Privacy Policy

Last updated: 6 April 2026

Introduction

Elder Law & Advocacy (“we,” “our,” “us”) values your privacy and is committed to protecting the personal information you share when you contact or retain us. We annually train all personnel on their security obligations and require strict adherence to a detailed Information Security Policy, which is reviewed at least annually by our Privacy and Security Officers.

This Privacy Policy outlines how we handle data in connection with our services.

Information We Collect

As a nonprofit legal services provider and Medicare counselor, we retain information from applicants and clients that is provided on intake. This information includes, for example, your name, age, contact information, and demographic information.

Voluntary contributions may be submitted through https://elaca.org/support/. However, we do not store or retain your payment information when you make a contribution. All contributions are processed through a third-party payment platform called Stripe. You can find Stripe’s privacy notice at: https://stripe.com/privacy. We do store your contact information to give you a charitable contribution receipt for tax purposes.

We also store information provided when you voluntarily reach out to us via our contact page on https://elaca.org/get-help/. We do not collect information other than what you provide on that contact form.

If you leave a comment on our website, we collect the data shown in the comments form and your IP address and browser user agent string to help in spam detection. An anonymized string created from your email address may be provided to the service provider, Gravatar. You can view Gravatar’s privacy policy at https://automattic.com/privacy/. When your comment is approved, your profile picture is visible to the public in the context of your comment. Additionally, you may opt-in to saving your name and email address using cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.

Finally, we may collect non-personal data, such as page views and visitor interactions. We cannot personally identify you with this information. Collection of this information relies on cookies and similar tracking technologies like web beacons and pixels. These technologies help us to improve our site’s performance, fix bugs, prevent crashes, and assist with basic site functions. Part of this data collection may include sharing your information with Google Analytics to track and analyze anonymous data about the use of our website. To opt out of being tracked by Google Analytics, visit https://tools.google.com/dlpage/gaoptout. For more information on Google’s privacy practices, please visit the Google Privacy & Terms page.

Embedded Content

Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if you had visited the other website.

These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.

Submitting Content to Us

If you upload images to our website or otherwise send images or documents to us, you should clear all private metadata you do not wish us to inadvertently access. This includes, for example, EXIF data embedded in photos that show your location. Visitors to the website can download and extract any such data from images you post.

Information Collected from Minors

We do not knowingly collect, solicit data from, or market to children under 18 years of age, nor do we knowingly sell such personal information. By using the Services, you represent that you are at least 18 or that you are the parent or guardian of such a minor and consent to such minor dependent’s use of the Services. If we learn that personal information from users less than 18 years of age has been collected, we will take reasonable measures to promptly delete such data from our records. If you become aware of any data we may have collected from children under age 18, please contact us.

Rights Specific to United States Residents

General Rights

If you are a resident of California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, or Virginia, you may have the right to request access to and receive details about the personal information we maintain about you and how we have processed it, correct inaccuracies, get a copy of, or delete your personal information. You may also have the right to withdraw your consent to our processing of your personal information. These rights may be limited in some circumstances by applicable law.

Again, please note that payment information processed on this website is handled through Stripe, not by us.

Appeals

Under certain U.S. state data protection laws, if we decline to take action regarding your request, you may appeal our decision by contacting us. We will inform you in writing of any action taken or not taken in response to the appeal, including a written explanation of the reasons for the decisions. If your appeal is denied, you may submit a complaint to your state attorney general.

California “Shine the Light” Law

California Civil Code Section 1798.83, also known as the “Shine The Light” law, permits our users who are California residents to request and obtain from us, once a year and free of charge, information about categories of personal information (if any) we disclosed to third parties for direct marketing purposes and the names and addresses of all third parties with which we shared personal information in the immediately preceding calendar year. If you are a California resident and would like to make such a request, please submit your request in writing to us on our Get Help page.

Please note that as a law firm and HIPAA compliant organization, we will never share your personal identifying information or private health information without your consent. We will never sell your data. We do not share mobile or any other information with third parties or affiliates for marketing or promotional purposes.

Do-Not-Track Signals

Most web browsers and some mobile operating systems and mobile applications include a Do-Not-Track (“DNT”) feature or setting you can activate to signal your preference not to have data about your online browsing activities monitored or collected. Currently, there is no uniform technology standard for recognizing and implementing DNT signals. Nevertheless, California law requires us to let you know how we respond to DNT signals. As of the date of publishing this Policy, we do not respond to such signals.

Updates to this Policy

Elder Law & Advocacy reserves the right to update this Privacy Policy at any time. Continued use of our website and services implies acceptance of the latest version.

Questions & Complaints

If you have questions or would like to make a complaint about our privacy practices, please contact us. All complaints will be reviewed by our Executive Director and a Security or Privacy Officer.