Dykema Gossett PLLC
Privacy Policy
LAST MODIFIED: September 1, 2026
Previous version. The previous version of this Privacy Policy can be found here.
Introduction. Dykema Gossett PLLC (“Dykema”, “we”, “us” or “our”) has created this Privacy Policy (“Policy”) to describe how we collect, use, disclose, transfer, store, retain or otherwise process your personal information in the course of operating our business and performing our legal services, which includes the administration of the websites described below (these websites collectively referred to as the “Website” or “Site” and collectively with our professional legal services, referred to as our “Services”).
| Dykema Websites | |
|---|---|
| dykema.com | dykemapodcast.com |
| dykema100.com | laboremployment-lawblog.com |
| dykemadso.com | ahigherlaw.buzzsprout.com |
| thefirewall-blog.com | dealsanddevelopments.buzzsprout.com |
| openroadlawblog.com | dykema.buzzsprout.com |
| cannabis-law-blog.com | insurancecoveragenotesanddevelopments.com |
| nextgenfinancialservicesreport.com | lastmonthatthesupremecourt.com/ |
When we refer to “you” or “your,” we mean the person about whom we collect or process personal information or data. If the person accessing the Website or engaging with our Services does so on behalf of, or for the purposes of, another person, “you” or “your” also means that other person.
Important updates.
Compared to the previous version of this Policy, in this version we have:
-
- Updated the explanation of data rights available to U.S. consumers based upon upcoming changes in law while condensing down existing disclosures into an easier to understand format;
- Updated the list of Websites related to this Privacy Policy;
- Updated and expanded disclosures regarding Dykema’s online technology practices relating to our Websites;
- Removed our separate International Privacy Policy and incorporated those disclosures into the new International Data Transfers section of this Privacy Policy;
- Added a disclosure relating to Dykema’s biometric data practices; and
- Added a disclosure relating to Dykema’s online payment portal.
Policy summary. We encourage you to read this Policy for a complete description of our privacy practices, your rights with regards to your personal data and information about how you can exercise your rights with us. However, in general:
-
- We collect and process your personal data through our Websites, which we use to provide you with access to our Websites, advertise our Services, perform analytics and to improve and secure our Websites.
- We collect and process your personal data when you engage with our Services as an individual client, which we use to provide those Services to you, process payments, performing analytics and improvements as well as to market our Services to you.
- We collect and process your personal data when you engage with our Services in a business capacity, which we use to provide those Services to your employer or related business as well as to market our Services.
- We collect and process your personal data when we act as a legal advisor to our third-party clients. In this instance, why and how your personal data is collected is determine by our client, not Dykema, so this Policy does not describe those practices in detail.
- We don’t sell your personal data for money, but we will disclose your online browsing data to our online analytics, advertising and marketing partners in exchange for services and analytics.
- We use and disclose your online browsing data for targeted advertising purposes.
- You may have rights with regards to your data, such as to access, delete, correct, or to receive your data in a portable format. You also may have the right to opt-out of any sale or use of your data for targeted advertising (if any).
- You can contact our privacy office at privacyinquiry@dykema.com or toll-free number at (833) 788-0271.
Table of Contents. Please read this Policy carefully. Our Policy includes:
2. What Information We Collect And Disclose And For What Purposes
Current or Prospective Clients, Business Partners and Dykema Alumni
When We Perform Our Legal Services
Generalized Data Use And Disclosures
3. Personal Information Relating To Children
4. Marketing And Promotional Communications
6. Security
8. Data Rights For California Consumers
10. How We Process Data Rights Requests
11. International Data Transfers
12. Changes To This Privacy Policy
13. Contact Us
This Policy is supplemented by our:
Biometric Information Retention and Destruction Policy
California Job Applicant Privacy Notice
California Employee and Contractor Privacy Notice (available to Dykema California employees and contractors through the Dykema intranet)
1. GENERAL DISCLOSURES
Our data centers and Website are hosted in the United States. If you are visiting this Website from outside of the United States, please note that by providing us your information it is being stored or processed in the United States. The United States may not have privacy laws that are as strong or comprehensive as the privacy laws in your own country. If you are outside the United States and do not wish to allow the collection and storage of your personal information within the United States, you should not use this Website and you should opt-out of the collection of cookies by following the guidelines in our section titled How To Opt-Out Of Tracking And Restrict Tracking. For more information about how we utilize online tracking technologies, review our Website Technology Disclosure.
