Privacy Policy
Last Updated: May 8, 2026
Section 1. Introduction
Evolution Tax and Legal ("the Firm," "we," "us," or "our") is committed to protecting the privacy of individuals who visit our website at evolutiontaxlegal.com ("Site"). This Privacy Policy explains what information we collect, how we use it, and the rights available to you under applicable law, including the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA) and the General Data Protection Regulation (GDPR) where applicable to residents of the European Economic Area.
This policy applies to information collected through the Site only. It does not govern information exchanged as part of an active client engagement, which is subject to our engagement letter and professional confidentiality obligations under applicable law.
If you have questions about this policy, please contact us at etladmin@evolutiontaxlegal.com.

Section 2. Information We Collect
We collect two categories of information through the Site.
Information you provide directly. When you submit a contact or consultation request form, we collect the information you choose to share, which may include your name, email address, phone number, and the nature of your inquiry. We do not require sensitive financial or legal details through website forms and recommend that you not submit confidential information through them. See Section 11 for more on this.
Information collected automatically. When you visit the Site, we automatically receive certain technical data, including your IP address, browser type, operating system, referring URL, pages visited, and the date and time of your visit. This information is collected through Google Analytics and helps us understand how visitors use the Site.
We do not knowingly collect personal information from individuals under the age of 16. If you believe a minor has submitted information through the Site, please contact us and we will promptly delete it.

Section 3. How We Use Your Information
We use the information collected through the Site for the following purposes:
To respond to your inquiry or consultation request. When you submit a contact form, we use the information you provide solely to follow up with you about the services you have inquired about.
To understand and improve Site performance. Aggregate analytics data helps us identify which content is useful, how visitors navigate the Site, and where the user experience can be improved. This information is not used to build personal profiles or target individuals with advertising.
To comply with legal and professional obligations. As a licensed law firm, we are subject to professional responsibility rules, regulatory obligations, and legal process. We may use or disclose information where required by law or where necessary to protect the rights, property, or safety of the Firm or others.
We do not sell your personal information. We do not use your information for automated decision-making or profiling.

Section 4. Sharing and Disclosure
We do not sell, rent, or trade your personal information to third parties for marketing or commercial purposes.
We may share information in the following limited circumstances:
Service providers. We use Google Analytics to process website usage data on our behalf. This service provider accesses data only as necessary to perform analytics services and is not permitted to use it for independent purposes.
Legal obligations. We may disclose information if required to do so by law, court order, subpoena, or other legal process, or if we believe in good faith that disclosure is necessary to protect the rights, property, or safety of the Firm, its personnel, or others.
Professional responsibility. As a California-licensed law firm, we are subject to the California Rules of Professional Conduct. Nothing in this policy limits our ability to comply with those obligations.
Business transfers. In the unlikely event of a firm dissolution, merger, or transfer of practice, personal information may be transferred as part of that transition, subject to the same confidentiality protections described here.
We do not share personal information with other law firms, referral networks, or professional associations without your consent.

Section 5. Google Analytics and Third-Party Services
We use Google Analytics, a web analytics service provided by Google LLC, to collect and analyze information about how visitors use the Site. Google Analytics uses cookies and similar technologies to collect data such as pages visited, time spent on the Site, and traffic sources.
Google may transfer this data to servers in the United States or other countries where Google operates. Google's collection and use of data is governed by its own Privacy Policy, available at policies.google.com/privacy.
You can opt out of Google Analytics tracking by installing the Google Analytics Opt-Out Browser Add-On, available at tools.google.com/dlpage/gaoptout. You may also limit data collection by adjusting your browser settings as described in Section 6.
We do not use advertising pixels, social media tracking tags, or remarketing tools on the Site.

Section 6. Cookies and Tracking Technologies
Cookies are small text files placed on your device when you visit a website. They allow the site to recognize your browser and retain certain information across visits.
The Site uses the following types of cookies:
Analytics cookies. These are placed by Google Analytics and collect aggregate, non-identifiable information about how visitors interact with the Site. They do not identify you personally.
Strictly necessary cookies. These support basic site functionality such as page loading and security. They cannot be disabled without affecting how the Site operates.
We do not use advertising cookies, tracking pixels, or cookies tied to social media platforms.
Managing cookies. You can control or disable cookies through your browser settings. Instructions vary by browser -- most allow you to block all third-party cookies, delete cookies on exit, or receive a notification before a cookie is placed. Note that disabling analytics cookies will not affect your ability to use the Site. Disabling strictly necessary cookies may.
If you are visiting from the European Economic Area, certain cookies may require your consent before being placed. We recommend that you review your browser settings to manage preferences accordingly.

Section 7. Data Retention
We retain personal information only as long as necessary for the purposes described in this policy, or as required by applicable law.
Contact form submissions. Information submitted through a contact form is retained in the Firm's practice management system in accordance with applicable professional records obligations and for as long as necessary to serve legitimate business purposes. If an engagement follows, the information becomes part of the client file and is retained in accordance with our professional records retention obligations.
Analytics data. Google Analytics retains usage data for a maximum of 26 months by default, after which it is automatically deleted from Google's systems. We do not maintain a separate copy of this data.
Legal holds. If information is relevant to pending or anticipated litigation, regulatory inquiry, or professional responsibility matter, it may be retained beyond the periods above until the matter is resolved.

