Legal Notices
Privacy Policy
1 Introduction
Crouser & Suh PLLC (“Crouser & Suh”, the “Firm”, “we” or “us”) provides this privacy policy (this “Privacy Policy”) to explain our policies and procedures for the collection, use, processing, deletion, security and disclosure of personal data and information protected under applicable data protection, data privacy and data security laws — including the California Consumer Privacy Act, as amended (the “CCPA”), the General Data Protection Regulation (EU) 2016/679 (the “GDPR”) and the Personal Information Protection Act of the Republic of Korea (“PIPA”) — received from users of the website operated by the Firm (the “Website”).
We are committed to processing your personal data in accordance with applicable data protection and privacy laws. Your use of the Website means that you accept and understand this Privacy Policy. Please do not use the Website or provide us with any personal data if you do not accept it.
We may update this Privacy Policy from time to time by posting an updated version to the Website. The date on which it was last updated is set out at the end of this page. Your use of the Website after an updated version is posted means that you accept and understand the updated policy.
We may also process additional categories of personal data received from clients during our legal representation of those clients. That processing is on a case-by-case basis at the direction of our clients, subject to our engagement terms and professional responsibilities, and is not covered by this Privacy Policy.
2 Information we collect
We may collect the following personal data when you visit the Website or otherwise provide it to us:
- personal data you provide when you contact us, including by e-mail or telephone;
- personal data you provide in connection with an application for employment with the Firm;
- technical details of visits to the Website, including request logs, the resources accessed and the device and browser used; and
- personal data relating to you, your employees or your officers that you provide so that we can deliver services to you and meet our legal obligations, including client identification and anti-money-laundering checks.
The categories of personal data collected under this Privacy Policy include:
- Identifiers — name, contact details and address, including postal address, telephone number, e-mail address and Internet Protocol address, which may indicate your general geographic location;
- Professional and education information, and certain information relating to protected classification characteristics, collected in connection with recruiting; and
- Internet or other electronic network activity information, such as information about your use of the Website and information you provide when you correspond with us.
The Website does not host forms, accounts or file uploads. Personal data reaches us only when you choose to contact us directly.
3 How we obtain your personal data
- from your communications with us in connection with the Website or our services;
- from information captured by the Website's server when a page is requested;
- from information you give us at the start of, or during, an engagement;
- from information you provide with an application for employment; and
- from publicly available sources.
4 How we use your personal data
| Purpose | Legal basis |
|---|---|
| To understand your needs and provide you with a better service | Performance of a contract with you; our legitimate interests in providing a service to you |
| To respond to enquiries you send us | Steps taken prior to entering into a contract; our legitimate interests in providing a service to you |
| To keep a record of your relationship with us | Performance of a contract with you; compliance with a legal obligation |
| To evaluate and respond to an application for employment | Steps taken prior to entering into a contract; our legitimate interests in recruiting |
| For ongoing operations, administration, accounting and reporting | Our legitimate interests in running the Firm; compliance with a legal obligation |
| To detect security incidents and protect against malicious, deceptive, fraudulent or illegal activity | Compliance with a legal obligation; our legitimate interests in protecting the Firm and its clients |
| To comply with U.S. federal, state and local law and with non-U.S. law | Compliance with a legal obligation |
We may process your personal data on more than one legal basis depending on the purpose. We do not send marketing e-mail from the Website.
5 With whom we share your personal data
We do not sell or rent any of the personal data we collect about you.
We do not disclose personal data about you to third parties, except:
- as permitted or required by law or regulation, or pursuant to legal process;
- in response to governmental, regulatory, law enforcement or judicial inquiries;
- to third-party suppliers and service providers, including our website host and our e-mail and technology providers;
- to our lawyers, auditors and other professional advisers; and
- to an entity to which we may transfer or merge parts of our business or assets. If that happens, the successor entity may use your personal data as set out in this Privacy Policy.
6 International transfers
The Firm operates offices in Florida, Massachusetts and the Republic of Korea, and our practice is cross-border by nature. Personal data you provide may therefore be transferred to, stored in and processed in a country other than the one you are in — in particular between the Republic of Korea and the United States. Where such transfers take place they are made in accordance with this Privacy Policy, our Data Transfer and Privacy Policy and applicable data protection law.
