that of others; and
- To protect users of our Website and others from fraudulent, abusive, or unlawful use of such services;
- In case of an emergency.
Transaction parties. Subject to applicable laws and the Rules of Professional Conduct, we may share personal information in connection with due diligence or conduct of a transaction such as a practice merger or acquisition.
Online Data Collection. When you use our Website, third party services we authorize including Google Analytics and online advertising services, collect data about you and your online activities using cookies and similar technologies. These data may include personal information, for example, your location when you access our Website, the type of device, operating system, and browser you use, and the sites you visit before and after our Website. We do not receive Internet Protocol (IP) or mobile device identifiers that may be known to the service provider.
We use this information for analytics purposes to create statistical reports about, for example, new and returning visitors to our Website, the pages they access, the websites they visited before and after our Website, general geographic location, the dates and times of their visits, and Website pages accessed. These reports help us understand how our Website is used and performs. We do not use any of this information to directly identify visitors.
We also use this information to deliver marketing messages to relevant users by means of third party online advertising services that direct ad placement and provide ad response analytics.
The data analytics and online advertising providers may combine and use data collected through your use of our Website with data they collect over time and across different websites for their own purposes. You can learn about how Google collects and processes data at https://policies.google.com/technologies/partner-sites. You can learn about the controls Google offers to manage the collection and use of your information at https://policies.google.com/privacy. We recommend that you review these other entities’ privacy policies or notices at the links provided above.
- Managing the settings on your browser and device to limit how your content information and preferences are stored. See allaboutcookies.org for information.
- Communicating directly with third parties that we may authorize to collect data on our Website as explained at:
- Purchasing a utility from an independent software provider that you install on your computer browsers to limit tracking of your browsing activity;
- Visiting http://optout.aboutads.info to learn more about personalized advertising and how to opt-out of personalized advertising on your web browser and mobile applications by companies participating in the Digital Advertising Alliance
Our Website does not respond to Do Not Track signals.
You may direct us to stop sending legal advisory and other informational emails to you by following the "unsubscribe" instructions located near the bottom of each email we send. Please note that opt-out requests may take up to ten days to be effective. If you unsubscribe from receiving informational emails, you will still receive communications related to our professional services or business relationship.
We maintain reasonable security procedures and practices appropriate to the nature of the categories and types of personal information we collect to protect against loss, misuse, unauthorized access, disclosure, alteration, or destruction.
California Consumer Privacy Act
Note that the Right to Know and Right to Delete described below may be subject to the attorneys’ professional duty of confidentiality, the attorney-client privilege, the attorney work product doctrine, judicial protective orders, and other legal privileges or protections. These professional rules and obligations may override an individual’s ability to learn about or obtain deletion of the personal information we obtained about them in the course of representing clients or otherwise fulfilling our legal or professional responsibilities.
Notice at Collection of Personal Information
Personal Information We May Collect
How We Use Personal Information
How You Can Opt-Out of Informational Emails
Purposes for Collecting Personal Information
Categories (as defined in the CCPA) of Personal Information Collected
Categories of Third Parties—Personal Information Disclosed for a Business Purpose
Client services; document and e-mail management; time and expense tracking
Firm administration and operations including human resources, billing and payment processing, recordkeeping; auditing; legal matters and compliance
Responding to requests for information; distribution of legal advisories; marketing and advertising; conducting seminars and events
Operation and protection of Website and facilities
 Personal identifiers include real name, alias, postal address, email address, telephone number, IP address, device address, account name, Social Security, driver’s license, passport, customer or other unique personal identifier.
 Other consumer identifiable data include signature, physical characteristics or description, state identification card number, insurance policy number, education, bank account number, credit card number, debit card number, and other financial information, medical information, and health insurance information.
 Protected Classifications refers to characteristics of protected classifications under California or federal law, such as race, color, national origin, religion, age, sex, gender, gender identity, gender expression, sexual orientation, marital status, medical condition, ancestry, genetic information, disability, citizenship status, and military and veteran status.
 Commercial activity information includes records of personal property, products or services purchased or considered, and other purchasing histories.
