Last updated:
Next scheduled review: 2027-05-20
This Privacy Policy explains how Mandi Law Group LLP ("the firm," "we," or "our") handles personal information collected through mandilawgroup.com (the "Site"). This policy is informational and does not constitute legal advice. If you have specific privacy questions about how your matter will be handled after we are engaged as your attorneys, please discuss them with your attorney directly.
Mandi Law Group LLP is a U.S. immigration law firm headquartered at 22 Century Hill Dr # 101, Latham, NY 12110. You can reach the firm by phone at (518) 698-0347 or by email at info@mandilawgroup.com. For privacy-related inquiries, please use the same email and identify your message as a privacy request.
This notice covers personal information we receive through the Site — including contact forms, consultation requests, blog comments, and analytics. Once we are formally engaged as your attorneys, the handling of your matter file (including any confidential information you share in that representation) is governed by your engagement letter, the New York Rules of Professional Conduct (in particular Rule 1.6), and applicable state and federal law. That regime is broader than this Privacy Policy and controls in the event of any conflict.
Depending on how you use the Site, we may collect:
We collect personal information directly from you when you submit a form, from your authorized agent when one acts on your behalf, and automatically from your browser when you visit the Site. We do not purchase consumer profiles from data brokers.
We use the information we collect to:
We rely on a small number of vendors to operate the Site. Each acts only on our written or contractual instructions and only to the extent needed to provide its service. Current vendors include:
We also disclose information to courts and government agencies when required as part of your legal representation, and to professional advisors (e.g., translators, expert witnesses) you authorize us to engage on your behalf.
We retain information only as long as we need it for the purposes above and to satisfy our legal and professional-responsibility obligations:
We do not sell or share personal information for cross-context behavioral advertising or for monetary or other valuable consideration. We do not operate any advertising-retargeting program. See Your Privacy Choices for a summary of how we treat opt-out preference signals.
Depending on where you live, you may have rights to request access to, deletion of, correction of, or restriction on the personal information we hold about you. We extend these rights to all visitors as a matter of practice, regardless of whether a specific statute formally applies to the firm at its current size.
To submit a request, email info@mandilawgroup.com with the subject line "Privacy Request" and a description of what you are asking for. We typically respond within 45 days. We may need to verify your identity (for example, by confirming your email and one prior matter detail) before fulfilling certain requests, especially deletion or access. We will not retaliate against anyone for exercising a privacy right.
For visitors located in the EU, EEA, or UK, the firm acts as the controller of any personal information you provide through the Site. Our legal basis for processing is your consent (when you submit a form or enable analytics) and our legitimate interest in operating and securing the Site. You may withdraw consent at any time, request access to or deletion of your data, and lodge a complaint with your local supervisory authority. Personal information you submit through the Site is transferred to and stored in the United States.
The Site is not directed to children under 13, and we do not knowingly collect personal information from a child under 13 through the Site. If you are a parent or guardian and need to submit an inquiry on behalf of a minor, please call the firm at (518) 698-0347 rather than using a web form. If we learn that we have collected information from a child under 13 without verifiable parental consent, we will delete that information promptly.
We honor the Global Privacy Control (GPC) signal sent by your browser or extension. When we detect GPC, we treat it as a request to opt out of any sale or sharing of personal information (we do not sell or share — see Section 8) and we suppress analytics scripts on your visit. See Your Privacy Choices for details.
We use a small number of cookies that are strictly necessary for the Site to function (e.g., to remember your cookie-banner choices). Optional analytics — Umami, self-hosted — load only after you click "Accept" on the cookie banner or change your preferences in the banner's settings. We do not use third-party advertising cookies or tracking pixels. See our Cookie Policy for more detail.
Email info@mandilawgroup.com with the subject line "Privacy Request," identify yourself, and describe the request. We will acknowledge receipt within a few business days and aim to respond substantively within 45 days. If a request is complex or covers a long historical record, we may extend the response window once and explain the reason. An authorized agent may act on your behalf with your written permission and proof of their identity. We may decline a request that we cannot verify or that the law permits us to refuse (for example, a deletion request that would require us to violate a retention rule we are bound to follow).
Submitting a form through this Site, calling the firm, or emailing us does not create an attorney-client relationship. An attorney-client relationship is formed only when you and the firm sign a written engagement letter. Until that letter is signed, do not send any confidential information — including A-numbers, immigration history, court documents, or other sensitive personal details — that you would not be comfortable seeing outside an attorney-client privilege framework. Once we are engaged, the New York Rules of Professional Conduct, in particular Rule 1.6, govern how we handle your information.
We protect the Site and the information you submit through it with commercially reasonable safeguards consistent with the New York Stop Hacks and Improve Electronic Data Security (SHIELD) Act (GBL § 899-bb). These safeguards include HTTPS in transit, encryption at rest at our hosting and database providers, access controls that limit administrative access to specific firm users, and routine review of our security posture.
If we determine that there has been an unauthorized acquisition or access of unencrypted personal information of a New York resident, we will notify affected individuals consistent with the SHIELD Act's breach-notification requirements. We will provide notice in the most expedient time possible and without unreasonable delay, consistent with the legitimate needs of law enforcement and any measures necessary to determine the scope of the breach and restore reasonable integrity to the data system. Notice will include the categories of information affected, the date or estimated date of the breach, contact information for the firm, and steps you may take to protect yourself.
No method of electronic storage or transmission is 100% secure. If you have a concern about how your information is being protected, please contact the firm at (518) 698-0347 or info@mandilawgroup.com.
Personal information collected through the Site is processed and stored in the United States. If you visit the Site from outside the United States, you understand that your information will be transferred to and processed in the U.S.
We review this policy at least once a year. If we make a material change, we will post the updated policy here and update the "Last reviewed" date at the top. We encourage you to revisit this page periodically. Continued use of the Site after a policy update means you accept the revised terms.
Questions about this policy should be directed to info@mandilawgroup.com or (518) 698-0347. This policy is provided for transparency and does not constitute legal advice for your matter.