In some cases, we handle your personal data on behalf of another organization. When we do this, we are acting as a “data processor,” and the other organization is the “data controller.” This Policy does not cover our data practices when we act as a “data processor” because we aren’t in control of how your data is used or the entity responsible for managing your rights. In such cases, if required by law, we will identify that organization upon your request so you can review its privacy policy and contact it directly to exercise your data rights.
This Policy applies only to Dykema’s Services, and not to other companies’ or organizations’ websites, mobile applications and services to which we link. We are not responsible for the privacy practices of other businesses or the content of other websites, including any websites that may indicate a special relationship or partnership with us (such as co-branded pages or “in cooperation with” relationships). To ensure protection of your privacy, always review the privacy policies of the companies with whom you engage.
2. WHAT INFORMATION WE COLLECT AND DISCLOSE AND FOR WHAT PURPOSES
In the course of performing our Services, we collect a variety of different kinds of personal data from a variety of different individuals. What information we collect and the purposes for which it is collected will depend on the context of our activities or the Service that is being performed. Therefore, just because this Policy lists a particular data collection practice does not mean that we have necessarily collected that data from you. Please review the applicable disclosures below to learn about how we may have collected personal information from you, which may depend on how you have interacted with us.
Website Visitors
If you visit our Website:
-
- We may collect online identifier, geolocation, internet, electronic network activity and device information relating to you.
- We may use this information to operate our Website and provision it to you, personalize your use of our Website, advertise and market our Services and to measure, track and analyze trends and usage in connection with your use or the performance of our Website.
- We generally collect this information from you directly, although we may collect information from referring websites or from our information technology, security and Website hosting providers.
- We may disclose this information to our service providers and our marketing and advertising partners.
- We do not sell this information for money but we will disclose this information to our marketing and analytics vendors in exchange for online marketing services.
- We may share this information with our marketing and advertising vendors for the purposes of targeted advertising or cross-contextual behavioral advertising.
- We keep this information for as long as reasonably necessary to operate, secure, analyze, and improve our Website and Services, typically ranging from a few months to up to two years depending on the type of data, our business needs, and applicable legal requirements.
See below for more detail about our data practices relating to website visitors.
| Categories Collected
The personal information we collect may include:
|
Sources of Collection
We may collect your personal information from:
|
Business Purpose
The purposes of our collection, use and disclosure include:
|
Categories of Third Parties to Which Personal Information is Disclosed
We may disclose your personal information to:
|
|---|---|---|---|
| Identifier Information (includes your internet protocol (IP) address and online identifiers) |
|
|
|
| Geolocation Information (inferred state-level geolocation) |
|
|
|
| Internet or Other Electronic Network Activity Information (includes your time zone setting, auth0 logs, pages visited, pages viewed, events and page loads, browser plug-in types and versions) |
|
|
|
| Device Information (includes your operating system and platform and other technology on the devices you use to access the Websites) |
|
|
|
Further, we may collect personal information from you in the form of cookies. For information regarding how we collect, process and disclose personal information in the context of cookies, view our Website Technology Disclosure.
Current or Prospective Clients, Business Partners and Dykema Alumni
If you are an employee of one of our clients, vendors or other entity and who is involved in our relationship with your employer, if you engage with us as a proprietor of your own business or in your individual capacity, or if you are a former Dykema employee, member or contractor, or a member of our alumni network:
-
- We may collect your business identifier information, business account log-in and password information and payment card or bank details, which are considered “sensitive” under certain privacy laws.
- We may use this information to administer and facilitate our relationship with you or your employer, send you communications (including marketing communications) about our Services, events and webinars, process payments, and to secure our networks, systems and databases against external threats.
- We generally collect this information from you directly, although we may collect business identifier information from referrals or publicly available databases.
- We may disclose this information to our service providers, operational vendors, business partners and marketing partners.
- We do not sell this information.
- We do not disclose this information for targeted advertising or cross-context behavioral advertising.
- We keep this information for as long as we maintain a relationship with you and then for a period of time thereafter until such information is deleted in accordance with our data destruction practices.
