Privacy Policy
Last updated: May 25, 2026 · Effective: May 25, 2026
Introduction
Ron Simon & Associates ("Ron Simon & Associates," "we," "us," or "our") is a Texas-based law firm representing victims of foodborne illness across the United States. This Privacy Policy explains what personal information we collect through ronsimonassociates.com (the "Site"), our intake forms, and our communications with you; how we use and protect that information; who we share it with; and the privacy rights you have under U.S. federal and state law.
This Policy covers information collected through the Site and through telephone, email, text, and form-based intake. It does not cover information you may share with us after we have agreed to represent you, which is governed by the attorney-client relationship, the rules of professional conduct of the State Bar of Texas, and the rules of any other jurisdiction in which we are admitted.
Quick Summary
We try to keep our practices straightforward. In short:
- We collect what you share with us through intake forms, calls, and emails, plus standard technical information when you browse the Site.
- We collect health-related information when you describe a foodborne illness, because that information is necessary to evaluate whether we can help you.
- We do not sell your personal information for money. We do, however, share certain browsing and device information with the advertising and analytics services we use (Meta/Facebook, Google, and Microsoft Clarity) so we can measure marketing performance and show our ads to people who have visited the Site. You can turn off this sharing at any time using the "Your Privacy Choices" link in our footer.
- We do not share with data brokers, and we do not allow our service providers to use your information for their own independent marketing.
- We may share information with co-counsel on specific matters where another firm assists us with a case, but we do not refer leads to outside firms as a routine business practice.
- You have rights over your information under California, Texas, and other state laws. We honor those rights for every visitor regardless of where they live.
- Submitting a form does not create an attorney-client relationship. Information you submit is treated as confidential prospective-client information, but a relationship is formed only after we and you have signed a written engagement agreement.
Information We Collect
Information You Provide Directly
When you complete a contact form, qualification questionnaire, newsletter signup, or otherwise communicate with us, we collect the information you choose to share, which typically includes:
- Identifiers and contact details: first and last name, email address, telephone number, mailing or street address, and the state in which you live.
- Information about your potential matter: the food product, restaurant, or outbreak involved; the dates and places of exposure; symptoms you experienced; medical diagnoses (including specific pathogens such as E. coli, Salmonella, Listeria, Norovirus, Campylobacter, Hepatitis A, Cyclospora, Shigella, Vibrio, or botulism); medical treatment received, including hospitalization; and any other facts you choose to share about your case.
- Family or household details if a member of your household was also affected, including information about minor children if their illness is part of the potential claim.
- Documents and records you choose to attach or send to us by email, including medical records, laboratory reports, receipts, photographs, and correspondence with restaurants, retailers, manufacturers, or public-health agencies.
- Communications: the content of your messages, voicemails, emails, and chat or text exchanges with our team.
You can decline to provide any of this information, but doing so may prevent us from evaluating whether we can help you.
Information Collected Automatically
When you visit the Site, we and our service providers automatically collect technical information about your visit, including:
- Device and browser information: browser type and version, operating system, screen size, language preferences, time zone, and user-agent string.
- Connection information: your internet protocol (IP) address and approximate geographic location derived from it. We hash IP addresses before storing them in our intake database, so the original IP is not retained alongside your submission.
- Usage information: the pages you view, the order in which you view them, the date and time of your visit, the page you arrived from (referrer), and search terms that brought you to us.
- Call-tracking information: when you call a phone number displayed on the Site, our call-tracking service captures the calling number, the time and duration of the call, and the marketing source that drove the call.
Information from Other Sources
In limited circumstances, we may receive information about you from third parties, including:
- Other attorneys who refer you to us, or to whom you ask us to send your information.
- Public records, court filings, news coverage, and public-health agency notices (for example, U.S. Centers for Disease Control and Prevention or U.S. Food and Drug Administration outbreak investigations) that contain information about an incident you contact us about.
- Treating physicians, hospitals, laboratories, or insurers, with your written authorization, in order to evaluate a potential claim.
