TROUTMAN AMIN, LLP
WEBSITE PRIVACY POLICY

Effective Date: July 15, 2026
Last Revised: July 15, 2026

1. Introduction

Troutman Amin, LLP (“Troutman Amin,” the “Firm,” “we,” “us,” or “our”) is a California limited liability partnership with offices in California, Florida, Texas, Louisiana, and New York, and clients throughout the United States. We respect your privacy and are committed to protecting the personal information of visitors to our website located at www.troutmanamin.com, together with any other websites, blogs, podcast pages, or online stores that we own or operate and that link to this Privacy Policy, including TCPAWorld.com, CIPAWorld.com, and the You Deserve To Win podcast and swag pages at youdeservetowin.com (collectively, the “Site”).

This Website Privacy Policy (this “Policy”) describes the categories of personal information we collect through the Site, the sources of that information, the purposes for which we use it, the categories of persons to whom we disclose it, how long we retain it, and the rights available to you under applicable United States federal and state privacy laws, including the California Online Privacy Protection Act and the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020 (as amended, the “CCPA”). This Policy also serves as our notice at collection for California residents under the CCPA and its implementing regulations.

2. Attorney-Client Relationships and Privileged Information

This Policy does not apply to information provided to us in the context of an attorney-client relationship or to any information protected by confidentiality obligations, the attorney-client privilege, the attorney work product doctrine, or any other applicable privilege or protection. Information that clients provide to the Firm in connection with legal representation is governed by our engagement agreements, the rules of professional conduct of the jurisdictions in which we practice, and applicable law, not by this Policy. Nothing in this Policy creates an attorney-client relationship with any visitor to the Site, and nothing in this Policy diminishes or waives any privilege or protection that would otherwise apply.

Please do not send confidential or sensitive information through the Site until you have spoken with one of our attorneys and received written authorization to do so. Unsolicited information sent to the Firm through the Site is not protected by the attorney-client privilege and does not create an attorney-client relationship.

3. Scope

This Policy applies to personal information collected through the Site, including through our contact and consultation request forms, newsletter and legal alert subscriptions, blog, podcast pages, event registrations, career and resume submission pages, and online merchandise store. It does not apply to information collected offline, by telephone, in person, or through third-party platforms that we do not control, such as social media services, podcast distribution platforms, or video hosting services, each of which is governed by its own privacy policy.

4. Personal Information We Collect

A. Information You Provide to Us

We collect personal information that you voluntarily provide to us when you:

• Complete a contact form, consultation request, or other webform on the Site;
• Send an email to the Firm or respond to our communications;
• Subscribe to our mailing lists, blogs, newsletters, podcast updates, or legal alerts;
• Register for a webinar, conference, or other event;
• Purchase merchandise through our online store;
• Submit a resume or application for employment; or
• Otherwise voluntarily submit information to us.

This information may include your name, postal address, email address, telephone number, company or organization name, professional title, order and transaction details, employment application materials, and any other information you choose to submit. We ask that you not submit sensitive personal information (such as Social Security numbers, health information, financial account credentials, or government identification numbers) through the Site.

B. Information Collected Automatically

When you visit the Site, certain technical information may be collected automatically through server logs, cookies, and similar technologies, including your IP address, approximate (city or postal code level) geographic location, browser type and version, operating system, device identifiers, referring URLs, the pages you visit, the dates and times of your visits, and information about your interactions with the Site. No third-party analytics scripts, tracking pixels, session replay tools, chat widgets, or similar third-party tracking technologies will be activated, and no data will be collected by or transmitted to such third-party technologies, until you have provided your prior, affirmative consent through our cookie consent banner. We maintain this prior-consent framework in light of the California Invasion of Privacy Act, Cal. Penal Code §§ 631 and 638.51, and the CCPA. Our use of cookies and similar technologies, including Google Analytics, is described in our Cookie Policy, which is incorporated into this Policy by reference.

C. Categories of Personal Information Under the CCPA

The following chart summarizes the categories of personal information, as defined by the CCPA, that we have collected through the Site within the preceding twelve months, and the categories of recipients to whom each category is disclosed for a business purpose:

We do not collect biometric information, precise geolocation data, or inferences used to create consumer profiles through the Site, and we do not knowingly collect the personal information of consumers under 18 years of age.

