Welcome to the website of LANIER MEYER MCBRIDE BLAIR, LLP ("the Firm," "we," "us," or "our") located at lmmblaw.com (the "Site"). By accessing or using this Site, you agree to these Terms of Use (the "Terms"). If you do not agree to these Terms, please stop using the Site immediately.

1. Introduction and Scope

Lanier Meyer McBride Blair LLP ("the Firm"), a Texas law partnership located in Houston, Texas, is committed to protecting the privacy of our clients, potential clients, website visitors, and other individuals whose personal information we collect. This Privacy Policy explains how we collect, use, disclose, protect, and otherwise handle personal information in accordance with applicable laws, including the Texas Data Privacy and Security Act (TDPSA), the Texas Rules of Professional Conduct, and other applicable legal requirements. This policy applies to information we collect through our website (lmmblaw.com), during client consultations, through email (privacy@lmmblaw.com), telephone communications, written correspondence, and any other means by which we interact with you.

2. Who We Are and What We Do

The Firm is a contingent fee law practice headquartered in Houston, Texas. We represent clients primarily in mass tort litigation, personal injury matters, and related claims, typically on a contingent fee basis. Our website and communications services are designed to facilitate attorney-client relationships and to provide general legal information. The Firm is governed by the Texas Rules of Professional Conduct and maintains strict obligations regarding client confidentiality and the protection of privileged communications.

3. Categories of Personal Information We Collect

We may collect the following categories of personal information:

(a) Information You Provide Directly:

• Contact information (name, phone number, email address, mailing address)
• Case-specific information (details about your legal matter, injury, damages, timeline of events)
• Medical and health information (medical records, treatment history, healthcare providers, insurance information)
• Financial information (insurance coverage, policy limits, settlement authority, financial need)
• Government-issued identification (driver's license, Social Security number for settlement purposes)
• Employment information (employer, job history, work-related incidents)
• Communications history (emails, letters, notes from consultations)

(b) Information Automatically Collected:

• Website usage information (IP address, browser type, pages visited, time spent, referring website)
• Device information (type, operating system, unique device identifiers)
• Cookies and similar technologies (persistent identifiers for website functionality)
• Geolocation data (approximate location based on IP address)

(c) Third-Party Information:

• Medical records and treatment information from healthcare providers
• Insurance documents and claims information from insurers
• Public records and court documents
• Information from opposing parties and defense counsel
• Background information from commercial data providers

4. Legal Basis for Processing and Use of Information

We process personal information based on the following legal bases:

(a) Performance of Legal Services: We process information necessary to provide legal representation, including case investigation, negotiations, settlement discussions, and litigation.

(b) Attorney-Client Relationship: Information necessary to establish and maintain the attorney-client relationship is protected as privileged and confidential under the Texas Rules of Professional Conduct.

(c) Legitimate Business Interests: We process information to manage our law practice, maintain client relationships, bill for services, comply with professional obligations, and improve our services.

(d) Legal and Regulatory Compliance: We process information as required by applicable law, court orders, bar association rules, and professional ethics obligations.

(e) Client Consent: Where appropriate, we obtain explicit consent from clients before processing sensitive or health-related information.

5. How We Use Personal Information

We use personal information for the following purposes:

(a) Legal Representation: Investigating claims, communicating with clients, negotiating settlements, preparing for trial or mediation, and maintaining case files.

(b) Client Communication: Contacting you regarding your case status, scheduling appointments, and providing legal advice and strategic guidance.

(c) Settlement Administration: Facilitating settlement negotiations, calculating damages, processing settlement proceeds, and distributing funds to clients and providers.

(d) Billing and Collections: Tracking time, preparing invoices, calculating contingent fees pursuant to fee agreements, and managing financial aspects of your representation.

(e) Firm Operations: Managing client relationships, internal administrative functions, training, quality assurance, and firm management.

(f) Compliance and Risk Management: Complying with legal obligations, responding to discovery requests, maintaining liability insurance, and defending against malpractice claims.

