Privacy

Last Modified: December 2025

Bass Law, P.C. together with any of its affiliates (individually and collectively referred to hereinafter as “Bass Law”, “we”, “us”, “our”, or the “Firm”), is a fully remote law firm, and thus has employees, independent contractors, and clients, worldwide. We are committed to safeguarding the privacy of our clients, business partners, contacts, job applicants, website visitors, and subscribers (collectively, “you”), and to protecting the Personal Information (as defined herein below) we process.

This Privacy Statement applies to the processing of Personal Information by Bass Law, acting as a controller with respect to your Personal Information, in connection with:

• your use of our website www.bass-law.com and any online services offered through that (individually and collectively, the “Site”);
• the services offered by Bass Law to its clients and business partners;
• recruitment and hiring; and
• communications with you, including to respond to your inquiries, inform you about our services and events, and to send you our newsletters (including blogs, client alerts, invitations to webcasts, or other materials).

This Privacy Statement explains our privacy practices, including the types of Personal Information collected by Bass Law and how such information may be collected, used, processed, utilized, maintained, or shared.

Collection of Personal Information

“Personal Information” generally is any information that is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, back to a natural person or device, including personal identifiers, such as your name, email address, physical address, phone number, IP address, or device identifier, subject to definitions and exceptions under applicable law. Personal Information includes information that you provide to us, that we collect automatically, and that we obtain from third parties. Bass Law processes Personal Information regarding (i) our clients’ representatives when using any of our legal services, (ii) anyone who sends us an inquiry, registers for one of our events, subscribes to our newsletters, or attends any of our Internet-based continuing legal education courses, (iii) users of our Site, as well as (iv) job applicants.

Some of the Personal Information we process may also fall under the sub-category of “special categories of personal data”, “sensitive data”, “sensitive personal information”, or a similar term, as defined by applicable data protection laws (“Sensitive Personal Information”). Such Sensitive Personal Information may include, depending on your jurisdiction, information such as your Social Security Number, driver’s license number, national or state identification card number, passport number, financial account and credit card information in combination with any required security or access code, geolocation data, and racial and/or ethnic information. We only collect and use Sensitive Personal Information in accordance with applicable data protection laws, upon your consent where required, and as necessary to fulfill business purposes. We do not use such information to infer characteristics about you.

We will process your Personal Information only when we have a legal basis to do so (see the following section How We Use Your Personal Information). This information may include the following:

Personal Information we collect to provide legal services:

• Contact information, including first name, last name, work and personal email addresses, physical address, work and personal telephone numbers, and other similar identifiers.
• Payment information, including banking details or other transactional data, needed to provide you with legal services, including billing information.
• Professional or employment-related information, including job title, company, and business phone number.
• Other information as reasonably necessary for Bass Law to provide legal services.

We will also collect Personal Information about you indirectly from other sources, namely from our clients and interested third parties in relation to our legal services. Such Personal Information could include contact details and any other categories of Personal Information provided to us and relevant to the matter at stake.

Personal Information we collect to respond to your inquiry, to inform you about our services and events, to send you our newsletters, or to make available to you Internet-based continuing legal education courses and send you certificates of completion for such courses:

• Contact information, including first name, last name, work and personal email addresses, physical address, work and personal telephone numbers, and similar identifiers, and your areas of interest.
• Professional or employment-related information, including job title, company name, and business phone number.
• Other information as reasonably necessary for Bass Law to respond to your inquiry, inform you about our services and events, send you our newsletters, or to make available to you Internet-based continuing legal education courses and send you certificates of completion for such courses.

Personal Information we collect when you use the Site:

• Device and Usage information, such as IP address, access dates and times, information about your browser or mobile device, other device identifiers, and referring and exiting URLs. We may use cookies and similar technologies to help us understand your activity on our Site, as well as for email communications.
• Account and Profile information, such as username, password, contact information, and employment-related information, when you access and use areas of the Site that require entry of log-in credentials and/or the creation of a user profile.

