Neon Law
  • Services
  • Book Consultation opens in a new tab
  • Sign in
Notations

Privacy Policy

This is a synthetic preview; nothing you type below is saved.

Questionnaire

Try answering this

Sample matter: Acme LLC — preview only. Answers remain available on this page; browser storage is unavailable.

Question 1 of 18

Company

All questions
  1. What is the company’s full legal name and entity type?
  2. Identify covered websites, apps, audiences, and controller/business role.
  3. What is the Effective date?
  4. This step records the contacts.
  5. Inventory data categories, sensitive data, people, and specific sources.
  6. Map each category to its actual purpose and disclose any automated decision-making.
  7. Map data categories to recipients and purposes; state actual sale, sharing, advertising, and opt-out practices.
  8. List every cookie or tracker with provider, purpose, necessary/optional category, lifetime, and data recipients; reconcile against an actual scan.
  9. Give working preference-center instructions and URL, consent behavior, opt-out signals, and relevant browser controls.
  10. State retention periods or criteria by category, security practices, and backup treatment.
  11. Give working request methods, verification, authorized-agent, appeal, response, and marketing opt-out procedures.
  12. State intended ages, child-data practices, and parent contact process.
  13. Do U.S. state privacy laws apply to these practices?
  14. Complete applicable state disclosures, including California collection/sale/sharing information for the required period and financial incentives, if any.
  15. Does the GDPR, UK GDPR, or Swiss data-protection law apply to these practices?
  16. Map each processing purpose to its lawful basis, identifying legitimate interests and consent withdrawal methods.
  17. Identify actual destinations, adequacy decisions or executed safeguards, and how people can obtain a copy.
  18. Give applicable DPO, EU/UK representative, and competent supervisory-authority details; explain any role that does not apply.

Body

Privacy Policy

Arrow keys or Space step through the document. Click a paragraph to highlight it.

Privacy Policy

is responsible for the practices described here for Identify covered websites, apps, audiences, and controller/business role.. Effective date: What is the Effective date?. Privacy contact and postal address:

I

Scope

This policy covers the services and audiences identified above. Where we process information solely for a business customer under its instructions, that customer’s privacy notice governs its purposes; requests should be directed to that customer. Our separate contractual duties still apply.

II

Information and sources

Inventory data categories, sensitive data, people, and specific sources.

This schedule identifies each category of personal information, the people it concerns, whether it is sensitive, and its source: directly from you, your device, a customer, or another identified source. We request only information needed for the purposes below. Required fields and the consequences of not providing them are explained when collected.

III

Purposes

Map each category to its actual purpose and disclose any automated decision-making.

We use information only for the described purposes and compatible or otherwise lawful uses. These may include providing requested services, securing accounts, responding to questions, meeting legal duties, and the specific analytics or marketing activities stated above. We obtain consent where required. A new use requiring notice or consent is addressed before it begins.

IV

Sharing and advertising

Map data categories to recipients and purposes; state actual sale, sharing, advertising, and opt-out practices.

This schedule identifies the categories of recipients and information disclosed, their purposes, any sale or sharing for targeted advertising, and applicable opt-out links. Service providers act under appropriate contractual restrictions. We may disclose information when legally required, to protect lawful rights, or in a business transfer subject to applicable protections. We do not describe information as anonymous if it can reasonably identify you.

V

Cookies and similar technologies

Cookies are small files stored on a device. Pixels, local storage, and similar tools may also recognize a device or record an interaction. Some support a requested service; others measure use or support advertising.

List every cookie or tracker with provider, purpose, necessary/optional category, lifetime, and data recipients; reconcile against an actual scan.

This inventory identifies each technology, provider, purpose, category, duration, and whether the provider receives information for its own purposes. We use only the technologies and purposes described here. Necessary technologies support functions such as authentication, security, and choices you request. Optional technologies follow the choices and legal requirements applicable to your visit.

Give working preference-center instructions and URL, consent behavior, opt-out signals, and relevant browser controls.

Where consent is required, optional technologies stay off until you consent. You can withdraw consent as easily as you gave it; withdrawal affects future use. Rejecting optional technologies does not prevent access to functions that do not depend on them. Browser controls can block or delete cookies, although some requested features may stop working. Where law requires an opt-out preference signal to be honored, we apply it to the browser or account as required and explain any limits in the choice interface. Deleting cookies may reset choices stored in them. Where required, we seek a new choice before using technologies for a new purpose.

VI

Retention and security

State retention periods or criteria by category, security practices, and backup treatment.

Retention periods or criteria are specified by category and purpose, including legal holds and backup deletion. We retain information only as long as needed for those purposes or as law requires. We use reasonable safeguards suited to the information and risks. No system guarantees complete security.

VII

Your rights and choices

Give working request methods, verification, authorized-agent, appeal, response, and marketing opt-out procedures.

Depending on applicable law, you may request access, correction, deletion, a portable copy, or an opt-out of sale, sharing, targeted advertising, or certain profiling. Where applicable, you may limit use of sensitive information and use an authorized agent. We verify requests proportionately and request only information needed for verification. We explain a denial and provide any required appeal procedure and regulator contact. We do not unlawfully discriminate for exercising rights. You may opt out of marketing messages using their unsubscribe control; necessary service messages may continue.

VIII

Children, links, and changes

Our intended ages, treatment of children’s information, and parent request process are: State intended ages, child-data practices, and parent contact process.. We obtain legally required parental consent or avoid collecting information that requires it. If we discover prohibited collection, we take appropriate deletion and protective steps.