(g) Business Development: With your consent, contacting former clients regarding potential matters, publishing client testimonials or case results (with confidentiality protections), and marketing the Firm's services.

We do not use or share personal information for targeted advertising, profiling for automated decision-making, or any purpose incompatible with the attorney-client relationship.

6. Information Sharing and Disclosure

We share personal information only to the extent necessary and permitted by applicable law and professional ethics rules:

(a) Service Providers and Vendors: We may share information with:

• Court reporters, mediators, and settlement administrators

Medical experts, investigators, and expert witnesses

Insurance carriers and liability insurers

• Document management and case management software providers
• Accounting and billing service providers
• IT service providers and cloud storage vendors

All service providers are contractually obligated to maintain the confidentiality of client information and to use information only for purposes necessary to provide services to the Firm.

(b) Co-Counsel and Referral Attorneys: We may share information with other attorneys involved in your representation or to whom we have referred your matter.

(c) Opposing Parties and Legal Proceedings: We may disclose information as required by:

Court orders and subpoenas

Discovery obligations in pending litigation

Regulatory investigations or inquiries

Settlement negotiations and mediations

(d) Medical Providers and Insurers: With your authorization, we may communicate with healthcare providers, health insurance companies, and workers' compensation carriers regarding your case.

(e) Settlement and Damages Calculation: We may share settlement authority, policy limits, and financial information with opposing counsel, mediators, and settlement administrators for purposes of negotiating and finalizing settlements.

(f) Third-Party Funding and Litigation Finance: If you authorize third-party litigation funding, we may share case information with funding providers to facilitate funding arrangements.

(g) Lien Holders and Providers: With client authorization, we may disclose case information to medical providers, healthcare facilities, and other parties asserting liens against the recovery.

(h) Fee Collection: In rare circumstances, if the Firm must pursue fee disputes with a client, we may disclose client information only to the minimal extent necessary to collect or establish the Firm's fees, always subject to protective orders and confidentiality protections.

(i) Legal Obligations: We may disclose information as required by law, subpoena, court order, bar disciplinary proceedings, or other legal processes. We will not disclose attorney-client privileged information except as required by law or with client consent.

We do not sell client personal information or sensitive personal data. We do not share information for marketing purposes outside the Firm without explicit client authorization.

7. Attorney-Client Privilege and Confidentiality

Critical Notice: Information you provide to the Firm during the course of seeking or receiving legal representation is generally protected by attorney-client privilege and subject to the attorney-client relationship. This information includes:

Confidential communications between attorney and client

Case strategy and litigation plans

Settlement discussions and demand positions

Legal analysis and opinions

Internal case evaluations

These privileged communications will not be disclosed to third parties except:

As authorized by the client in writing

As required by court order or legal process

As necessary to prevent imminent harm or crime

As permitted under the Texas Rules of Professional Conduct

To our co-counsel and service providers on a confidential basis

The Firm maintains strict security procedures to protect privileged information from unauthorized access or disclosure. You should not assume that information sent via unencrypted email or over unsecured networks is privileged; please contact the Firm regarding secure communication methods if you have sensitive information to share.

8. Data Security and Protection Measures

The Firm implements comprehensive administrative, technical, and physical security measures to protect personal information:

(a) Administrative Controls:

Access restrictions limiting employee access to information on a need-to-know basis

Confidentiality agreements with all employees and service providers

Annual privacy and security training for staff

Incident response procedures for potential data breaches

(b) Technical Controls:

Encrypted email and file transmission for sensitive information

Secure case management and document storage systems

Password protection for digital files and databases

Firewalls and antivirus protection

Regular security audits and vulnerability assessments

(c) Physical Controls:

Restricted access to office facilities and case file storage areas

Locked filing cabinets for paper records

Destruction of sensitive documents when no longer needed

Visitor log maintenance and employee badge systems

(d) Industry Standards:

The Firm follows security standards appropriate to the nature and volume of personal information handled, consistent with standards recommended by the State Bar of Texas and information security best practices.

