PRIVACY POLICY

Red Stapler Project
Effective Date: January 1, 2026
Last Updated: January 1, 2026

INTRODUCTION

Red Stapler Project (“we,” “our,” or “us”) is committed to protecting your privacy and maintaining the confidentiality of your personal and case information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website (redstaplerproject.com) or engage our professional services.

By using our website or services, you agree to the collection and use of information in accordance with this policy.

If you have any questions about this Privacy Policy, please contact us at:
Email: Contact Form
Phone: (858) 752-1772
Address: La Mesa, California

INFORMATION WE COLLECT

Personal Information You Provide

When you interact with our website or services, you may voluntarily provide us with personal information, including but not limited to:

Contact Information:

• First and last name
• Email address
• Phone number
• Mailing address
• Law firm or practice name
• Professional title/role

Professional Information:

• Practice area and specialization
• Bar admission information
• Years in practice
• Case types handled

Service Inquiry Information:

• Nature of consultation or service needed
• Case details (when provided)
• Timeline and urgency
• Budget and expectations
• How you heard about our services

Communication Information:

• Messages sent through contact forms
• Email correspondence
• Phone call records
• Meeting notes and consultation records
• Feedback and survey responses

Case-Related Information

When you engage our services for case audits, consultations, or training, you may provide:

Case Files and Documents:

• Medical records and reports
• Accident reports and documentation
• Witness statements
• Insurance correspondence
• Legal pleadings and discovery
• Expert reports
• Photographs and videos
• Any other case-related materials

Client Information (within case files):

• Names and identifying information of claimants
• Medical histories and conditions
• Treatment records
• Financial information
• Personal background information

IMPORTANT: All case-related information is subject to enhanced confidentiality protections as described below.

Automatically Collected Information

When you visit our website, we automatically collect certain information:

Device and Browser Information:

• IP address
• Browser type and version
• Operating system
• Device type (desktop, mobile, tablet)
• Screen resolution

Usage Information:

• Pages visited and time spent
• Links clicked
• Referring website
• Search terms used to find our site
• Date and time of visits

Cookies and Tracking Technologies:

• Session cookies (expire when you close browser)
• Persistent cookies (remain until deleted)
• Analytics cookies (Google Analytics)
• Functional cookies (form memory, preferences)

Newsletter and Marketing Information

If you subscribe to our newsletter or marketing communications:

• Email address
• Name and professional information
• Subscription preferences
• Email engagement metrics (opens, clicks)
• Unsubscribe requests

HOW WE USE YOUR INFORMATION

We use the information we collect for the following purposes:

Service Delivery

To Provide Professional Services:

• Conduct case audits and evaluations
• Provide strategic consultations
• Deliver training and education programs
• Respond to your inquiries and requests
• Schedule appointments and meetings
• Process payments and invoicing

To Communicate With You:

• Respond to contact form submissions
• Send appointment confirmations and reminders
• Provide case audit reports and follow-up
• Answer questions about our services
• Send invoices and payment receipts

Business Operations

To Improve Our Services:

• Analyze service utilization and effectiveness
• Identify areas for improvement
• Develop new service offerings
• Enhance client experience
• Conduct quality assurance

To Maintain Our Website:

• Monitor website functionality
• Prevent fraud and abuse
• Ensure security and prevent unauthorized access
• Troubleshoot technical issues
• Optimize website performance

Marketing and Communications

With Your Consent:

• Send newsletters with industry insights
• Provide educational content and resources
• Announce new services or offerings
• Share case studies and success stories (anonymized)
• Invite you to events or webinars

You can opt out of marketing communications at any time by clicking “unsubscribe” in any email or contacting us directly.

Legal and Compliance

To Meet Legal Obligations:

• Comply with applicable laws and regulations
• Respond to legal process (subpoenas, court orders)
• Enforce our terms of service
• Protect our legal rights
• Prevent fraud or illegal activity

HOW WE PROTECT YOUR INFORMATION

We take the security of your information seriously and implement comprehensive safeguards:

Technical Security Measures

Encryption:

• SSL/TLS encryption for all website transmissions
• 256-bit encryption for stored data
• Encrypted email for sensitive communications
• Secure file transfer protocols

Access Controls:

• Password-protected systems
• Multi-factor authentication
• Role-based access limitations
• Regular password updates

Infrastructure Security:

• Secure hosting environment
• Firewall protection
• Regular security updates and patches
• Intrusion detection and prevention
• Daily backups with offsite storage

