Effective Date: February 1, 2026
Last Updated: February 11, 2026
Pacific Legal Foundation (“PLF,” “we,” “us,” or “our”) is committed to protecting your privacy and respects the personal information you share with us. This Privacy Policy explains how we collect, use, disclose, and safeguard information obtained through our website, https://pacificlegal.org (the “Site”), and related services.
1. Who We Are
Pacific Legal Foundation is a nonprofit public interest law firm organized as a 501(c)(3) organization under federal law. We operate nationwide from offices in California, Florida, and Virginia, providing information, advocacy, and pro bono legal representation on constitutional rights, property rights, free speech, economic liberty, and the rule of law.
2. Scope of This Policy
This Privacy Policy applies to information collected through our Site and related online services. It does not apply to information collected offline or through third-party websites that may link to or be accessible from our Site. This Policy also does not apply to attorney-client communications or information protected by attorney-client privilege, which are governed by separate confidentiality obligations.
3. Information We Collect
A. Information You Provide Voluntarily
When you interact with our Site or services, you may choose to provide personal information, including:
- Name
- Email address
- And any other information you choose to provide in forms, emails, or communications with us
We may collect this information when you:
- Contact us through inquiry or contact forms
- Request information about our work or legal assistance
- Subscribe to our newsletters, updates, or other communications
- Register for events, webinars, or programs
- Make donations through third-party payment platforms
B. Automatically Collected Information
When you visit the Site, we may automatically collect certain technical and usage information, including:
- IP address and approximate geographic location derived from IP address
- Browser type and version
- Device type and operating system
- Pages visited and time spent on pages
- Referring URLs and exit pages
- Click patterns and navigation paths
- Date and time of access
This information is collected through cookies, web beacons, pixels, session replay tools, and similar tracking technologies. See Section 4 for more details.
C. Information From Third Parties
We may receive information about you from third-party platforms and services you use to interact with us, such as social media platforms (e.g., when you engage with our content on Facebook, X/Twitter, or LinkedIn) or third-party donation processors. This information is governed by the privacy policies of those third-party platforms.
4. Cookies, Analytics, and Advertising Technologies
We use cookies and similar technologies to enhance your experience, analyze Site usage, and support our communications and outreach efforts. These technologies may be deployed by us or by third-party service providers acting on our behalf.
A. Types of Technologies We Use
- Essential Cookies: Necessary for the Site to function properly, including security features and basic functionality.
- Analytics Cookies: Help us understand how visitors use our Site through tools like Google Analytics (GA4) and Fullstory. These tools may use automated decision-making to analyze user behavior patterns.
- Advertising and Marketing Cookies: Used for targeted advertising and remarketing through platforms such as Google Ads, Meta (Facebook/Instagram), X (Twitter), and LinkedIn. These may track your activity across websites.
- Customer Relationship Management (CRM) Tools: We use platforms like Salesforce and Pardot to manage donor relationships, communications, and engagement tracking.
B. Third-Party Service Providers
We work with the following categories of third-party service providers who may collect or process information through our Site:
- Fullstory for session replay and user experience analysis
- Salesforce and Pardot for donor management and email communications
- Social media platforms (Meta, X, LinkedIn) for analytics and advertising pixels
These third-party tools are subject to their own privacy policies. Some of these technologies may be considered “targeted advertising” or “cross-context behavioral advertising” under applicable state privacy laws.
C. Your Cookie Choices
Most web browsers automatically accept cookies, but you can modify your browser settings to decline cookies if you prefer. However, disabling cookies may affect your ability to use certain features of our Site. To opt out of targeted advertising, see Section 11 below regarding state-specific privacy rights.