9. Data Retention

The Firm retains personal information for the following periods:

(a) Active Client Files: Personal information is maintained in active client files during the representation and for the duration of the attorney-client relationship.

(b) Closed Files: Following case closure and settlement, the Firm maintains client files in accordance with:

Texas Disciplinary Rules of Professional Conduct (Rule 1.09 regarding confidential information)

Applicable statutes of limitation and repose

Tax records retention requirements

Firm policies (typically 7-10 years after case closure)

(c) Website and Non-Client Information: Information automatically collected through our website is retained for up to 24 months or as required for legitimate business purposes.

(d) Legal Hold: If information is subject to pending litigation or legal investigation, we retain it for as long as necessary.

(e) Destruction: When retention periods expire, the Firm destroys personal information through:

Secure document shredding for paper records

Secure deletion or overwriting of digital files

Certified destruction services for sensitive information

Clients may request destruction of their personal information upon case closure, subject to legal hold requirements and professional obligations to maintain certain records.

10. Your Privacy Rights

Depending on your jurisdiction and relationship with the Firm, you may have certain rights regarding your personal information:

(a) Texas Data Privacy and Security Act (TDPSA) Rights:

If you are a Texas resident and the TDPSA applies to our processing, you have the right to:

Access: Request confirmation of whether we are processing your personal information and to receive a copy of that information in portable format

Correction: Request correction of inaccurate personal information

Deletion: Request deletion of your personal information (subject to legal hold and retention requirements)

Opt-Out: Request that we cease processing your personal information for targeted advertising or profiling (note: this does not apply to processing necessary for legal representation)

Data Portability: Request transfer of your information to another service provider in machine-readable format

(b) Client-Specific Rights:

As a client of the Firm, you have the right to:

Request access to your case file and client information

Request amendments or corrections to information in your file

Receive notice of any data breach affecting your information

Direct the Firm regarding use of your information (subject to legal and professional obligations)

(c) How to Exercise Your Rights:

Submit a request using the contact information in Section 21. Please include "Privacy Request" in the subject line and specify which right you are exercising. We will respond to verified requests within 45 days of receipt. We may request reasonable documentation to verify your identity before processing your request.

Limitations: Some requests may be denied if:

The information is protected by attorney-client privilege

Disclosure would violate professional confidentiality obligations

Disclosure is prohibited by law or court order

The information is necessary to maintain the attorney-client relationship

Retention is required by law or professional rules

11. Children and Minors

Our website and services are not directed to children under 13 years old. We do not knowingly collect personal information from children under 13. If we become aware that we have collected information from a child under 13, we will take steps to delete such information promptly.

For Minor Clients: If you are a minor seeking legal representation, your parent or legal guardian may need to authorize certain aspects of representation. We will explain any guardian consent requirements during the initial consultation.

12. Do-Not-Track and Browser Privacy Controls

Some web browsers include a “Do-Not-Track” (“DNT”) feature. Our website does not currently respond to DNT signals. However, you can control cookies and other tracking technologies through your browser settings and privacy controls. For details on managing cookies and tracking through your browser, consult your browser’s help documentation.

13. Third-Party Links and Websites

Our website may contain links to third-party websites, resources, and service providers. This Privacy Policy applies only to our website and services. We are not responsible for the privacy practices of third-party websites. We encourage you to review the privacy policies of any linked websites before providing personal information.

14. Communications and Marketing

(a) Legal Communications: The Firm will contact you regarding your legal matter via phone, email, text message, or mail as necessary to provide representation. These communications are necessary for the attorney-client relationship and cannot be opted out of while you remain a client.

