Last Revised: July 6, 2026
Effective Date: July 6, 2026. Morgan & Bales, PLLC (“M&B,” “we,” “us,” or “our”) respects your privacy and is committed to protecting it through this Privacy Policy (the “Policy”). This Policy describes how we collect, use, disclose, and safeguard information when you visit our website (the “Website”), and the choices and rights available to you. This Policy supplements, and should be read together with, our Terms of Use. By using the Website, you agree to the collection and use of information in accordance with this Policy.
This Website is hosted using Webflow, Inc. (“Webflow”), a third-party website hosting and development platform. Webflow processes certain technical information as part of providing hosting services to us, as described further below.
Information You Provide to Us. If you submit an inquiry through our contact form, we collect the information you provide, which may include your name, email address, and the content of your message. We use this information solely to respond to your inquiry and for related administrative purposes.
The Friction Finder. If you choose to use our Friction Finder self-assessment, we collect the information you enter, which includes your first and last name, email address, company (if provided), and your answers to the assessment questions. The answers include general, self-reported information about how your business, assets, trusts, and estate are organized, together with the results the tool computes from them. We use this information to deliver your results, to respond to you, and, with the consent you give when you submit the assessment, to contact you about your results and our services. Do not enter confidential or privileged information into the Friction Finder; as explained in our Terms of Use, using the tool does not create an attorney-client relationship.
Please do not use the contact form to send confidential or privileged information. As explained in our Terms of Use, submitting a message through the Website does not create an attorney-client relationship, and information sent to us before such a relationship is formed may not be treated as confidential.
Information Collected Automatically. When you visit the Website, our hosting provider, Webflow, automatically logs certain technical information, which may include your IP address, browser type and version, device and operating system information, referring and exit pages, the pages you view, and the dates and times of your visits. This information is collected as a standard part of website hosting and server operation.
Cookies and Similar Technologies. The Website may use cookies or similar technologies that are strictly necessary for the Website to function (for example, cookies used by Webflow to operate and secure the site). The Friction Finder uses your browser’s local storage to save your progress and answers on your own device so you can resume where you left off; that information stays on your device and is transmitted to us only if you complete and submit the assessment. You can clear it at any time through your browser settings. We do not currently use additional analytics, advertising, or marketing tracking tools. We reserve the right to implement such tools in the future — for example, analytics services to understand how visitors use the Website, or marketing pixels to measure the effectiveness of our outreach. If we do so, we will update this Policy accordingly, and where required by law, we will provide appropriate notice or obtain your consent (such as through a cookie banner) before non-essential cookies are set.
Embedded Third-Party Content. Some pages embed content served by third parties, such as the map on our contact page, which is provided by Google, and fonts that may be delivered from third-party servers. When your browser loads that content, the provider may receive technical information such as your IP address and may set its own cookies, governed by its own privacy policy (for Google, see Google’s Privacy Policy). If you book a consultation through our scheduling link, the information you provide to the scheduling and payment providers is collected by them under their own policies, as described below.
We use the information described above to:
• Respond to inquiries submitted through the Website
• Provide interactive tools you choose to use, such as the Friction Finder; deliver your results; and follow up with you about them where you have agreed to be contacted
• Operate, maintain, secure, and improve the Website
• Understand and analyze how the Website is used, if and when we implement analytics tools
• Comply with applicable laws, regulations, and legal process, and to protect our rights and the rights of others
• Communicate with you, where appropriate, about our services
You may opt out of marketing communications at any time by using the unsubscribe mechanism included in the message or by contacting us at info@morganbales.com. We honor opt-out requests as required by applicable law, including the CAN-SPAM Act.
If you are located in the European Economic Area or the United Kingdom, we process your personal data on the following legal bases under the General Data Protection Regulation (“GDPR”): (i) our legitimate interests in operating, securing, and improving the Website and responding to inquiries; (ii) your consent, where we rely on consent, such as for optional cookies we may implement in the future; and (iii) compliance with our legal obligations. You may withdraw consent at any time where processing is based on consent, without affecting the lawfulness of processing before withdrawal.