See below for more detail about our data practices relating to current or prospective business partners.
| Categories Collected
The personal information we collect may include:
|
Sources of Collection
We may collect your personal information from:
|
Business Purpose
The purposes of our collection, use and disclosure include:
|
Categories of Third Parties to Which Personal Information is Disclosed
We may disclose your personal information to:
|
|---|---|---|---|
| Business Identifier Information (includes your name, e-mail, phone number, fax number, physical address and job position information) |
|
|
|
| Financial Information, if you engage Dykema in your personal capacity or as a sole proprietor of your business (includes your bank account information, payment card information and tax information) |
|
|
|
| Sensitive Log-in and Password Information (if you create an account with us) |
|
|
|
When We Perform Our Legal Services
Dykema provides legal Services to our clients. This means we will collect, process and disclose personal data about you, not for our own benefit or goals, but in the course of our legal representation of our clients. Because we handle legal disputes and projects of every nature, it is possible that we will collect, process and disclose many different types of personal information about you, including data that is considered “sensitive” under law. In this context, we are generally acting as a data processor, and how and why your data is used is determined by the respective client. Further, because this information is being handled in the context of complying with legal obligations or exercising and defending legal claims, the rules and obligations relating to privacy apply differently compared to personal data being handled in other contexts. However:
-
- We will only use this information for the purposes of providing our legal Services and never for our own purpose or goals (unless we are investigating, asserting or defending legal claims or governmental requests to which Dykema itself is a party);
- We collect this information from our clients, directly from you or indirectly through other litigants, third-party discovery respondents or through our own research and investigative efforts;
- We may disclose this information to our legal service providers (like our document hosting providers, ediscovery vendors, delivery vendors or legal technology providers) and to third parties related to legal proceedings or disputes with which we are involved (like litigants, regulators, governmental bodies, courts, judges and experts); and
- We do not sell this information.
- We do not disclose this information for targeted advertising or cross-context behavioral advertising.
-
- We retain this data for as long as necessary to fulfill the purposes for which it was collected, comply with applicable legal, regulatory, ethical, risk management, and recordkeeping obligations, and enforce our legal rights. In most cases, client matter files and related records are retained for approximately seven (7) years following the conclusion of the relevant engagement; however, retention periods may be longer or shorter depending on client instructions, engagement-specific requirements, applicable laws and professional conduct rules, litigation hold obligations, contractual commitments, and regulatory requirements.
Generalized Data Use And Disclosures
All personal data that we collect, regardless of context of collection, may be used for the following purposes:
-
- For corporate transactions. We may use and disclose all or part of your personal data with other entities in connection with the sale, assignment, merger or other transfer of all or a portion of our organization or assets to such entities (including due to a sale in connection with a bankruptcy).
- For legal purposes. We may use and disclose all or part of your personal data to courts, litigants, regulators, arbitrators, administrative bodies or law enforcement when we have reason to believe that disclosing this information is necessary to resolve actual or suspected claims. We may also disclose your personal data in order to identify, contact or bring legal action against someone who may be violating any agreement with us, or may be causing injury to or interference with (either intentionally or unintentionally) our rights or property, other users of the Services, or anyone else that could be harmed by such activities. We may disclose information in response to a subpoena, search warrant, in connection with judicial proceedings, or pursuant to court orders, legal process or other law enforcement measures.
- Deidentification. We may process your personal data into aggregated, anonymized or de-identified form for any purpose. Aggregated, anonymized or de-identified information is information that can no longer reasonably identify a specific individual and is no longer “personal data.” We will only maintain and use this type of information in deidentified form and we will not attempt to reidentify this information, except for the purposes of validating our deidentification process.
3. PERSONAL INFORMATION RELATING TO CHILDREN
The Children’s Online Privacy and Protection Act (COPPA) regulates online collection of information from persons under the age of 13. It is our policy to refrain from knowingly collecting or maintaining personal information relating to any person under the age of 18 through our Website. If you are under the age of 18, please do not supply any personal information through the Website. If you are under the age of 18 and have already provided personal information through the Website, please have your parent or guardian contact us immediately using the information provided under Contact Us so that we can remove such information from our files. Please delete all Dykema related cookies and restrict further collection of cookies using the methods outlined in the section How To Opt-Out of Tracking And Restrict Cookies in our Website Technology Disclosure.