(b) Marketing Communications: With your prior written consent, the Firm may contact you regarding:

Potential additional legal matters

Case results and testimonials (with confidentiality protections)

Firm publications and educational content

Events and seminars

(c) Opt-Out of Marketing: You may opt out of non-essential marketing communications by:

Replying "STOP" to any text message

Clicking "unsubscribe" in email communications

Calling our office to request removal from marketing lists

This will not affect communications related to your active legal representation.

(d) Text Message Terms: By providing a mobile phone number, you consent to receive text messages from the Firm regarding your case. Standard message and data rates may apply. You may opt out of text messages by replying "STOP" to any text message.

(e) Telephone Communications: We may use your phone number to contact you regarding your case. We may use autodialed or prerecorded messages to contact you about case matters, subject to applicable telemarketing laws and Do-Not-Call regulations.

15. California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA)

(a) Scope and Applicability:

If you are a California resident and we process your personal information, the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA) effective January 1, 2023, provides you with specific rights regarding your personal data. These rights apply to personal information collected during our attorney-client relationship and other interactions with the Firm.

(b) California Consumer Rights:

As a California resident, you have the following rights:

Right to Know: You have the right to request that we disclose:

The specific pieces of personal information we have collected about you

The categories of personal information collected

The sources from which we collected your personal information

The purposes for which we collected your personal information

The categories of third parties with whom we share your personal information

Right to Delete: You have the right to request deletion of personal information we have collected from you, except where an exception applies (e.g., information necessary to fulfill the purposes for which it was collected, information required to be retained by law, privileged information).

Right to Correct: You have the right to request correction of inaccurate personal information in our records.

Right to Opt-Out: You have the right to opt-out of our sale or sharing of your personal information for cross-context behavioral advertising. We do not sell personal information or share information for cross-context behavioral advertising. However, certain third-party integrations (such as analytics and cookies) may constitute "sharing" under the CPRA. You may opt-out by adjusting browser settings or contacting us using the information in Section 21.

Right to Limit Use and Disclosure of Sensitive Personal Information: You have the right to limit our collection, use, and disclosure of sensitive personal information (defined as social security numbers, precise geolocation, racial/ethnic origin, religious beliefs, union membership, mail contents, genetic data, biometric information, health information, and sex life/sexual orientation data) to what is reasonably necessary to provide legal services. Given the nature of litigation representation, some health and financial information may be necessary and will be retained in accordance with this policy.

Right to Data Portability: You have the right to request that we provide your personal information in a portable format to another service provider.

Right to Non-Discrimination: You have the right to exercise your California privacy rights without discrimination from the Firm. We will not deny you services, charge different prices, or provide different quality of service based on your exercise of these rights, except where legally permitted (e.g., fee arrangements necessary for representation).

(c) CCPA/CPRA Request Process:

To exercise your California rights, submit a request using the contact information in Section 21. Clearly state which right you are exercising. Your request must include:

Your full name

Sufficient information to verify your identity or authorization to act on behalf of a consumer

A clear description of your request

We will verify your identity and respond within 45 days (may be extended an additional 45 days if reasonably necessary). We may request documentation to verify your identity.

Authorized Agents: You may authorize an agent to submit requests on your behalf. We may require power of attorney or other documentation verifying the agent's authority.

(d) CCPA/CPRA Exceptions for Attorney-Client Privilege:

We may deny requests to the extent that:

Your personal information is protected by attorney-client privilege or work product doctrine

Disclosure would violate our professional confidentiality obligations

Disclosure is prohibited by law or court order

The information is necessary to maintain the attorney-client relationship or provide legal representation

(e) California "Shine the Light" Law (Cal. Civ. Code § 1798.83):

California residents may request information about the personal information we share with third parties for their direct marketing purposes. To make such a request, contact us using the information in Section 21. In your request, please specify that you seek California "Shine the Light" information and describe what personal information you want to know about. We will respond within 30 days of receiving your verified request.

