4.1 California Invasion of Privacy Act (CIPA) - Cal. Penal Code §§ 631 & 632.7

California law prohibits the unauthorized interception, recording, or "wiretapping" of electronic communications, including, under recent court interpretations, the use of certain tracking pixels, session-replay tools, and chat-monitoring software that record visitor interactions in real time without consent.

To comply with CIPA:

• We provide a clear, conspicuous cookie banner on first visit identifying the categories of Cookies and tracking we use, including session-replay and chat-monitoring technologies.
• We obtain your affirmative, opt-in consent before deploying non-essential Cookies, session-replay scripts, third-party chat tools, or pixels that may share communications with third parties.
• We do not "tap," "read," or "learn the contents" of your communications with us through third-party software without your prior consent.
• You may withdraw consent at any time through the "Cookie Settings" link in the footer or by following the instructions in Section 8 below.
• We do not record telephone calls placed to (702) 381-2875 without disclosure and, where required, two-party consent under Cal. Penal Code § 632.

4.2 Nevada Privacy and Wiretapping Law

Nevada does not have a statute identical to CIPA, but the following Nevada laws apply to our tracking practices:

• NRS 200.620 (Wiretapping / Interception of Wire Communications) - Nevada generally requires the consent of at least one party to the recording of a wire or telephone communication, and Nevada courts have applied a two-party-consent standard to in-state phone calls. We disclose, and where required obtain consent for, any recording of calls or chat sessions.
• NRS 603A (Security and Privacy of Personal Information) - governs the collection, maintenance, and disposal of personal information of Nevada residents.
• NRS 603A.340 (Online Privacy Notice Requirements) - requires operators of commercial websites collecting personally identifiable information from Nevada consumers to post a privacy notice describing categories of information collected, third parties with whom information is shared, and the consumer's right to review and request changes.
• NRS 603A.345 (Right to Opt Out of Sale) - Nevada residents have the right to submit a verified request directing us not to make any sale of certain "covered information" collected through the Site. We do not sell covered information as defined under NRS 603A; however, you may submit a request at any time using the contact details in Section 10.

4.3 European Economic Area, United Kingdom, and Switzerland (GDPR / UK GDPR)

If you are accessing the Site from the EEA, the UK, or Switzerland, we process your personal data under the EU General Data Protection Regulation (Regulation (EU) 2016/679), the UK GDPR, and the ePrivacy Directive (2002/58/EC) as implemented in your jurisdiction. The legal bases on which we rely are:

• Consent (Art. 6(1)(a) GDPR) - for all non-essential Cookies (analytics, advertising, session replay, social embeds). We obtain prior, freely given, specific, informed, and unambiguous opt-in consent through our cookie banner before deploying these technologies. "Reject All" is presented with equal prominence to "Accept All."
• Legitimate interests (Art. 6(1)(f) GDPR) - for strictly necessary Cookies required to operate and secure the Site.
• Contract (Art. 6(1)(b) GDPR) - where Cookies are necessary to deliver a service you have requested (e.g., a consultation request).
• Legal obligation (Art. 6(1)(c) GDPR) - where retention of Cookie-derived data is required to comply with applicable law.

Your GDPR/UK GDPR rights include the rights of access, rectification, erasure, restriction of processing, data portability, objection to processing (including direct marketing), withdrawal of consent at any time without affecting prior lawful processing, and the right to lodge a complaint with your supervisory authority (e.g., the UK ICO, the Irish DPC, or your local Data Protection Authority).

International data transfers from the EEA/UK to the United States are made pursuant to Standard Contractual Clauses (SCCs), the EU-U.S. Data Privacy Framework where applicable, and supplementary measures consistent with Schrems II.

4.4 California Consumer Privacy Act / California Privacy Rights Act (CCPA/CPRA)

California residents have the right to know, delete, correct, and limit the use and disclosure of personal information, and to opt out of the "sale" or "sharing" of personal information for cross-context behavioral advertising. We honor Global Privacy Control (GPC) signals as a valid opt-out request. See our Privacy Policy for full CCPA/CPRA disclosures.

4.5 Other U.S. State Privacy Laws

We also comply, as applicable, with the privacy laws of Colorado (CPA), Connecticut (CTDPA), Virginia (VCDPA), Utah (UCPA), Texas (TDPSA), Oregon (OCPA), Montana (MTCDPA), and other states whose laws apply to our processing.