 Online Activity refers to internet and other electronic network activity information including browsing history, search history, and interactions with websites, applications, or advertisements.
No Sales of Personal Information
Buchanan does not sell personal information. Likewise, Buchanan does not offer financial incentives for the collection of personal information.
Right to Know about Personal Information We Collect, Disclose, or Sell
California Consumers have the right to request any of the following information from a business regarding personal information collected about the consumer or the consumer’s household during the last twelve (12) months (“Right to Know”):
- The categories of personal information we collected.
- The categories of sources from which the personal information is collected.
- The business or commercial purpose for collecting or selling personal information.
- For personal information sold or exchanged for value with a third party: categories of personal information and categories of third parties.
- For personal information disclosed to a third party for a business purpose: categories of personal information; and categories third parties.
- The specific pieces of personal information collected about you (except for very sensitive personally identifiable information, which we will describe but not transmit).
The process by which we verify and respond to your requests is explained below under “How to Make a Verifiable California Consumer Request” and “How We Will Respond to a California Consumer Request.” You may submit a Right to Know request here.
Right to Deletion of Personal Information
California Consumers have the right to request that Buchanan delete any personal information about the consumer that we have collected, subject to a range of exclusions permitted by law (“Right to Delete”). For example, we are not required to delete personal information if it is necessary (among other exclusions) to complete a transaction, is reasonably used for an ongoing business relationship, is necessary to comply with a legal obligation, or is used internally in a lawful manner that is compatible with the context in which the consumer provided the information.
Once we receive and verify your request, we will separately confirm your request and follow appropriate procedures to verify the identity and authority of the person submitting the request. If the Right to Delete request is confirmed and verified, we will delete (and direct our service providers to delete) the requested personal information from our records, unless an exclusion applies. If we are unable to fulfill all or part of your request, we will let you know why (for example, if we have a permitted reason to retain certain information if the identity of the requesting person cannot be verified).
The process by which we verify and respond to your requests is explained below under “How to Make a Verifiable California Consumer Request” and “How We Will Respond to a California Consumer Request.” You may submit a Right to Delete request here
Right to Designate an Authorized Agent
California consumers have the right to designate an authorized agent to act on their behalf to submit a Right to Know or Right to Delete request, or exercise other rights on the consumer’s behalf. An authorized agent may be a natural person or a business entity registered with the Secretary of State. An authorized agent must also submit to the Company written proof of their authorization to act on the consumer’s behalf.
How to Make a Verifiable California Consumer Request
California Consumers may submit a request to exercise any of their rights described above using any of the following methods:
By toll-free phone:
By postal mail:
Union Trust Building,
501 Grant Street, Suite 200
Pittsburgh, PA 15219-4413
Please note that in order for us to verify certain requests (including verification of your identity, California residency, and – for requests made on behalf of someone else – your relationship with the individual on whose behalf the request is being made), you may be required to confirm information that we have on file for you; including email address, phone number, full name, address and other personal information. We reserve the right to deny a consumer request if the identity or authority of the requesting party cannot be confirmed.
How We Will Respond to a California Consumer Request
We will confirm receipt of your Right to Know or Right to Delete request within ten days and may request additional information necessary to verify that you are permitted to make the request. We will respond to any verifiable consumer request within 45 days of receiving it, subject to delays and exclusions permitted by law. If we require more time to respond, we will let you know the reason why and the extension period in writing. If you have a password-protected online account with us, we will respond via that account. If you do not have an online account, we will use the email address or U.S. Postal address you provided to us when making the request.
For a Right to Know request, our response will cover the 12 month period preceding our receipt of the request. If we cannot comply with all or part of your request, we will explain the reasons why. For data portability requests, we will select a format to provide your personal information that is readily useable and should allow you to transmit the information readily from one entity to another entity.
We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.
Protection from Discrimination for Exercising California Consumer Rights
We will not discriminate against a California Consumer for exercising any of the rights described in this section. This means that except as legally permitted we will not:
- Deny you goods or services.
- Charge you different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties.
- Provide you a different level or quality of goods or services.
- Suggest that you may receive a different price or rate for goods or services or a different level or quality of goods or services.