7 Links to third-party websites
We may provide links to third-party websites for your information or convenience. Those websites are independently operated, are not under our control, and their privacy practices are not governed by this Privacy Policy. We are not responsible for their content or privacy practices, or for the confidentiality, use, processing and security of any personal data you provide to them.
8 Rights under European data protection law
This section applies to the extent your personal data is protected by the GDPR or equivalent European data protection legislation. For those purposes the Firm is the data controller of personal data collected by us: we control your personal data, keep it secure, and decide how it is used, but only to the extent we have informed you or the use is otherwise permitted by law.
Automated decision-making
No automated decision-making, including profiling, is used when processing your personal data.
Data retention
We retain personal data only for as long as we need it for the purposes for which it was collected, including to satisfy legal, accounting or reporting requirements, unless a longer retention period is required by law. In setting a retention period we consider the amount, nature and sensitivity of the data, the potential risk of harm from unauthorised use or disclosure, the purposes for which we process it, and whether those purposes can be achieved another way.
Your rights
- Access — you may ask for a copy of the personal data we hold about you, free of charge. We may charge a reasonable fee if a request is excessive. We will respond as soon as possible and, save in certain circumstances, within one month.
- Correction — if there are inaccuracies in the personal data we hold, contact us and we will correct them.
- Deletion — you may ask us to delete your personal data. This is not always possible because of our legal and professional obligations.
- Restriction — you may ask us to restrict processing (other than storage) in the circumstances set out in the GDPR.
- Objection — you may object to processing carried out on the basis of a legitimate interest where something about your situation makes you want to object.
- Portability — you may ask us to transfer your personal data to another organisation where the conditions in the GDPR are met and we have the technical means.
- Withdrawal of consent — where you have given consent, you may withdraw it at any time. This does not affect the lawfulness of processing carried out before withdrawal.
Complaints
You have the right to complain at any time to the data protection supervisory authority in your jurisdiction. We would always appreciate the chance to address your concerns first, so please contact us using the details in section 12.
9 Cookies
The Website does not set cookies. For details of what it does store and the third-party requests it makes, see our Website Cookie Policy.
10 Security
We consider the protection of personal data to be sound business practice, and we employ commercially appropriate organisational, physical, technical and procedural safeguards to protect personal data in our possession or under our control from unauthorised or accidental access and improper use.
Transmission of information over the Internet is not completely secure, and we cannot guarantee the security of personal data transmitted to or through the Website; any such transmission is at your own risk. Once we have received your personal data we use the safeguards described above to prevent unauthorised access.
11 Notice to California residents
This section applies if you are a California resident as determined under the CCPA.
- Deletion — you may request that we delete personal data we hold about you, subject to statutory exceptions including our compliance with U.S. and non-U.S. law. We will notify you in writing with an explanation if we cannot comply with a request.
- Disclosure and access — you may request that we disclose the categories of personal data we collected about you, the categories of sources, our business purpose for collecting it, the categories of third parties with whom we share it, the specific pieces of personal data collected, and whether we disclosed it to a third party.
- No discrimination — we will not discriminate against you for exercising your rights under the CCPA.
To exercise these rights, contact us using the details in section 12.
12 Children's privacy
We do not seek to collect or maintain information on the Website from anyone we know to be under the age of 18, and no part of the Website is structured to attract anyone under the age of 13. If we learn that we have collected personal data from an individual under 13, we will delete it.
13 Contact
For any question about our processing of your personal data, or to exercise your rights under the GDPR, CCPA, PIPA or other applicable law, contact us:
- By e-mail: info@crousersuh.com
- By telephone: (305) 372-7776
- By post: Crouser & Suh PLLC, 28 W Flagler St #100, Miami, FL 33130, United States
We will contact you to confirm receipt of your request and to ask for any additional information needed to verify it. We verify requests by matching the information you provide against our records. Depending on the sensitivity of the request we may ask for further information. Our goal is to respond promptly and, in any event, within the time frame required by applicable law.
Last updated: August 2026