4. MARKETING AND PROMOTIONAL COMMUNICATIONS
You may opt-out of receiving marketing and promotional messages from us, if those messages are powered by us, by following the instructions in those messages. If you decide to opt-out, you will still receive non-promotional communications that are necessary in the performance of our Services.
5. LINKS TO OTHER SITES
This Website has links to other websites. Once you link to another site, you are subject to the privacy policy of the new site and its operator. We encourage you to carefully review the privacy policy of each entity to which you provide information.
6. SECURITY
We take reasonable measures, including administrative, technical and physical safeguards, to protect your information from loss, theft, misuse, and unauthorized access, disclosure, alteration and destruction. We hold information about you at our own premises and with the assistance of service providers. Further public disclosure of our security measures in this section could aid those who might attempt to circumvent those security measures. If you have additional questions regarding security, please contact us directly using the information provided under Contact Us.
7. YOUR DATA RIGHTS
There are a number of U.S. states that provide specific consumer rights to residents of those jurisdictions regarding personal information. This section of this Policy describes the rights available to those individuals who are entitled to them. Please note that if you a resident of California, you have access to special data rights and disclosures that are described in this Policy under a separate section titled Data Rights For California Consumers.
What Data Rights Do You Have?
If you are a consumer living in Alabama (as of May 1, 2027), Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Louisiana (as of January 1, 2027), Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oklahoma (as of January 1, 2027), Nevada (only for sensitive health data and opt-out of sale on online data), Oregon, Rhode Island, Tennessee, Texas, Utah, Vermont (as of January 1, 2028), Virginia and Washington (only for sensitive health data), you may have the following rights with regards to your personal data. Not all rights are available in all states. These rights are explained in further detail below:
-
- Right to Confirmation and Access. You have the right to confirm whether or not Dykema is processing your personal information and to access such personal information. The general categories of personal information that we collect, process and disclose are listed in the section: What Information We Collect And Disclose And For What Purposes. If you wish to access the specific pieces of personal information that we process about you, please submit a request as directed in the section titled How To Submit A Data Rights Request.
- Right to Correct. You have the right to request that Dykema correct inaccurate personal information that we maintain about you, taking into account the nature of the personal information and the purposes of the processing of the personal information.
- Right to Delete. You have the right to request that Dykema delete the personal information that Dykema maintains about you.
- Right to Portability. You have the right to request to receive your personal information in a portable and readily usable format, to the extent technically feasible.
- Right to Opt-Out of Sale/Targeted Advertising. You may have the right to request to opt out of a “sale” of your personal information or processing of your personal information for purposes of targeted advertising. “Targeted advertising” generally means displaying advertisements where the advertisement is selected based on personal information obtained from your activities over time and across websites or online applications to predict your preferences or interests.
To opt-out, the Website recognizes the Global Privacy Control (GPC) browser setting that allows individuals to automatically signal their opt-out of the sale of their online browsing data or sharing of their online browsing data for the purposes of targeted advertising. More information regarding GPC is available here.
Additionally, you can select “Reject Non-Strictly Necessary Cookies” on the consent banner of our Website or manually adjust your preferences through the “Cookies Settings” button. If you are not presented with a consent banner, please delete your cookies and re-visit the Website.
Additional information on how to delete cookies can be found in the sub-Section titled How To Opt-Out Of Tracking And Restrict Cookies. Even if you opt-out of targeted advertising, you may still see Dykema ads because we may advertise through other methods that are not based upon your online behavior.
-
- Right to Opt-Out of Profiling. You have the right to request to opt out of any automated profiling of you that produce legal or similarly significant effects concerning you. Applicable state laws allow you to opt out of the application of automated profiling when it relates to substantive decision making, such as denial of financial or lending services, housing, insurance, education enrollment or opportunity, criminal justice, employment opportunities, health-care services, or access to essential goods or services. However, we do not profile individuals in a manner that produces legal or similarly significant effects on those individuals. Therefore, we do not offer a way to opt-out of profiling and neither do we look for or process any online browser preference or opt-out signals that purport to opt-out of profiling.