HIPAA Compliance:

For case files containing medical information, we maintain HIPAA-compliant security measures including:

• Business Associate Agreements with technology vendors
• Encrypted storage and transmission
• Audit logs of all access
• Staff training on HIPAA requirements
• Incident response procedures

Physical Security Measures

Office Security:

• Locked filing cabinets for physical documents
• Restricted access to office space
• Visitor log and access control
• Secure document shredding
• Clean desk policy

Device Security:

• Encrypted laptops and mobile devices
• Remote wipe capabilities
• Automatic screen locks
• VPN for remote access
• Anti-malware and antivirus software

Organizational Security Measures

Confidentiality Agreements:

• All staff sign comprehensive NDAs
• Third-party vendors sign confidentiality agreements
• Clear policies on information handling
• Regular confidentiality training

Data Minimization:

• Collect only necessary information
• Retain information only as long as needed
• Regularly review and purge old files
• Anonymize data when possible

Incident Response:

• Breach notification procedures
• Investigation and remediation protocols
• Documentation and reporting requirements
• Client notification commitments

HOW WE SHARE YOUR INFORMATION

We do not sell, rent, or trade your personal information. We may share your information only in the following limited circumstances:

Service Providers

We may share information with trusted third-party service providers who assist in operating our business:

Technology Providers:

• Website hosting services
• Email service providers
• Calendar and scheduling tools
• Payment processors
• Cloud storage providers
• Analytics services

All service providers:

• Are contractually required to protect your information
• May use information only for providing services to us
• Must maintain confidentiality and security standards
• Must comply with applicable privacy laws

Professional Advisors

We may share information with:

• Legal counsel (attorney-client privilege applies)
• Accountants and auditors
• Insurance providers
• Business consultants

Only when necessary for professional advice or business operations.

Legal Requirements

We may disclose information when required by law:

• In response to subpoenas or court orders
• To comply with legal process
• To respond to government requests
• To protect our legal rights
• To prevent fraud or illegal activity
• To protect safety of individuals

We will notify you of legal requests when legally permitted to do so.

Business Transfers

If Red Stapler Project is involved in a merger, acquisition, or sale of assets:

• Your information may be transferred to the new entity
• You will be notified of any change in ownership
• This Privacy Policy will continue to apply
• You will have options regarding your information

With Your Consent

We may share information for other purposes with your explicit consent:

• Testimonials with your approval (name and firm)
• Case studies (always anonymized)
• Referrals (only with permission)
• Co-marketing opportunities (opt-in)

CONFIDENTIALITY OF CASE INFORMATION

Enhanced Protection for Case Files

Case files and client information receive our highest level of confidentiality protection:

Attorney-Client Relationship:

• We recognize the attorney-client privilege between you and your clients
• We never communicate directly with your clients without your authorization
• We maintain the confidential nature of all case information
• We assist you in maintaining privilege protections

Non-Disclosure Agreements:

• We sign NDAs as standard practice
• Agreements specify scope of confidentiality
• Terms extend beyond engagement termination
• Breach remedies are clearly defined

Case Information Usage Restrictions:

We will NEVER:

• Share case information with opposing parties or their representatives
• Use case information for competitive purposes
• Disclose case information to other clients
• Publish case information without explicit written permission
• Maintain case files longer than necessary

We will ONLY use case information to:

• Provide the services you’ve engaged us for
• Support our work product for your benefit
• Comply with legal obligations (with notice when possible)

Anonymization and De-Identification

When we create educational content, case studies, or examples:

We Always:

• Remove all identifying information
• Change names, locations, and dates
• Modify case-specific details
• Aggregate data to prevent identification
• Obtain written permission for any publication

We Never:

• Use real client names or identifying details
• Include specific case facts that could identify parties
• Publish without your explicit written consent

Data Retention for Case Files

Active Engagement:

• Case files maintained securely throughout engagement
• Access limited to essential personnel only
• All access logged and monitored

Post-Engagement:

• Case files retained for 90 days after engagement ends
• Files securely deleted unless you request longer retention
• Deletion includes all copies and backups
• Certificate of deletion available upon request

You may request:

• Early deletion of your files
• Extended retention (with justification)
• Return of all materials provided
• Confirmation of deletion

YOUR PRIVACY RIGHTS

You have the following rights regarding your personal information:

Access and Correction

Right to Access:

• Request copies of personal information we hold
• Review how we’re using your information
• Confirm accuracy of information
• Receive information in accessible format

Right to Correction:

• Update outdated information
• Correct inaccurate information
• Complete incomplete information

How to Exercise: Email with “Access Request” or “Correction Request” in subject line

Deletion and Restriction

Right to Deletion:

• Request deletion of your personal information
• Exceptions: Information required for legal compliance, active engagements, or legitimate business purposes
• We will confirm deletion within 30 days

Right to Restrict Processing:

• Limit how we use your information
• Object to certain uses
• Opt out of marketing communications

How to Exercise: Email with “Deletion Request” or “Restriction Request”

Data Portability

Right to Data Portability:

• Receive your information in structured, machine-readable format
• Transfer your information to another service
• Available for information you provided to us

How to Exercise: Email with “Portability Request”

Marketing Communications

Right to Opt-Out:

• Unsubscribe from newsletters at any time
• Opt out of marketing emails
• Request no contact for marketing purposes

How to Exercise:

• Click “unsubscribe” in any marketing email
• Email with “Unsubscribe” request
• Call us to opt out verbally

Note: Opting out of marketing does not affect service-related communications (appointment reminders, case updates, invoices).

California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

Right to Know:

• Categories of personal information collected
• Sources of personal information
• Business purposes for collection
• Third parties we share with
• Specific pieces of information we hold

Right to Delete:

• Request deletion of personal information
• Subject to certain exceptions

Right to Opt-Out:

• Opt out of “sale” of personal information
• Note: We do not sell personal information

Right to Non-Discrimination:

• We will not discriminate against you for exercising your rights
• No denial of services
• No different prices or quality of services

How to Exercise California Rights:

• Email: Contact
• Phone: (858) 752-1772
• Subject line: “California Privacy Rights Request”

Verification: We may ask for additional information to verify your identity before responding to requests.

COOKIES AND TRACKING TECHNOLOGIES

What Are Cookies?

Cookies are small text files stored on your device when you visit our website. They help us provide better service and understand how you use our site.

Types of Cookies We Use

Essential Cookies (Required):

• Session management
• Security features
• Load balancing
• Form completion memory

These cookies are necessary for the website to function and cannot be disabled.

Analytics Cookies (Optional):

• Google Analytics
• Website traffic analysis
• User behavior patterns
• Performance monitoring

These cookies help us improve our website. You can opt out via browser settings or Google Analytics Opt-out Browser Add-on.

Functional Cookies (Optional):

• Remember your preferences
• Auto-fill forms
• Language preferences
• Accessibility settings

Marketing Cookies (Optional):

• Track marketing campaign effectiveness
• Understand referral sources
• Measure conversion rates

Managing Cookies

Browser Controls: Most browsers allow you to:

• View cookies stored on your device
• Delete existing cookies
• Block future cookies
• Receive notifications about new cookies

To manage cookies:

• Chrome: Settings > Privacy and Security > Cookies
• Firefox: Preferences > Privacy & Security > Cookies
• Safari: Preferences > Privacy > Cookies
• Edge: Settings > Privacy & Security > Cookies

Impact of Blocking Cookies:

• Some website features may not work properly
• You may need to re-enter information on forms
• Preferences may not be saved
• Analytics won’t track your visit

Third-Party Tracking

Google Analytics: We use Google Analytics to understand website usage. Google Analytics collects:

• Pages visited
• Time on site
• Geographic location (city/state level)
• Device and browser type
• Referral sources

Opt-Out Options:

• Install Google Analytics Opt-out Browser Add-on: https://tools.google.com/dlpage/gaoptout
• Enable “Do Not Track” in your browser
• Use browser extensions that block tracking

We do not:

• Use remarketing or advertising cookies
• Share analytics data with third parties (except Google)
• Combine analytics data with personal identifiers

THIRD-PARTY LINKS

Our website may contain links to third-party websites, including:

• Professional associations
• Legal resources
• Industry publications
• Social media platforms
• Service providers

Important:

• We are not responsible for the privacy practices of third-party sites
• This Privacy Policy applies only to redstaplerproject.com
• We encourage you to review the privacy policies of sites you visit
• Clicking links to third-party sites is at your own risk

We do not:

• Endorse third-party websites
• Control their content or privacy practices
• Share your information with them without consent
• Monitor their compliance with privacy laws

CHILDREN’S PRIVACY

Red Stapler Project does not knowingly collect information from children under 13 years of age.

