Privacy Policy

Effective Date: January 1, 2026

Last Updated on: January 1, 2026

Burr & Forman LLP (“Burr Forman” or “we“) respect your privacy and are committed to protecting it through our compliance with this policy.

This Privacy Policy (the “Policy“) describes the types of information we may collect from you or that you may provide to us when you visit www.burr.com (our “Website“) or when you communicate with us electronically through the Website as well as through electronically responding to our marketing communications, such as responding to an event invitation.  This Policy also describes our practices for collecting, using, maintaining, protecting, and disclosing that information.

This Policy applies to information we collect on this Website, from electronic messages between you and the Website, and other information you provide to us when electronically responding to event invitations or other marketing communications. This Policy does not apply to information collected offline or from third parties.

Please read this Policy carefully to understand our policies and practices regarding your information.  If you do not agree with our policies and practices as stated in this Policy, your choice is not to use our Website and not to respond to our marketing communications.  By accessing or using this Website or responding to our marketing communications (other than to Opt-Out), you agree to this Policy.

At this time, the Website is only intended for access or use by residents of the United States who are legal adults. If you are not a resident of the United States or are under 18 years of age (or the age of majority in your jurisdiction), the Website is neither intended for nor directed towards you. This Website is offered and available to users who are able to enter into an enforceable agreement with the Company, and, by using this Website, you represent and warrant that you are of legal age to form a binding contract with us. This Policy may change from time to time. Your continued use of this Website after we make changes is deemed to be acceptance of those changes, so please check the Policy periodically for updates.

Definitions

The following capitalized terms apply throughout this Policy. Capitalized terms used in this Policy that are not included below are defined elsewhere in the Policy.

“Aggregated Information” is information about groups or categories of individuals, which does not identify and cannot reasonably be used to identify an individual.

“Individual” or “consumer” means a living natural person.

“Personal Information” is any information that can identify, relate to, describe, or be linked with a consumer or their household.

“Process,” “Processing,” or “Processed” means any operation or set of operations performed on Personal Information, including through automated means.

“Sensitive Personal Information” is Personal Information that reveals a consumer’s (a) social security, driver’s license, state identification card, or passport number; (b) account log-in, financial account, debit card, or credit card number in combination with any required security or access code, password, or credentials allowing access to an account; (c) precise geolocation; (d) racial or ethnic origin, religious or philosophical beliefs, or union membership; (e) the contents of a consumer’s mail, email and text messages, unless the business is the intended recipient of the communication; (f) genetic data; (g) the Processing of biometric information for the purpose of uniquely identifying a consumer; (h) Personal Information collected and analyzed concerning a consumer’s health; or (i) Personal Information collected and analyzed concerning a consumer’s sex life or sexual orientation.

Information We Collect

We may collect Personal Information through your use of the Website. Personal Information does not include publicly available information from government records or de-identified or aggregated information. We do not collect Sensitive Personal Information.

In particular, we may collect the following categories of information from individuals through the use of the Website:

Category	Examples
Identifiers	A real name, alias, postal address, telephone number, email address, or other similar identifiers, if you choose to provide this information to us in subscribing to our publications. Through interactions with our Website, we collect unique personal identifier, online identifier, Internet Protocol address.
Protected classification characteristics	None
Commercial information	None
Biometric information	None
Internet or other similar network activity	Information on your interaction with our Website (such as the pages you visit, how long the visit lasts, what you search for on the Website) or marketing materials (such as emails or event invitations or announcements)
Geolocation data	None
Sensory data	None
Professional or employment-related information	None
Non-public education information (per the Family Educational Rights and Privacy Act (20 U.S.C. Section 1232g, 34 C.F.R. Part 99))	None
Inferences drawn from other Personal Information	Profile reflecting a person’s preferences, characteristics, psychological trends, predispositions, behavior and attitudes/interests. We do not collect or make inferences about intelligence, abilities, and aptitudes.

