Privacy Policy.

Last updated July 5, 2026

Overview

Griffitts LLP ("Griffitts," "we," "our," or "us") respects your privacy. This website, www.griffitts.co (the "Site"), is a static website. It does not use cookies, does not use analytics, does not use tracking pixels or web beacons, and does not maintain visitor accounts. Griffitts does not collect, store, or use information about a visitor's browsing activity for marketing or profiling. This is a deliberate choice, not an oversight. The only processing incidental to simply reading the Site is the standard server logging described under Hosting below.

The only personal information we collect is information a visitor chooses to give us, in the circumstances described below. By using the Site, you agree to this Privacy Policy.

Information we collect

We collect personal information only when a visitor voluntarily submits it, through one of two channels.

Contact form. A visitor who submits an inquiry through the contact form provides a name, email address, and message, and may provide an organization and a topic for the inquiry, along with any information the visitor chooses to include in the message itself. This submission is processed on our behalf by Formspree, Inc., a third-party form-processing service, solely to deliver the inquiry to Griffitts LLP. Formspree's own privacy policy governs its handling of that submission in transit.

Newsletter subscription. A visitor who subscribes to our newsletter, The Redline, provides an email address. That address is processed on our behalf by Buttondown, a third-party newsletter service, solely to deliver newsletter issues. Buttondown's own privacy policy governs its handling of subscriber data.

We do not collect any other personal information through the Site. In particular, we do not collect information automatically through cookies, analytics services, or similar technologies, because the Site does not use them.

Payments

Where the Site links to a payment page for a retainer or invoice, that page is hosted and operated by Clio, a third-party payment and practice-management provider, on its own secure infrastructure. Griffitts LLP does not collect or store any card or bank account information submitted through those pages. Clio's own privacy policy governs its processing of payment information.

Hosting

The Site is hosted by Vercel, Inc. Like most infrastructure providers, Vercel's servers may generate standard server logs recording IP addresses and request metadata (such as the page requested and the time of the request) for security, abuse-prevention, and operational purposes. Griffitts LLP does not itself access, analyze, or use these logs for marketing or profiling. Vercel's own privacy policy governs its handling of this information.

How we use personal data

We use the personal data described above to: respond to inquiries submitted through the contact form; send issues of The Redline to subscribers; where an inquiry leads to a possible engagement, evaluate the matter for conflicts of interest and, if we are retained, provide legal services; and comply with applicable law, regulation, or legal process. We do not use this information for any other purpose, and we do not use it to build advertising profiles.

Sharing your personal data

We share personal data only: with the service providers named above (Formspree, Buttondown, Clio, and Vercel), each acting solely to perform the function described for it in this policy; where required by law, court order, or other legal process, or in response to a request from a regulatory or law enforcement authority; in connection with a merger, acquisition, financing, or sale of some or all of our assets, in which case affected individuals will be notified; and to protect the rights, property, or safety of Griffitts LLP, our clients, or others. We do not sell personal data, and we do not share it with third parties for their own marketing purposes.

Newsletter and unsubscribing

Every issue of The Redline includes an unsubscribe link. Using it stops delivery of the newsletter immediately, and removes the subscriber's email address from future distributions.

Data security

We maintain commercially reasonable electronic and procedural safeguards, directly and through our service providers, designed to protect personal data against unauthorized access, use, alteration, or disclosure. No method of storage or transmission is completely secure, and we cannot guarantee absolute security. If we become aware of a breach affecting personal data we hold, we will provide notice as required by applicable law, generally using the email address on record.

Access, correction, and deletion

A visitor may request access to, correction of, or deletion of personal data we hold about them, or may direct any other question about this Privacy Policy, by emailing admin@griffitts.co. We may decline a request where fulfilling it would violate applicable law or compromise the accuracy of our records.

Retention

We retain personal data only as long as necessary for the purposes described in this policy, considering the nature and sensitivity of the data, the purpose for which it was collected, and any applicable legal or recordkeeping requirements. Data may persist for a limited additional period in routine system backups after a deletion request has been honored in our active systems.

Children

The Site is not directed to children and is intended for a business audience. We do not knowingly collect personal information from anyone under 16. If we learn that we have done so, we will delete it as quickly as reasonably possible.

California residents

Under California Civil Code Section 1798.83 ("Shine the Light"), California residents may request, once a year and free of charge, information about any personal information we disclosed to third parties for their own direct marketing purposes during the preceding calendar year. We do not make such disclosures, but visitors may submit a request by emailing admin@griffitts.co with "California Privacy Request" in the subject line.

Nevada residents

Griffitts LLP does not sell personally identifiable information as defined under applicable Nevada law, and will not do so without first providing an opportunity to opt out.

Visitors from outside the United States

This Site and this Privacy Policy are directed to visitors in the United States. Personal data submitted through the Site is processed and stored in the United States. If you access the Site from outside the United States, you do so on the understanding that your information will be transferred to and processed in the United States, which may not offer the same level of data protection as your home jurisdiction.

Links to other websites

The Site may link to third-party websites, including payment pages operated by Clio. We are not responsible for the content, privacy practices, or security of any linked site, and a link does not imply our endorsement. Any information you provide on a linked site is governed by that site's own privacy policy.

Changes to this policy

We may update this Privacy Policy from time to time. The current version, with its effective "Last updated" date, is always posted on the Site, and the version in effect at the time of a visitor's use governs that use. If we make a material change, we will notify newsletter subscribers by email, post a notice on the Site, or both.

Contact

Griffitts LLP, 225 West 34th Street, 9th Floor, New York, NY 10122. admin@griffitts.co. (212) 209-5450.