5. How We Use Information
We use the information we collect for the following purposes:
- To respond to your inquiries, requests, and communications
- To provide information about our work, cases, and advocacy efforts
- To send newsletters, updates, event invitations, and other communications (with your consent where required)
- To process event registrations and manage attendee lists
- To coordinate with third-party donation platforms
- To analyze and improve Site performance, user experience, and content
- To conduct outreach, marketing, and advertising campaigns
- To maintain and manage donor and supporter relationships
- To detect, prevent, and address technical issues or security threats
- To comply with legal obligations and enforce our policies
6. How We Share Information
We do not sell personal information to third parties. We may share personal information in the following circumstances:
A. Service Providers
We share information with trusted third-party service providers who perform services on our behalf, including:
- Website hosting and maintenance providers
- Analytics and performance monitoring services
- Customer relationship management (CRM) platforms
- Email and communication delivery services
- Advertising and marketing partners
- Payment processors (for donation processing)
B. Legal Requirements and Protection of Rights
We may disclose personal information when required by law, court order, subpoena, or other legal process, or when we believe in good faith that disclosure is necessary to:
- Comply with legal obligations
- Protect and defend the rights, property, or safety of PLF, our clients, or others
- Prevent or investigate possible wrongdoing
- Enforce our terms of use or other agreements
C. Business Transfers
In the event of a merger, acquisition, reorganization, or sale of assets, personal information may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on our Site if such a transfer occurs.
D. With Your Consent
We may share information with other parties when you have given us explicit consent to do so.
7. Donations and Payment Information
Donations made through our Site are processed by Bloomerang, a secure third-party payment platform. Pacific Legal Foundation does not collect, store, or directly process credit card, debit card, or bank account information via our website. Payment information you provide is governed by the privacy policies and security practices of the applicable payment processor (Bloomerang). We may receive limited transaction information (such as donation amount and date) from payment processors to maintain donation records and provide receipts.
8. Data Retention
In general, we retain personal information only for as long as reasonably necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.
When personal information is no longer needed, we will securely delete or anonymize it in accordance with our data retention policies and applicable legal requirements. Note that data retention may be different for donor information. Please see our gift acceptance and donor privacy policies page for more information.
9. Data Security
We maintain reasonable administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, disclosure, alteration, or destruction. These measures include:
- Encryption of data in transit using SSL/TLS protocols
- Secure hosting infrastructure with access controls
- Regular security assessments and updates
- Employee training on data privacy and security practices
- Limited access to personal information on a need-to-know basis
However, no method of transmission over the Internet or electronic storage is completely secure. While we strive to protect your personal information, we cannot guarantee its absolute security.
10. Your Choices and Rights
A. Email Communications
You may opt out of receiving promotional emails from us by following the unsubscribe instructions in any marketing email we send, using this link, or by contacting us using the information in Section 17. Please note that even if you opt out of marketing communications, we may still send you non-promotional messages related to your inquiries, donations, or our relationship with you.
B. Cookie Management
You can control cookies through your browser settings. Most browsers allow you to refuse or delete cookies. Please note that blocking or deleting cookies may impact site functionality and your experience.
11. State-Specific Privacy Rights
If you are a resident of certain U.S. states, you may have additional privacy rights under applicable state privacy laws. The following sections describe rights available to residents of specific states.
A. California Residents (CCPA/CPRA)
Under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), California residents have the following rights:
- Right to Know: You have the right to request disclosure of the categories and specific pieces of personal information we have collected about you, the categories of sources, the business purposes for collection, and the categories of third parties with whom we share personal information.
- Right to Delete: You have the right to request deletion of personal information we have collected from you, subject to certain legal exceptions.
- Right to Correct: You have the right to request correction of inaccurate personal information.
- Right to Opt-Out of Sale/Sharing: You have the right to opt out of the “sale” or “sharing” of personal information as those terms are defined under California law. We do not sell personal information in the traditional sense. However, our use of certain advertising technologies (such as advertising pixels and remarketing tools) may constitute “sharing” under California law. You can opt out by adjusting your browser cookie settings or using opt-out mechanisms provided by advertising platforms.
- Right to Limit Use of Sensitive Personal Information: We do not collect or use sensitive personal information (as defined by the CPRA) in ways that would trigger this right.