Third-party sites have their own policies. We update this policy when practices change, post the effective date, and give additional notice or seek consent when law requires. Contact us using the details at the beginning of this policy.

Frontmatter

kind: agreement
title: Privacy Policy
jurisdiction: US
respondent_type: person_and_entity
confidential: false
workflow:
  BEGIN:
    _: lawyer_review
  lawyer_review:
    approved: END
    changes_requested: reask__draft
  reask__draft:
    resubmitted: lawyer_review
  END: {}
prompts:
  company: What is the company’s full legal name and entity type?
  business_services: Identify covered websites, apps, audiences, and controller/business role.
  effective_date: What is the {{for_label}}?
  contacts: Who are the primary and alternate contacts? Include name, title, email, and postal address.
  business_data: Inventory data categories, sensitive data, people, and specific sources.
  business_purposes: Map each category to its actual purpose and disclose any automated decision-making.
  business_sharing: Map data categories to recipients and purposes; state actual sale, sharing, advertising, and opt-out practices.
  business_cookie_inventory: List every cookie or tracker with provider, purpose, necessary/optional category, lifetime, and data recipients; reconcile against an actual scan.
  business_cookie_choices: Give working preference-center instructions and URL, consent behavior, opt-out signals, and relevant browser controls.
  business_retention: State retention periods or criteria by category, security practices, and backup treatment.
  business_rights: Give working request methods, verification, authorized-agent, appeal, response, and marketing opt-out procedures.
  business_children: State intended ages, child-data practices, and parent contact process.
  us_states: Do U.S. state privacy laws apply to these practices?
  business_state_disclosures: Complete applicable state disclosures, including California collection/sale/sharing information for the required period and financial incentives, if any.
  gdpr: Does the GDPR, UK GDPR, or Swiss data-protection law apply to these practices?
  business_bases: Map each processing purpose to its lawful basis, identifying legitimate interests and consent withdrawal methods.
  business_transfers: Identify actual destinations, adequacy decisions or executed safeguards, and how people can obtain a copy.
  business_representatives: Give applicable DPO, EU/UK representative, and competent supervisory-authority details; explain any role that does not apply.
audiences:
  business_services: lawyer
  effective_date: lawyer
  business_data: lawyer
  business_purposes: lawyer
  business_sharing: lawyer
  business_cookie_inventory: lawyer
  business_cookie_choices: lawyer
  business_retention: lawyer
  business_rights: lawyer
  business_children: lawyer
  us_states: lawyer
  business_state_disclosures: lawyer
  gdpr: lawyer
  business_bases: lawyer
  business_transfers: lawyer
  business_representatives: lawyer
questionnaire:
  BEGIN:
    _: entity__company
  entity__company:
    _: custom_text__business_services
  custom_text__business_services:
    _: custom_datetime__effective_date
  custom_datetime__effective_date:
    _: people__contacts
  people__contacts:
    _: custom_text__business_data
  custom_text__business_data:
    _: custom_text__business_purposes
  custom_text__business_purposes:
    _: custom_text__business_sharing
  custom_text__business_sharing:
    _: custom_text__business_cookie_inventory
  custom_text__business_cookie_inventory:
    _: custom_text__business_cookie_choices
  custom_text__business_cookie_choices:
    _: custom_text__business_retention
  custom_text__business_retention:
    _: custom_text__business_rights
  custom_text__business_rights:
    _: custom_text__business_children
  custom_text__business_children:
    _: custom_yes_no__us_states
  custom_yes_no__us_states:
    _: custom_text__business_state_disclosures
  custom_text__business_state_disclosures:
    _: custom_yes_no__gdpr
  custom_yes_no__gdpr:
    _: custom_text__business_bases
  custom_text__business_bases:
    _: custom_text__business_transfers
  custom_text__business_transfers:
    _: custom_text__business_representatives
  custom_text__business_representatives:
    _: END
  END: {}
clause_sources:
  us_states:
    source: privacy_us_states@1
    inputs:
      applies: custom_yes_no__us_states
      disclosures: custom_text__business_state_disclosures
  gdpr:
    source: privacy_gdpr@1
    inputs:
      applies: custom_yes_no__gdpr
      bases: custom_text__business_bases
      transfers: custom_text__business_transfers
      representatives: custom_text__business_representatives
Workflow

Definition graph — generated directly from this notation's workflow.

_approvedchanges_requestedresubmittedBEGINStartlawyer_reviewENDEndreask__draft
Neon Law
  • X opens in a new tab
  • LinkedIn opens in a new tab
  • YouTube opens in a new tab
  • API
  • Blog
  • Contact
  • Design
  • Glossary
  • Navigator
  • Notations
  • Presentations
  • Privacy
  • Team
  • Terms
  • Testimonials
  • contact@neonlaw.com
  • +1 510 800 2090
  • California
    1515 20th StreetBakersfield, CA 93301
  • Nevada
    5150 Mae Anne AveSte 405-9002Reno, NV 89523
  • New York
    12 E 49th St18th FloorNew York, NY 10017
  • Washington
    1111 Main StSTE 201EVancouver, WA 98660
  • Justice Technology AssociationMission-Aligned Partner opens in a new tab

Attorney advertisement. Nothing here is legal advice without a signed retainer for an active project. Past results do not guarantee future outcomes.

© 2026 Shook Law PC

NEON LAW® is a registered trademark of Shook Law PC, U.S. Reg. No. 6,325,650 opens in a new tab

Powered by Neon Law Navigator 26.10.22

neon-law/navigator opens in a new tab

Everyone deserves access to justice. Made with ❤️ in 🗽.