Last updated: July 2026
DataBreachCaseReview.com ("we," "our," or "this website") is operated by the Law Office of David S. Harris. This Privacy Policy explains how we collect, use, and protect information you provide when visiting this website or submitting a case review request.
When you submit a case review or contact form, we collect: your full name, email address, phone number, state of residence, the name of the company involved in the data breach, and whether you received a breach notification letter. This information is collected voluntarily. We do not collect sensitive personal information such as Social Security Numbers or financial account details through our website forms.
Information submitted through this website is used solely to: (1) evaluate whether you may have a viable data breach legal claim; (2) contact you about your submitted case review; and (3) with your consent, to represent you in connection with a data breach claim. We tag intake submissions with a source identifier ("casereview") for internal analytics purposes. We do not sell, rent, or trade your personal information to third parties.
Information submitted before an attorney-client relationship is established is not necessarily protected by attorney-client privilege. Privilege attaches only after a formal engagement agreement is signed between you and our firm. We treat all submitted information with the strictest confidence regardless of this distinction.
We use industry-standard technical and organizational measures to protect information submitted through this website. Case review submissions are stored in a secure database. Access is restricted to attorneys and staff directly involved in case evaluation.
This website may use cookies and third-party analytics tools (such as session analytics) to improve website functionality and understand how visitors use the site. Analytics data is aggregated and does not identify individual users. You may disable cookies in your browser settings.
Information you submit is retained for as long as necessary for the purposes described above, or as required by applicable law or professional conduct rules. If we determine that no viable claim exists and you do not wish us to retain your information, you may request deletion by contacting us.
Depending on your state of residence, you may have rights to access, correct, or delete personal information we hold about you. To exercise these rights, contact us at the information below.
For privacy-related questions, contact us at info@databreachclassactions.com or visit our Contact page.