Privacy Policy

Last updated: May 23, 2026.

This is Brotman Law’s privacy policy. It covers what we collect when you use sambrotman.com, what we do with it, and the rights you have under California law to control how we use it. We tried to write this in plain English. If anything is unclear, email info@sambrotman.com and we will answer.

Who we are

Brotman Law is a California professional law corporation. Our office is at 12636 High Bluff Drive, Suite 300, San Diego, CA 92130. Our main number is (619) 378-3138. We provide tax legal services to clients across California and, for federal tax matters, across the United States.

What we collect

Information you give us directly

When you submit a form on this site, book a call, or email us, you give us your name, email address, phone number, and whatever details you choose to share about your situation. If you become a client, we collect the additional information needed to represent you — tax returns, notices, financial records, and so on. That information is covered by attorney-client privilege and by California Business & Professions Code § 6068(e), not just this policy.

Information we collect automatically

When you visit the site, our servers and our third-party analytics tools record standard web data: your IP address, browser type, the pages you visited, how long you stayed, and where you came from. We use this to understand which pages are useful and to fix the ones that aren’t.

The third-party tools active on this site are:

• Google Analytics — page-level traffic analytics.
• Google Tag Manager — manages the analytics scripts.
• HubSpot — handles our contact forms and email follow-up.
• Lucky Orange — session recordings and heatmaps so we can see how people actually use the site. We do not record form inputs or anything you type.

Each of these tools has its own privacy policy. They may set their own cookies.

Cookies

The site uses cookies for analytics and for keeping forms working across pages. You can block cookies in your browser settings. If you do, parts of the site may not work the way they should — most visibly, the contact forms.

What we use it for

We use the information we collect for three things:

1. To answer your inquiry. If you fill out a form, we use your contact information to get back to you about the matter you asked about. Nothing else.
2. To represent you, if you become a client. Information shared during representation is used for that representation and protected by attorney-client privilege.
3. To improve the site. The analytics data helps us see which pages people actually find useful and which ones we should rewrite.

We do not sell your information. We do not share it with marketers. We do not use it to retarget you with ads anywhere else.

Who we share it with

We share information with three categories of recipients, and only when we have to:

• Service providers we use to run the firm — our email host, our case-management system, our accounting platform. These vendors are contractually bound to keep your information confidential and use it only for the services they provide us.
• Government agencies and opposing counsel — but only as required to represent you in your tax matter. You authorize this when you sign our engagement agreement.
• When the law requires it — for example, in response to a valid subpoena or court order. We will tell you before we comply unless the law prohibits us from doing so.

Your California privacy rights

If you live in California, the California Consumer Privacy Act and California Privacy Rights Act give you specific rights regarding personal information that businesses collect about you. Brotman Law qualifies as a business under these statutes. Your rights include:

• The right to know what personal information we have collected about you, how we use it, and who we share it with.
• The right to delete the personal information we have collected, subject to exceptions (we cannot delete records we are required to keep under attorney ethics rules or that are part of an active client matter).
• The right to correct inaccurate personal information.
• The right to opt out of sale or sharing of your personal information. We do not sell or share your personal information for cross-context behavioral advertising, but you have the right to be told that explicitly.
• The right to limit use of sensitive personal information, including for purposes other than providing the services you have requested.
• The right not to be discriminated against for exercising any of these rights.

To exercise any of these rights, email info@sambrotman.com with the subject line “California Privacy Request” and tell us which right you are exercising. We will verify your identity before responding — usually by matching the email address you use with one we have on file, or by asking you to confirm specific information you previously gave us. We will respond within 45 days, or tell you why we need a 45-day extension.

How long we keep your information

Inquiries that do not become engagements: we keep the contact information for one year, then delete it.

Active and former client matters: we keep client files for at least five years after the matter closes, in accordance with California Rule of Professional Conduct 1.16 and California Business & Professions Code § 6090.5. Some files we keep longer if a statute of limitations on a related issue is still running.

Analytics data: we keep aggregated, non-identifying analytics for as long as it remains useful. Individual session recordings are kept for 90 days, then deleted by Lucky Orange.

How we protect it

Our case-management system encrypts client data at rest and in transit. Our email is on Microsoft 365 with multi-factor authentication required for every user. Our office requires badge entry. We train every team member on confidentiality at hire and on an ongoing basis.

No system is perfectly secure. If we learn of a breach affecting your information, we will notify you in accordance with California Civil Code § 1798.82.

Children

This site is not directed at anyone under 13. We do not knowingly collect information from children. If you are a parent and you believe your child has submitted information through this site, email us and we will delete it.

Changes to this policy

If we change this policy, we will update the “Last updated” date at the top and, for material changes, post a notice on this page for at least 30 days. We recommend bookmarking this page and checking it every six months or so.

How to reach us

For any question about this policy or about how we handle your information: