Privacy Policy

Last updated: August 2, 2026 · Texas Bar Nos. 24043266 (Njeri London) and 24043514 (Reggie London)

1. Introduction

L and L Law Group, PLLC ("we," "our," "the firm") operates landllawgroup.com (the "Site") and provides criminal defense legal services in the State of Texas. This Privacy Policy explains what information we collect, how we use it, how we protect it, and the privacy rights of Texas residents and other visitors. It also addresses our compliance with the Texas Data Privacy and Security Act ("TDPSA," Tex. Bus. & Comm. Code Ch. 541), Texas Identity Theft Enforcement and Protection Act ("ITEPA," Tex. Bus. & Comm. Code Ch. 521), federal Wiretap Act (18 U.S.C. § 2511) and Texas Penal Code § 16.02, and the Texas Disciplinary Rules of Professional Conduct.

2. Information we collect

For the technical and organisational measures the firm applies to information held on its systems, see our Data Security page.

Information you provide. Name, email, phone number, case details, and any other information you submit through contact forms, intake forms, the chat widget, or by calling or emailing us.

Automatically collected information. Server logs maintained by our hosting provider (IP address, browser user-agent, referring URL, timestamp) for security and operational purposes only. We deploy Google Analytics 4, Google Tag Manager, and Google Ads conversion tracking on this Site to measure how visitors reach us and which enquiries result from our advertising — see §6 for a full description of what these collect and how to opt out. We do not deploy session-replay or cross-site behavioural-profiling tools (no Meta Pixel, no LinkedIn Insight Tag, no TikTok Pixel, no Hotjar, no FullStory, no LogRocket, no Microsoft Clarity, no Heap, no Mixpanel, no Amplitude, no Segment, no Adobe Launch). We do load one operational third-party service for click-fraud protection (CHEQ / ob.cheekybranding.com) — see §6 for a full description of what it collects and why. If we change this practice in any other respect, we will update this section and the Change Log at the bottom of this page before deployment.

Cookies and similar technologies. The Site sets the analytics and advertising-measurement cookies described in §6 and no others; we set no cookies for cross-site behavioural profiling or for any third party’s own advertising. YouTube video embeds use the youtube-nocookie.com click-to-load facade — no YouTube cookies are set unless you click play on an embedded video. Our service-worker caches static assets to improve page load and is reset when you clear browser data.

From third parties. If you reach us through a referral, the referring source may share your contact information with us.

Sensitive personal data. In criminal-defense intake, you may voluntarily disclose information classified as "sensitive personal data" under TDPSA § 541.001(31), including immigration or citizenship status, mental or physical health information, criminal-history information, or information about substance use. We process this information solely to evaluate potential representation and, if engaged, to provide legal services. We require explicit consent (via the contact-form checkbox above the submit button) before processing sensitive personal data.

3. How we use information

• To evaluate potential representation and respond to your inquiry
• To provide legal services if we establish an attorney-client relationship via a written engagement letter
• To comply with our professional and ethical obligations under the Texas Disciplinary Rules of Professional Conduct, including conflict-checking under Rule 1.06
• To maintain the security and integrity of the Site (server logs)
• To send case-related communications and, with your separate express consent, marketing communications you can opt out of at any time

4. Confidentiality and attorney-client privilege

Information you transmit before a written engagement letter is signed is not protected by attorney-client privilege. Please do not transmit confidential information through web forms, email, chat, or voicemail until we have a signed engagement letter. Once engagement is established, all client communications are subject to attorney-client privilege under Texas Rule of Evidence 503 and the work-product doctrine.

5. How we share information

We do not sell, rent, or share your personal information with any third party for that party's marketing or advertising purposes. We do not engage in "targeted advertising" or "profiling" as those terms are defined in TDPSA § 541.001. We may share information:

• With service providers acting on our behalf (email hosting, secure document storage, billing) under written confidentiality agreements that prohibit secondary use
• When required by court order, subpoena, or applicable law
• To enforce our engagement terms or protect rights, property, or safety
• With your express written consent
• With Google, for advertising measurement only: when you submit a contact form we transmit a SHA-256 hash of the email address and phone number you provided, so Google can tell us that an enquiry resulted from an advertisement. The hash is computed in your browser before transmission — your raw email address and phone number are never sent to Google by this mechanism. Google is contractually restricted to using it for our own conversion measurement and may not use it to build a profile of you or for any other advertiser. See §6.

