Privacy Policy

Last updated: September 23, 2026

This Privacy Policy describes the policies and procedures of Sigman & Khan, PLLC (“S&K,” “We,” “Us,” or “Our”) on the collection, use and disclosure of Your information when You use Our website, submit a consultation request or other message through the website, access the Client Portal via the website, or submit a payment via the website (collectively the “Service”) and tells You about Your privacy rights and how the law protects You.

We may use Your Personal data to provide and improve the Service. By using the Service, You agree to the collection and use of information in accordance with this Privacy Policy. This Policy may be updated from time to time and your continued use of the site after any such update shall indicate your agreement to the update terms. If You do not agree to the terms of this Privacy Policy or any update thereto, do not use this website or our Service.

No Attorney-Client Relationship; Client Confidentiality

Contacting S&K through this website, including by submitting a consultation request, does not create an attorney-client relationship. Please do not send confidential or time-sensitive information until We have confirmed in writing that We represent You.

Information that clients give Us during a representation is protected by Our professional duty of confidentiality under the applicable rules of professional conduct. That duty controls over anything in this Privacy Policy.

Types of Data Collected

Personal Data

While using Our Service, We may ask You to provide Us with certain personally identifiable information (“PII”) that can be used to contact or identify You. Personally identifiable information may include, but is not limited to: your name, address, email address, phone number, and any information You include in a consultation request or other message. If you use the website to access the Client Portal you may need to create a password – this password shall be a part of your PII. It is your responsibility to keep that password private. We are not responsible for unpermitted access to the portal by a third party who obtains your password from You. If you submit a payment through the website, You agree to the Privacy Policy of our then-current payment processing service. Information provided to the payment processing service may include your name, billing address and credit or debit card number, or bank account information. We do not have access to the credit or debit card number, or bank account information.

Usage Data

Usage Data is collected automatically when using the Service.

Usage Data may include information such as Your Device’s Internet Protocol address (e.g. IP address), browser type, browser version, the pages of our Service that You visit, the time and date of Your visit, the time spent on those pages, unique device identifiers and other diagnostic data.

When You access the Service by or through a mobile device, We may collect certain information automatically, including, but not limited to, the type of mobile device You use, Your mobile device unique ID, the IP address of Your mobile device, Your mobile operating system, the type of mobile Internet browser You use, unique device identifiers and other diagnostic data.

We may also collect information that Your browser sends whenever You visit our Service or when You access the Service by or through a mobile device.

Tracking Technologies and Cookies

We use Cookies and similar tracking technologies to track the activity on Our Service and store certain information. Tracking technologies used are beacons, tags, and scripts to collect and track information and to improve and analyze Our Service. The technologies We use may include:

Cookies or Browser Cookies. A cookie is a small file placed on Your Device. You can instruct Your browser to refuse all Cookies or to indicate when a Cookie is being sent. However, if You do not accept Cookies, You may not be able to use some parts of our Service. Unless you have adjusted Your browser setting so that it will refuse Cookies, our Service may use Cookies.
Web Beacons. Certain sections of our Service and our emails may contain small electronic files known as web beacons (also referred to as clear gifs, pixel tags, and single-pixel gifs) that permit Us, for example, to count users who have visited those pages or opened an email and for other related website statistics (for example, recording the popularity of a certain section and verifying system and server integrity).

Cookies can be “Persistent” or “Session” Cookies. Persistent Cookies remain on Your personal computer or mobile device when You go offline, while Session Cookies are deleted as soon as You close Your web browser.

We use both Session and Persistent Cookies for the purposes set out below:

Necessary / Essential Cookies

Type: Session Cookies

Administered by: Us

Purpose: These Cookies are essential to provide You with services available through the Website and to enable You to use some of its features. They help to authenticate users and prevent fraudulent use of user accounts. Without these Cookies, the services that You have asked for cannot be provided, and We only use these Cookies to provide You with those services.

Type: Persistent Cookies Administered by: Us

Purpose: These Cookies identify if users have accepted the use of cookies on the Website.

Functionality Cookies

Type: Persistent Cookies

Administered by: Us

Purpose: These Cookies allow us to remember choices You make when You use the Website, such as remembering your login details or language preference. The purpose of these Cookies is to provide You with a more personal experience and to avoid You having to re-enter your preferences every time You use the Website.

Analytics Cookies

Type: Persistent Cookies

Administered by: Google

Purpose: We use Google Analytics to understand how visitors use the Website. Google may collect information about Your use of the Website over time and across other websites. You can learn how Google uses this information at policies.google.com/technologies/partner-sites and can opt out by installing the Google Analytics Opt-out Browser Add-on.

You can manage or delete Cookies through Your browser settings.

Do Not Track Signals

Some browsers offer a “Do Not Track” setting. There is no common industry standard for responding to these signals, and the Website does not currently respond to them.

Use of Your Personal Data

We may use Personal Data for the following purposes:

To provide and maintain our Service, including to monitor the usage of our Service.

To manage Client Portal access: to give clients secure access to the Client Portal.

For the performance of a contract: to evaluate a consultation request, run conflict checks, and provide legal services under Our engagement with You.

To contact You: To contact You by email, telephone calls, SMS, or other equivalent forms of electronic communication about Your inquiry, Our services, or the Service. No mobile information will be shared with third parties/affiliates for marketing/promotional purposes. All the stated categories in this privacy policy exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

To provide You with legal updates, newsletters, and information about Our services and events, unless You opt out. You may unsubscribe at any time using the link in Our emails.