How We Collect Information

We obtain the categories of information listed above from the following sources:

• Directly from you. For example, from forms you complete or products and services you purchase via electronic communications with us (other than legal services).
• Indirectly from you. For example, from observing your actions on our Website or pulling your contact information from an electronic communication you send through the Website.

As you navigate through and interact with our Website, we may use automatic data collection technologies to collect certain information about your equipment, browsing actions, and patterns, including:

• Details of your visits to our Website, including traffic data, location data, logs, and other communication data and the resources that you access and use on the Website.
• Information about your computer and internet connection, including your IP address, operating system, and browser type.
• Information about the types of marketing communications that you open and/or to which you respond.

We also may use these technologies to collect information about your online activities over time and across third-party websites or other online services (behavioral tracking). Some browsers allow users to select “DO NOT TRACK” as an option to tell website owners you do not wish to have your information tracked. Our Website operates no differently if you have activated this option in your browser.

The information we collect automatically may include Personal Information, and we may maintain it or associate it with Personal Information we collect in other ways or receive from third parties. It helps us to improve our Website and to deliver a better and more personalized service, including by enabling us to:

• Estimate our audience size and usage patterns.
• Store information about your preferences, allowing us to customize our Website according to your individual interests.
• Speed up your searches.
• Recognize you when you return to our Website.

The technologies we use for this automatic data collection may include:

• Cookies (or browser cookies). A cookie is a small file placed on the hard drive of your computer. You may refuse to accept browser cookies by activating the appropriate setting on your browser. However, if you select this setting you may be unable to access certain parts of our Website. Unless you have adjusted your browser setting so that it will refuse cookies, our system will issue cookies when you direct your browser to our Website.
• Flash Cookies. Certain features of our Website may use local stored objects (or Flash cookies) to collect and store information about your preferences and navigation to, from, and on our Website. Flash cookies are not managed by the same browser settings as are used for browser cookies. For information about managing your privacy and security settings for Flash cookies, see Choices About How We Use and Disclose Your Information.
• Web Beacons. Pages of our the Website and our e-mails may contain small electronic files known as web beacons (also referred to as clear gifs, pixel tags, and single-pixel gifs) that permit the Company, for example, to count users who have visited those pages or opened an email and for other related website statistics (for example, recording the popularity of certain website content and verifying system and server integrity).

Use of Personal Information

We may use or disclose the information we collect for one or more of the following purposes:

• To comply with our legal, professional ethics, and regulatory obligations.
• To fulfill or meet the reason you provided the information. For example, if you share your name and contact information to request information or ask a question about our services, we will use that Personal Information to respond to your inquiry. We may also save your information to facilitate responses to your future inquiries.
• To provide, support, personalize, and further develop our Website and services.
• To process your requests.
• To provide you with support and to respond to your inquiries, including to investigate and address your concerns and monitor and improve our responses.
• To personalize your Website experience and to deliver content and service offerings relevant to your interests, and via email or text message (with your consent, where required by law).
• To help maintain the safety, security, and integrity of our Website and services, databases and other technology assets, and business.
• For testing, research, analysis, and product development, including to develop and improve our Website and services.
• To respond to law enforcement requests and as required by applicable law, court order, or governmental regulations.
• As described to you when collecting your Personal Information.
• For marketing or advertising purposes.
• For performing website use analytics.
• For our legitimate interests or those of a third party.
• To evaluate or conduct a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of our assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which Personal Information held by us about our Website users is among the assets transferred.
• Where you consent.

A legitimate interest is when we have a business or commercial reason to use your information, so long as this is not overridden by your own rights and interests. We will not collect additional categories of Personal Information or use the Personal Information we collected for materially different, unrelated, or incompatible purposes without providing you notice.

Promotional Communications

We may use your Personal Information to send you newsletters, marketing or promotional materials, or updates about our firm or our services.  We have a legitimate interest in processing your Personal Information for promotional purposes. This means we do not usually need your consent to send you promotional communications; however, where consent is needed, we will ask for this consent separately and clearly.