D. Sources of Personal Information

We collect personal information from the following sources: (1) directly from you, when you submit information through the Site or communicate with us; and (2) automatically from your device, through server logs, cookies, and similar technologies as described above and in our Cookie Policy. We do not purchase personal information from data brokers, lead generators, or list providers in connection with the Site.

5. How We Use Personal Information

We use the personal information we collect through the Site for the following business purposes:

• To respond to your inquiries, consultation requests, and correspondence;
• To provide you with requested information about the Firm and its services;
• To send you newsletters, legal alerts, blog and podcast updates, and event invitations that you have requested, and to honor your communication preferences and opt-out requests;
• To process, fulfill, and provide customer service for merchandise orders placed through our online store;
• To evaluate resumes and applications for employment;
• To operate, maintain, secure, and improve the Site, and to analyze Site usage and performance, subject to your consent preferences;
• To detect, investigate, and prevent security incidents and fraudulent, malicious, or illegal activity;
• To comply with applicable legal and regulatory obligations, including our professional responsibility obligations, and to respond to lawful requests from courts and government authorities; and
• To protect the rights, property, and safety of the Firm, its personnel, its clients, and the public.

We do not use personal information collected through the Site for automated decision-making that produces legal or similarly significant effects concerning you, and we do not use it for profiling in furtherance of such decisions.

6. How We Disclose Personal Information

We do not sell personal information, and we do not share personal information for cross-context behavioral advertising or process personal information for targeted advertising, in each case as those terms are defined under applicable state privacy laws. We have not sold or shared personal information within the preceding twelve months, and we have no actual knowledge of selling or sharing the personal information of consumers under 16 years of age. We disclose personal information only as follows:

• Service Providers and Processors. We disclose personal information to vendors that perform services on our behalf, such as website hosting, information technology support, analytics (subject to your consent), email and newsletter distribution, event management, e-commerce, payment processing, order fulfillment, and recruiting support, in each case subject to written contracts restricting their use of the information to the services provided to us.
• Professional Advisors. We may disclose personal information to our accountants, auditors, insurers, and outside advisors where reasonably necessary.
• Legal Compliance and Protection. We may disclose personal information if we believe disclosure is required or permitted by law, regulation, legal process, or governmental request, or to prevent, investigate, detect, or prosecute criminal offenses or attacks on the technical integrity of the Site or our network, or to protect the rights, property, or safety of the Firm, its personnel, its clients, Site users, or the public.
• Business Transfers. In the event of a merger, acquisition, reorganization, financing, or sale of all or a portion of our assets or business, personal information collected through the Site may be disclosed or transferred as part of that transaction, subject to applicable law.
• With Your Consent. We may disclose personal information for other purposes with your consent or at your direction.

7. Cookies, Analytics, Do Not Track, and Global Privacy Control

The Site uses cookies and similar technologies as described in our Cookie Policy. The Site is configured so that non-essential cookies and third-party technologies, including Google Analytics, are deployed only after you provide affirmative consent through our cookie consent banner, and you may withdraw your consent at any time through the banner or the “Cookie Preferences” link on the Site.

The Site recognizes and honors opt-out preference signals, including the Global Privacy Control (“GPC”) signal, as an exercise of your right to opt out of any sale or sharing of personal information, although, as stated above, we do not sell or share personal information. Because there is not yet a uniform standard for legacy browser “Do Not Track” signals, and because we honor the GPC signal and operate a prior-consent framework, we treat GPC signals, rather than legacy Do Not Track signals, as the operative opt-out preference signal for the Site. This disclosure is provided pursuant to the California Online Privacy Protection Act.

8. Blog, Podcast, and Video Content

The Firm publishes legal commentary through its blog, its podcast, and embedded audio and video content. Blog, podcast, and video content is provided for general informational purposes only and does not constitute legal advice. If you subscribe to receive blog or podcast updates, we use your contact information solely to deliver the requested content and related Firm communications, and you may unsubscribe at any time using the link provided in each communication.

Where the Site delivers prerecorded video content, we do not disclose information identifying you as having requested or obtained specific video materials to unaffiliated third parties except with your informed, written consent or as otherwise permitted by the Video Privacy Protection Act. Embedded video or audio players provided by third-party platforms load only after you consent to the associated cookies, and your use of those platforms is governed by their own privacy policies.