(f) California Cookie Consent Requirements:

Our website uses cookies and similar tracking technologies. California residents can control these technologies through browser settings. To learn how to manage cookies and tracking through your browser, visit your browser's help section or privacy settings. We honor user cookie preferences and browser privacy settings to the extent they are supported by our systems. Our website does not currently respond to browser “Do-Not-Track” (DNT) signals.

16. Texas Data Privacy and Security Act (TDPSA)

(a) Scope and Applicability:

The Texas Data Privacy and Security Act (TDPSA), effective July 1, 2024, applies to our handling of personal data of Texas consumers. We are subject to the TDPSA to the extent we conduct business in Texas and process personal data of Texas residents.

(b) Texas Consumer Rights Under TDPSA:

If you are a Texas resident and we process your personal data, you have the following rights:

Right to Access: You have the right to confirm whether we process your personal data and to receive a copy of that personal data in a portable, readily usable format.

Right to Correction: You have the right to request correction of inaccurate personal data.

Right to Deletion: You have the right to request deletion of your personal data, subject to exceptions for:

Information necessary to perform services requested by you

Information required to be retained by law or legal obligation

Information necessary for internal compliance purposes

Privileged or confidential information

Right to Opt-Out of Sale: You have the right to opt-out of our sale of your personal data. We do not sell personal data for purposes of the TDPSA, but if circumstances change, you may opt-out using the contact information in Section 21.

Right to Opt-Out of Targeted Advertising: You have the right to opt-out of processing of your personal data for purposes of targeted advertising. Note: This does not apply to processing necessary to provide legal representation.

Right to Appeal: If we deny your request, you have the right to appeal our decision by contacting us using the information in Section 21. We will provide information regarding the grounds for denial and how to appeal.

(c) TDPSA Request Process:

Submit requests using the contact information in Section 21. We will respond within 45 days of receipt of a verified request. We may require reasonable information to verify your identity.

(d) TDPSA Exemptions for Professional Services:

We may deny requests to the extent:

The information is subject to attorney-client privilege or professional confidentiality

Disclosure is prohibited by law or court order

The information is necessary to provide legal representation

Disclosure would violate professional ethics rules

(e) TDPSA Data Security:

The Firm implements reasonable security measures appropriate to the nature and volume of personal data we process, including:

Administrative safeguards (access controls, employee training, incident response)

Technical safeguards (encryption, firewalls, intrusion detection)

Physical safeguards (facility access controls, document destruction)

17. Colorado, Connecticut, Utah, and Other State Privacy Laws

If you reside in Colorado, Connecticut, Utah, Virginia, or another jurisdiction with a comprehensive state privacy law, we will honor the privacy rights provided by that law, including access, deletion, correction, and opt-out rights, to the extent applicable and not inconsistent with legal and professional obligations. Contact us using the information in Section 18 to exercise these rights.

18. European Union GDPR Compliance (International Data Protection)

(a) Scope and Applicability:

For individuals located in the European Union, European Economic Area (EEA), or other jurisdictions where the General Data Protection Regulation (GDPR) applies, the following provisions govern our processing of your personal data:

(b) Legal Basis for Processing:

We process personal data of EU individuals based on the following legal bases under GDPR Article 6:

Performance of Contract: Processing necessary to establish and maintain the attorney-client relationship and provide legal services (Article 6(1)(b))

Legitimate Interests: Processing necessary for the Firm's legitimate interests in managing client relationships, providing services, complying with legal obligations, and preventing fraud (Article 6(1)(f))

Legal Obligation: Processing required by applicable law, court orders, or professional ethics rules (Article 6(1)(c))

Consent: Processing where you have given explicit consent, which you may withdraw at any time (Article 6(1)(a))

(c) Sensitive Personal Data Processing (GDPR Article 9):

We process sensitive personal data (such as health information, medical records, and information concerning criminal proceedings) only:

With your explicit written consent

To the extent necessary to provide legal representation

As required by law or legal obligation

To establish, exercise, or defend legal claims

(d) Your GDPR Rights:

As an EU resident, you have the following rights regarding your personal data:

Right of Access (Article 15): You have the right to access your personal data and receive information about our processing.