You have a right to opt-out of receiving promotional communications at any time by:

• Contacting us at Privacy@burr.com; or
• Using the “unsubscribe” link in emails; or
• Calling us at (800) GET-BURR.

If you instruct us to provide further services in the future, make additional request, or if there are changes in the law, regulation, or the structure of our business, we may ask you to confirm or update your preferences regarding promotional communications.

Cookie Policy (Online Tracking Technologies)

We may use cookies, pixel tags, local storage, and other technologies to automatically collect information through this Website. These technologies allow us to understand who has interacted with us and also help us to operate this Website and provide our services more efficiently.

Cookies are small data files created by web browsers and downloaded onto your computer or other device when you access a website. Cookies help make your browsing experience with this Website more personal. Different cookies serve different purposes, such as recognizing your devices, storing information about your preferences, identifying the geographic area of a user, tracking browsing habits and preferences, recalling information entered on forms, login pages, or other features of this Website. This helps us understand how this Website is being used and is used to generally improve your browsing experience on this Website.

A pixel tag (also known as a web beacon) is a piece of code embedded on this Website that collects information, including Personal Information, about users’ engagement on the site. Pages of our Website and our e-mails may contain pixel tags that permit the Company to, for example, count users who have visited those pages or opened an email and for other related website statistics (for example, recording the popularity of certain website content and verifying system and server integrity).

Types of Cookies

• First Party Cookies. These cookies are those that may be managed by the Company and originate from this Website.
• Third Party Cookies. These cookies originate with service providers or business partners providing services on or through this Website and can be used by these third parties to recognize your device when it visits other websites. Third Party Cookies may also be used for other purposes, such as analytics, advertising, and social media features.
• Session Cookies. These cookies expire once you close your web browser.
• Persistent Cookies. These cookies stay on your computer or mobile device until you delete them.
• Strictly Necessary Cookies. These cookies are necessary for this Website to function. Strictly necessary cookies are typically set in response to actions or services that you request, such as setting your privacy preferences, logging in, or filling out a form. Strictly necessary cookies can also be used to manage sessions on load-balanced servers or to ensure user requests are routed consistently to the correct server. You can set your browser to block these cookies or to alert you about these cookies, but some parts of this Website will not work if you select such settings.
• Analytics/Performance Cookies.These cookies count visits and traffic sources so the performance of this Website can be measured and improved, including determining whether a user is new or returning, distinguishing users from one another, and calculating new and returning visitor statistics. These cookies help us to know which pages are the most and least popular on this Website and to see how visitors move around this Website. For example, we use Google Analytics to help us understand how frequently the same people revisit this Website, how this Website is found (from advertising or referring websites), and which pages are most frequently viewed. All information collected through these performance cookies is aggregated and anonymous. This information is combined with data from a large number of other users to create an overall picture of Website use, and is not identified individually or personally and is not linked to any other information we store about you.
• Functional Cookies. Functional cookies are small pieces of code that are stored on a device or browser to help websites remember user preferences and provide additional functionality. They can be first-party or third-party, persistent or session-based, and are generally considered "strictly necessary" cookies that don't require consent. Functional cookies are anonymous and do not track browsing activity across other websites. An example of a functional cookie is a cookie that remembers user location, chosen language, or other settings to provide a personalized user experience on a website. Other examples of functional cookies include chat services and user preferences.
• Marketing/Advertising Cookies. Tracking/Marketing/Advertising cookies track your online activity to help advertisers deliver more relevant advertisingor to limit how many times you see an ad. These cookies can share that information with other organizations or advertisers. These are persistent cookies and usually originate with third-parties. You can opt-out of many of these cookies by updating your preferences on www.aboutads.info.
• Social Media Cookies.Social media cookies are stored on your computer browser to help you log into your social media accounts faster. Social media companies may recognize you and collect Personal Information about your visit to this Website, and they may set a cookie or employ other tracking technologies. Your interactions with those features are governed by the privacy policies of those companies.

What Cookies Do We Use?