Personal Information we collect in connection with your application for employment with the Firm:

• Contact information, including first name, email address, physical address, work and personal telephone numbers, employee identification number, employee credentials and related passcode, emergency contacts, and dependents’ names.
• Professional or employment-related information, including job title, employment history, and educational background, as well as information collected from the recruitment, hiring, and termination processes (for example, interview information, CV or resume, cover letters, references, reference letters, reviews, disciplinary procedure information, attendance records, transcripts, pre-hire interactions, letters of reference, publicly available social media, letters of offer and acceptance, hire, start and end dates, resignation date, and reasons).
• Education and Certification information, including work experience, certifications, registrations, professional license numbers, training, and language abilities, as well as acknowledgements relating to receipt of or agreement to Bass Law policies, and survey or feedback information.
• Identity information, including national or state identification number (Social Security Number, National Insurance number, social insurance number, EID number, residency number, citizen identification number, identity card number, or similar), taxpayer identification information, driver’s license number, as well as residency, citizenship, or work authorization status, visa number, military status, sponsorship requirement, nationality, and passport information.
• Characteristics of protected classifications under California or U.S. federal law, including sex, gender, marital status, ethnic origin, date of birth, age, sexual orientation, veteran status, and physical limitations and special accommodations, as needed or as voluntarily disclosed by you, and in all cases in accordance with applicable data protection laws and with your consent where required.
• Background check information, including, where permitted by law and as applicable, and with informed consent where required, the results of (i) criminal background checks, (ii) drug testing, (iii) a general background search on the highest level of education obtained and employment history, (iv) SSN tracing, (v) a national sex offender registry search, and (vi) a driving record search.
• Other information linked to the Personal Information above as reasonably necessary for Bass Law’s business purposes.

How We Use Your Personal Information

To provide our legal services

Bass Law processes Personal Information for the performance of the contract with you or to take precontractual steps at your request to:

• provide you with our legal services;
• manage our relationship with you and carry out any related administration; and
• send you communications related to our legal services.

In addition, where permitted by applicable data protection laws, Bass Law processes Personal Information based on its legitimate interests, which consist of:

• providing our legal services to our clients, including to the company for which you are working, and managing our relationship with such clients, including seeking payment for our services;
• complying with applicable laws, as relevant, responding to requests from, and other communications with, competent public, governmental, judicial, or other regulatory authorities, and responding to valid legal process, investigating or participating in civil discovery, litigation, or other legal proceedings;
• meeting our corporate and social responsibility commitments; and
• protecting or defending your rights, property, or security, or ours.

If you wish to obtain further details regarding our legitimate interests, where relevant under applicable data protection laws, please contact us by sending a request using the contact details specified at the end of this Privacy Statement.

Finally, Bass Law processes Personal Information to comply with the legal obligations to which it is subject, including anti-money laundering or anti-bribery checks.

Disclosure of Personal Information

For the purposes described in this Privacy Statement, we may need to share certain Personal Information with certain recipients. Such recipients will either act as another independent controller or as a processor acting on our behalf and upon our instructions.

We may disclose your Personal Information in the following limited circumstances:

• Our Affiliates and Other Offices: We may disclose your Personal Information between or among our affiliates and offices acting upon our instructions or for their own purposes (for example, for Firm administration or direct marketing purposes).
• Authorized Third Parties and Service Providers: We may disclose your Personal Information to processors that provide us with the services necessary for the achievement of the purposes described above, i.e., external auditors and our third-party service providers that provide various types of services, including IT services, and companies that provide web analytics, advertising, email distribution, and other services. These third parties are permitted to use your Personal Information to the extent necessary to enable them to provide their services to us. They are required to follow our instructions, comply with applicable law, and maintain appropriate security measures to protect your Personal Information.
• Other Parties When Required by Law or as Necessary: We may disclose your Personal Information to other entities acting as independent controllers. For example, we may disclose your Personal Information to legal or government authorities or third parties to comply with legal or regulatory requirements; to respond to lawful requests and legal process; to protect our rights and property and those of our agents, clients and others, including to enforce our agreements, policies and terms included in this Privacy Statement; to prevent fraud; and to protect the personal safety of any person.
• Other Parties upon Your Request or Your Consent: We may disclosure your Personal Information to other persons with whom you have requested that we share information or when you expressly consent to such sharing.
• Other Parties in Connection with a Transfer of Assets: If we make a sale or transfer of assets, or are otherwise involved in a merger or transfer, we may transfer your Personal Information to one or more third parties as part of that transaction in a manner consistent with this Privacy Statement.

