Privacy Notice

Shepherdson Law, PLLC (“Shepherdson Law,” “we,” “us,” or “our”) is a law firm that represents creditor clients, including for purposes of debt collection. This Privacy Notice explains: (1) the categories of Personal Information we collect; (2) how we collect, store, use, and disclose that information; and (3) the choices that may be available to you with respect to our handling of your Personal Information.

For purposes of this Privacy Notice, “Personal Information” means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked—directly or indirectly—to you. Personal Information does not include information that has been aggregated or anonymized in a manner that cannot reasonably be associated with or linked to an individual.

This Privacy Notice applies to the websites we own or operate that link to this Privacy Notice (the “Sites”), as well as to any other services, platforms, or applications that link to this Privacy Notice (collectively, together with the Sites, the “Services”). Certain features of the Sites may require you to log in to access functionality.

Personal Information We Process on Behalf of Our Clients

We provide legal services to our clients, including debt-collection representation. In the course of those services, we may collect, receive, store, analyze, or otherwise process information on behalf of our clients, which may include Personal Information such as identifiers (for example, name, address, telephone number, Social Security number, date of birth, and email address), employment information (including employer and employment history), financial or account-related information (such as account numbers, bank information, transaction history, and loan or debt information), medical information, education history, and other personal data.

This information may be obtained from our clients, directly from you, or from third parties acting on behalf of our clients. We refer to this information as “Client Data.” When we process Client Data, we generally act as a processor or service provider, meaning we process Client Data on behalf of our clients in accordance with our contractual obligations, client instructions, and applicable law.

We do not control our clients’ privacy or data-security practices, which may differ from those described in this Privacy Notice. This Privacy Notice does not apply to Client Data provided to us by or on behalf of our clients or obtained from third parties acting for our clients. If your Personal Information was submitted to us by or on behalf of a client and you wish to exercise any rights you may have under applicable data-protection laws, you should contact the applicable client directly.

If you use our Services because we have contacted you on behalf of a client, the Personal Information we may collect directly from you may include your name, mailing address, telephone number, email address, file or reference identifiers, and other identifying information; your activity on our Sites; logs or records of communications with us (including chat history); approximate geolocation data; payment information (including bank account details); and automatically collected information such as IP address and device or operating system information. You may also upload additional content to the Services that may contain Personal Information. We may combine information you provide with Personal Information received from our clients or other lawful sources.

Personal Information Subject to the Gramm-Leach-Bliley Act

This Privacy Notice does not apply to nonpublic personal information processed pursuant to the Gramm-Leach-Bliley Act (“GLBA”) on behalf of our financial-institution clients. Information subject to GLBA is governed by the privacy notices provided by the applicable financial institution with which you have a relationship.

1. Information We Collect and Use

We collect Personal Information in various ways, including when you send us messages or other communications, opt in to electronic communications where available, submit a job application, make a payment, or otherwise interact with our Services.

We may associate or combine information collected directly from you with information received from third parties and information collected automatically through tracking technologies.

Categories of Information Collected Through the Services

Contact Information

Including first and last name, business or personal email address, physical address, job title, area of responsibility, company name, telephone number, country or region, and communication preferences. We use this information to fulfill requests, complete transactions, communicate with you, and provide communications consistent with your preferences.

Account Information

Including identifying details, employer or company affiliation, profile information, account balances, statements, payment records, and other information you provide. This information is used to administer accounts, communicate regarding account activity, and provide client services.

Payment Information

If you submit a payment, we collect information provided in connection with that transaction.

Inquiry and Communication Information

Including information submitted through online forms, chat messages, emails, telephone communications (which may include audio recordings), and other correspondence. This information is used to respond to inquiries, manage communications, and improve services.

Preferences

Including notification and communication preferences, which are used to manage how we communicate with you.

User Content

Including any files, documents, images, videos, or other information you upload or transmit through the Services. User Content is stored and processed as part of providing the Services.

Employment Information

Including employer, business unit, manager, job title, job responsibilities, and descriptions, used to tailor communications and services where applicable.

Location Information

We do not collect precise geolocation data; however, IP addresses may allow us to infer approximate location.

Other Information You Provide

Including information provided online, by phone, or in person, used to respond to requests or provide services.

If you engage us as a client or potential client for legal services, we may also collect government-issued identification or proof of identity, instructions or comments you provide, and information related to your legal matter.

Information Collected from Third Parties

We may receive Personal Information from representatives, employers, service providers, public sources, government agencies, data providers, or through business transactions. We use such information to operate, maintain, and provide the Services and to communicate with you where permitted.

Automatically Collected Information and Analytics

We and our service providers automatically collect information about how you access and use the Services through cookies and similar tracking technologies. This information may include device identifiers, IP address, browser type, operating system, timestamps, referring URLs, pages visited, links clicked, and usage behavior.

We may use analytics services such as Google Analytics to analyze site usage and improve functionality. These services collect aggregated data and are not intended to identify individuals directly. We reserve the right to add or remove analytics technologies.

Children’s Data

Our Services are not intended for individuals under the age of 18. We do not knowingly collect Personal Information from individuals under 18. If such information is identified, we will take reasonable steps to delete it promptly.

2. Additional Uses of Personal Information

In addition to the uses described above, we may use Personal Information to:

Provide legal and debt-collection services
Enable access to the Services
Communicate by phone, mail, email, or electronic means
Operate and grow our organization
Process payments
Prevent fraud and unauthorized activity
Enforce agreements and policies
Resolve disputes and security issues
Comply with legal and regulatory obligations
Protect our rights and those of our clients
Fulfill any purpose disclosed at collection
Carry out lawful purposes with consent

3. Disclosure of Personal Information

We may disclose Personal Information:

As directed by clients and permitted by law
To service providers assisting with operations
To employers or companies where applicable
In connection with business transactions
To courts, regulators, or law enforcement
To protect legal rights or prevent fraud
With consent or at your direction

4. Managing Personal Information

You may request access to, correction of, or limitations on certain Personal Information, subject to legal and contractual restrictions. Requests involving Client Data may require client authorization.

You may opt out of non-essential email communications using provided unsubscribe mechanisms. Cookie settings may be controlled through your browser. We do not respond to “Do Not Track” signals.

5. Data Retention

We retain Personal Information only as long as necessary to fulfill the purposes for which it was collected, considering legal, regulatory, and business obligations. When no longer required, information is deleted, de-identified, or securely stored until deletion is feasible.

6. Contact Information

Shepherdson Law, PLLC
Attn: Privacy
P.O. Box 434

Falls Church, VA 22046
Email: sshepherdson@shepherdsonlaw.com
Phone: (703) 402-1025

7. International Users

We are located in the United States, and the Services are intended for use within the United States. By using the Services, you consent to processing in the United States.

8. Linked Websites

Our Services may link to third-party websites. We are not responsible for the privacy practices or content of those sites.

9. Updates

We may update this Privacy Notice from time to time. Changes are effective upon posting unless otherwise stated.

Last Updated: 1/18/2026