How We Use Your Information
We use the information described above for the following purposes:
- To evaluate your potential case and determine whether we can represent you, including conflict-of-interest checks.
- To communicate with you about your inquiry by phone, email, or (with your opt-in consent) text message.
- To provide legal services if we enter into an attorney-client relationship with you.
- To operate, secure, and improve the Site, including diagnosing technical problems, preventing fraud and abuse, and analyzing aggregated traffic patterns.
- To measure the effectiveness of our outreach using analytics services (Google Analytics) and session-replay tools (Microsoft Clarity), which help us understand which informational pages and outbreak alerts are most useful and how visitors interact with the Site.
- To deliver advertising to you and to similar audiences through advertising platforms (Meta/Facebook and Instagram, Google Ads). This includes building remarketing audiences from people who have visited the Site, measuring whether our ads led to inquiries, and showing our ads to people whose profile is similar to our visitors. You can opt out of this sharing using the "Your Privacy Choices" link in our footer.
- To comply with legal and ethical obligations, including attorney advertising rules of the State Bar of Texas (and of other states where we are admitted), conflict-checking obligations, court orders, subpoenas, and applicable record-retention requirements.
- To send periodic informational updates (a newsletter about food-safety news and outbreaks) if you have subscribed. You can unsubscribe at any time.
- To exercise or defend legal claims, including responding to demands made against the firm.
We do not use the information you share with us to make automated decisions that produce legal or similarly significant effects about you. We do not engage in profiling within the meaning of state privacy laws. Every potential matter is reviewed by our attorneys.
How We Share Information
We do not sell your personal information for money, and we do not share your intake-form contents (your case description, illness type, qualification answers, or message body) with anyone outside the firm except as described below. We do share more limited browsing and device information with the advertising and analytics services we use, in ways that some U.S. state privacy laws define as "sharing" or "sale" of personal information.
Service providers acting on our behalf. We use Cloudflare, Inc. for website hosting, content delivery, denial-of-service protection, and the database and storage that hold intake submissions; Resend, Inc. for transactional email delivery of intake notifications to our team; and WhatConverts, LLC for call tracking, lead source attribution, and dynamic phone number insertion. These vendors handle information only on our behalf and under written contract; they are not authorized to use it for their own marketing.
Advertising and analytics partners for marketing measurement and remarketing. We use the Meta Pixel (Meta Platforms, Inc.) for conversion measurement and remarketing on Facebook, Instagram, and the Meta Audience Network; Google Analytics 4 with Google Signals enabled and linked to Google Ads (Google LLC) for analytics, cross-device measurement, conversion tracking, and remarketing on Google Search, YouTube, and the Google Display Network; and Microsoft Clarity (Microsoft Corporation) for session replay and heatmaps. These partners receive the pages you view, your device and browser type, your IP address, advertising identifiers, and session-replay event signals such as mouse movement and clicks. They use the information both to report to us and for their own purposes, consistent with their own privacy policies. We do not pass them the contents of our intake forms — only browsing and device signals. Under California, Texas, Colorado, Connecticut, Oregon, and similar state privacy laws this is treated as "sharing for cross-context behavioral advertising." You can opt out at any time using the "Your Privacy Choices" link in our footer, or by sending a Global Privacy Control signal from your browser.
Other sharing. We also share information:
- With co-counsel on specific matters. Occasionally we work with other licensed attorneys on a particular case, for example to handle a filing in a jurisdiction where local counsel is required. We do not refer leads to outside firms as a routine practice and we do not participate in lead-sale arrangements.
- To comply with law, including responding to lawful subpoenas, court orders, and government requests we believe in good faith we are required to honor.
- To enforce our rights or protect the safety of others.
- With your consent, or at your direction, for any other purpose disclosed at the time you provide the information.
- In connection with a business transaction such as a merger, succession plan, or sale of practice assets, in which case we will take reasonable steps to ensure the recipient handles your information consistent with this Policy.
We review the list of service providers and advertising partners when we adopt new tools. If we add, remove, or materially change a vendor in a way that affects how we handle your information, we will update this Policy.