- Right to Non-Discrimination: You have the right not to receive discriminatory treatment for exercising your privacy rights.
Categories of Personal Information Collected (California):
- Identifiers (name, email, postal address, IP address)
- Commercial information (donation records, event registrations)
- Internet or network activity (browsing behavior, interactions with our Site)
- Geolocation data (approximate location derived from IP address)
- Inferences (preferences and interests derived from your interactions)
To exercise your rights, please contact us. We will verify your identity before processing your request and will respond within the timeframes required by law (typically 45 days, with possible extensions).
B. Virginia Residents (VCDPA)
Under the Virginia Consumer Data Protection Act (VCDPA), Virginia residents have the following rights:
- Right to Access: You have the right to confirm whether we are processing your personal data and to access that data.
- Right to Correct: You have the right to correct inaccuracies in your personal data.
- Right to Delete: You have the right to request deletion of personal data you have provided, subject to certain exceptions.
- Right to Data Portability: You have the right to obtain a copy of your personal data in a portable format.
- Right to Opt Out: You have the right to opt out of (i) targeted advertising, (ii) the sale of personal data, and (iii) profiling in furtherance of decisions that produce legal or similarly significant effects. We do not sell personal data or engage in profiling that produces legal or similarly significant effects. However, you may opt out of targeted advertising by adjusting cookie settings or contacting us.
To exercise your rights, please contact us. If we decline to take action on your request, you have the right to appeal our decision by contacting us at the same email address. We will respond to appeals within 60 days.
C. Colorado Residents (CPA)
Under the Colorado Privacy Act (CPA), Colorado residents have rights similar to those described for Virginia residents, including:
- Right to access personal data
- Right to correct inaccuracies
- Right to delete personal data
- Right to data portability
- Right to opt out of targeted advertising and the sale of personal data
To exercise your rights or to appeal a decision, please contact us.
D. Connecticut Residents (CTDPA)
Under the Connecticut Data Privacy Act (CTDPA), Connecticut residents have rights similar to those described for Virginia and Colorado residents, including:
- Right to access, correct, and delete personal data
- Right to data portability
- Right to opt out of targeted advertising and the sale of personal data
To exercise your rights or to appeal a decision, please contact us.
E. Other State Residents
Additional states are enacting comprehensive privacy laws. If you are a resident of a state with applicable privacy rights not listed above, please contact us to inquire about your rights.
12. Children’s Privacy
Our Site is not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13 without parental consent, we will promptly delete that information. If you believe we may have collected information from a child under 13, please contact us immediately.
13. External Links and Third-Party Websites
Our Site may contain links to third-party websites, platforms, or services that are not operated or controlled by Pacific Legal Foundation. This Privacy Policy does not apply to those third-party sites. We are not responsible for the privacy practices or content of third-party websites. We encourage you to review the privacy policies of any third-party sites you visit.
14. International Users
Our Site and services are operated in the United States and are intended for users located in the United States. If you are accessing our Site from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States where our servers are located and our central database is operated. By using our Site, you consent to the transfer of your information to the United States.
15. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will update the “Last Updated” date at the top of this Policy and may provide additional notice (such as a prominent notice on our Site or email notification) as appropriate under the circumstances. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information.
16. Copyright
Pacific Legal Foundation ®, and our respective images, logo designs, are trademarks, and service marks of Pacific Legal Foundation ®, all rights reserved. © Pacific Legal Foundation ®. Neither this Web site nor any element thereof, including without limitation, text, graphics, images, photographs, likenesses or other materials, may be copied, reproduced, uploaded, posted, transmitted, or redistributed without the prior express written consent of Pacific Legal Foundation ®. Trademarks, service marks, logo designs owned by third parties are used by permission.
17. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, or if you wish to exercise your privacy rights, please contact us.
Mail:
Pacific Legal Foundation
555 Capitol Mall, Suite 1290
Sacramento, CA 95814
Attn: Privacy Officer
We will respond to your inquiry within a reasonable timeframe and in accordance with applicable legal requirements.