Right to Rectification (Article 16): You have the right to correct inaccurate personal data.

Right to Erasure ("Right to be Forgotten") (Article 17): You have the right to request deletion of personal data, subject to exceptions for:

Information necessary to provide legal representation

Compliance with legal obligations

Establishment, exercise, or defense of legal claims

Professional confidentiality obligations

Right to Restrict Processing (Article 18): You have the right to restrict our processing of your personal data in certain circumstances (e.g., while contesting accuracy).

Right to Data Portability (Article 20): You have the right to receive personal data concerning you in a structured, commonly used, machine-readable format and to transmit it to another controller.

Right to Object (Article 21): You have the right to object to processing of your personal data for legitimate reasons, except where:

Processing is necessary for legal representation

Processing is required by law

We have compelling legitimate interests overriding your rights and freedoms

Rights Related to Automated Decision-Making and Profiling (Article 22): We do not use automated decision-making or profiling to make decisions producing legal or similarly significant effects without your consent. Any decisions regarding legal representation are made by humans.

Right to Lodge a Complaint (Article 77): You have the right to lodge a complaint with the supervisory authority in your jurisdiction if you believe we have violated your rights.

(e) GDPR Data Subject Access Request (DSAR) Process:

To exercise GDPR rights, submit a request to privacy@lmmblaw.com. Your request should include:

Your full name and contact information

Specific description of which right you are exercising

Information to verify your identity

We will respond within 30 days of receipt (may be extended 60 additional days if complex). Requests may be denied where:

Granting the request would violate attorney-client privilege

Information is protected by professional confidentiality obligations

Disclosure would violate law or court order

(f) Data Processing Agreement (DPA):

For clients or data subjects requiring formal Data Processing Agreements under GDPR, please contact our Privacy Coordinator. We will execute appropriate Data Processing Agreements with controllers and processors as necessary.

(g) International Data Transfers:

If we transfer personal data outside the EU/EEA (e.g., to the United States or third countries), we implement appropriate safeguards including:

Standard Contractual Clauses (approved by the European Commission)

Adequacy decisions

Other legally recognized transfer mechanisms

Appropriate supplementary measures

We will inform you of transfer mechanisms and your rights regarding international transfers upon request.

(h) GDPR Compliance Officer:

For questions regarding GDPR compliance, contact our Privacy Coordinator at privacy@lmmblaw.com.

19. Data Retention and Destruction

The Firm retains personal information only for as long as reasonably necessary to (i) provide legal services and manage our relationship with you; (ii) comply with legal, ethical, and regulatory obligations; (iii) maintain appropriate business, tax, and accounting records; and (iv) establish, exercise, or defend legal claims. The specific retention periods for different categories of information are described in Section 9 (Data Retention).

(a) Retention Criteria

In determining how long to retain particular records, we consider factors including, but not limited to:

The nature, scope, and sensitivity of the personal information;

The type of legal matter and applicable statutes of limitation and repose;

Our obligations under the Texas Rules of Professional Conduct and other professional ethics rules;

Contractual obligations to clients, co-counsel, and service providers; and

The existence of any litigation holds, investigations, or regulatory inquiries.

(b) Legal Holds and Preservation Obligations

If we reasonably believe that certain information is relevant to pending or anticipated litigation, investigations, audits, or other legal proceedings, we may place that information under a “legal hold.” Information subject to a legal hold will be preserved and not destroyed until the legal hold is lifted, even if the ordinary retention period would otherwise have expired.

(c) Destruction and De-Identification Procedures

When applicable retention periods (including any legal holds) expire, the Firm will dispose of personal information in a manner designed to prevent unauthorized access, disclosure, or use. Depending on the format and sensitivity of the information, this may include:

Secure shredding or pulverizing of paper records;

Secure deletion, overwriting, or de-identification of electronic files;

Removal or disabling of user accounts, access credentials, and permissions; and

Requiring vendors and service providers that store information on our behalf to follow comparable destruction or de-identification procedures.

