Privacy Policy - Dorf Nelson & Zauderer LLP

Updated as of April 8^th, 2025

Dorf Nelson & Zauderer LLP, headquartered at 555 Theodore Fremd Ave, Rye, NY 10580 (collectively, “DNZ,” the “Firm,” “we,” “us” or “our”) is committed to safeguarding your privacy. This Policy explains how we collect, use, store, disclose, and otherwise process Personal Information, also referred to as “personal data,” about current, former, and prospective clients; visitors to our website www.dorflaw.com (the “Website”); visitors to our office(s) or Firm-hosted events; attendees at our webinars or other online presentations; and any other individuals about whom we collect Personal Information. We adhere to applicable legal and regulatory requirements and employ appropriate security measures to protect your Personal Information.

This Privacy Policy should be read in conjunction with our Terms of Use, which govern your use of the Website. By accessing or using our Website, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy and our Terms of Use.

This Privacy Notice explains how we may collect and use your personal information.

Disclaimer: No Attorney-Client Relationship or Privilege

The use of this website, including any forms, emails, or other methods of communication provided through it, does not create an attorney-client relationship between you and Dorf Nelson & Zauderer LLP.

Any information submitted via this website or other electronic means is not considered confidential or protected by attorney-client privilege unless and until you formally engage DNZ for legal services and we confirm such representation in writing.

If you are seeking legal advice or representation, we recommend that you contact us directly by phone or through other secure methods of communication to discuss your matter. Avoid sharing sensitive, confidential, or privileged information through this website or any unencrypted email.

1. Personal Information We Collect and How We Collect It

Dorf Nelson & Zauderer LLP collects various types of Personal Information in the course of providing legal services, operating our business, communicating with clients and visitors, managing employment relationships, and maintaining our website.

A. Categories of Personal Information We May Collect and Use

We collect Personal Information:

When you provide it to us or we collect it from third parties during the course of our providing legal advice, representation, or services to you;
When you visit our website, as part of general analytics on visitors to the site (see notice on cookies for more information);
When we receive services from you;
When you provide personal information in connection with your application for employment with Dorf Nelson & Zauderer LLP;
When you contact us by any means, we may keep a record of that correspondence;
When you visit our offices or attend our events.

For the purposes of this Privacy Policy, “Personal Information” (also referred to as “Personal Data”) means any information that identifies, relates to, describes, or could reasonably be associated with or linked to an individual or household—whether directly or indirectly. The types of Personal Information we collect may include, but are not limited to, the following:

Identifiers and Contact Information. This includes your name, email address, telephone number, mailing address, job title, and company affiliation.
Professional or Employment-Related Information. We may collect information about your current or past employment, business affiliations, résumé and cover letter materials, bar admission details, CLE credentials, and other professional qualifications you provide in connection with a job application or our legal services.
Financial and Transactional Information. We may collect billing-related details such as payment information, invoicing records, tax data, and account numbers as necessary for legal representation, vendor payments, or administrative purposes.
Legal and Case-Related Information. During the course of providing legal advice or representation, we may receive or generate information relating to your legal matter, including contracts, court filings, regulatory correspondence, or other materials necessary for legal analysis or litigation. This may also include information about third parties that you lawfully provide to us.
Internet or Network Activity Information. When you access our Website, we may collect information automatically through cookies or similar technologies, such as your IP address, browser type, device identifiers, operating system, referring URLs, and details about your interactions with the Website (e.g., pages visited, duration, clicks, and search activity). More information on this can be found in Section 1(C) below.
Sensitive Personal Information. In limited circumstances, and only when necessary and permitted by law, we may collect sensitive categories of Personal Information, which may include:
- Government-issued identification numbers (e.g., Social Security numbers, driver’s license or passport numbers);
- Biometric data used for authentication or access control (e.g., fingerprints or voiceprints);
- Health-related data when required in the context of legal representation, workplace accommodations, or employment applications;
- Demographic characteristics voluntarily provided, such as race, ethnicity, gender, or disability status (e.g., for equal opportunity disclosures);
- Background information for regulatory compliance, Know Your Client (KYC), or due diligence purposes.
We do not use Sensitive Personal Information to infer characteristics about individuals or for any purpose beyond what is necessary to provide legal services or comply with our legal or regulatory obligations.
Other Information You Voluntarily Provide. We may also collect any other Personal Information that you choose to provide—for example, through website forms, surveys, registration pages, email communications, or conversations with our attorneys or staff.

Please note: If you provide us with information about third parties, such as employees, business partners, or family members, you are responsible for ensuring that you have the legal authority to do so. Once provided, we will treat that information in accordance with this Privacy Policy.