6. Cookies, tracking, and the Global Privacy Control (GPC) signal

Beyond the analytics and advertising-measurement cookies described below, we set no non-essential cookies. The Site honors the Global Privacy Control (GPC) signal as a universal opt-out from sale and targeted advertising for all visitors, consistent with TDPSA enforcement guidance effective January 1, 2025. Because we do not sell personal data, share it for targeted advertising, or process it for profiling that produces legal or similarly significant effects, the operative effect of a GPC signal on this Site is the same as our default posture: no sale, no targeted ads, no behavioral or marketing tracking. We will continue to honor GPC if our practices change.

Click-fraud protection (CHEQ). This Site loads one operational third-party script from ob.cheekybranding.com, operated by CHEQ Cybersecurity, Ltd. CHEQ is a click-fraud and ad-fraud protection service. Its purpose is to detect automated traffic, bot impressions, and invalid clicks on the firm's paid-search advertising so the firm is not billed by ad networks for fraudulent or non-human traffic. The CHEQ script collects: IP address, user-agent string, referring URL, request timestamp, basic interaction signals (mouse-movement, scroll), and a session-scoped pseudonymous identifier. CHEQ does NOT: (a) build a cross-site behavioral profile of you, (b) sell or share its observations for advertising, (c) feed any analytics dashboard for the firm, or (d) integrate with any marketing-attribution system. We do not receive CHEQ's raw observations — we receive only the ad-network credit when traffic is verified non-human. You may block the script using any standard content blocker (uBlock Origin, Privacy Badger, browser built-in tracking protection); blocking it will not affect your ability to use this Site, submit a contact form, or call us. We do not use CHEQ data for targeted advertising, profiling, or any decision that produces legal or similarly significant effects. CHEQ's own privacy policy is at cheq.ai/privacy/.

Analytics and advertising measurement (Google). This Site loads Google Tag Manager (container GTM-PDX7QKPH), which in turn loads Google Analytics 4 (property G-D8YJ950Q8J) and Google Ads conversion tracking. Together these record: pages viewed, referring URL, approximate geographic region (derived from IP, not stored by us at street level), device and browser type, and whether your visit followed a click on one of our advertisements. We use this to understand which pages answer people’s questions and which advertisements produce genuine enquiries.

Enhanced conversions. When you submit a contact form on this Site, our form script computes a SHA-256 hash of the email address and phone number you entered and passes only that hash to Google Ads, so Google can match your enquiry to the advertisement you clicked. The hashing happens in your browser. Your raw email address and phone number are never transmitted to Google by this mechanism, and a SHA-256 hash cannot be reversed back into the original value. Google acts as our service provider for this purpose and is contractually prohibited from using the data to build an advertising profile of you, from disclosing it, or from using it for any other advertiser. We do not transmit your name, your case details, or any sensitive personal data described in §2 to Google or to any other advertising platform.

How to opt out. You may block all of the above with any standard content blocker (uBlock Origin, Privacy Badger, browser built-in tracking protection) or with Google’s own Analytics opt-out add-on. Blocking them will not affect your ability to use this Site, submit a contact form, or call us — and it will not affect how we handle an enquiry you do send. If you prefer to reach us with no advertising measurement at all, call (972) 370-5060 or email info@landllawgroup.com directly.

7. Your rights — Texas residents (TDPSA)

Texas residents have the following rights under TDPSA § 541.051 with respect to personal data we process:

• Right to know / access. Confirm whether we are processing your personal data and obtain a copy.
• Right to correction. Request correction of inaccuracies.
• Right to deletion. Request deletion of personal data we have collected from you, subject to recordkeeping obligations imposed on lawyers by the Texas Disciplinary Rules of Professional Conduct (Rule 1.15 generally requires five-year retention of client records following the end of representation; longer in some matter types).
• Right to data portability. Obtain a portable copy of personal data you have provided to us.
• Right to opt out of sale. We do not sell personal data, but you have the right to confirm and to direct us not to sell.
• Right to opt out of targeted advertising. We do not engage in targeted advertising.
• Right to opt out of profiling. We do not engage in profiling for decisions that produce legal or similarly significant effects.

How to exercise these rights. Email info@landllawgroup.com with the subject line "TDPSA Request." Please include enough information to allow us to verify your identity (this typically means using the same email or phone you provided to us). We will respond within 45 days of receiving a verifiable request, with one additional 45-day extension permitted under TDPSA § 541.053 when reasonably necessary, with notice to you within the original 45-day window.

