Skip to main content
Surge Business Law

Privacy Policy

How we collect, use, and protect your information

Background

This Privacy Policy explains what information Surge Business Law PLLC collects, how we use it, who we share it with, and the choices you have. It covers surge.law, every subdomain of surge.law (including contract.surge.law and trademark.surge.law), our member and client portals, and our calls, texts, and emails with you. In this policy, "we," "us," and "our" mean Surge Business Law PLLC, and "you" means anyone whose information we collect.

We are a law firm that serves businesses. Our Terms of Service govern your use of our websites. If you become our client, your representation agreement and the rules that govern lawyers also govern how we handle your information, and where they give you more protection than this policy, they control.

Last updated: November 3, 2026.

1. Information You Send Before You Are Our Client

If you tell us about a legal matter before you hire us, through a form, a document upload, a booking, an email, a text, or a call, we treat it as confidential under the rules that protect prospective clients of a lawyer. That is true even if we never represent you.

We use what you tell us about your matter only to evaluate it, to run a conflict check, to give you a quote, and to communicate with you about it. We do not use it for advertising, and we do not share it with advertising companies. The only outside companies that receive it are the service providers we use to run our firm, such as our document storage, CRM, email, and AI providers, and they handle it on our behalf under confidentiality obligations.

These rules still allow us to decline your matter and, in some cases, to represent someone whose interests are adverse to yours. Sending us information does not make you our client. Only a signed representation agreement does.

2. Information We Collect

Information you give us. This includes your name, email address, phone number, business name and details, and mailing address; what you enter in forms, bookings, and intake questionnaires; documents you upload, such as contracts for review; account and login details for our portals; messages, emails, and texts you send us; and anything you tell us in a consultation. Payments are processed by Stripe, which collects your card or bank details directly. We see the last four digits and the transaction, not the full number.

Information collected automatically. When you use our websites, we and the companies listed in section 4 collect your IP address, browser, device and operating system, general location, the pages you visit, how you got to our site (including the ad or search that brought you and the campaign codes in the link), what you click and type into our pages, how far you scroll, and how long you stay. Some of these tools record your session on our pages so we can see how people use them.

Calls. When you call us from a Google Local Services ad, Google tracks and records the call and shares the recording and call details with us. Other calls to our office may also be tracked and recorded.

Information from others. We receive reports from advertising and analytics companies about how our ads and pages perform, leads and call records from Google Local Services, information from people who refer you to us, and public records, such as a business's filings with a Secretary of State.

3. How We Use Information

We use information to respond to you and schedule consultations; evaluate matters, run conflict checks, and prepare quotes; provide legal and non-legal services you buy, including registered agent service; manage accounts, subscriptions, and payments; send you messages about your matter, your account, and our services, including marketing emails you can unsubscribe from; measure and improve our websites and advertising; show our ads to people who have visited our site; keep our websites and systems secure; and meet our legal and professional obligations.

4. Advertising, Analytics, and Session Recording

We advertise online and use tools that measure how well that advertising works. These tools are loaded through Google Tag Manager and set cookies or similar technologies in your browser. They include:

  • Google Analytics, to measure traffic and how visitors use our sites.
  • Google Ads, to measure which ads lead to inquiries and to show our ads to people who have visited our site (remarketing).
  • Google Local Services Ads, which tracks and records calls from those ads as described in section 2.
  • The Meta Pixel, to measure our Facebook and Instagram ads and to show our ads to people who have visited our site.
  • Microsoft Advertising, to measure our Bing ads and to show our ads to people who have visited our site.
  • Microsoft Clarity, which records sessions on our pages, including mouse movements, clicks, and scrolling, and produces heatmaps, so we can see where pages are confusing or broken.
  • Cloudflare Web Analytics, to measure site performance.

These companies collect information about your visits directly through their tools, and each uses it under its own privacy policy, which may include using it to improve its own services and to show you ads elsewhere. We also save the campaign codes in the link that brought you to our site so we can tell which ad or source led to an inquiry.

Some of these tools also use contact information to match visits and inquiries to people's accounts on their platforms. When you enter your email address, phone number, or name in a form on our websites, these tools may convert it into a scrambled code (a process called hashing) and send that code to the advertising company. We may also send hashed contact information from our own systems to advertising companies to measure which ads led to inquiries and clients, and to reach people who are similar to our clients or to exclude existing clients from our ads. We send contact information only in hashed form, and never the details of your legal matter.

Pages that require you to sign in do not load these advertising or session-recording tools.

5. Artificial Intelligence

We use artificial intelligence tools in our work and on our websites, including in chat features, to pre-screen contracts you upload and prepare a quote, and to help our team draft and review documents. When you submit information to one of these features, it is processed by the AI provider we use for that feature. Our agreements with those providers do not allow them to use your information to train their models.