Our website and services are intended for:

• Licensed attorneys
• Legal professionals
• Law firm staff
• Professional adults in the legal industry

If we discover we have collected information from a child under 13:

• We will delete it immediately
• We will notify parents/guardians if possible
• We will take steps to prevent future collection

If you believe we have collected information from a child under 13:

• Contact us immediately
• Provide details so we can investigate and respond

INTERNATIONAL DATA TRANSFERS

Red Stapler Project is based in California, USA. If you are accessing our website or services from outside the United States:

Please be aware:

• Your information will be transferred to and stored in the United States
• U.S. privacy laws may differ from your country’s laws
• By using our services, you consent to this transfer

We take precautions to protect international data:

• Apply the same security standards regardless of location
• Comply with applicable international privacy laws
• Implement appropriate safeguards for cross-border transfers

For EU/UK residents:

• We comply with GDPR principles
• We implement appropriate safeguards for EU data transfers
• You retain all rights under GDPR

CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy periodically to reflect:

• Changes in our practices
• New legal requirements
• Technological developments
• Business changes

When we make changes:

• We will update the “Last Updated” date at the top
• Significant changes will be prominently posted on our website
• We may notify you via email for material changes
• Continued use of our services constitutes acceptance of changes

We encourage you to:

• Review this Privacy Policy periodically
• Check the “Last Updated” date
• Contact us with questions about changes

Previous versions:

• Available upon request
• Maintained for historical reference

DATA BREACH NOTIFICATION

In the unlikely event of a data breach that affects your personal information:

Our Commitment:

• We will investigate immediately
• We will notify affected individuals promptly
• We will notify within 72 hours when legally required
• We will provide clear information about the breach

Notification Will Include:

• Description of what happened
• Types of information affected
• Steps we’re taking to address the breach
• Steps you can take to protect yourself
• Contact information for questions

Our Response:

• Immediate containment and remediation
• Forensic investigation
• Notification to authorities if required
• Assistance to affected individuals
• Review and improvement of security measures

CONTACT INFORMATION

Questions About This Privacy Policy

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices:

Red Stapler Project

Primary Contact:
Renée Soileau
Email: Contact Form
Phone: (858) 752-1772

Mailing Address:
La Mesa, CA

Privacy-Specific Inquiries:
Subject Line: “Privacy Policy Question”
Contact Page

Response Time:
We will respond to all privacy inquiries within 5 business days, and will fully address your request within 30 days.

Complaints and Concerns

If you believe we have not adequately addressed your privacy concerns:

Internal Resolution:

1. Contact us at renee@redstaplerproject.com with “Privacy Complaint” in subject line
2. Provide detailed description of your concern
3. We will investigate and respond within 30 days

External Resources:

• California Attorney General’s Office: https://oag.ca.gov/privacy
• Federal Trade Commission: https://www.ftc.gov/privacy
• State Bar of California (for attorney conduct concerns)

EFFECTIVE DATE AND ACCEPTANCE

Effective Date: January 1, 2026
Last Updated: January 1, 2026

By using our website or services, you acknowledge that:

• You have read and understood this Privacy Policy
• You consent to the collection, use, and disclosure of information as described
• You agree to the terms and conditions outlined herein

If you do not agree with this Privacy Policy:

• Do not use our website
• Do not provide us with personal information
• Contact us to discuss your concerns

APPENDIX: DEFINITIONS

Personal Information: Information that identifies, relates to, or could reasonably be linked with you or your household.

Case Information: Information related to specific legal matters, claims, or cases you provide to us for professional services.

HIPAA: Health Insurance Portability and Accountability Act, federal law governing medical information privacy.

CCPA: California Consumer Privacy Act, state law providing California residents enhanced privacy rights.

GDPR: General Data Protection Regulation, European Union regulation governing data privacy.

Cookies: Small text files stored on your device by websites you visit.

Encryption: Process of converting information into coded format to prevent unauthorized access.

Third Party: Any entity that is not Red Stapler Project or you.

De-identification: Process of removing information that identifies individuals.

Data Breach: Unauthorized access, use, or disclosure of personal information.

ACKNOWLEDGMENTS

This Privacy Policy complies with:

• California Consumer Privacy Act (CCPA)
• Health Insurance Portability and Accountability Act (HIPAA)
• General Data Protection Regulation (GDPR) principles
• California State Bar ethics rules regarding client confidentiality
• Federal Trade Commission guidelines

Thank you for trusting Red Stapler Project with your information. We take this responsibility seriously and are committed to protecting your privacy while providing exceptional service.

For questions or concerns about this Privacy Policy, please contact us