Appeal. If we decline to take action on your request, you have the right to appeal under TDPSA § 541.054. To appeal, reply to our response with "TDPSA Appeal" in the subject line and we will respond within 60 days. If your appeal is denied, you may contact the Office of the Texas Attorney General at texasattorneygeneral.gov/consumer-protection.

Other states. If you are a resident of another state with a comprehensive privacy law (California, Virginia, Colorado, Connecticut, Utah, etc.), we extend equivalent access, correction, and deletion rights upon verifiable request.

8. SMS and email communications

If you opt into SMS or email communications, reply STOP to any text message to opt out, or click the unsubscribe link in any email. Standard message and data rates apply for SMS. We use SMS only for case-related communication after engagement or, with your separate express consent, for non-marketing updates.

9. Children

The Site is not directed to children under 13, and we do not knowingly collect information from children under 13. In juvenile-defense matters where the client is a minor, intake is conducted with the parent or legal guardian.

10. Security and breach notification

We maintain reasonable administrative, technical, and physical safeguards designed to protect personal data, including endpoint encryption, MFA-protected cloud storage, role-based access control, secure-disposal procedures for paper records, and periodic review by a designated Privacy Officer (currently the firm's Managing Partner). No method of transmission over the Internet is 100% secure; we cannot guarantee absolute security.

Breach notification. If we become aware of a data security incident affecting unencrypted personal information of Texas residents, we will provide notice to affected individuals as quickly as possible and not later than 60 days after determining the breach occurred, as required by ITEPA (Tex. Bus. & Comm. Code § 521.053). If the breach involves 250 or more Texas residents, we will also notify the Texas Attorney General within 30 days as required by § 521.053(h). To report a suspected security issue, email security@landllawgroup.com or see our security.txt.

10a. Data retention and disposal

We retain personal data only as long as necessary for the purposes set out in this Policy and to comply with our legal and ethical obligations:

• Intake inquiries that do not result in engagement. Retained for 18 months for conflict-checking purposes, then securely destroyed.
• Client records (engaged matters). Retained for at least five (5) years after the end of representation, consistent with Texas Disciplinary Rule 1.15. Some matters (federal sentencing, sex-offender registration, juvenile records, capital matters) carry longer retention obligations driven by statute of limitations or other law.
• Marketing and analytics data. We retain none currently because we deploy none.

When personal data is no longer needed, we securely destroy paper records by cross-cut shredding and electronic records by cryptographic erasure or physical media destruction, consistent with ITEPA § 521.052.

11. Use of artificial intelligence (Texas Ethics Op. 705)

This firm does not currently use generative AI to produce substantive legal analysis, draft court filings, or generate communications to clients or opposing parties. We may use commercial AI tools internally for limited administrative purposes (such as transcription of audio, calendaring assistance, or formatting). Any use of AI tools is supervised by a Texas-licensed attorney consistent with the supervision and confidentiality duties addressed in Texas Center for Legal Ethics Opinion 705 (2024). If we add AI-assisted features that materially affect how we process your information, we will update this section and update the Change Log before deployment. The Site's chat button is a human-staffed live-chat tool (Intaker) and does not generate automated substantive legal advice.

12. Changes to this Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page reflects the most recent revision. Material changes will be highlighted on the homepage for at least 30 days, and we will update the Change Log at the bottom of this page.

13. Contact

L and L Law Group, PLLC
5899 Preston Rd, Suite 101
Frisco, TX 75034
Phone: (972) 370-5060
General email: info@landllawgroup.com
Privacy / TDPSA requests: info@landllawgroup.com (subject: "TDPSA Request")
Security incidents: security@landllawgroup.com

14. Attorney advertising disclosure

This website is attorney advertising under the Texas Disciplinary Rules of Professional Conduct (Rule 7.01–7.05). Information on this site is for general informational purposes and is not legal advice. No attorney-client relationship is formed by your use of this site, by submitting an inquiry, or by communicating with the firm before a written engagement letter is signed. Prior results do not guarantee a similar outcome in any matter. Each case is evaluated on its own facts, evidence, and applicable law. Not certified by the Texas Board of Legal Specialization — none of the attorneys at L and L Law Group, PLLC are Board Certified by the Texas Board of Legal Specialization unless specifically and separately stated.