To manage Your requests: To attend and manage Your requests to Us. For other purposes: We may use Your information for other purposes, such as data analysis, identifying usage trends, determining the effectiveness of our outreach and to evaluate and improve our Service, services, marketing and your experience.

We do not sell Your personal information or share it for cross-context behavioral advertising. We share it only as described in this Privacy Policy.

Retention of Your Personal Data

We will retain Your Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use Your Personal Data to the extent necessary to comply with our legal obligations (for example, if we are required to retain your data to comply with applicable laws), resolve disputes, and enforce our legal agreements and policies. Client files are kept according to Our file-retention policy and Our professional obligations.

We may also retain Usage Data for internal analysis purposes. Usage Data is generally retained for a shorter period of time, except when this data is used to strengthen the security or to improve the functionality of Our Service, or We are legally obligated to retain this data for longer time periods.

Transfer of Your Personal Data

Your information, including Personal Data, is processed at Our operating offices and in any other places where the parties involved in the processing are located. It means that this information may be transferred to — and maintained on — computers located outside of Your state, province, country or other governmental jurisdiction where the data protection laws may differ from those in Your jurisdiction.

Your consent to this Privacy Policy followed by Your submission of such information represents Your agreement to that transfer.

We will take all steps reasonably necessary to ensure that Your data is treated securely and in accordance with this Privacy Policy and no transfer of Your Personal Data will take place to an organization or a country unless there are adequate controls in place including the security of Your data and other personal information.

Delete or Correct Your Personal Data

You may ask Us to access, correct, or delete the Personal Data We have collected about You.

Clients may update certain contact information through the Client Portal. You may also contact Us to request access to, correct, or delete any personal information that You have provided to Us.

Please note, however, that We may need to retain certain information when we have a legal obligation or lawful basis to do so, including records We must keep under the rules of professional conduct.

Disclosure of Your Personal Data

Service providers

We share Personal Data with vendors who help Us run the Website and Our practice, such as Our website host, Client Portal and practice management provider, payment processor, analytics provider, and IT and email providers. They may use it only to provide services to Us, and We require them to keep it confidential.

Business transfers

If S&K is involved in a merger, combination, succession, or reorganization of its law practice, Personal Data may be transferred as part of that transaction, subject to Our professional obligations.

Law enforcement

Under certain circumstances, We may be required to disclose Your Personal Data if required to do so by law or in response to valid requests by public authorities (e.g. a court or a government agency), subject to Our obligations to protect client confidences.

Other legal requirements

We may disclose Your Personal Data in the good faith belief that such action is necessary to:

Comply with a legal obligation
Protect and defend the rights or property of S&K
Prevent or investigate possible wrongdoing in connection with the Service
Protect the personal safety of Users of the Service or the public
Protect against legal liability

Security of Your Personal Data

We maintain a written information security program with administrative, technical, and physical safeguards designed to protect Personal Data. The security of Your Personal Data is important to Us, but remember that no method of transmission over the Internet, or method of electronic storage is 100% secure. While We strive to use commercially reasonable means to protect Your Personal Data, We cannot guarantee its absolute security.

Children’s Privacy

Our Service does not address anyone under the age of 18. We do not knowingly collect personally identifiable information from anyone under the age of 18. If You are a parent or guardian and You are aware that Your child has provided Us with Personal Data, please contact Us. If We become aware that We have collected Personal Data from anyone under the age of 18 without verification of parental consent, We take steps to remove that information from Our servers.

Links to Other Websites

Our Service may contain links to other websites that are not operated by Us. If You click on a third party link, You will be directed to that third party’s site. We strongly advise You to review the Privacy Policy of every site You visit.

Our Service may contain links to third party websites, services, or software components that are not owned or controlled by Us. We don’t endorse or assume any responsibility for any such third party websites, information, materials, products or services. If you access any third party website, service or content, etc. from our Site, you do so at your own risk and you agree that we have no liability arising from Your use of, purchase from or access to any third party website, service, or content, etc.

Third-party providers that We use, such as Our Client Portal and payment processor, have their own privacy policies and terms of use, which govern their handling of Your information.

You further acknowledge that We do not and cannot control any third-party service provider’s technology or actions and are not responsible for any cessation or interruption of the services, compatibility with the services, or any disclosure, modification, or deletion of your data arising from any exchange of your data that may occur between us and third-party providers as part of the services.

The inclusion of a link to any other website or resources is for your convenience only. We have no control over the content of these outside websites and make no representation as to the quality, suitability, functionality, or legality of these websites. Your use of these websites is entirely at your own discretion and risk. You agree that We will not be held liable for any damages or claims arising from your use of these outside websites.

Changes to this Privacy Policy

We may update Our Privacy Policy from time to time. We will notify You of any changes by posting the new Privacy Policy on this page.

We will update the “Last updated” date at the top of this Privacy Policy.

You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

Governing Law

This Privacy Policy is governed by the laws of the Commonwealth of Massachusetts.

Contact Us

If you have any questions about this Privacy Policy, You can contact us:

By email: hello@skclegal.com
By phone number: 617-990-9850
By mail: Sigman & Khan, PLLC, 2 Burlington Woods Drive, Suite 100, PMB 26, Burlington, MA 01803