B. Sources of Personal Information

We collect Personal Information from a variety of sources, including:

Directly from You — when you voluntarily provide it through communications, consultations, intake forms, event registration, or employment applications.
From Third Parties — such as referral sources, government agencies, courts, vendors, professional service providers, former employers, or public records.
Automatically Through Technology — when you visit our Website or interact with us electronically, we collect usage data through cookies and related tracking tools.

C. Cookie and Tracking Technology Policy

This Website uses cookies—small text files stored on your browser—to enhance functionality and gather data about user behavior. Cookies may serve to improve Website performance, remember your preferences, or support analytics.

We use the following types of cookies on our Website:

Essential Cookies. Required for the basic functioning of the Website, such as secure log-ins or page navigation. The Website cannot function properly without these cookies.
Performance Cookies. Collect anonymous information about how visitors use our Website, such as which pages are visited most often and any error messages encountered.
Functional Cookies. Allow the Website to remember your preferences (e.g., language, region) and provide enhanced, more personalized features.
Targeting or Advertising Cookies. Record your visit to our Website, the pages you visited, and the links you followed. This information may be used to make our advertising more relevant to your interests and to track the effectiveness of our marketing campaigns.

Managing Cookies. When you visit our Website, a cookie banner will prompt you to accept or manage your cookie preferences. You may also manage or disable cookies using your browser settings. Please be aware that disabling cookies may limit certain functionalities of the Website.

D. Information from Children

Dorf Nelson & Zauderer LLP does not knowingly collect Personal Information from children under the age of 13, in compliance with the Children’s Online Privacy Protection Act (COPPA). If we become aware that such information has been collected without verified parental consent, we will promptly delete it.

Our services are not intended for individuals under the age of 18. If you are under 18, you may use our Website or engage with the Firm only with the involvement of a parent or legal guardian.

If you believe we have inadvertently collected information from a child, please contact us at info@dorflaw.com.

2. How We Use Personal Information

We use Personal Information for our business and legal purposes, including to provide and improve the services we offer, to operate our Firm and Website, and to meet our legal and regulatory obligations.

A. General Uses of Personal Information

The purposes for which we may use Personal Information include, but are not limited to, the following:

To provide legal advice, representation, or related professional services;
To understand your legal or business needs and tailor our services accordingly;
To manage our business relationship with you, including for billing, collections, internal recordkeeping, and client account management;
To respond to your inquiries, questions, or requests;
To enable your participation in Firm-hosted events, webinars, or affinity groups;
To verify your identity and conduct background or conflict checks in accordance with our legal and ethical obligations;
To perform obligations arising under any contract between you and the Firm;
To comply with applicable laws, court orders, bar association rules, and other regulatory requirements;
To improve the functionality and performance of our Website;
To notify you about changes to our services, policies, or Website;
To detect, investigate, and prevent fraud, unauthorized access, or other illegal activity;
To protect our rights, property, and safety, as well as those of our clients, employees, affiliates, and others.

We process your Personal Information where it is necessary to perform a contract, comply with a legal obligation, or pursue our legitimate interests—such as delivering and improving legal services—unless your rights and freedoms override those interests.

B. Marketing Communications

We may send you direct marketing communications, including alerts, newsletters, event invitations, or other updates, by email or other electronic means. We will only send such communications where we have a lawful basis to do so, such as your consent or our legitimate interest in keeping you informed about our services.

You may opt out of receiving marketing communications at any time by clicking the “unsubscribe” link included in the message or by contacting us at info@dorflaw.com. We will honor all such requests in accordance with applicable laws, including the CAN-SPAM Act, and will process opt-out requests within ten (10) business days.

Please note that opting out of marketing messages will not affect your receipt of important administrative, transactional, or client-service-related communications.

C. Use of Sensitive Personal Information

In limited circumstances, we may collect and process Sensitive Personal Information—such as health data, biometric identifiers, or demographic information—strictly for the purpose of:

Providing legal services;
Facilitating event access or accommodations;
Complying with legal, regulatory, or bar association obligations.

We do not use Sensitive Personal Information for profiling, targeted advertising, or any other purposes not reasonably necessary to provide our services.

Where applicable, you have the right to request that we limit the use of your Sensitive Personal Information to only those activities necessary to perform our services or fulfill legal obligations. To exercise this right, please contact us at info@dorflaw.com.

3. Disclosure of Personal Information

DNZ may disclose Personal Information to third parties where necessary to provide legal services, operate our business, comply with legal and regulatory obligations, or otherwise as described in this Privacy Policy. We do not disclose Personal Information except as permitted or required by applicable law.