Section 8. Your Privacy Rights
Depending on where you are located, you may have specific rights regarding your personal information. We honor requests from California residents and individuals in the European Economic Area (EEA), and we extend reasonable good-faith consideration to requests from all visitors regardless of jurisdiction.
California Residents -- CCPA/CPRA
If you are a California resident, you have the following rights under the California Consumer Privacy Act as amended by the California Privacy Rights Act:
Right to Know. You may request that we disclose what personal information we have collected about you, the categories of sources, the purposes for collection, and any third parties with whom it has been shared.
Right to Delete. You may request deletion of personal information we have collected about you, subject to certain exceptions required by law or necessary to complete a transaction or fulfill a legal obligation.
Right to Correct. You may request that we correct inaccurate personal information we hold about you.
Right to Opt Out of Sale or Sharing. We do not sell or share personal information for cross-context behavioral advertising. No opt-out is required, but we will honor any request submitted.
Right to Non-Discrimination. We will not discriminate against you for exercising any of these rights.
To submit a request, see Section 9.
EEA Residents -- GDPR
If you are located in the European Economic Area, you have the following rights under the General Data Protection Regulation:
Right of Access. You may request a copy of the personal data we hold about you.
Right to Erasure. You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations.
Right to Restriction. You may request that we restrict processing of your data in certain circumstances.
Right to Data Portability. Where processing is based on your consent or a contract, you may request your data in a structured, commonly used, machine-readable format.
Right to Object. You may object to processing based on legitimate interests. We will cease processing unless we can demonstrate compelling grounds that override your interests.
Right to Withdraw Consent. Where we rely on consent as a legal basis for processing, you may withdraw it at any time without affecting the lawfulness of prior processing.
Right to Lodge a Complaint. You have the right to lodge a complaint with a supervisory authority in your country of residence or place of work.
Legal Basis for Processing (GDPR)
We process personal information under the following legal bases: legitimate interests (responding to inquiries, understanding site performance), performance of a contract or pre-contractual steps at your request, and compliance with legal obligations. We do not rely on consent for analytics cookies at this time, though you may manage cookie preferences through your browser as described in Section 6.

Section 9. How to Submit a Privacy Request
To exercise any of the rights described in Section 8, please contact us by email at etladmin@evolutiontaxlegal.com. Include your name, the nature of your request, and sufficient information for us to locate your records. We will respond within 45 days for CCPA requests and within 30 days for GDPR requests. Where additional time is needed, we will notify you within the initial response period.
We do not charge a fee for reasonable requests. We may decline requests that are manifestly unfounded, excessive, or repetitive, or where an exception under applicable law applies.
We are unable to fulfill requests concerning information held as part of an active client matter, as that information is governed by professional confidentiality obligations and applicable privilege rules rather than this policy.

Section 10. Data Security
We implement administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, disclosure, alteration, and loss. Contact form submissions are transmitted over encrypted connections. Website analytics data is processed through Google's security infrastructure.
No method of transmission over the internet is completely secure, and we cannot guarantee absolute security. We encourage you not to submit sensitive financial, legal, or personal identifying information through website contact forms.
Note for internal review: The FTC's updated Safeguards Rule (effective 2023) under the Gramm-Leach-Bliley Act may apply to this Firm given its tax and financial advisory services. If the Firm qualifies as a "financial institution" under the FTC's definition, this section may need to reference a separate written information security program. Alton should confirm GLBA applicability before this policy is published.

Section 11. No Attorney-Client Relationship
Visiting this Site, submitting a contact form, or sending an email to the Firm does not create an attorney-client relationship. No such relationship is formed until the Firm and the prospective client have executed a written engagement letter and the Firm has confirmed its acceptance of the representation.
Information submitted through this Site before an engagement is established is not protected by attorney-client privilege. We recommend that you not include sensitive legal, tax, or financial details in a website inquiry. If you are an existing client, please communicate through the channels established in your engagement.
All email communications from the Firm are subject to the following notice:
The Firm accepts no liability for the content of any email communication, or for the consequences of any actions taken on the basis of information provided, unless that information is subsequently confirmed in writing. Any legal or tax guidance conveyed by email is preliminary in nature and should not be relied upon as a definitive or final opinion. A formal written legal opinion prepared in accordance with IRS Circular 230 is required before taking any action based on such guidance. If you have received a communication in error, please notify the sender immediately and destroy all copies. Disclosure, copying, or distribution of misdirected communications is strictly prohibited.

Section 12. International Data Transfers
The Firm is headquartered in California, United States. If you are located outside the United States, including in the European Economic Area, please be aware that information you provide through this Site will be transferred to and processed in the United States. U.S. privacy laws may differ from those in your jurisdiction and may not provide the same level of protection as the GDPR or other applicable laws.
By using the Site and submitting information, you acknowledge this transfer. Where required by applicable law, we take reasonable steps to ensure that cross-border data transfers are conducted in a manner consistent with your rights.

Section 13. Changes to This Policy
We may update this policy from time to time to reflect changes in our practices, applicable law, or Site functionality. When we do, we will revise the "Last Updated" date at the top of the page. We encourage you to review this policy periodically. Continued use of the Site after changes are posted constitutes your acceptance of the revised policy.

Section 14. Contact Us
For questions about this Privacy Policy, to submit a rights request, or to report a privacy concern, please contact us at:
Evolution Tax and Legal
1201 Puerta Del Sol #301, San Clemente, CA 92673
etladmin@evolutiontaxlegal.com
949-229-6015
evolutiontaxlegal.com