Legal
Privacy Policy
Last updated: May 17, 2026 — CCPA/CPRA compliant
Preamble
This Privacy Policy describes how Captain.Legal collects, uses, retains and protects your personal information, in accordance with the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), and other applicable U.S. state privacy laws — including the Virginia Consumer Data Protection Act (VCDPA), the Colorado Privacy Act (CPA), the Connecticut Data Privacy Act (CTDPA), the Utah Consumer Privacy Act (UCPA), the Texas Data Privacy and Security Act (TDPSA) and similar statutes.
1. Business / who we are
Captain Legal LLC, 30 N Gould St Ste N, Sheridan, Wyoming 82801, USA, the publisher of the site, is the business responsible for your personal information. For any question or to exercise your rights: our contact form.
2. Categories of personal information we collect
We only collect the information necessary for the purposes described below:
- Identifiers: email address, first name, last name
- Information entered in forms: details needed to generate a document (which may relate to third parties, under your responsibility)
- Commercial information: documents purchased, amount, date, order history
- Payment information: processed directly by PayPal and Stripe; we never access your full payment card details
- Internet or network activity: IP address, access logs, pages visited, session duration
We do not collect Social Security numbers, precise geolocation, or other sensitive personal information beyond what is listed above.
3. How we use your personal information
We use your personal information for the following business purposes:
- Processing and delivering your order and sending your invoice
- Managing your account and the customer relationship
- Retaining invoices to meet our legal and tax obligations
- Security, fraud prevention and service improvement
- Marketing communications and non-essential cookies — with your consent, withdrawable at any time
4. Sale or sharing of personal information
We do not sell your personal information, and we do not share it for cross-context behavioral advertising, as those terms are defined under the CCPA/CPRA. We have not sold or shared personal information in the preceding 12 months. We do not knowingly sell or share the personal information of consumers under 16 years of age.
5. Service providers and disclosures
Your information is never sold. It may be disclosed to service providers and contractors acting on our behalf and bound by confidentiality obligations: PayPal and Stripe (payments), OVH SAS (hosting), an email delivery provider, technical and analytics providers. Information may also be disclosed where required by law, subpoena, or at the request of a competent authority.
6. Retention periods
- Account data: up to 3 years after the last activity
- Order and billing data: 10 years (legal obligation)
- Information entered in forms: for the time of the service, unless linked to an order
- Marketing data: 3 years from the last contact
- Connection data: 12 months
After these periods, information is deleted or de-identified.
7. Data security and breach notification
We implement reasonable technical and organizational measures (HTTPS/TLS encryption, access control, secure hosting, PCI-DSS compliant payment providers). In the event of a security breach affecting your personal information, we will notify you and any relevant authority as required by applicable state breach-notification laws (for example, California Civil Code § 1798.82).
8. Your privacy rights
Depending on your state of residence, you have the right to: know / access the personal information we hold about you and how it is used; delete your personal information; correct inaccurate information; opt out of the sale or sharing of personal information; limit the use of sensitive personal information; and non-discrimination for exercising your rights.
To exercise your rights, submit a verifiable consumer request through our contact form. You may use an authorized agent to submit a request on your behalf. We respond within 45 days, extendable by an additional 45 days where reasonably necessary. You may appeal a refusal where your state law provides for it.
9. Cookies
Our site uses cookies whose nature, purpose and duration are detailed in our Cookie Policy. Non-essential cookies are only set after obtaining your consent, which you may withdraw at any time.
10. Children's privacy
The site is not directed to children under 13, and we do not knowingly collect personal information from children under 13 in accordance with the Children's Online Privacy Protection Act (COPPA). Consistent with the CCPA, we do not sell or share the personal information of consumers under 16 without opt-in consent.
11. California “Shine the Light” and Do Not Sell or Share
California residents may request information about disclosures of personal information to third parties for their direct marketing purposes (California Civil Code § 1798.83). Because we do not sell or share your personal information, no “Do Not Sell or Share My Personal Information” action is required; you may nonetheless contact us with any request through our contact form.
12. Modifications and contact
This policy may be modified at any time; the date of the latest update is shown at the top of the document. For any question, please contact us through our contact form. You may also contact the California Privacy Protection Agency (CPPA) or your state Attorney General.