Cookies, Tracking, and the Global Privacy Control
The Site uses cookies, web beacons, pixels, and session-replay scripts. We group them into three categories so you can understand what each is for:
Strictly necessary
These cookies and similar storage are required for the Site to work and cannot be disabled. They include Cloudflare-issued cookies for hosting, load balancing, and denial-of-service protection, and the cookies WhatConverts uses to swap displayed phone numbers and attribute calls.
Analytics
We use Google Analytics 4 with Google Signals enabled to understand how visitors find and use the Site. We also use Microsoft Clarity to record session replays and generate heatmaps so we can see where visitors get stuck or confused. These tools set cookies and similar identifiers and can read information about your device, browser, and behavior on the Site.
Advertising and remarketing
We use the Meta Pixel (and similar conversion APIs) to measure the performance of our Facebook and Instagram ads and to show our ads to people who have visited the Site. Through Google Signals and the Google Ads link, Google Analytics also contributes to remarketing on Google Search, YouTube, and the Google Display Network. These tools set advertising identifiers and read advertising-related cookies in your browser.
We do not use data brokers, do not allow our partners to sell your information to other advertisers, and do not pass them the contents of our intake forms. The information flowing to these partners is limited to browsing, device, and event signals as described in the "How We Share Information" section above.
Your controls
Your Privacy Choices. The fastest way to turn off analytics or advertising tracking on this Site is the "Your Privacy Choices" link in our footer, which opens a preference panel where you can opt in or out of each category. Strictly necessary cookies cannot be disabled because the Site cannot function without them.
Browser controls. Most browsers let you block or delete cookies through their settings. Doing so will not affect your ability to read the Site, though our analytics, attribution, and advertising features will be reduced or disabled.
Platform opt-outs. You can also opt out at the platform level: Google's analytics and ads settings are at adssettings.google.com; Meta's preferences are at adspreferences.facebook.com; the Digital Advertising Alliance's industry-wide opt-out is at optout.aboutads.info.
Global Privacy Control (GPC). We honor the Global Privacy Control signal as a valid opt-out of sharing for cross-context behavioral advertising under California, Colorado, Connecticut, Texas, Oregon, and other state laws that recognize universal opt-out mechanisms. When your browser sends a GPC signal, we treat that as an instruction to suppress our advertising and session-replay trackers on this Site and to record the opt-out as a "sharing" opt-out under those state laws.
Do Not Track (DNT). Web browsers can send a "Do Not Track" header. Because there is no industry consensus on how to respond to DNT signals, we do not change our practices based on DNT alone. We do honor GPC, as described above.
Sensitive and Health-Related Information
Because we represent victims of foodborne illness, our intake process necessarily collects information about your health, including diagnoses, symptoms, hospital admissions, and treatment. Under the California Consumer Privacy Act and several other state laws, this is considered sensitive personal information.
The information you provide to us through an intake form, call, or email is used only to evaluate and (if you become a client) to handle your potential legal matter. We do not sell that information, and we do not pass the contents of your intake form to our advertising or analytics partners.
Page-level browsing on health-related sections of the Site (such as our pages about specific outbreaks, brands, or pathogens) is observed by our analytics and advertising partners through the cookies and pixels described above. Those partners receive the URL you viewed and standard browsing signals; they do not receive your name, the contents of any form you submit, or the answers to any qualification questions. If you do not want page-level browsing on health-related pages to be observed by those partners, please use the "Your Privacy Choices" link in our footer to opt out, or send a Global Privacy Control signal from your browser, before browsing those pages.
HIPAA does not apply to us because a law firm is not a "covered entity" under the Health Insurance Portability and Accountability Act. However, when we receive medical records and other protected health information from your treating providers (with your written authorization), we handle that information with the same care a HIPAA-covered entity would, in keeping with our professional obligation of confidentiality.
SMS / Text Messages
We primarily contact you by phone and by email. We do not send marketing or solicitation text messages, and we do not text people simply because we have their phone number on file. If we are speaking with you on a phone call and need to send you a one-time follow-up question, document, or status update, a member of our team may ask for your permission to text you. We will send you a text only after you have given us that permission.