Where feasible and consistent with our legal and ethical obligations, we may de-identify or aggregate personal information so that it can no longer reasonably be used to identify you. De-identified or aggregated information is not treated as personal information under this Privacy Policy.

(d) Backup Systems and Residual Copies

Due to the nature of information systems and backup technologies, residual copies of personal information may remain in backup or disaster-recovery archives for a limited period after the primary records have been destroyed or deleted. These backups are subject to administrative, technical, and physical safeguards and are only accessed when necessary for system restoration, security, or legal compliance.

(e) Client Requests for Destruction

Subject to our legal, regulatory, and professional obligations (including recordkeeping and confidentiality requirements), clients may request deletion or destruction of certain information after their matter has concluded. We will consider and, where legally permissible and operationally feasible, honor such requests. However, we may be required or permitted to retain key portions of the client file (such as engagement agreements, settlement documents, lien resolutions, and material correspondence) for specified periods to comply with law, professional rules, and risk-management requirements.

20. Changes to This Privacy Policy

We may modify this Privacy Policy at any time to reflect changes in our practices, technology, legal requirements, or other factors. Changes will be effective upon posting on our website with a revised "Effective Date." If we make material changes, we will notify clients of significant modifications via email or other means where possible. Your continued use of our website and services after changes are posted constitutes your acceptance of the revised Privacy Policy.

If you have an active legal matter, we will notify you of any material changes that affect how we handle your personal information.

21. Contact Information and Privacy Inquiries

For questions about this Privacy Policy, to request access to your personal information, to exercise your privacy rights, or to report a data breach or privacy concern, please contact:

Lanier Meyer McBride Blair LLP

Privacy Coordinator

Houston, Texas

Email: privacy@lmmblaw.com

Telephone: 885-359-1772

Mailing Address:

Lanier Meyer McBride Blair LLP

6363 Woodway Drive, Suite 1025, Houston, Texas 77057

We will respond to privacy inquiries and requests within 45 days of receipt. Please provide as much detail as possible regarding your request to help us assist you efficiently.

22. Complaints and Regulatory Resources

If you believe the Firm has violated your privacy rights, you may:

(a) File a Complaint with the State Bar of Texas:

The State Bar of Texas has authority over attorney conduct and compliance with professional ethics rules, including confidentiality obligations. You may file a complaint with the State Bar at:

State Bar of Texas

Office of Chief Disciplinary Counsel

https://www.texasbar.org/become-a-lawyer/office-of-chief-disciplinary-counsel/

(b) File a Complaint with the Texas Attorney General:

If you believe we have violated the Texas Data Privacy and Security Act (TDPSA), you may file a complaint with the Texas Attorney General at:

Texas Office of the Attorney General

Consumer Protection Division

https://www.texasattorneygeneral.gov/

(c) Contact Us Directly:

We encourage you to contact us first using the information in Section 21 to resolve any privacy concerns informally.

23. Legal and Professional Obligations

As a law firm licensed in Texas, the Firm is bound by:

Texas Rules of Professional Conduct (particularly Rules 1.6 regarding confidentiality, 1.5 regarding fees, and 1.4 regarding communication)

Texas Disciplinary Rules of Professional Conduct

State Bar of Texas ethics opinions and guidance

California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) (for California clients and residents)

Texas Data Privacy and Security Act (TDPSA) (for Texas residents and clients)

European Union General Data Protection Regulation (GDPR) (for EU/EEA residents and clients)

California Online Privacy Protection Act (CalOPPA) (website privacy requirements)

Telemarketing Sales Rule (TSR) and Do-Not-Call Implementation Act (for marketing communications)

Other applicable federal and state privacy statutes (including Colorado CPA, Connecticut CTDPA, Utah UCPA, Virginia CDPA)

Court orders and discovery obligations

Litigation finance and settlement regulatory requirements

This Privacy Policy is interpreted consistently with these professional and legal obligations. In the event of conflict between this Privacy Policy and professional ethics rules or law, professional ethics rules and applicable law will control.