A. Categories of Third Parties with Whom We May Share Personal Information

We may disclose your Personal Information to the following categories of third parties, as necessary for the operation of our business, the provision of legal services, or to comply with legal and regulatory obligations:

Service Providers. We engage third-party vendors—such as cloud storage providers, IT consultants, and marketing support platforms—to help us deliver legal and business services. These providers are contractually required to maintain the confidentiality of your Personal Information and are prohibited from using it for any purpose other than providing services on our behalf.
Co-Counsel, Experts, and Legal Consultants. In certain matters, we may disclose Personal Information to co-counsel, retained experts, or consultants assisting in your legal representation. These disclosures are limited to what is necessary for the engagement and are subject to professional obligations of confidentiality.
Governmental, Regulatory, or Law Enforcement Authorities. We may disclose Personal Information as required to comply with applicable law, legal process, or government requests, including subpoenas, court orders, or regulatory investigations.
Public and Third-Party Sources. We may receive or verify information through public databases, business registries, court filings, or communications with third parties such as referral services or opposing counsel.
Transactional Parties. In the context of a merger, acquisition, reorganization, or similar corporate transaction, we may disclose Personal Information as part of the due diligence process or business transfer, subject to appropriate confidentiality measures.
With Your Consent. We may disclose your Personal Information to other third parties for purposes not listed above when you have provided explicit consent to do so.

All third-party recipients are required to maintain the security and confidentiality of Personal Information and to use it only as instructed by us or as required by law.

B. No Sale or Sharing of Personal Information

We do not sell Personal Information to third parties for monetary or other valuable consideration. In the past twelve (12) months, we have not sold Personal Information.

C. How We Transfer and Store Personal Information

We may transfer, process, and store your Personal Information in jurisdictions outside of your state, province, or country of residence, including the United States. These transfers may occur in the context of our day-to-day operations, the provision of legal services, or the use of third-party service providers that help us manage our business. Please note that the data protection laws in these jurisdictions may not offer the same level of protection as those in your home country.

We take commercially reasonable steps to ensure that your Personal Information remains protected, regardless of the country in which it is processed or stored. This includes implementing contractual, technical, and organizational measures that are designed to maintain the confidentiality, integrity, and availability of your Personal Information.

Transfers of Personal Information to third-party service providers are made to support service delivery and firm operations, such as cloud-based file storage, IT support, marketing platforms, or administrative services. These third parties are contractually obligated to process Personal Information only in accordance with our instructions and to implement safeguards that meet regulatory standards as well as our internal standards.

i. Cross-Border Transfers and Additional Safeguards

Where applicable law requires additional safeguards for the international transfer of Personal Information—such as under the European Union’s General Data Protection Regulation (GDPR) or the UK’s Data Protection Act—we implement mechanisms such as:

Standard Contractual Clauses (SCCs). We rely on SCCs approved by the European Commission and other regulatory authorities to lawfully transfer Personal Information to jurisdictions that are not recognized as providing an adequate level of protection.
Data Processing Agreements. All transfers to third parties are governed by agreements that require recipients to handle Personal Information in a manner consistent with this Privacy Policy and applicable data protection laws.
Encryption and Access Controls. We employ industry-standard encryption protocols for data in transit and at rest, and restrict access to Personal Information on a need-to-know basis.

If you would like more information about how we protect your Personal Information when it is transferred internationally, please contact us at info@dorflaw.com.

4. Your Rights

Subject to applicable laws, you may have certain rights in relation to the Personal Information we collect, use, disclose, and otherwise process. These rights may vary depending on your place of residence, but we are committed to respecting and facilitating the exercise of your rights wherever applicable.

A. Rights You May Exercise

The rights you may have include the following:

Right to Know / Access. You may have the right to request information about how we process your Personal Information, including:
- The categories of Personal Information we collect;
- The sources from which the Personal Information was collected;
- The purposes for which we use the Personal Information;
- The categories of third parties to whom we disclose Personal Information; and
- The specific pieces of Personal Information we have collected about you, if required by law.
Right to Correct. If you believe that any of the Personal Information we maintain about you is inaccurate or incomplete, you may have the right to request that we correct or update such information.
Right to Delete. You may have the right to request that we delete Personal Information we have collected from or about you, subject to certain legal exceptions. These exceptions may include retaining information to:
- Comply with legal obligations;
- Complete a transaction or service you requested;
- Detect or prevent security incidents or fraud;
- Exercise or defend legal claims.
Right to Data Portability. You may have the right to receive a copy of the Personal Information we maintain about you in a portable and, to the extent technically feasible, readily usable format that allows you to transmit the information to another entity without hindrance.
Right to Object or Restrict Processing. Where applicable, you may have the right to object to or request that we restrict certain types of processing of your Personal Information, such as:
- Processing based on legitimate interests;
- Processing for direct marketing purposes; or
- Automated decision-making or profiling.
Right to Withdraw Consent. If we process your Personal Information based on your consent, you may withdraw that consent at any time. Withdrawing your consent will not affect the lawfulness of processing prior to withdrawal.
Right to Opt Out of Sales, Targeted Advertising, or Profiling. Where applicable, you may have the right to:
- Opt out of the sale of your Personal Information;
- Opt out of the sharing of your Personal Information for cross-context behavioral advertising (also known as “targeted advertising”);
- Opt out of automated decision-making or profiling that produces legal or similarly significant effects.
We do not sell Personal Information, nor do we engage in targeted advertising or profiling in a way that produces legal effects.
Right to Limit Use of Sensitive Personal Information. In jurisdictions that recognize this right, you may request that we limit the use or disclosure of Sensitive Personal Information to only what is necessary to perform the services or provide the goods you have requested.
Right to Non-Discrimination. We will not discriminate against you for exercising any of the foregoing rights. This means we will not:
- Deny you services;
- Charge different prices or rates;
- Provide a different level or quality of service; or
- Suggest that you may receive a different price or quality of service.
Right to Appeal. If we deny your privacy request, you may have the right to appeal our decision. We will provide instructions on how to appeal in our response to your request, or you may email info@dorflaw.com to initiate an appeal.

5. How to Exercise Your Rights

You may exercise any of the privacy rights described in Section 4 of this Privacy Policy by contacting us using one of the methods listed below. We will take reasonable steps to verify your identity (and the authority of anyone acting on your behalf) before processing your request, and we will respond in accordance with applicable data protection laws.

To submit a request, you may contact us at:

Email: info@dorflaw.com

Mail:
Dorf Nelson & Zauderer LLP
Attn: Privacy Compliance
555 Theodore Fremd Ave
Rye, NY 10580

When submitting your request, please include your full name, contact information, the nature of your request, and any additional information that will help us verify your identity and locate your information within our systems. We will only use the information you provide to process and respond to your request and to maintain a record of the request as required by law.

We may need to request additional information to verify your identity before we can process your request. This could include matching the information you provide with our existing records or, where applicable, requesting supporting documentation or a signed declaration. If we are unable to verify your identity, we may deny the request and will inform you of the reason and, where applicable, provide instructions on how to appeal the decision.

We do not discriminate against individuals for exercising their privacy rights. Exercising your rights will not result in denial of services, different pricing, or a reduced level of service.

6. Notice to California Residents

This section applies only to residents of California and supplements the information provided in this Privacy Policy, as required by the California Consumer Privacy Act of 2018 (CCPA) and its amendment, the California Privacy Rights Act of 2020 (CPRA).

Below is a summary of the categories of Personal Information we may collect or receive about California residents. While most of the Personal Information we handle is collected as a service provider to clients in the course of delivering legal services, we are providing this notice for informational purposes.

Categories of Personal Information Collected

Category	Business Purpose for Collection and Use	Categories of Personal Information Recipients
Identifiers, Contact and Verification Information, and Government Identification (e.g., name, email address, phone number, mailing address, government ID numbers, login credentials, social media handles)	Delivering and maintaining legal services; supporting operational needs; communicating with you; complying with legal obligations; monitoring for security incidents; debugging and resolving system issues; marketing and business development.	Service providers such as cloud hosting and web platforms; law enforcement, regulatory bodies, and other entities as required to comply with the law or protect legal rights.
Financial Information (e.g., payment card or bank account details, tax and invoicing information)	Managing business operations; meeting legal and tax obligations.	Service providers; law enforcement and regulatory agencies.
Device and Network Activity Information (e.g., browser type, IP address, operating system, device IDs, website usage data)	Maintaining and enhancing our Website; performing internal analytics; ensuring system security; troubleshooting and debugging.	Service providers, including analytics vendors; law enforcement and regulatory entities.
General Geolocation Data (e.g., region or country-level location)	Operating our Website; business support functions; communications.	Service providers.
Audio, Electronic, Visual or Similar Information (e.g., video or audio recordings, email or written communications you send us)	Supporting our legal services; ensuring physical security; legal compliance; communication.	Service providers.
Sensitive Personal Information (e.g., Social Security number, driver’s license, passport number, military/veteran status, racial or ethnic origin, religious affiliation, union membership, or sensitive content shared in communications)	Supporting legal services; fulfilling legal responsibilities; asserting or defending legal claims.	Service providers; law enforcement and government authorities.