- Right to Question the Results of Profiling. Minnesota residents may have the right to question the result of the profiling, to be informed of the reason that the profiling resulted in the decision, and, if feasible, to be informed of what actions the consumer might have taken to secure a different decision and the actions that the consumer might take to secure a different decision in the future. You may also have the right to review your personal data used in the profiling and, if the decision is determined to have been based upon inaccurate personal data, taking into account the nature of the personal data and the purposes of the processing of the personal data, you may have the right to have the data corrected and the profiling decision reevaluated based upon the corrected data.
- Right to Information About Third Parties. Oregon, Delaware, Maryland and Minnesota residents may have the right to request, at our option, a list of specific third parties, other than natural persons, to which Dykema has disclosed either your personal information or any personal information in general.
8. DATA RIGHTS FOR CALIFORNIA CONSUMERS
The California Consumer Privacy Act (“CCPA”) provides the residents of California with the ability to request the data rights as described in this section. For more information, or if you have questions, you can contact us using the information provided under Contact Us.
-
- Right to Know. California residents have the right to know what personal information Dykema has collected about them, including the categories of personal information, the categories of sources from which the personal information is collected in the past 12 months, the business or commercial purpose for collecting, selling, or sharing personal information, the categories of third parties to whom Dykema discloses personal information, and the specific pieces of personal information Dykema has collected about them.
The categories of personal information, the categories of sources from which the personal information is collected, the business or commercial purpose for which we collect personal information and the categories of third parties to whom we disclose personal information are found in the section titled What Information We Collect And Disclose And For What Purposes.
California residents have a right to know if we are “selling” or “sharing” (which is a term used under California law to address the sharing of information for targeted advertising purposes) their personal information, what categories of personal information are “sold” or “shared,” and to whom. The disclosure of your online, web-browsing information when you visit our Website, to our online marketing and analytics providers may constitute a “sale” and “sharing” under California law. However, we do not “sell” or “share” any other types of data and we do not knowingly “sell” or “share” the information of individuals under the age of 16.
-
- Right to Delete. California residents have the right to request the deletion of their personal information maintained by Dykema.
- Right to Correct. California residents have the right to request that Dykema correct inaccurate personal information that Dykema maintains about them. However, we reserve the right to delete your inaccurate personal information instead of correcting it, if permitted by the CCPA.
- Right to Non-Discrimination. California residents have the right to not be discriminated against due to the exercise of their CCPA privacy rights. However, note that the exercise of certain privacy rights may make it so that we are no longer able to provide you with certain services or communications. For example, if we delete all of your personal information, we cannot send you e-mails or other communications.
- Right to Opt-Out of “Sale” and “Sharing”. The disclosure of your online, web-browsing information when you visit our Website, to our online marketing and analytics providers may constitute a “sale” and “sharing” under California law.
To opt-out, the Website recognizes the Global Privacy Control (GPC) browser setting that allows individuals to automatically signal their opt-out of the sale of their personal information or sharing of their personal information for the purposes of targeted advertising. More information regarding GPC is available here.
Additionally, you can select “Reject Non-Strictly Necessary Cookies” on the cookie banner of our Website or manually adjust your cookie preferences through the “Cookies Settings” button. If you are not presented with a cookie banner, please delete your cookies and re-visit the Website. Additional information on how to delete cookies can be found in the sub-Section titled How To Opt-Out Of Tracking And Restrict Cookies. Even if you opt-out of targeted advertising, you may still see Dykema ads because we may advertise through other methods that are not based upon your online behavior.
-
- Right to Limit Use and Disclosure of Sensitive Personal Information. California residents have the right to direct a business to limit its use and disclosure of their “sensitive” personal information. California residents can request that a business limit its use or disclosure of their “sensitive” personal information to that use or disclosure which is necessary to perform the services or provide the goods reasonably expected by an average consumer, or to those uses or disclosures otherwise authorized by California law. However, we do not use or disclose your “sensitive” personal information for any purpose other than for the specific purposes described under the CCPA regulation § 7027(m) and always in a manner reasonably necessary and proportionate for these permitted purposes.
- Right to Make Requests Through an Authorized Agent. California residents can designate an authorized agent to make a request under the CCPA on their behalf. Only you as a California resident, or a person you have designated in writing as your authorized agent, may make a consumer request related to your personal information.
If you wish to have an authorized agent make a verifiable consumer request on your behalf, they will need to provide us with sufficient written proof that you have designated them as your authorized agent. We will still require you to provide sufficient information to allow us to reasonably verify that you are the person about whom we have collected personal information. We can deny any request made by a purported authorized agent who does not submit proof that they have been authorized by the California resident to act on the California resident’s behalf.