9. Online Store

Merchandise purchases made through our online store are processed by Stripe. Payment card information is collected and processed directly by our payment processor, which is contractually required to safeguard that information; we do not receive or store complete payment card numbers. We receive and retain order details, such as your name, shipping address, email address, and the items purchased, in order to fulfill your order, process returns and exchanges and comply with tax and accounting requirements.

10. Job Applicants

If you submit a resume or application for employment through the Site, we use the information you provide to evaluate your candidacy, communicate with you about your application, and comply with legal obligations applicable to recruiting and hiring. Application materials are shared internally with personnel involved in recruiting and hiring decisions and with service providers that support our recruiting function. California residents who are job applicants have the rights described in Section 13 of this Policy with respect to their application information.

11. Data Retention

We retain personal information for as long as reasonably necessary to fulfill the purposes for which it was collected, including to respond to your inquiries, deliver requested communications, fulfill orders, evaluate applications, satisfy legal, regulatory, tax, accounting, professional responsibility, and record retention requirements, resolve disputes, and enforce our agreements. The criteria we use to determine retention periods include the nature and sensitivity of the information, the purposes for which it was collected, the existence of legal obligations requiring retention, and the applicable statutes of limitation. When personal information is no longer needed for these purposes, we delete it, de-identify it, or securely destroy it in accordance with our retention practices.

12. Security

We implement reasonable administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, use, alteration, disclosure, and destruction, consistent with applicable law, including the security procedure requirements of the states in which we operate, such as New York’s SHIELD Act, the Florida Information Protection Act, Texas and California reasonable security requirements, and Louisiana’s database security law. No method of transmitting or storing data is completely secure, however, and we cannot guarantee the absolute security of our systems or of any information you transmit to us. Personal information collected through the Site is stored and processed in the United States.

13. Your State Privacy Rights

Depending on your state of residence, you may have some or all of the rights described in this Section with respect to personal information that we collect through the Site. These rights are provided under the CCPA and under the comprehensive consumer privacy law of your state of residence, as in effect and as amended from time to time, in each case to the extent that law applies to the Firm and to the information at issue. Rather than confining these rights to residents of particular states, we extend the request procedures described in this Section to residents of all fifty states and the District of Columbia as a matter of Firm policy. We honor each request as required by the law of the requester’s state of residence and, where no comprehensive privacy law applies to the requester or to the information at issue, as a courtesy. Certain of these laws contain exemptions for information governed by other laws or collected in a business-to-business or employment context, and certain of these laws apply only to entities meeting specified processing thresholds; nothing in this Policy waives, and the Firm expressly reserves, every applicable exemption, exclusion, and threshold. When a newly enacted state privacy law takes effect, the rights and procedures described in this Section extend automatically to residents of that state without further amendment to this Policy.

A. Rights Available to You

• Right to Know and Access. You may request confirmation of whether we process your personal information and access to that information, including, for California residents, the categories of personal information collected, the categories of sources, the business purposes for collection, the categories of recipients, and the specific pieces of personal information we hold about you.
• Right to Correct. You may request that we correct inaccurate personal information we maintain about you.
• Right to Delete. You may request that we delete personal information we have collected from you, subject to exceptions permitted by law, including our obligations to retain client records and comply with professional responsibility rules.
• Right to Data Portability. You may request a copy of your personal information in a portable and, to the extent, technically feasible, readily usable format.
• Right to Opt Out of Sales, Sharing, Targeted Advertising, and Certain Profiling. You may direct us not to sell your personal information, not to share it for cross-context behavioral advertising, and not to process it for targeted advertising or for profiling in furtherance of decisions that produce legal or similarly significant effects. As stated above, we do not engage in any of these activities.
• Right to Limit Use of Sensitive Personal Information. California residents may direct a business to limit its use of sensitive personal information to specified purposes. We do not use or disclose sensitive personal information for purposes requiring a right to limit under the CCPA.
• Right to Non-Discrimination. We will not discriminate or retaliate against you for exercising any of your privacy rights.

B. How to Submit a Request

You may exercise your rights by: (a) completing the privacy rights request webform available on the Site; (b) emailing us at troutman@troutmanamin.com; or (c) calling us at 949-350-3663. We will respond to verifiable requests within 45 days of receipt, and we may extend that period by an additional 45 days where reasonably necessary, in which case we will notify you of the extension within the initial 45-day period.