This Website uses both First Party cookies and Third Party Cookies that may be categorized as Strictly Necessary, Analytics/Performance, and Functional.

Why Do We Use Cookies?

We use cookies to learn how you interact with this Website and to improve your experience and provide you additional functionality on this Website. We also you cookies to provide you with information about our products and services and for promotional purposes. We may also use pixels for the same purposes.

How Do Third Parties Use Cookies on This Website?

We partner with third parties such as Google to capture how you use and interact with this Website in order to improve and market our products and services. In addition, we may partner with other third parties, including YouTube and Siteimprove, to provide certain functionality, security, and features on the Website.

These third parties may use cookies, alone or in connection with web beacons and other technologies, to collect information about you when you use this Website. The information they collect may be associated with your Personal Information, or they may collect information, including information, about your online activities over time and across different websites and other online services. They may use this information to provide you with interest-based (behavioural) advertising or other targeted content. In most instances, we do not or cannot control these third-party technologies, or other targeted content, or how they may be used.

For more information about how these third parties may collect and use your data, please refer to their privacy policies:

• Google: https://policies.google.com/technologies/partner-sites.
• Siteimprove: https://help.siteimprove.com/support/solutions/articles/80000448117-siteimprove-security-and-data-protection.
• Vimeo: https://vimeo.com/legal/privacy/policy.
• YouTube: https://www.youtube.com/howyoutubeworks/privacy/.

If you have any questions about an advertisement or other targeted content, you should contact the responsible provider directly. This Policy does not cover the use of cookies by any third parties, and these third parties’ use of your Personal Information and such technologies is governed by their own privacy policies or notices.

Sharing Personal Information

We do not sell, trade, rent, or share Personal Information in exchange for money. Under certain privacy laws, however, our use of your Personal Information may nonetheless be considered a “sale” of Personal Information. We do not engage in targeted advertising or profiling.

We may share your information by disclosing it to a third party for a business purpose, including third party tracking technology providers and email marketing service providers with whom we contract to send emails to you. Your information may be shared in real time with third parties. Your Personal Information may be anonymized such that the third party providers are not able to identify you individually or as a household.

We only allow our service providers to handle your information if we are satisfied that they take appropriate measures to protect your information. We also impose contractual obligations on service providers requiring them to use your Personal Information only to provide services to us and to you.  In the preceding twelve (12) months, we have disclosed Personal Information for a business purpose to the categories of third parties indicated in the chart below.

Category	Examples
Identifiers	A real name, alias, postal address, telephone number, email address, or other similar identifiers, if you choose to provide this information to us in subscribing to our publications. Through interactions with our Website, we collect unique personal identifier, online identifier, Internet Protocol address.
Protected classification characteristics	None
Commercial information	None
Biometric information	None
Internet or other similar network activity	Information on your interaction with our Website (such as the pages you visit, how long the visit lasts, what you search for on the Website) or marketing materials (such as emails or event invitations or announcements)
Geolocation data	None
Sensory data	None
Professional or employment-related information	None
Non-public education information (per the Family Educational Rights and Privacy Act (20 U.S.C. Section 1232g, 34 C.F.R. Part 99))	None
Inferences drawn from other Personal Information	Profile reflecting a person’s preferences, characteristics, psychological trends, predispositions, behavior and attitudes/interests. We do not collect or make inferences about intelligence, abilities, and aptitudes.

Storing Your Information

The information we collect from you will be stored at our offices or those of our service providers and agents.

How Long Your Information Will Be Kept

Unless you instruct us to delete your Personal Information (See Your Rights and Choices), we will retain your Personal Information for as long as we are using it to provide services to you, for as long as we are communicating with you, or for as long as required by law. When it is no longer necessary for us to retain your Personal Information we will delete or anonymize it.

Your Rights and Choices

We do not sell or share your Personal Information without your consent. We do not engage in targeted advertising or profiling.