We do not sell your personal information. We may share information as follows:
• Service Providers. With third-party service providers who perform services on our behalf, such as Webflow, which hosts the Website and processes related technical information
• Scheduling and Payment Providers. If you book a consultation, the scheduling service and its payment processor (for example, Calendly and Stripe) collect the booking and payment information you provide to them under their own privacy policies. We receive booking details such as your name, email, and appointment time; we do not receive or store your full payment card number
• Legal Requirements. Where required to do so by law, subpoena, or other legal process, or where we believe disclosure is necessary to protect our rights, your safety, or the safety of others
• Business Transfers. In connection with a merger, acquisition, reorganization, or sale of assets, in which case information may be transferred as part of that transaction
• With Your Consent. With your consent or at your direction
We retain information collected through the contact form for as long as reasonably necessary to respond to your inquiry, maintain business records, and comply with our legal and professional obligations, after which it is deleted or anonymized. Friction Finder submissions are retained on the same basis. Automatically collected technical logs are generally retained by our hosting provider for a limited period consistent with standard hosting and security practices.
California Residents. If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act (collectively, “CCPA”), may give you the right to:
• Know what personal information we have collected about you and how it has been used and disclosed
• Delete personal information we have collected from you, subject to certain exceptions
• Correct inaccurate personal information
• Opt out of the “sale” or “sharing” of personal information (we do not sell or share personal information as those terms are defined under the CCPA)
• Not receive discriminatory treatment for exercising your CCPA rights
To exercise these rights, you or your authorized agent may contact us using the information below. We will need to verify your identity before processing certain requests.
Do Not Track and Opt-Out Preference Signals. We do not currently respond to browser “Do Not Track” signals, for which no uniform standard has been adopted. Because we do not sell or share personal information as defined under the CCPA, we do not process opt-out preference signals such as the Global Privacy Control, though we will honor any signal we are legally required to process.
Texas Residents. The Texas Data Privacy and Security Act provides Texas residents certain rights with respect to personal data held by covered controllers, including rights of access, correction, deletion, and portability, and the right to opt out of targeted advertising, sales of personal data, and certain profiling. We do not sell personal data or process it for targeted advertising. To the extent the Act applies to us, you may exercise these rights, and appeal a refusal, by contacting us using the information below.
EEA/UK Residents. If you are located in the European Economic Area or the United Kingdom, the GDPR may give you the right to:
• Access the personal data we hold about you
• Request rectification of inaccurate or incomplete personal data
• Request erasure of your personal data, subject to certain exceptions
• Restrict or object to our processing of your personal data
• Request portability of personal data you have provided to us
• Lodge a complaint with your local data protection supervisory authority
To exercise these rights, please contact us using the information below. We will respond to verifiable requests as required by applicable law.
Our Website is operated from the United States, and information we collect, including through our hosting provider, may be processed or stored in the United States or other countries that may have data protection laws different from those in your jurisdiction. Where required by applicable law, we will take appropriate steps to provide a lawful basis for such transfers.
The Website is not directed to children under the age of 16, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so that we can delete it.
We rely on our hosting provider’s security measures and take reasonable steps intended to protect information submitted through the Website. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security. Forms on the Website are transmitted over standard encrypted web connections (HTTPS), but as noted in our Terms of Use, they are not a secure or privileged channel and should not be used to transmit sensitive or confidential information.
The Website may contain links to third-party websites. We are not responsible for the privacy practices or content of those websites. We encourage you to review the privacy policy of any third-party site you visit.
We may update this Policy from time to time, including to reflect changes in our data practices, such as the addition of analytics or tracking tools. When we make changes, we will revise the effective date at the top of this Policy. Your continued use of the Website after any changes indicates your acceptance of the updated Policy.
If you have questions about this Policy or wish to exercise your privacy rights, please contact us at info@morganbales.com, or by mail at Morgan & Bales, PLLC, 7710 N FM 620, Building 13C, Suite 100, Austin, Texas 78726, USA, Attn: Brock Bales.