9. HOW TO SUBMIT A REQUEST
You can submit your request to exercise your data rights through the below:
-
- Filling-out the Privacy Request Form (available on Dykema website);
- E-mailing us at privacyinquiry@dykema.com; or
- Calling us toll-free number at (833) 788-0271.
- Opt-out of any sale or disclosure your online browsing data through the GPC or interaction with our Website’s consent banner.
10. HOW WE PROCESS DATA RIGHTS REQUESTS
Once we receive your request to exercise a right, we will confirm receipt and begin to evaluate, and if appropriate, process the request. Please note that:
-
- We may require that you provide additional information to confirm your identity, including providing us with at least two or more pieces of personal information to match against personal information that we currently maintain about you. We reserve the right to reject your request if we are unable to verify your identity to a sufficiently high level of certainty. The information you provide to verify your identity will only be used for verification purposes, and a record of your request, including certain information contained within it, will be maintained by Dykema for our files.
- To authenticate any request to correct personal information, you may be required to provide authentication information.
- Certain laws or other legal requirements might prevent some personal information from being disclosed or deleted.
If you fail or refuse to provide the necessary information, we may not be able to process your request.
If we reject a request for any reason, we will inform you of the basis of the rejection. Not all individuals about whom we possess information will have access to these rights and we may not be able to provide these rights to everyone due to legal and jurisdictional limitations. We may not be able to comply with your request for a number of reasons, including:
-
- you do not live in a state that grants you the specific right that you have requested;
- the information that you’ve requested is not subject to the regulation that grants you the right to make a request in relation to your personal information;
- we are prevented or exempted by law, regulation or rule from complying with your request;
- we do not maintain your personal information in a manner that is connected to your identity;
- we are not able to comply with your request without incurring disproportionate burden or expense; or
- if complying with your request conflicts with the integrity of our Services, the ability to administer our Website, to administer our business and related relationships or to establish, defend or administer legal claims.
If any of the above reasons apply, we will let you know in our response to your request.
Submitting A Request Through An Authorized Agent
You may designate an authorized agent to make a request on your behalf. An authorized agent should make a request through the same mechanisms that are available to individuals as described in this Policy. The request should clearly identify that the request is being made by an authorized agent and must include evidence of authorization. If we receive a request from an individual or an entity purporting to making the request on behalf of another individual, we can only comply with the request if we are able to sufficiently authenticate both the identity of the individual as well as the authorized agent’s authority to act on that individual’s behalf.
California has special rules regarding submitting requests through agents, so please review the appropriate disclosure in the section titled Data Rights For California Consumers.
Appeals And Complaints
If you disagree with our decision to reject your request or with any portion of our response, you have the right to appeal. If you wish to appeal, please clearly and plainly describe your basis of disagreement with our decision by responding through the same means by which we communicated our refusal or by submitting your appeal through the information provided under Contact Us. We will review your appeal and either change our decision or reject your appeal, and in either case, we will provide a written explanation of the reason for the decision. This decision will be final. However, if you still disagree with our decision, you have the right to submit a complaint to your attorney general of your state of residence.
11. INTERNATIONAL DATA TRANSFERS
Where we receive personal data from organizations located in the European Economic Area, the United Kingdom, or Switzerland, we process and protect such information in accordance with applicable contractual commitments. Transfers of personal data from the EEA to the United States are safeguarded through the European Commission's Standard Contractual Clauses or another lawful transfer mechanism. A copy of the European Commission's Standard Contractual Clauses will be made available to you upon request.
12. CHANGES TO THIS PRIVACY POLICY
We may amend this Policy at any time by posting revisions on our Website. If we make any material changes in the way we collect or process your personal information, we will notify you by prominently describing the updates at the beginning of the Policy.
13. CONTACT US
To submit questions or to inquire about or submit a request relating to data rights, you can contact us by:
-
- Filling-out the Privacy Request Form (available on Dykema’s website);
- E-mailing us at privacyinquiry@dykema.com; or
- Calling us toll-free number at (833) 788-0271.
