Privacy Policy

1. Who We Are

Legal Crash ("Company," "we," "us," or "our") operates legalcrash.com and related services. We provide a free motor vehicle accident (MVA) claim review and legal referral service connecting accident victims with qualified legal professionals across the United States.

Our principal office is located at 350 Fifth Avenue, Suite 4200, New York, NY 10118. You may contact our Privacy Officer at privacy@legalcrash.com or 1-800-534-2527.

2. Information We Collect

2.1 Information You Provide Directly

When you submit a claim review form, contact us, or use our services, we may collect:

• Identity Information: Full name, date of birth
• Contact Information: Phone number, email address, mailing address, city, state, ZIP code
• Accident Information: Date, location, type of accident, parties involved, police report numbers
• Injury Information: Types of injuries sustained, medical treatment received, medical providers
• Financial Information: Estimated medical bills, lost wages, insurance coverage details
• Insurance Information: Insurance company name, policy numbers, claim numbers
• Legal Information: Whether you have existing legal representation, prior legal actions
• Communications: Messages, emails, and records of calls with our team

2.2 Information Collected Automatically

When you visit our website, we automatically collect:

• IP address and approximate geographic location
• Browser type, version, and operating system
• Pages visited, time on site, referring URLs
• Device identifiers and screen resolution
• Cookie and tracking pixel data (see Section 6)

2.3 Information from Third Parties

We may receive information about you from public records, marketing partners, referral partners, and social media platforms when you interact with our advertisements or referral links.

3. How We Use Your Information

4. Information Sharing & Disclosure

We never sell your personal information. We may share your information only in the following circumstances:

• Legal Professionals: With your consent, we share your information with attorneys or law firms who may handle your case
• Service Providers: With trusted vendors who assist our operations (CRM, email, analytics), under strict data processing agreements
• Legal Requirements: When required by law, court order, or government authority
• Business Transfers: In connection with a merger, acquisition, or sale of assets, with notice to you
• Safety: To protect the rights, safety, or property of Legal Crash, our clients, or others

5. Medical Information (HIPAA)

To the extent we receive Protected Health Information (PHI) as defined under the Health Insurance Portability and Accountability Act (HIPAA), we treat such information with the highest level of protection. We:

• Implement HIPAA-compliant security safeguards for all PHI
• Limit access to PHI to authorized personnel on a need-to-know basis
• Execute Business Associate Agreements with any third parties who handle PHI
• Never use or disclose PHI for marketing purposes without explicit written authorization
• Maintain breach notification procedures in compliance with HIPAA requirements

6. Cookies & Tracking Technologies

We use the following types of cookies and tracking technologies:

You may control cookies through your browser settings or by using our cookie consent tool. Disabling certain cookies may limit site functionality. We honor "Do Not Track" signals where technically feasible.

7. Data Security

We implement industry-standard technical and organizational security measures including:

• 256-bit SSL/TLS encryption for all data in transit
• AES-256 encryption for sensitive data at rest
• Multi-factor authentication for all staff accessing client data
• Regular penetration testing and vulnerability assessments
• SOC 2 Type II compliant data infrastructure
• Annual security training for all personnel
• Incident response plan with 72-hour breach notification protocol

No method of transmission over the internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security. If you believe your information has been compromised, please contact us immediately at security@legalcrash.com.

8. Your Rights & Choices

Depending on your location, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information (subject to legal retention requirements)
• Portability: Receive your data in a structured, machine-readable format
• Restriction: Request restriction of processing in certain circumstances
• Objection: Object to processing based on legitimate interests
• Opt-Out: Opt out of marketing communications at any time

To exercise any of these rights, contact our Privacy Officer at privacy@legalcrash.com or call 1-800-534-2527. We will respond within 30 days. We may need to verify your identity before fulfilling requests.

9. California Privacy Rights (CCPA / CPRA)

California residents have additional rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA):

• Right to Know: Know what personal information we collect, use, share, and sell
• Right to Delete: Request deletion of your personal information
• Right to Correct: Correct inaccurate personal information
• Right to Opt-Out of Sale: We do not sell personal information, but you may opt out of sharing for cross-context behavioral advertising
• Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights
• Right to Limit Sensitive Information: Limit use of sensitive personal information

California residents may submit requests via our Privacy Rights Portal at privacy@legalcrash.com or through our toll-free number. We will verify your identity and respond within 45 days.

10. Telephone Communications (TCPA)

By submitting your phone number on our website, you expressly consent to receive telephone calls, text messages (SMS/MMS), and pre-recorded messages from Legal Crash and our legal partner network at the number provided, even if the number is on a state or federal Do-Not-Call registry. Message and data rates may apply.

You may opt out of text messages at any time by replying "STOP." You may opt out of calls by requesting removal during any call or by emailing privacy@legalcrash.com.

11. Data Retention

We retain personal information for the period necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required by law:

• Active client files: Duration of case plus 7 years
• Closed/declined cases: 3 years from last contact
• Marketing data: Until opt-out plus 1 year
• Website analytics: 26 months
• Financial records: 7 years (IRS requirements)

12. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we discover we have inadvertently collected information from a child under 18, we will promptly delete it. If you believe we have collected information from a minor, contact us at privacy@legalcrash.com.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our website with a new "Last Updated" date. For significant changes, we will provide prominent notice on our website and, where appropriate, contact you directly. Your continued use of our services after changes take effect constitutes acceptance of the revised policy.

14. Contact Us

For any privacy-related questions, concerns, or to exercise your rights, please contact:

Legal Crash — Privacy Officer
350 Fifth Avenue, Suite 4200, New York, NY 10118
Email: privacy@legalcrash.com
Phone: 1-800-534-2527
Hours: Monday–Friday, 9:00 AM – 5:00 PM EST