The contract pre-screen is automated. It decides which service fits your contract and what the quote should be. If you think a quote got it wrong, contact us and a person on our team will look at it. Any legal work we deliver to a client is reviewed by a lawyer before it goes out.

6. Texts and Email

If you give us your mobile number and agree to receive texts, we text you about appointments, your matter, and your account, and if you separately agree, about our services. Message and data rates may apply. Reply STOP to opt out or HELP for help. We do not share your mobile number, your consent to receive texts, or your text messages with any third party or affiliate for marketing or promotional purposes or for any other purpose of theirs. Our messaging provider transmits texts on our behalf and does not use them for anything else.

Our emails may tell us whether you opened them and which links you clicked. You can unsubscribe from marketing email at any time with the link in any marketing email. We will still send you messages about your matter, account, or purchases.

7. How We Share Information

We share information only as this policy describes:

  • Service providers that run parts of our firm for us, including our CRM and scheduling platforms (including Go High Level and ClickUp), document storage and productivity tools (Google Workspace), payment processing (Stripe), email delivery (SendGrid), text messaging (Twilio), website hosting and security (Cloudflare), workflow automation, and AI providers. They may use your information only to provide their services to us.
  • Advertising and analytics companies, which collect information through the tools described in section 4.
  • Government offices, when a service you bought requires it, such as a filing with a Secretary of State or the U.S. Patent and Trademark Office. Many of those filings become public records.
  • When the law requires it, such as in response to a subpoena or court order, subject to our duties of confidentiality.
  • In a transfer of our practice, to a successor firm, subject to the rules that govern lawyers.
  • With your consent.

8. Selling and Sharing Personal Information

We do not sell your personal information for money, and we do not share the details of your legal matter with anyone for their own marketing. We do let the advertising and analytics companies in section 4 collect information about your visits to our websites, such as the pages you view, your device and browser identifiers, and hashed contact information as described in section 4, so we can measure and target our advertising. Some state laws treat that as a "sale" of personal information or as "sharing" it for targeted advertising. You can limit it using the choices in section 9.

9. Your Choices About Cookies and Tracking

You can block or delete cookies in your browser settings, though some parts of our sites, such as booking forms, may not work without them. You can also limit how these companies use your information through their own settings, including Google's Ad Settings, Meta's ad preferences, and Microsoft's privacy dashboard, and you can opt out of Google Analytics with Google's browser add-on.

Our websites use a consent integration with Google Tag Manager. For visitors in regions where consent is required before these tools run, they do not run until you agree. Elsewhere, they run when you visit, and you can turn them off using the choices above.

Our websites do not currently respond to Do Not Track or Global Privacy Control browser signals.

10. Embedded Content and Links

Some pages include content from other companies, such as YouTube videos and Go High Level booking widgets. Those companies may collect information when you view or use that content, under their own privacy policies. Links to other websites take you outside our control, and we are not responsible for how those sites handle your information.

11. Children

Our websites and services are for businesses and adults. They are not directed to children under 13, and we do not knowingly collect information from them. If you think a child has given us information, contact us and we will delete it.

12. Your Rights

Depending on where you live, you may have the right to ask what personal information we hold about you, to correct it, to delete it, to get a copy in a portable format, to opt out of targeted advertising or the sale of your information, and to withdraw consent you have given. To make a request, email us at [email protected]. We may need to confirm your identity first. We will not treat you differently for making a request. As a law firm, we may need to keep some information to meet our legal and professional obligations even if you ask us to delete it, and we will tell you if that applies.

13. How Long We Keep Information

We keep information for as long as we need it for the purposes in this policy, and longer where the law or our professional obligations require it. Client files are kept as the rules that govern lawyers require. Information and documents you send us before you become a client, including uploaded contracts, are kept as long as we need them to respond to you, to maintain our conflict-check records, and to meet our professional obligations. Information collected by the tools in section 4 is kept under each company's own retention settings.

14. Security

We protect information with encryption in transit, access limited to the people who need it, sign-in protections on our systems, and service providers with their own security programs, and we review our practices regularly. No system is completely secure, and we cannot guarantee that information will never be accessed without authorization. If we learn of a breach that affects your information, we will notify you as the law requires.

15. Changes to This Policy

We may update this policy. When we do, we will post the new version with a new "last updated" date, and if a change is significant, we will tell clients and account holders by email. Changes apply to information collected after the change takes effect.

16. Contact Us

Surge Business Law PLLC, 5335 Merle Hay Rd, Suite 7, Johnston, IA 50131. Email: [email protected].