Privacy policy
Who We Are
CaseAuthority ("we", "us") is a specialist SEO agency for personal injury law firms, operating at seopersonalinjurylawyer.com. We are the data controller for information collected through our website and services.
What We Collect
Name, email, phone number, law firm name, job title, and message content when you contact us. Technical data collected automatically: IP address, browser type, pages visited, and device information via cookies and analytics tools.
How We Use It
To respond to enquiries, deliver SEO audits and services, send relevant marketing communications (where opted in or under legitimate interest), improve our website, process payments, and comply with legal obligations.
Legal Basis — GDPR / UK GDPR
For EEA and UK residents we rely on: contractual necessity (service delivery), legitimate interests (analytics, professional marketing), consent (non-essential cookies and email marketing where required), and legal obligation (tax and regulatory compliance).
Sharing Your Data
We share data only with trusted sub-processors under data processing agreements (cloud hosting, CRM, email, analytics, payment processors), professional advisors (legal, financial), and authorities where required by law. We do not sell your data.
International Transfers
CaseAuthority is US-based. EEA/UK data is transferred under Standard Contractual Clauses (SCCs) or the UK International Data Transfer Addendum (IDTA). Contact us for copies of applicable safeguards.
Your Rights — EEA & UK (GDPR)
You have the right to access, correct, delete, restrict, and port your data, to object to processing (including direct marketing), and to withdraw consent at any time. Lodge a complaint with your national supervisory authority (UK: ico.org.uk). We respond within 30 days.
Your Rights — US Residents
California (CCPA/CPRA): right to know, delete, correct, opt out of data sharing for targeted advertising, and non-discrimination. Colorado, Virginia, Connecticut, Utah: right to access, correct, delete, opt out of targeted advertising and profiling, and appeal our decisions. Email us to exercise any right. We respond within 45 days.
Cookies
We use strictly necessary cookies (no consent required), Google Analytics 4 cookies (consent required in EEA/UK), and Meta/LinkedIn advertising pixels (consent required in EEA/UK). Manage preferences via the cookie banner on our website. California residents may opt out of targeted advertising by emailing us.
Children
Our services are directed at legal professionals only. We do not knowingly collect data from individuals under 16. Contact us immediately if you believe a child has submitted data.
Data Retention
- Enquiry data — 3 years
- Client data — duration of engagement plus 7 years
- Marketing opt-ins — until opt-out plus 12 months
- Analytics — 26 months
Security
We use TLS encryption in transit, encrypted storage at rest, and role-based access controls. We will notify you and relevant authorities promptly in the event of a breach affecting your rights.
Changes
Material changes will be flagged on our website and communicated directly where required. Continued use after an update constitutes acceptance.