Privacy Policy
The Law Office of Krista Krepp
Last updated: May 19, 2026
This Privacy Policy describes how The Law Office of Krista Krepp(“we,” “us,” or “our”) collects, uses, and protects information when you visit our website at krepplaw.com(the “Site”), submit a contact form, send us an email, or communicate with us by text message.
Information We Collect
We collect information that you voluntarily provide to us when you reach out through any of the following channels:
Contact Form. When you submit the contact form on this Site, we collect the information you enter, which may include your name, email address, phone number, and the content of your message. Because the contact form is hosted on our own infrastructure, your submission is transmitted directly to us without passing through a third-party form service.
Email. When you send us an email, we receive your email address, the content of your message, any attachments, and associated metadata (such as the date, time, and subject line).
Text Message (SMS/MMS). When you send us a text message, we receive your phone number, the content of your message, any images or attachments, and associated metadata (such as timestamps). If you initiate a text conversation with us, we may respond by text to communicate with you about your inquiry or legal matter. Message frequency varies. Message and data rates may apply. You may opt out of text messages at any time by replying STOP to any message from us.
In each case, because you are contacting a law firm, the information you provide may include details about your legal situation. Please see “No Attorney-Client Relationship” below for important limitations.
Automatically Collected Information
Vercel Web Analytics. This Site is hosted on Vercel and uses Vercel Web Analytics, a privacy-friendly, cookieless analytics service. Vercel Web Analytics does not set cookies, does not store personal identifiers, and does not track visitors across other websites. It collects only anonymized, aggregated data such as pages visited, approximate country, device type, browser, operating system, and referring website. Visitor IP addresses are transformed into a one-way, daily-rotating hash and are never stored in raw form. For more information, see Vercel's Privacy Policy.
We do not use advertising cookies, third-party tracking pixels, or cross-site tracking technologies.
How We Use Your Information
We use the information you provide for the following purposes:
- To respond to your inquiry or message.
- To evaluate whether we are able to assist you with a legal matter.
- To communicate with you about our legal services.
- To maintain internal records related to prospective and current client communications.
- To comply with legal and professional obligations, including conflict-checking.
We do not sell, rent, or share your personal information with third parties for their marketing purposes.
Service Providers
We use a limited number of third-party service providers to operate our practice. These providers process your information only as necessary to perform services on our behalf and are obligated to protect it:
| Provider | Function | Data Processed |
|---|---|---|
| Google Workspace | Email hosting and storage | Emails you send to us, including content, attachments, and metadata |
| Vercel | Website hosting and analytics | Anonymized, aggregate site usage data (no personal identifiers) |
| MyCase | Case and client management | Information from your inquiry that we manually enter into our case management system |
| Twilio (planned) | Business text messaging | Text message content, phone number, and message metadata — applicable once implemented |
We may update this list as our service providers change. We do not transfer your information to any provider that is not necessary for the operation of our practice.
Data Retention
We retain information you submit through the contact form, email, or text message for as long as reasonably necessary to:
- Respond to your inquiry.
- Evaluate and, if applicable, manage a legal matter.
- Comply with our professional and legal obligations, including conflict-of-interest records.
- Defend against potential claims.
If you contact us but do not become a client, we generally retain your inquiry information for a reasonable period consistent with applicable rules of professional conduct and our internal records-management practices. You may request deletion of your information at any time by contacting us (see “Contact Information” below), and we will honor that request unless we are required to retain the information by law or professional obligation.
Data Security
We implement reasonable administrative, technical, and physical safeguards to protect the information you provide from unauthorized access, disclosure, alteration, or destruction. These include the use of encrypted email, secure hosting, and access controls on our case management systems. However, no method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security.
No Attorney-Client Relationship
Submitting information to us through this Site, by email, or by text message does not create an attorney-client relationship. An attorney-client relationship is formed only when we have agreed to represent you and that agreement is confirmed in a written engagement letter signed by both parties. Until that relationship is established, information you send to us is not protected by the attorney-client privilege and should not include highly sensitive or confidential details that you would not want disclosed.
Your Privacy Rights Under Illinois Law
Illinois residents have rights under state law regarding their personal information:
- Data Breach Notification. Under the Illinois Personal Information Protection Act (815 ILCS 530/1 et seq.), if we become aware of a data breach affecting your personal information, we will notify you as required by law.
- Access and Deletion. You may contact us at any time to request access to the personal information we hold about you or to request its deletion, subject to our legal and professional retention obligations.
External Links
This Site contains links to external websites, including LinkedIn and other third-party platforms. We are not responsible for the privacy practices or content of those sites. We encourage you to review the privacy policy of any external website you visit.
Children's Privacy
This Site is not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13. If we learn that we have collected information from a child under 13, we will delete it promptly. If you believe a child has provided us with personal information, please contact us.
Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this page periodically.
Contact Information
If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact us at:
The Law Office of Krista Krepp
Email: contact@krepplaw.com