For anyone we do text, the following standard terms apply:
- Purpose: case-related questions, document delivery, appointment confirmations, and status updates about your potential or active matter.
- Frequency: message frequency is low and varies with the status of your matter.
- Costs: message and data rates may apply, depending on your mobile plan and carrier.
- Stopping messages: reply STOP at any time to opt out of further text messages, or just tell the team member you have been talking with. Reply HELP for assistance.
- Carriers: carriers are not liable for delayed or undelivered messages.
- No sharing for marketing: your mobile phone number is never shared with third parties or affiliates for their marketing purposes and is not sold.
Agreeing to receive a text message is never a condition of representation, and withdrawing your consent does not affect any other channel you use to reach us.
Attorney-Client Relationship and Confidentiality
Submitting an intake form, calling us, emailing us, or otherwise contacting us does not create an attorney-client relationship. A relationship is formed only when we and you sign a written engagement agreement. Until that happens, you are a "prospective client."
We treat information you share with us as a prospective client as confidential, consistent with Rule 1.18 ("Duties to Prospective Clients") and Rule 1.05 of the Texas Disciplinary Rules of Professional Conduct, and the analogous rules of other states in which we are admitted. We do not disclose prospective-client information except as permitted or required by those rules, by a court of competent jurisdiction, or with your consent.
If we decline to represent you, we may retain a record of the inquiry sufficient to satisfy our conflict-checking obligations, and we will not use the information you shared for any other purpose.
Data Retention
We retain personal information only as long as we need it for the purposes described in this Policy and to satisfy our legal, regulatory, and professional obligations.
- Intake submissions where we do not open a matter: retained for up to two years for conflict-of-interest checking, and then deleted or de-identified, unless a longer period is required to defend a legal claim.
- Client files (matters we open): retained for the duration of the engagement and for at least seven years after the matter closes, consistent with the file-retention guidance of the State Bar of Texas. Some matters are retained longer when required by court rules, statutes of limitation, or the nature of the claim (for example, matters involving minors).
- Newsletter subscriber list: retained until you unsubscribe.
- Website analytics and server logs: retained in identifiable form for up to thirteen months, then aggregated or deleted.
Data Security
We use reasonable administrative, technical, and physical safeguards to protect personal information, including:
- Transport-layer encryption (HTTPS) for all communications with the Site.
- Hashed storage of IP addresses associated with intake submissions.
- Access controls that limit who at the firm can see intake submissions and client files.
- Vetting of service providers with respect to their security practices.
- Periodic review of our intake and data-handling procedures.
No system is perfectly secure, and we cannot guarantee that an unauthorized person will never gain access to information about you. If we discover a breach that materially affects you, we will notify you and any regulator as required by applicable law.
Your Privacy Rights
Depending on the state where you live, you may have one or more of the following rights with respect to the personal information we hold about you:
- The right to know what personal information we have collected about you, the sources of that information, the purposes for which we use it, and the categories of third parties with whom we share it.
- The right to access a copy of your personal information, and (in some states) to receive it in a portable format.
- The right to correct inaccurate personal information.
- The right to delete personal information we hold about you, subject to exceptions for information we must keep to provide legal services, defend legal claims, or comply with a legal obligation.
- The right to opt out of the sale or sharing of your personal information for cross-context behavioral advertising. We do not sell personal information for money. We do share certain browsing and device information with the advertising and analytics partners described above, which several state laws treat as "sharing." You can opt out at any time by clicking the "Your Privacy Choices" link in our footer or by sending a Global Privacy Control signal from your browser.
- The right to limit the use of sensitive personal information. We already limit our use of sensitive personal information to the original purpose for which you provided it.
- The right to opt out of profiling for automated decisions that produce legal or similarly significant effects. We do not engage in such profiling.
- The right not to be discriminated against for exercising any of these rights.
We extend these rights to all visitors who reasonably request them, regardless of state of residence. To exercise a right, see the "How to Exercise Your Rights" section below.