C. Verification and Authorized Agents

To protect your information, we must verify your identity before responding to a request to know, access, correct, or delete. We will match the information you provide with information we maintain, and we may request additional information reasonably necessary to verify your identity or your authority to act; we will use that additional information only for verification purposes. You may designate an authorized agent to submit a request on your behalf. We may require the agent to provide proof of your signed permission, and we may require you to verify your own identity directly with us or to confirm that you provided the agent permission, except where the agent holds a valid power of attorney under applicable law.

D. Appeals

If we decline to act on your request, we will inform you of the reason. Residents of states whose privacy laws provide an appeal right may appeal our decision by replying to our response or by contacting us using the information in Section 18 with the subject line “Privacy Request Appeal” within a reasonable period after receiving our decision. We will respond to your appeal within the time required by your state’s law (generally 45 to 60 days) with a written explanation of the actions taken or not taken. If your appeal is denied, you may contact your state Attorney General to submit a complaint; we will provide you with an online mechanism or contact information for doing so in our appeal response.

E. Additional California Disclosures

Notice at Collection. The categories of personal information we collect and the purposes for which we use them are described in Sections 4 and 5 of this Policy. We do not sell or share personal information, and we retain personal information as described in Section 11.

Shine the Light. California Civil Code Section 1798.83 permits California residents to request certain information regarding disclosures of personal information to third parties for those parties’ direct marketing purposes. We do not disclose personal information to third parties for their direct marketing purposes. California residents may nonetheless submit inquiries under this provision using the contact information in Section 18.

F. Residents of Other States

Florida’s Digital Bill of Rights applies its principal controller obligations to businesses exceeding one billion dollars in global annual revenue with certain additional characteristics and therefore does not apply to the Firm; Florida residents remain protected by the Florida Information Protection Act’s data security and breach notification requirements, with which we comply. New York and Louisiana have not enacted comprehensive consumer privacy statutes as of the Last Revised date of this Policy; we comply with New York’s SHIELD Act safeguards requirements and Louisiana’s database security law, and we extend the request procedures in this Section to residents of all states as a courtesy.

14. Children’s Privacy

The Site is intended for adults, and you must be at least 18 years of age to use the Site. We do not knowingly collect, use, sell, share, or disclose personal information from anyone under 18 years of age, and we do not knowingly collect personal information from children under 13 in accordance with the Children’s Online Privacy Protection Act. If we learn that we have inadvertently collected personal information from a child under 13, we will promptly delete it. If you believe a child has provided personal information to us, please contact us using the information in Section 18.

15. Third-Party Websites and Platforms

The Site contains links to third-party websites and platforms, including social media services, podcast distribution platforms, and video hosting services, that we do not own or control. Those websites and platforms are governed by their own privacy policies and terms, and we are not responsible for their privacy practices or content. The inclusion of a link on the Site does not constitute an endorsement. We encourage you to review the privacy policy of every website you visit.

16. United States Processing

The Site is operated from the United States, and personal information collected through the Site is stored and processed in the United States. We do not target the Site to, or knowingly collect personal information from, individuals located outside the United States. If you access the Site from outside the United States, you do so on your own initiative, and you acknowledge that your information will be processed in the United States, where data protection laws may differ from those of your jurisdiction.

17. Changes to This Policy

We may modify this Policy from time to time. Changes will be effective when the revised Policy is posted to the Site with an updated “Last Revised” date. If we make material changes, we will provide notice by posting a prominent notice on the Site or, where required by law or appropriate under the circumstances, by contacting you using the information you have provided to us. Your continued use of the Site after a revised Policy takes effect constitutes your acknowledgment of the revised Policy. We will describe how the Firm notifies users of material changes and will maintain prior versions of this Policy upon request.

18. Contact Us

If you have questions or concerns about this Policy or our privacy practices, or if you wish to exercise any of the rights described in this Policy, please contact us at:

Troutman Amin, LLP
Attn: Privacy
400 Spectrum Center Drive, Suite 1450
Irvine, CA 92618
Telephone: (949) 350-3663
Email: troutman@troutmanamin.com

If you require this Policy in an alternative format due to a disability, please contact us using the information above and we will provide it in a suitable alternative format.