WEBSITE TECHNOLOGY DISCLOSURE
LAST MODIFIED: September 1, 2026
Like many Website operators, Dykema and its partners use server logs and automated data collection tools, such as browser cookies, pixel tags, scripts and web beacons. These tools are used for analytics purposes to enable us to understand how users interact with the Website and for advertising our Services and organization on the Internet.
What is a cookie?
A cookie is a small text file that is placed on your hard drive by a web page server. Cookies contain information that can later be read by a web server in the domain that issued the cookie to you. There are several types of cookies:
-
- Session cookies provide information about how a website is used during a single browser session while a user is visiting a website and usually expire after the browser is closed.
- Persistent cookies remain on your device between different browser sessions for a set amount of time in order to enable the website to remember user preferences, settings or actions across other sites. A persistent cookie will remain on a user’s device for a set period of time specified in the cookie.
- First-party cookies are cookies set by the operator of the website you are visiting.
- Third-party cookies are cookies set by third parties that are different from the operator website you are visiting.
Our use of technologies.
We, our marketing partners, affiliates and analytics or service providers use cookies and other similar technologies. We group these technologies into the following categories based upon their function (note that all types of cookies, as described above, will be found in each category):
| Category | Description |
|---|---|
| Strictly Necessary | These technologies are necessary for the website to function and cannot be switched off in our systems. They are usually only set in response to actions made by you which amount to a request for services, such as setting your privacy preferences, logging in or filling in forms. You can set your browser to block or alert you about these technologies, but some parts of the Site will not then work. |
| Performance | These technologies allow us to count visits and traffic sources so we can measure and improve the performance of our Site. They help us to know which pages are the most and least popular and see how visitors move around the site. |
| Functional | These technologies enable the website to provide enhanced functionality and personalisation. They may be set by us or by third party providers whose services we have added to our pages. If you do not allow these cookies then some or all of these services may not function properly. |
| Targeting | These technologies may be used through our Site by our advertising partners. They may be used by those companies to build a profile of your interests and show you relevant adverts on other Sites. They may be based on uniquely identifying your browser and internet device. If you do not allow these cookies, you will experience less targeted advertising. |
Third-party cookies
The Website allows third-parties to place cookies on your Internet-connected device. However, you can restrict the third-party collection of cookies through the instructions provided in the section How To Opt-Out Of Tracking And Restrict Cookies below.
Analytics
We may use service providers to provide Site metrics and other analytics services. These service providers may use cookies; web beacons (also called clear GIFs or pixels), which are small blocks of code that allow us to measure the actions of visitors using the Website; and other technologies to collect information, such as your IP address, identifiers associated with your device, other applications on your device, the browsers you use to access our Website, webpages viewed, time spent on webpages, links clicked and conversion information (e.g., transactions entered into). This information may be used by Dykema and its service providers on behalf of Dykema to analyze and track usage of our Websites to determine the popularity of certain content.
We use Google Analytics to analyze how individuals use the Website. We will package up information about how individuals interact with our Website and send it to Google Analytics to be processed into reports. This information includes basic pageviews and visit data such as device type, operating system, and browser type. When Google Analytics processes data, it aggregates and organizes the data based on particular criteria like whether a user’s device is mobile or desktop, or which browser they’re using.
We use HubSpot, a third-party analytics platform, to help us understand how visitors interact with the Website. This involves the use of tracking technologies, including cookies and web beacons, to collect information about your browsing behavior. When you visit our Site, HubSpot automatically collects certain information, including usage data (pages visited, duration of stay, and links clicked), technical data (your IP address, browser type, and approximate geographic location and source data) and source data (how you reached our Site. We use this data to improve our Site’s performance and to provide a more personalized user experience. If you provide us with personal information (such as by submitting a form), we may associate your previous browsing history with your contact record to better understand your interests and provide relevant communications.
Advertising
We use remarketing and targeted advertising services through our marketing partners to advertise online and analyze the effectiveness of our marketing campaigns. These vendors may show our ads on websites across the internet or use your information to show advertising for third parties. When you visit our site, cookies and related technologies pass information about you to third parties, including online identifiers (IP addresses, cookie IDs, mobile advertising IDs and other unique identifiers), your browsing and interaction information with our site and information about your computer, device and web browser for advertising purposes.