California Privacy Notice (CCPA / CPRA)
If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act (collectively, the "CCPA"), gives you specific rights and requires us to provide specific disclosures. The categories of personal information we have collected, the sources, the business purposes, and the categories of recipients during the prior 12 months are described below.
Identifiers — such as name, email, phone, postal address, your IP address (hashed before storage), and the advertising and cookie identifiers set by our analytics and advertising partners. Collected from you, from cookies and server logs, and from those analytics and advertising partners. Used for case evaluation, communication with you, site security, marketing measurement, and remarketing. Disclosed to our service providers (Cloudflare, Resend, WhatConverts) and, for the advertising and cookie identifiers, to Meta, Google, and Microsoft Clarity.
Records described in Cal. Civ. Code §1798.80(e) — name, address, and telephone in the context of a potential legal matter. Collected from you, used for case evaluation and communication, and disclosed only to our service providers.
Internet or other network activity — the pages you visit, referrer, device and browser characteristics, call-tracking session data, and the mouse-movement and scroll events captured by session replay. Collected through cookies, server logs, WhatConverts, the Meta Pixel, Google Analytics, and Microsoft Clarity. Used for site analytics, security, marketing attribution, remarketing, and session replay. Disclosed to our service providers and to Meta, Google, and Microsoft Clarity.
Approximate geolocation — your city or region derived from your IP address. Collected from server logs, Cloudflare, and our analytics and advertising partners. Used for site delivery, localized content, and advertising measurement. Disclosed to our service providers and (for approximate location only) to Meta and Google.
Audio and electronic information — voicemails, email content, and text-message content you send to us. Collected from you and from WhatConverts. Used for case evaluation, quality, and training. Disclosed only to our service providers. Not shared with our advertising or analytics partners.
Professional or employment-related information — information about your work and lost wages that you choose to share for damages purposes. Collected from you, used for case evaluation and damages assessment, and shared only with co-counsel on the specific matter where applicable.
Sensitive personal information — health and medical information (diagnoses, symptoms, treatment), and precise geolocation if you choose to share it. Collected from you and from your treating providers (with your written authorization). Used solely for case evaluation and legal representation. Shared only with co-counsel on the specific matter where applicable. Not shared with our advertising or analytics partners.
Inferences. We do not derive new attributes or profile you based on the information we collect.
Sale and sharing. We have not sold personal information for monetary consideration in the past 12 months. We do "share" personal information for cross-context behavioral advertising within the meaning of Cal. Civ. Code §1798.140(ah) — specifically Identifiers, Internet or other network activity, and approximate geolocation — with the advertising and analytics partners named above. You can opt out at any time using the "Your Privacy Choices" link in our footer or by sending a Global Privacy Control signal. We do not knowingly sell or share the personal information of minors under 16, and we do not share sensitive personal information, audio or electronic information, or the contents of intake-form submissions with these partners.
Use of sensitive personal information. We use sensitive personal information only for the purpose of evaluating and (if applicable) handling your legal matter. This use falls within the exceptions in Cal. Civ. Code §1798.121(d) and does not require a right-to-limit option, but you may still ask us to limit our use of sensitive personal information using the contact methods below.
Retention. We retain personal information for the periods described in "Data Retention" above. We do not retain personal information for longer than reasonably necessary for the purposes for which it was collected.
Authorized agents. California residents may use an authorized agent to submit a request. We will require written proof of the agent's authority and may require you to verify your identity directly with us.
Shine the Light (Cal. Civ. Code §1798.83). California residents may request information about our disclosure, if any, of personal information to third parties for those parties' direct-marketing purposes. We do not make such disclosures.
Your Privacy Choices
The fastest way to control what gets shared with our advertising and analytics partners is the "Your Privacy Choices" link in our footer. The link opens a preferences panel where you can:
- Turn off Advertising tracking, which stops the Meta Pixel, Microsoft Clarity, and the Google Ads / Google Signals features of our Google Analytics from collecting data about your visit. Under California, Texas, Colorado, Connecticut, Oregon, and similar state laws, exercising this control constitutes an opt-out of "sharing for cross-context behavioral advertising" or "targeted advertising," as those terms are defined in the applicable statute.
