Privacy

Start with choices, not private facts or records.

You should be able to ask for a review without placing medical details, a case history, an account number, or another sensitive record into a website form. This notice explains the minimized initial request, optional analytics, and the choices built into the site.

What the initial request asks for

The form asks for your name, a phone number or email address, a broad incident category, an optional broad timing choice, and one closed choice about what you want reviewed. It does not accept a written case summary or uploads. A confirmation number confirms website receipt only; it does not mean a matter was accepted or create an attorney-client relationship.

A short-lived intake attribution record

The browser may keep a bounded attribution record in session storage for up to 30 minutes. It can include source, medium, campaign, first landing route, referring host, and permitted advertising click identifiers. It stays in the browser unless you send a review request, when it may accompany that request for intake-source analysis. Click identifiers are never included in browser analytics events.

Information collected about site use

Google Analytics is optional. Until the site receives a trusted coarse regional classification, Google Analytics remains off unless you choose Allow analytics. In regions treated as consent-first or as presenting consumer-health consent risk, it also remains off until you choose Allow analytics. A trusted ordinary U.S. classification may allow limited analytics without an opening prompt, but the persistent Privacy choices control lets you turn it off at any time. The site does not expose, log, or store raw location signals used for this classification.

What optional analytics may receive

When allowed, analytics may receive a random device identifier, the page address with search terms and fragments removed, time of use, browser or device information, approximate location supplied by the provider, a referring website or limited same-site address, and bounded campaign labels. It does not receive names, phone numbers, email addresses, form choices, summaries, click identifiers, inquiry identifiers, or trusted inquiry lifecycle states. Google Signals, user-provided data, advertising personalization, cross-domain measurement, and enhanced measurement are not authorized.

Your analytics choice and browser signals

Your analytics choice is kept in local storage with only a version, allow-or-decline choice, coarse region category, and creation and expiration times. It expires after no more than 180 days. A Global Privacy Control or another recognized browser opt-out signal keeps optional analytics off. Choosing Keep analytics off, changing your choice later, or using a recognized signal stops new site analytics and triggers removal of the site's Google Analytics script, known analytics cookies, and analytics storage where the browser permits. Forms and site content remain available either way.

Injury pages and consumer-health inferences

A visit to a page about an injury, medical care, or an accident could support an inference about a person's health interests even when the page does not establish that the visitor has any condition. The site does not ask analytics to create health profiles, use this activity for targeted advertising, or combine it with an inquiry. Optional analytics remains consent-first where the trusted regional category presents consumer-health consent risk. Do not put medical details or records into the initial request.

Permission to contact you is separate

Contact permission applies only when you submit a review request and only to responding through the contact method you provide. It is not marketing consent and does not turn analytics on. An analytics choice does not submit a request, authorize contact, or affect whether the form is available.

Service providers and international processing

The site uses Netlify for hosting, server functions, inquiry storage, limited receipt notifications, and retention maintenance, and uses Google only for optional analytics. Those providers may process data in the United States or other countries under their own infrastructure and contractual arrangements.

Retention, access, and security

The application schedules ordinary inquiry records for deletion after 90 days unless a valid legal hold applies. Access is limited to the approved intake owner until another role is expressly authorized. The site uses bounded inputs, same-origin submission controls, duplicate-request safeguards, rate limiting, and logs limited to non-PII operational fields. Provider backups and operational records may follow different retention schedules.

Privacy requests and appeals

Depending on the law that applies to you, you may ask to access, correct, or delete personal information; obtain information about processing; withdraw a prior analytics choice; or opt out of covered sale, sharing, targeted advertising, or profiling. The site does not sell personal information or use it for targeted advertising. Send a request to contact@oklahomainjury.lawyer. The operator may take proportionate steps to verify and scope the request. If a request is denied, the response will explain why and how to appeal through the same privacy contact where an appeal right applies.

Operator, effective date, and changes

Site operator: Hicks Law Firm PLLC. Privacy contact: contact@oklahomainjury.lawyer. Notice version: September 4, 2026. Effective October 22, 2026. A material change to purposes, recipients, choice behavior, retention, or rights requires a new notice version. The effective date will be updated when a revised notice takes effect.