You have the ability to exercise certain controls and choices regarding our collection, use and sharing of your Personal Information. In accordance with the laws that may apply to you, your controls and choices may include:

The Right to Know/Right To Access: You have the right to know what Personal Information we collect about you. Upon receipt of your request, and confirmation of your identity, we will disclose to you:

• the categories and specific pieces of Personal Information that we have collected about you in the past 12 months;
• the sources from which we have collected that information;
• our business or commercial purpose for collecting such information;
• the categories and specific pieces of Personal Information that we have disclosed to third parties for a business purpose during the past twelve months;
• the categories and specific pieces of Personal Information that we have sold to third parties during the past twelve months; and
• the third parties to whom we have disclosed or sold such Personal Information.

In most cases, you may request this information up to two times each year.

The Right to Data Portability: You have the right to request a copy of the Personal Information we have about you. We will provide it in a format of our choosing that you can reasonably transfer to a third party.

The Right to Correct/Right to Rectification: You have the right to request that we correct any inaccurate Personal Information that we may maintain about you, subject to applicable legal exceptions.

The Right to Delete/Right to Erasure: You have the right to request that we delete your Personal Information, subject to applicable legal exceptions. If you submit this request, we will review it and attempt to confirm your identity. Once we confirm your identity, and assuming no exception applies that requires or allows us to retain your Personal Information, we will delete it and direct our service providers to do the same.

Right to Opt Out of Sale or Sharing of Personal Information: You have the right to “opt out” of the “sale” or “sharing” of your Personal Information to or with “third parties” (as those terms are defined by applicable law). There may be situations where we cannot fulfill your requests if you opt-out of such sharing, and we will notify you if this applies.

You may also use an authorized agent to submit a request to opt-out on your behalf if you provide the authorized agent signed written permission to do so.

You may submit a request to us as provided in Exercising Your Privacy Rights section of this Policy. Also, you may enable, where available, a universal tool that automatically communicates your opt-out preferences, such as the Global Privacy Control.

Once you make a request to exercise your data privacy rights, we will wait at least twelve (12) months before asking you to reauthorize Personal Information sales or sharing. However, you may change your mind and opt back in to our use of your Personal Information by contacting us as provided in the Contact Information section below. You do not need to create an account with us to exercise your privacy rights. We will use Personal Information provided in your privacy rights request only to review and comply with the request.

We may deny your deletion request in certain instances, including if, for example, retaining the Personal Information is necessary for us or our service provider(s) to:

• Complete the transaction for which we collected the Personal Information, provide a good or service that you requested, take actions reasonably anticipated within the context of our ongoing business relationship with you, or otherwise perform our contract with you.
• Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, or prosecute those responsible for such activities.
• Debug products to identify and repair errors that impair existing intended functionality.
• Exercise free speech, ensure the right of another consumer to exercise their free speech rights, or exercise another right provided for by law.
• Comply with any international, national, federal, state, or local laws, rules or regulations, applicable to us or to your Personal Information.
• Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when the information's deletion may likely render impossible or seriously impair the research's achievement, if you previously provided informed consent.
• Enable solely internal uses that are reasonably aligned with consumer expectations based on your relationship with us.
• Comply with a legal obligation or other lawful uses.

At the time this Policy was last updated, the following states have data privacy laws that may apply to you: California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia.

The exact scope of these rights may vary by state. Data privacy laws are constantly evolving, and the list of states herein with data privacy laws may not be all-inclusive. For information on these rights, see “Exercising Your Privacy Rights.” For more information on how to appeal a decision regarding a consumer rights request, see “Appeal Process.”

Virginia’s Required Mandatory Disclosures

See “Information We Collect,” “How We Collect Information,” “Use of Personal Information,” and “Sharing Personal Information,” for our mandatory disclosures.

California’s “Shine the Light” Law

California’s “Shine the Light” law (Civil Code Section § 1798.83) permits users of our Website that are California residents to request certain information regarding our disclosure of Personal Information to third parties for their direct marketing purposes. To make such a request, please send an email to privacy@burr.com, call us at (800) GET-BURR, or write us at: Burr & Forman, LLP; Attn: Chief Privacy Officer and Chief Marketing Officer; 420 North 20th Street, Suite 3400; Birmingham, AL 35203.

Nevada

Nevada provides its residents with a limited right to opt-out of certain Personal Information sales. Residents who wish to exercise this sale opt-out rights may do so as provided for in the “Exercising Your Privacy Rights.”

Other Ways to Control Your Information

Tracking Technologies

You can set your browser to refuse all or some browser cookies, or to alert you when cookies are being sent. If you disable or refuse cookies, please note that some parts of this Website may be inaccessible or not function properly.

Disclosure for Third Party Advertising

If you do not want us to share your Personal Information with unaffiliated or non-agent third parties for promotional purposes, you can opt-out by checking the relevant box located on the form on which we collect your data, emailing us at privacy@burr.com, or calling us at (800) GET-BURR. When sending your request you must identify yourself and provide sufficient information for us to address your request.

Promotional Offers

If you do not wish to have your receive promotional message from us regarding our own services or third party products or services, you can opt-out by checking the relevant box located on the form on which we collect your data, emailing us at privacy@burr.com, or calling us at (800) GET-BURR. If we have sent you a promotional email, you may send us a return email asking to be omitted from future email distributions. When sending your request you must identify yourself and provide sufficient information for us to address your request.

We will delete or de-identify Personal Information not subject to one of these exceptions from our records and will direct our service providers to take similar action. We do not provide these deletion rights for B2B Personal Information.

Exercising Your Privacy Rights

Submitting a Request

To exercise your rights to know or delete described above, please submit a request by either:

• Emailing us at privacy@burr.com.
• Calling us at (800) GET-BURR.
• Mailing your request to: Burr & Forman LLP; Attn: Chief Privacy Officer and Chief Marketing Officer; 420 North 20th Street, Suite 3400; Birmingham, AL 35203.

See also Your Rights and Choices section of this Policy.

Only you, or someone legally authorized to act on your behalf, may make a request to know or delete related to your Personal Information. To designate an authorized agent, contact us through one of the methods listed above, identify yourself with sufficient information that we can verify your request and identify your authorized agent with sufficient information that we can verify your authorized agent’s identity.  If we are unable to verify your request, we will not recognize your authorized agent.

You may only submit a request to know twice within a 12-month period. Your request to know or delete must:

• Provide sufficient information that allows us to reasonably verify you are the person about whom we collected Personal Information or an authorized representative of such person.
• Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it.

We cannot respond to your request or provide you with Personal Information if we cannot verify your identity or authority to make the request and confirm the Personal Information relates to you. We will only use Personal Information provided in the request to verify the requestor’s identity or authority to make the request.

Response Timing and Format

We will confirm receipt of your request within 10 business days. If you do not receive confirmation within the 10-day timeframe, please email privacy@burr.com.

We endeavor to substantively respond to a verifiable consumer request within 45 days of its receipt. If we require more time (up to another 45 days), we will inform you of the reason and extension period in writing.

We will deliver our written response by mail or electronically, at your option, to the email address or mailing address we have on file for you, regardless of the address from which you submitted the request.

Any disclosures we provide will only cover the 12-month period preceding our receipt of your request. The response we provide will also explain the reasons we cannot comply with a request, if applicable. For data portability requests, we will select a format to provide your Personal Information that is readily usable and should allow you to transmit the information from one entity to another entity.

We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.

Appeal Process

If we refuse to take action upon your request to exercise any of your data privacy rights, you may appeal our decision within a reasonable period after you receive notice of our decision. To initiate an appeal, please contact us using the information in the “Contact Information” section and inform us that you would like to appeal our decision. Within forty-five (45) days after we receive your appeal, we will inform you of any action taken or not taken in response to your appeal, and we will provide you with a written explanation of the reasons in support of our response.

If your appeal is denied, we will also provide you with an online mechanism, if available, or other method through which you may contact your state attorney general, or equivalent in your jurisdiction, to submit a complaint, should you wish to do so.

