Privacy notice
A considered approach
to privacy.
This website is designed to collect less information and make its behavior easy to inspect.
Browsing the website
The website application does not set cookies or use advertising trackers, analytics, browser storage, fingerprinting, or third-party scripts. Images, fonts, styles, and other page resources are served from the website’s own origin. No external requests are required by the application to browse its pages.
Following an external link or opening an email link invokes the destination service’s privacy practices.
Hosting and security cookies
DigitalOcean hosts the website and contact service. Its Cloudflare edge service also processes requests. Servers necessarily process IP addresses and connection information to deliver pages and protect services.
The hosting layer may use Cloudflare security cookies, including __cf_bm, to protect against automated abuse. These are separate from the website application, which does not set cookies. The website therefore does not make a blanket cookie-free claim.
Contact inquiries
The form collects a name, email address, brief message, and acknowledgment of the confidentiality notice. J Ballard Law uses these details to assess and respond to potential engagements and qualification requests. The form accepts no attachments. Submission does not establish an attorney-client relationship or consulting engagement.
The contact service processes inquiries on DigitalOcean and forwards them through Resend to the firm’s Google-hosted Gmail mailbox. Resend and Google therefore process inquiry content and email metadata. This server-side email transfer does not require a connection from the visitor’s browser to either provider. No inquiry database or durable retry queue is maintained by the website application.
Email providers and retained copies
Resend states that its standard Free, Pro, and Scale plans retain email content and logs for 30 days and backups for seven days. It stores customer data in the United States. Its subprocessors may process messages for delivery and security, including sampling for trust and safety. These provider practices are described in Resend’s data-handling information.
A daily cleanup in the firm’s Google mailbox moves matching contact-form notifications to Trash once they are more than 30 days old. Conversations marked for preservation are excluded, and the cleanup does not delete replies or unrelated email. Daily scheduling normally places cleanup between 30 and 31 days after receipt, subject to successful execution. Gmail normally retains trashed messages for a further 30 days before deletion. Recoverable copies, backups, and records subject to preservation requirements may remain longer. This is not a guarantee that every copy is permanently deleted after 30 days. Google’s handling is described in its privacy policy; account-specific retention settings must also be considered.
Limited application security records
The contact service uses keyed representations of source addresses for abuse controls and message fingerprints for duplicate suppression. These records expire after approximately ten minutes and are held in process memory. Raw inquiry bodies, email addresses, and source addresses are not written to application logs. Operational logs contain aggregate event counts.
Request content exists transiently during validation and delivery. Memory cleanup does not guarantee immediate secure erasure. Keyed addresses are not necessarily anonymous. DigitalOcean, Cloudflare, Resend, and Google may keep their own service and security records; application logging limits do not eliminate provider processing. Provider records are governed by the relevant service policies and account settings.
Privacy inquiries
Questions about this notice or information submitted through the website may be directed to contact@jballardlaw.com. Initial requests should exclude sensitive information. Records may need to be preserved for an engagement, a legal obligation, or a dispute.
Security has limits
Encryption in transit and limited collection reduce risk. Ordinary email is not necessarily end-to-end encrypted. No website, email system, or hosting arrangement can guarantee absolute security or confidentiality.