Data Privacy & Security

Effective date: January 01, 2025 • Last reviewed: January 01, 2025

At Darrell A. Johnson, Attorney at Law, protecting the confidentiality, integrity, and availability of client and visitor information is fundamental to our professional obligations. This page summarizes our privacy practices and information-security controls for dajohnsonlaw.com and the systems we use to deliver legal services. For collection and use details, see our Privacy Policy and Cookie Policy.

Privacy governance

  • Designated privacy lead responsible for handling inquiries and rights requests (Privacy Request).
  • Written data-handling policies (collection, retention, access, disposal) reviewed at least annually.
  • Attorney–client privilege and work-product protections applied to client matters, where applicable.

Information we handle

  • Contact details you provide (name, email, phone, company).
  • Matter information shared during evaluation or representation (subject to ethics rules and engagement terms).
  • Technical data (IP address, device/browser, pages viewed) used for operations and (with consent) analytics.
  • Communications metadata (email/SMS logs) for scheduling and records.

We do not sell personal information and do not share it for cross-context behavioral advertising. See Do Not Sell or Share.

Security controls (overview)

AreaPractices
Access controlLeast privilege; role-based access; strong passwords + MFA; quarterly access reviews.
EncryptionTLS in transit; encryption at rest for primary data stores and backups; secure key management.
Application securityDependency patching; code review; OWASP-aware development; CSRF protection; input validation.
Network & infrastructureHardened hosts; firewalls/security groups; restricted admin access; segmented environments.
Endpoint & emailManaged devices; disk encryption; anti-malware; phishing controls; DKIM/SPF/DMARC for email.
Monitoring & loggingSystem/application logs with retention; alerting on auth failures and anomalous activity.
Backups & continuityRegular, encrypted backups; restore testing; documented incident & disaster-recovery procedures.
Vendor managementDPA/terms with service providers; minimum-necessary data sharing; periodic review of vendors.

Cookies & analytics

We use essential cookies for site functionality and, with your consent, analytics to improve the site. Manage preferences in Cookie Settings. If your browser sends a Global Privacy Control (GPC) signal, we treat it as an opt-out for that browser.

Data retention & deletion

We keep personal information only as long as reasonably necessary for the purposes described and to meet legal and ethical obligations (including client-file retention rules). When no longer required, we securely delete or de-identify it.

Your privacy choices & rights

  • Access, correction, and deletion (subject to legal/ethical limits).
  • Opt-out of targeted advertising/sale (we do not sell or share personal information).
  • Limit use of sensitive personal information, where applicable.

Submit a request at Privacy Request or email privacy@dajohnsonlaw.com. We verify identity before fulfilling requests.

Incident response

We maintain an incident response plan to investigate, contain, and remediate security events. Where required by law, we will notify affected individuals and/or authorities. If you suspect unauthorized activity, contact us immediately.

Responsible disclosure

If you believe you’ve discovered a vulnerability affecting our site or systems, please email contact@dajohnsonlaw.com with details. Do not publicly disclose until we confirm a fix.

International visitors

We are located in the United States. If you access our site from outside the U.S., your information may be processed in the U.S. and other countries with different data-protection laws than your country of residence.

Children’s privacy

Our site is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided information, contact us and we will take appropriate action.

Contact us

Darrell A. Johnson, Attorney at Law • 525 N Tryon St Suite 1600, Charlotte, NC 28202
Email: privacy@dajohnsonlaw.com • Security: contact@dajohnsonlaw.com
Phone: (833) 456-8706