We utilize Google advertising services on our Websites. Google uses cookies and other technologies for advertising purposes, including to show personalized ads. When you visit our Website, Google’s cookies and related technologies pass information about you to Google. Online identifiers (IP addresses, cookie IDs, mobile advertising IDs and other unique identifiers), your browsing and interaction information with our Website and information about your computer, device and web browser are all provided to Google and used for advertising purposes. For more information on how Google manages user data, please consult Google’s Privacy Policy. Google offers a direct opt-out feature here: https://safety.google/privacy/privacy-controls/ .
Social Media Plug-ins
These plug-ins (i.e., from LinkedIn, YouTube and Instagram) allow us to integrate social media functions into Dykema’s Website and may also be used for advertising purposes by those social media companies. If you visit our Website while logged into your social media accounts, information about your visit to our Website, your social media identifier and information about your browser may be provided to those third-party social media companies. You should review the privacy policy of any social media entity with whom you have an account to learn about how they may use your data.
Do Not Track (“DNT”)
DNT is an optional browser setting that allows you to express your preferences regarding tracking across websites. Most modern web browsers give you the option to send a Do Not Track signal to the websites you visit, indicating that you do not wish to be tracked. However, there is no accepted standard. Instead, in addition to publicly available third-party tools, we offer you the choices described in this Policy to manage the collection and use of information about you when you visit our Website.
How to Opt-Out Of Tracking And Restrict Tracking
You can see what cookies or technologies we place and/or collect and for what purposes by clicking “Cookie Settings” on the consent banner when you first visit the Website. If you are not presented with a banner, please delete your cookies and re-visit the Site. You can choose to restrict all non-necessary technologies by clicking “Reject All Non-Essential Cookies” on the banner when you first visit the Website or choose which specific non-essential technologies to accept or reject by clicking “Settings.”
The Website recognizes the Global Privacy Control (GPC) browser setting that allows individuals to automatically signal their opt-out of the sale of their online browsing data or sharing of their online browsing data for the purposes of targeted advertising. More information regarding GPC is available here.
You can also opt-out of the tracking of your online behavior by:
-
- visiting the Network Advertising Initiative (NAI) website opt-out page: http://www.networkadvertising.org/choices;
- visiting the Digital Advertising Alliance (DAA) opt-out page: http://www.aboutads.info/;
- the European Interactive Digital Advertising Alliance (EDAA) opt-out page here: http://youronlinechoices.eu/; and
- downloading and installing the Google browser plug-in from the following link: http://tools.google.com/dlpage/gaoptout.
Finally, you can control and delete cookies through your browser settings through the following:
Biometric Information Retention and Destruction Policy
LAST MODIFIED: September 1, 2026
This Policy applies to biometric identifiers and biometric information collected, processed, or maintained on behalf of Dykema in connection with the creation of employee and contractor headshots.
Biometric Information Used
Dykema may engage a third-party service provider to create professional headshots of employees, members or contractors. In connection with providing this service, the third-party provider may utilize software that analyzes photographs and generates a facial geometry scan or similar biometric template solely for the purpose of producing a headshot image. The biometric identifier or biometric information is used exclusively for this limited purpose and is not used to identify, verify, authenticate, track, or monitor individuals.
Retention Schedule
Dykema and its service providers shall retain biometric identifiers and biometric information only for the period reasonably necessary to accomplish the purpose for which the information was collected, but in no cases for longer than thirty (30) days following their creation unless required by law or legal obligation.
Destruction of Biometric Information
All biometric identifiers and biometric information collected, generated, or processed on behalf of Dykema shall be permanently deleted and destroyed when the initial purpose for collection has been satisfied and, in any event, no later than thirty (30) days after collection or creation. The destruction process shall be designed to prevent reconstruction or recovery of the biometric data.
Disclosure and Sharing
Dykema does not sell, lease, trade, or otherwise profit from biometric identifiers or biometric information.
Biometric identifiers and biometric information may be disclosed:
-
- to the third-party service provider and approved sub-providers performing the headshot creation services;
- as required by applicable law, regulation, warrant, or subpoena; or
- as otherwise permitted by applicable law.
Security Measures
Dykema does not maintain the biometric information on its own systems. However, any authorized service provider receiving biometric information on Dykema’s behalf is expected to maintain reasonable safeguards designed to protect the information and to comply with contractual obligations regarding retention and deletion.