We do not sell your Personal Information to any third parties or share your Personal Information with any third parties for cross-context behavioral or targeted advertising purposes (as defined by applicable laws).

Security Procedures

Bass Law maintains appropriate technical and organizational security procedures to protect your Personal Information from loss, misuse, unauthorized access, disclosure, or alteration, in accordance with applicable data protection laws.

Retention of Personal Information

General principles

Bass Law will retain your Personal Information for no longer than is necessary for the purposes identified under this Privacy Statement, and as permitted by applicable law.
On the expiration of the applicable data retention periods, Bass Law will securely destroy or delete, de-identify (where permitted by applicable laws) or anonymize the relevant Personal Information.

For legal services

Bass Law will keep your Personal Information for the whole duration of our legal services, extended by the applicable limitation period or as long as may be required by applicable statutory or professional retention obligations.

Specific provisions applicable to individuals in the United States:

If you are in the United States, you have various rights in relation to the processing of your Personal Information. Depending on the jurisdiction in which you are a resident, you may have the following rights subject to the exceptions allowed by law in your respective state:

• Right to Know / Data Portability: the right to know or be provided with the categories and specific pieces of Personal Information Bass Law has collected about you, the categories of sources from which the Personal Information is collected, the business purpose for collecting the Personal Information, and the categories of third parties to whom Bass Law has disclosed that Personal Information.
• Correction: the right to correct inaccurate or obsolete Personal Information that Bass Law may maintain about you.
• Deletion: the right to delete the Personal Information Bass Law maintains about you under certain circumstances.
• Non-discrimination: the right not to be discriminated against on the basis of your exercising any of these rights.
• Limitation regarding the use and disclosure of Sensitive Personal Information: the right to limit the use and disclosure of Sensitive Personal Information. Bass Law does not use your Sensitive Personal Information in any matter that requires the right to limit because Bass Law does not use or disclose Sensitive Personal Information for purposes of inferring characteristics about you, or in any way that would require us to provide a right to limit under applicable law.
• Opt out: the right to opt out of the sale or sharing for purposes of cross-context behavioral advertising, or targeted advertising of Personal Information. Bass Law does not sell, share, or engage in targeted advertising with respect to your Personal Information, including Sensitive Personal Information, as defined under applicable laws, and therefore does not provide this right. We may collect information through cookies for analytics purposes.

To exercise your rights, please contact us via the “contact us”/”get in touch” tab on our website.

We will first acknowledge receipt of your request and then provide a substantive response within the required timeline. If we require more time, we will inform you of the reason and extension period in writing.

To respond to your requests, we must verify your identity.

• How to Authorize an Agent: You may designate an authorized agent to submit your verified consumer request on your behalf, but only if the authorized agent has your written permission to do so and you have taken steps to verify your identity directly with us.
• How We Verify Your Request: We will only use the Personal Information provided in the context of your request to verify your identity or the authority of your authorized agent to make the request. Depending on how you interact with us, we may require that you provide at least two pieces of Personal Information, such as your name, email address, client number, or other information that we already have in our possession. We will verify your request by comparing the information you provide to information already in our possession to minimize the risk of fraud.

Use of Cookies

Bass Law may use “cookies” (small data files) on the Site for allowed purposes, as mentioned elsewhere in this Privacy Policy.

Third-Party Links

The Site may contain hyperlinks to websites of third parties. This Privacy Statement does not apply to such third-party content or websites. If individuals decide to follow such links, they must be aware that Bass Law does not take any responsibility for the third-party content or compliance of the third-party website with applicable data protection laws. Individuals are encouraged to make themselves aware of applicable privacy policies before they submit Personal Information to third-party websites.

Children’s Privacy

Our services are not directed to individuals under the age of eighteen (18). If we discover we have received any Personal Information from a child under the age of thirteen (13) in violation of this Privacy Statement, we will take reasonable steps to delete that information as quickly as possible. If you believe we have any information from or about anyone under the age of thirteen (13), please contact us via the “contact us”/”get in touch” tab on our website.

We do not sell or share the Personal Information of any individuals and, therefore, necessarily do not sell or share the information of children of any age.