- Turn off Analytics tracking, which stops Google Analytics from collecting page-view and behavior data about your visit.
Strictly necessary cookies (Cloudflare, WhatConverts call attribution) cannot be turned off because the Site cannot operate without them.
Your choice is stored in your browser. If you clear your browser storage, switch browsers, or use a different device, you will need to set your preference again. We do not associate your opt-out choice with your name or any account.
Global Privacy Control. If your browser sends a Global Privacy Control signal, we treat that as an automatic opt-out of advertising and session-replay tracking on this Site for that browsing session. You do not need to use the "Your Privacy Choices" panel separately. See the Cookies section above for more on GPC.
Other State Privacy Rights
Texas residents have rights under the Texas Data Privacy and Security Act (Tex. Bus. & Com. Code Ch. 541), including the rights described in "Your Privacy Rights" above. Because we collect health-related information directly from you for the limited purpose of evaluating your matter, your initial submission to us serves as your consent to that limited use.
If you reside in another U.S. state that has enacted a comprehensive consumer privacy law (such as California, Virginia, Colorado, Connecticut, Oregon, Florida, or others that may be enacted from time to time), we will honor analogous rights upon a verified request using the methods below, whether or not the specific statute formally applies to us. If a request is denied, residents of states whose laws provide an appeal right may appeal by replying to our denial within a reasonable time, and we will respond within the period the statute requires.
Nevada Residents
Nevada residents may, under NRS 603A, direct us not to sell certain personal information. We do not sell personal information as defined in that statute, but you may submit a request using the contact information below.
International Visitors
The Site is operated from the United States and is intended for U.S. residents. If you visit the Site from outside the United States, you understand that your information will be transferred to, stored in, and processed in the United States, which may have data-protection laws different from those of your country. We do not actively solicit clients from the European Economic Area, the United Kingdom, or other jurisdictions whose privacy laws prohibit the practices described in this Policy.
Children's Privacy
The Site is intended for adults. We do not knowingly collect personal information from children under 13 in violation of the Children's Online Privacy Protection Act, and we do not knowingly sell or share the personal information of minors under 16 in violation of the CCPA.
We recognize that children are often the victims of foodborne illness. If you wish to discuss a matter involving a child, please have a parent or legal guardian contact us. The parent or guardian will provide any information about the child necessary for us to evaluate the matter.
If you believe a child has provided personal information to us, please contact us using the information below and we will delete it.
How to Exercise Your Rights
To submit a privacy request, or to ask a question about this Policy, please use one of the following methods:
- Email: ron@rsaalaw.com with "Privacy Request" in the subject line.
- Telephone: 1-888-335-4901
- Mail: Ron Simon & Associates, Attn: Privacy Request, 820 Gessner Rd, Suite 1455, Houston, TX 77024.
We will acknowledge your request within ten business days and respond within forty-five days, or longer if permitted by applicable law (for example, an additional 45 days for complex California requests, with notice to you).
Verification. Before responding to access, deletion, or correction requests, we will take reasonable steps to verify that you are the person whose information is involved. This typically means matching identifying details (such as your email, phone, or postal address) against what we have on file, and asking you to confirm specific details only the person who submitted the original information would know. If we cannot verify you, we will tell you and ask for additional information.
Attorney Advertising
The Site contains attorney advertising. Past results do not guarantee future outcomes. Every case is different, and the value of any matter depends on its own facts and applicable law. Principal Office: Houston, Texas. The information on this Site is for general information only and is not legal advice.
Changes to This Policy
We may update this Policy from time to time to reflect changes in our practices, our service providers, or applicable law. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, provide additional notice (for example, a banner on the Site or an email to subscribed users). We encourage you to review this Policy periodically.
Contact Us
If you have any question about this Policy or our privacy practices, please contact us:
Ron Simon & Associates
820 Gessner Rd, Suite 1455
Houston, TX 77024
Telephone: 1-888-335-4901
Email: ron@rsaalaw.com