Additional California Disclosures

Disclosures for a Business or Commercial Purpose. We may disclose the above categories of Personal Information to service providers for business-related purposes, consistent with the uses described in Section 2 of this Privacy Policy.
Selling or Sharing Personal Information with Third Parties. We do not sell or share Personal Information, as those terms are defined under California law. We also do not engage in cross-context behavioral or targeted advertising.
Sensitive Personal Information. We do not collect, use, or disclose Sensitive Personal Information for any purpose not permitted by applicable law. In addition, we do not use Sensitive Personal Information to derive or infer characteristics about any individual.
Personal Information Retention. Please refer to the Data Retention section of this Privacy Policy for information about how long we keep Personal Information and the factors we consider in determining retention periods.
California “Shine the Light” Notice. California residents may request information about our disclosures of Personal Information to third parties for direct marketing purposes. We do not disclose Personal Information to third parties for their direct marketing.

7. Information Security and Data Retention

A. How We Protect Your Data

We implement a range of administrative, technical, and physical safeguards to help protect the Personal Information we collect from unauthorized access, use, or disclosure. These safeguards include access controls, encryption, secure communication portals, and internal protocols designed to limit access to those with a legitimate business need.

While we take reasonable steps to protect your information, no system or method of transmission over the internet is 100% secure. We cannot guarantee absolute security, but we are committed to maintaining appropriate measures to protect your data.

B. Retention of Your Data

We retain Personal Information for as long as necessary to fulfill the purposes for which it was collected, or to comply with legal, regulatory, or contractual obligations. Retention decisions are based on the nature of the data, the context in which it was provided, and our legal and ethical responsibilities.

C. Disposal of Your Data

When Personal Information is no longer required, we take reasonable steps to securely dispose of or anonymize it. This may include deletion of electronic records or secure destruction of physical documents, in line with applicable legal and professional standards.

8. Geographic Location of Data Storage and Processing

Our services are intended for individuals located in the United States. As such, any Personal Information we collect through our services is processed and stored in the United States.

If you are accessing our services from outside the United States, please be aware that your information may be transferred to, stored in, and processed in the United States, where data protection laws may be different from those in your country of residence. By using our services and submitting Personal Information, you acknowledge and consent to this transfer.

9. External Links

Our Website may include links to third-party websites, applications, or services that are not owned, operated, or controlled by Dorf Nelson & Zauderer LLP. These links are provided solely for convenience or informational purposes.

We are not responsible for the privacy practices, content, or security of these third-party sites. If you choose to access a third-party website, your interactions with that site will be governed by its own privacy policy and terms of use. We encourage you to review the privacy notices of any external sites you visit to understand how your information may be collected and used.

Examples of third-party links may include:

Event registration platforms;
Social media networks, such as LinkedIn™ or Facebook™;
External legal resources or professional service platforms.

10. Accessibility

We are committed to ensuring that our Privacy Policy and Website are accessible to all individuals, including those with disabilities. Our Website is designed to conform to the Web Content Accessibility Guidelines (WCAG) 2.1 Level AA standards to provide an inclusive experience for all users.

This Privacy Policy is available in alternative formats upon request. If you require assistance accessing any part of this notice or would like to request it in an alternative accessible format, please contact us at:

Email: info@dorflaw.com

To download a printable version of this Privacy Policy, please click here.

11. Do Not Track

Some web browsers offer a “Do Not Track” (DNT) setting that allows users to signal their preference not to be tracked across websites and online services. At this time, our Website does not respond to DNT signals or similar mechanisms sent by browsers.

For more information about Do Not Track, you can visit www.allaboutdnt.com.

12. Changes to Our Privacy Notice

We review and update this Privacy Policy periodically to reflect changes in our practices, services, or legal requirements. The “Last Updated” date at the top of this Privacy Policy indicates the most recent revision. You should periodically review this Privacy Policy to stay informed about how we are protecting your personal information.

13. Contacting Us

If you have any questions, comments, complaints or wish to exercise your rights under this notice or any of its contents, please send us an email or written communication to our managing partner at the address set forth below.

Jon A. Dorf
Managing Partner
Dorf Nelson & Zauderer LLP
The International Corporate Center
555 Theodore Fremd Avenue
Rye, NY 10580
info@dorflaw.com
914-381-7600