Effective date: September 4, 2026Last updated: September 4, 2026
Khashan Law Firm, APC (“Khashan Law,” “we,” “us,” or “our”) operates khashanlaw.com. This policy explains what information we collect through this website, why we collect it, who receives it, and the choices you have. It applies to this website only. It does not apply to information we obtain in the course of representing a client, which is governed by our engagement agreement and by the confidentiality and privilege rules that apply to attorneys.
1. Please read this before you contact us
Using this website does not create an attorney-client relationship. Sending us a message through the contact form, the live chat, email, or a phone call does not by itself make us your lawyers, and it does not make your message privileged. An attorney-client relationship is formed only when we and you sign a written engagement agreement.
Do not send confidential or time-sensitive case details through this website. That includes the live chat, which is operated by a third party service provider on our behalf. If your matter has a filing deadline or a statute of limitations approaching, call us at (951) 461-2387 rather than relying on a web message.
Tell us enough to know whether we can help you. Nothing more.
2. Information we collect
2.1 Information you give us
When you submit our contact form, use the live chat, click a phone or email link and then reach out, or click our WhatsApp button, you may provide:
- Your name, email address, and telephone number
- A description of your legal matter, which may include details about an injury, a medical condition, your employer, or your employment
You choose what to include. We ask only for what we need to evaluate whether we can assist you.
2.2 Information collected automatically
When you visit the site, we and our service providers automatically collect:
- Identifiers: your IP address, and cookie or device identifiers set by the analytics and security tools described in section 4
- Internet activity: the pages you view, the time and duration of your visit, the links and buttons you click, the site or search engine that referred you, and general information about your browser, operating system, and device type
- Approximate location: a general geographic area (typically city or region) inferred from your IP address. We do not collect precise GPS location from this website.
We do not record or reconstruct your individual browsing session, and we do not capture what you type into a form field. Our analytics are configured so that form field contents and chat message contents are never transmitted to our analytics providers. See section 5.
2.3 California statutory categories
For purposes of the California Consumer Privacy Act, as amended by the California Privacy Rights Act (“CCPA”), we collect the following categories of personal information:
| Category | Examples we collect | Source |
|---|---|---|
| A. Identifiers | Name, email address, telephone number, IP address, cookie and device identifiers | You, and automatically from your browser |
| B. Customer records (Cal. Civ. Code 1798.80(e)) | Name, telephone number, email address you provide | You |
| F. Internet or other electronic network activity | Pages viewed, clicks, referring site, browsing behavior on our site | Automatically from your browser |
| G. Geolocation data | Approximate city or region derived from IP address | Automatically from your browser |
| I. Professional or employment-related information | Employer name or employment details, if you volunteer them in an employment law inquiry | You |
| Sensitive personal information | Health or medical information, if you volunteer it when describing an injury | You |
We do not collect biometric information, precise geolocation, government identifiers such as a Social Security number, financial account information, or education records through this website. We do not draw inferences from your activity to create a profile about your characteristics or preferences.
Sensitive personal information. If you describe an injury or a medical condition when contacting us, that description may constitute sensitive personal information. We use and disclose it only for the purpose you provided it, which is to evaluate and respond to your inquiry, and for the related purposes permitted under CCPA section 1798.121(a). We do not use it to infer characteristics about you. You are not required to include any medical detail in a first message to us.
3. Why we collect it
- To respond to your inquiry and evaluate whether we can represent you
- To operate, secure, and maintain the website, including preventing spam and abuse of our forms
- To understand which pages and topics are useful to visitors, so we can improve the site
- To measure whether our marketing reaches people who need a lawyer in the communities we serve
- To comply with legal and ethical obligations, including conflict-of-interest checking
We do not use your information for automated decision-making, and we do not profile you.
4. Cookies, analytics, and the third parties involved
This site uses cookies and similar technologies. Some are necessary for the site to function and to protect it from abuse. Others measure how the site is used.
The third-party services that operate on this website are:
| Service | Provider | What it does | What it receives |
|---|---|---|---|
| Google Analytics | Google LLC | Measures site usage | IP address, cookie identifier, pages viewed, clicks, referring site |
| Google Tag Manager | Google LLC | Loads and manages the tags on this site | Delivers the tags; itself sets no analytics cookie |
| Google reCAPTCHA | Google LLC | Protects our contact form from automated abuse | IP address, browser and device signals, interaction with the page. Subject to the Google Privacy Policy and Terms |
| Google Fonts | Google LLC | Serves the typefaces used on the site | IP address, when your browser requests the font file |
| Google Maps | Google LLC | Displays our office locations | IP address and interaction with the map, if a map is shown or clicked |
| YouTube | Google LLC | Plays embedded videos | IP address and viewing activity, when you play an embedded video |
| Tawk.to live chat | tawk.to Ltd. | Operates the chat widget | Your IP address, pages viewed, and anything you type into the chat, including any name or email you enter |
| Meta Platforms, Inc. | Click-to-chat messaging | Nothing until you click the WhatsApp button. If you do, your message and phone number are handled by WhatsApp under Meta’s own privacy policy | |
| Content delivery and hosting | Cloudflare, Inc. and GoDaddy.com, LLC | Deliver and host the site, and filter malicious traffic | IP address and request data, for delivery and security |
We keep this list current. If we add a service that receives your information, we update this section.
We do not run advertising pixels on this website. We do not use Meta Pixel, Google Ads conversion tracking, TikTok, LinkedIn Insight, or any similar advertising tag. We do not use session recording or replay tools.
