Privacy & Data Disclosure

PRIVACY AND DATA COLLECTION DISCLOSURE
Pagan Lopez Law — Secure Payment Portal

Please read the following disclosure carefully before proceeding. This information is required by professional responsibility rules governing attorney-client confidentiality.

1. DATA WE COLLECT

To complete identity verification and create a legally defensible record of your payment authorization, we collect the following:

• Full legal name, email address, and phone number
• Billing address (street, city, state, ZIP)
• Government-issued photo ID (required)
• Selfie/photo (optional — you may decline)
• IP address and approximate geolocation (country, region, city, ISP)
• Browser information (User-Agent, Accept-Language)
• Exact timestamp of each verification step
• Electronic signature and acknowledgment of payment terms
• One-time verification code (OTP) channel confirmation

2. PURPOSE OF COLLECTION

This data is collected exclusively for:

• Identity verification — confirming you are the authorized person making this payment
• Fraud prevention — detecting unauthorized or suspicious transactions
• Chargeback and dispute defense — creating irrefutable evidence of your voluntary authorization if a payment dispute is filed with your card issuer (Visa Reason Code 10.4; Mastercard 4837, 4863)
• Legal record keeping — maintaining documentation required under applicable bar rules

3. THIRD-PARTY VENDORS WITH POTENTIAL DATA ACCESS

Your data may be processed by or stored on systems operated by:

• Bluehost — web hosting provider where this portal is hosted
• LawPay / AffiniPay — payment processor; receives name, matter reference, and amount when you are redirected
• Twilio — SMS delivery (if applicable); receives only your phone number and the OTP message
• ip-api.com — IP geolocation service; receives only your IP address

We do not sell, rent, or share your personal information with any other third parties.

4. DATA RETENTION

All verification records, identity documents, and associated data are retained for a minimum of seven (7) years from the date of the transaction, as required under the applicable statute of limitations in New York and New Jersey. Records are subject to secure deletion after this period.

5. SECURITY MEASURES

• HTTPS encryption for all data in transit (TLS)
• AES-256 encryption for identity documents stored on disk
• Documents stored outside the publicly accessible web directory
• SHA-256 integrity verification of all stored documents
• Rate limiting and fraud detection on all form submissions
• Immutable audit log of all verification events

6. YOUR RIGHT TO DECLINE

Use of this verification portal is voluntary. If you do not wish to submit your identity documents through this system, you may decline and contact the office directly to arrange an alternative payment method. Declining will not affect your representation in any way.

📞 (646) 216-8881