Non-Discrimination

We will not discriminate against you for exercising any of your Privacy Rights. We will not:

• Deny you services.
• Charge you different prices or rates for services because of exercising your consumer rights to your data, including through granting discounts or other benefits, or imposing penalties.
• Provide you a different level or quality of services.
• Suggest that you may receive a different price or rate for services or a different level or quality of services.

However, we may offer you certain financial incentives permitted by law that can result in different prices, rates, or quality levels. Any legally-permitted financial incentive we offer will reasonably relate to your Personal Information’s value and contain written terms that describe the program’s material aspects. Participation in a financial incentive program requires your prior opt-in consent, which you may revoke at any time. We do not currently provide any such incentives.

Children

Our Website is not intended for individuals under the age of majority. We do not knowingly collect Personal Information from children under 13. If you are under 13, do not use or provide any information on, to or through this Website or any of its features.  If we learn we have collected or received Personal Information from a child under 13 without verification of parental consent, we will delete that information. If you believe we might have any information about a child under 13, please contact us at privacy@burr.com.

Data Security, Retention Policies and Practices

The security, integrity, and confidentiality of your information are extremely important to us. We have implemented technical, administrative, and physical security measures that are designed to protect your Personal Information from unauthorized access, disclosure, use, and modification. We regularly review our security procedures to consider appropriate new technology and methods. Please be aware that, despite our best efforts, no security measures are perfect or impenetrable, and we cannot guarantee the security of this Website, nor can we guarantee the security of the information you transmit to us over the internet, including through your use of email. We are not liable for the illegal or unauthorized acts of third parties, such as criminal hackers.

The safety and security of your information also depends on you. Where we have given you (or where you have chosen) a password for access to certain parts of this Website, you are responsible for keeping this password confidential. We ask you not to share your password with anyone. It is your responsibility to safeguard the devices you use to access this Website (such as laptops, tablets, and mobile devices), and to use appropriate security settings on those devices. If those devices are lost, stolen or misplaced, others may be able to access your account and your Personal Information using those devices. You should affirmatively log out of your account (i) prior to ending your session, or (ii) if you will be inactive on this Website for more than a few minutes; otherwise, the next user of that computer or device, particularly a public one or one not owned by you, may be able to access your account and the information in your account if your session has not ended.

You agree that we are not responsible for any harm that may result from someone accessing your account or Personal Information on any computer or device where you do not, for any reason, take the necessary steps to log out of your account prior to ending a session on such device or computer.

Global Data Transfer, Storage, and Processing Practices

Our target audience is within the United States. We may store or Process your Personal Information in the cloud, which may include locations outside the United States. However, we will not transfer or store your Personal Information in “countries of concern,” as currently designated by the U.S. government. Our headquarters is in the United States. Personal Information may also be stored on the servers of our service providers and agents.

Wherever your Personal Information is transferred, stored or Processed by us, we will take reasonable steps to safeguard the privacy of your Personal Information. These steps also may include, if applicable, implementing standard contractual clauses (e.g. the “Standard Contractual Clauses” approved by the European Commission), obtaining your consent, or other lawful means of transferring Personal Information. By using this Website, you acknowledge that your Personal Information will be stored and/or Processed as set forth above. If you have any concerns about how your data is being transferred, stored, or Processed, please contact us as provided in the “Contact Information” section below.

Changes to Our Privacy Policy

We reserve the right to update this Policy at our discretion and at any time. When we update this Policy, we will post the updated notice on the Website and update the notice’s effective date. Your continued use of our Website following the posting of updates constitutes your acceptance of such changes.

Contact Information

If you have any questions or comments about this notice, the ways in which we collect and use your information, or your choices and rights regarding such use; or you wish to exercise your rights under this Policy or applicable laws, please contact us at:

Phone: (800) GET-BURR

Email: privacy@burr.com

Postal Address:

Burr & Forman LLP
Attn: Chief Privacy Officer and Chief Marketing Officer
420 North 20th Street, Suite 3400
Birmingham, AL 35203