4.1 Your choices about cookies
You can control cookies through your browser settings. Most browsers let you refuse or delete cookies, and let you be notified before one is set. Blocking cookies may affect how parts of the site work. To opt out of Google Analytics across all sites, you can install the Google Analytics Opt-out Browser Add-on.
5. Live chat, and what we deliberately do not collect
Our live chat is operated for us by tawk.to Ltd. Chat transcripts are stored by that provider on our behalf. Please do not use the chat to share confidential details about your legal matter.
We have configured our analytics so that the following are never transmitted to any analytics or marketing provider:
- The contents of any field you type into our contact form, including your name, email, phone number, and your description of your matter
- The contents of any chat message, or any name or email you enter into the chat
- Any hashed, encrypted, or encoded version of the above
Our analytics record that a form was started, submitted, or failed, and that a chat was opened or a message was sent. They do not record what the form or the message said. We hold ourselves to this standard because the people who contact a law firm are often prospective clients, and the confidentiality duties owed to a prospective client begin before any engagement exists.
6. Who we share information with
- Service providers. The companies listed in section 4, which process information on our behalf and are contractually restricted from using it for their own purposes.
- Professional advisors and co-counsel, where relevant to evaluating or handling a matter, and subject to confidentiality obligations.
- Legal compliance. We may disclose information if required by law, subpoena, or court order, or where necessary to protect our rights, our safety, or the safety of others.
We do not disclose your information to anyone else.
6.1 We do not sell or share your personal information
We do not sell your personal information, and we have not sold it in the preceding twelve months.
We do not share your personal information for cross-context behavioral advertising, and we have not done so in the preceding twelve months. “Share” here has the specific meaning given by the CCPA.
We have configured our analytics to support this. Google Signals and advertising features are disabled, advertising data sharing is turned off, and Google processes analytics data for us as a service provider under Google’s data processing terms.
We do not knowingly sell or share the personal information of consumers under 16 years of age.
7. How long we keep it
| Data | Retention |
|---|---|
| Website analytics (event and user-level data) | 14 months, then automatically deleted by the analytics platform |
| Live chat transcripts | Stored by our live chat provider on our behalf for as long as the chat record remains relevant to the inquiry it came from. You can ask us to delete a transcript using the contact details in section 12. |
| Contact form submissions received by email | Retained as part of our intake records, in accordance with our records retention practices and applicable professional obligations |
| Server and security logs | Retained by our hosting and CDN providers for their standard operational periods |
8. Your California privacy rights
If you are a California resident, you have the right to:
- Know what personal information we have collected about you, the categories of sources, the business purpose, and the categories of third parties to whom we disclose it
- Access a copy of the specific pieces of personal information we hold about you
- Delete personal information we have collected from you, subject to exceptions, including where we must retain it to comply with a legal obligation or to exercise or defend legal claims
- Correct inaccurate personal information we maintain about you
- Limit our use and disclosure of sensitive personal information. As stated in section 2.3, we already limit ourselves to the purposes permitted without a request.
- Opt out of the sale or sharing of personal information. As stated in section 6.1, we do not sell or share personal information, so there is nothing to opt out of. We do not display a “Do Not Sell or Share My Personal Information” link for that reason.
- Not be discriminated against for exercising any of these rights. We will not deny you services, charge you a different price, or provide you a different level of service because you exercised a privacy right.
How to exercise them
Email info@khashanlaw.com with the subject line “Privacy Request,” or call (951) 461-2387, or write to us at the Murrieta address in section 12.
We will acknowledge your request within 10 business days and respond within 45 days. If we need more time, we will tell you and may take up to 90 days total. We must verify your identity before acting on a request to know, delete, or correct, and we may ask you for information sufficient to match you to our records. We will not use that information for any other purpose.
Authorized agents. You may use an authorized agent to submit a request. We will require written proof of the agent’s authority and may ask you to verify your own identity directly.
9. Opt-out preference signals
Because we do not sell or share personal information as those terms are defined by the CCPA, an opt-out preference signal such as Global Privacy Control has no sale or share for us to stop. We nonetheless intend to honor Global Privacy Control as a signal to disable non-essential analytics, and we will update this section when that is in place.
10. If you are in the European Economic Area or the United Kingdom
This website is directed to people seeking legal services in California, and we do not target visitors in the EEA or the UK. If you are located there and contact us anyway:
- Our legal basis for responding to your inquiry is your request to take steps prior to entering an agreement, and our legitimate interest in operating and securing our website.
- Non-essential analytics run only with your consent.
- You have the rights of access, rectification, erasure, restriction, objection, and data portability, and the right to lodge a complaint with your supervisory authority. Contact us at info@khashanlaw.com to exercise them.
- Information you send us will be processed in the United States.
11. Other matters
Security. The site is served over HTTPS and we take reasonable measures to protect information in transit and at rest. No method of transmission over the internet is completely secure, and we cannot guarantee absolute security. This is one more reason not to send sensitive case details through a web form or chat.
Children. This website is not directed to children under 13 and we do not knowingly collect personal information from them. If you believe a child has provided us information, contact us and we will delete it.
Links to other websites. Our site links to third-party websites, including our profiles on social media and review platforms. We are not responsible for their privacy practices. This policy does not apply to them.
Changes to this policy. We may update this policy. When we do, we will revise the “Last updated” date above. We review it at least every twelve months, as California law requires. Material changes will be noted at the top of this page.
12. Contact us
Khashan Law Firm, APC
Murrieta office26636 Margarita Road, Suite 101Murrieta, CA 92563
Ontario office746 N Mountain AvenueOntario, CA 91762
Telephone: (951) 461-2387Toll free: (866) 344-6587Email: info@khashanlaw.com