Hierarchy of Authority:

Professional ethics rules (Texas Rules of Professional Conduct, attorney-client privilege)

Court orders and legal judgments

Applicable federal and state law (GDPR, CCPA, CPRA, TDPSA, and other privacy statutes)

This Privacy Policy

24. California Specific Requirements

(a) California Business and Professions Code Section 6001 et seq.:

The Firm is licensed to practice law in California where necessary to handle matters involving California clients. We comply with California legal ethics rules to the extent our representation involves California legal matters.

(b) CCPA Business Requirement - Privacy Policy Availability:

This Privacy Policy is continuously available on our website at lmmblaw.com and may be updated from time to time. We maintain a separate California privacy rights page with information specific to California residents.

(c) "Do-Not-Sell-My-Personal-Information" Link (CCPA Requirement):

California residents may opt-out of any potential sale of their personal information by:

Clicking the "Do Not Sell or Share My Personal Information" link on our website (if applicable)

Contacting us directly using the information in Section 21

Note: We do not sell personal information; this link is provided for full transparency compliance.

(d) Response Time and Appeals:

We respond to verified consumer requests within 45 days (may extend 45 additional days if necessary)

We provide information regarding how to appeal any denial of a request

Appeals may be submitted to privacy@lmmblaw.com with subject line "Privacy Request Appeal"

25. Texas Specific Requirements

(a) Texas Business and Commerce Code Section 59.001 et seq.:

The Firm operates in compliance with Texas TDPSA requirements for all Texas residents and clients.

(b) Privacy Notice Availability:

This Privacy Policy is available at lmmblaw.com and upon request in accessible format at our Houston office.

(c) Opt-Out Mechanisms:

Texas residents may exercise opt-out rights by:

Contacting privacy@lmmblaw.com

Calling our office using the number in Section 21

Mailing requests to the address in Section 21

(d) Data Minimization:

We collect only personal data necessary to provide legal representation and comply with professional obligations. We do not collect data for purposes unrelated to legal services unless consent is obtained.

26. Acknowledgment

By engaging the Firm for legal representation, visiting our website, or providing personal information to us, you acknowledge that you have read and understood this Privacy Policy and consent to our processing of your personal information in accordance with these terms, subject to the attorney-client relationship and applicable law. You further acknowledge your rights under the CCPA/CPRA (if a California resident), TDPSA (if a Texas resident), GDPR (if an EU resident), and other applicable privacy laws.

27. Quick Reference - Your Privacy Rights by Location

California Residents: Right to know, delete, correct, opt-out (sales/sharing), limit use (sensitive data), data portability, non-discrimination. Request deadline: 45 days. Appeal available.

Texas Residents: Right to access, correct, delete, opt-out (sales), opt-out (targeted advertising), appeal. Request deadline: 45 days. Small business exemption does not apply to sensitive data sales.

EU/EEA Residents: Right of access, rectification, erasure, restriction, portability, objection, non-automated decision-making, lodge complaint. Request deadline: 30-60 days. GDPR applies to international transfers.

Other U.S. States: Varying rights under Colorado CPA, Connecticut CTDPA, Utah UCPA, Virginia CDPA, and others will be honored.

QUESTIONS? Contact us using the information below. We are committed to protecting your privacy while providing excellent legal representation.

Privacy Coordinator

Lanier Meyer McBride Blair LLP

Address: 6363 Woodway Drive, Suite 1025, Houston, Texas 77057

Email: privacy@lmmblaw.com

For California privacy inquiries: See Section 15 (CCPA/CPRA)

For Texas privacy inquiries: See Section 16 (TDPSA)

For EU/EEA inquiries: See Section 18 (GDPR)

For complaints: See Section 22 (Complaints and Regulatory Resources)