Privacy Policy

Undisputed Legal Inc. · Version 2026-11.2 · Effective October 30, 2026

This Privacy Policy explains what personal information Undisputed Legal Inc. collects, how we use and share it, and the choices and rights you have. It covers visitors to undisputedlegal.com, our clients, and people whose information we handle in the course of serving legal process.

1. Who we are and what this policy covers

Undisputed Legal Inc. (“Undisputed Legal,” “we,” “us”) is a process-service and legal-support company headquartered at One World Trade Center, 85th Floor, New York, NY 10007, with offices in New York, Connecticut, New Jersey, the District of Columbia, Texas, Illinois and California. Except where this policy says otherwise, we are the “business” or “controller” responsible for the personal information described here. Where we process personal information on a client’s documented instructions, we act as a service provider or processor for that client, and the client’s contract with us and applicable law determine our respective responsibilities.

This policy covers three groups of people:

• Visitors to undisputedlegal.com and anyone who contacts us.
• Clients who place orders, use the client portal, or pay through Express Pay.
• Parties to legal process — people whose information we receive from clients, courts or public sources in order to serve, locate or investigate them. Section 3 is about you.

This policy does not cover the websites we link to, which have their own policies. For parties to legal process, the distinction is this: we are responsible under this policy for the records that process-serving law, court rules and our licensing require us to create and keep — attempt logs, affidavits and proofs of service, and the service file — and Section 3 describes that processing. Where we handle a party’s information solely on a client’s documented instructions and for the client’s own purposes (for example, a client-supplied list processed to the client’s specification), we act as that client’s service provider or processor, and the client’s privacy policy governs that processing.

2. Information we collect and where it comes from

We have collected the following categories of personal information in the past 12 months. The categories follow the California Consumer Privacy Act.

Category	Examples	Source
Identifiers	Name, postal address, email address, telephone number, portal account name, IP address	You; your device; clients (for parties to legal process)
Customer records	Billing address, payment card details (handled by our payment processor; we keep the last four digits), order history, documents you upload	You; our payment processor
Commercial information	Services ordered, service level, fees paid, invoices, communications about orders	You; our systems
Internet and device activity	Pages viewed, referring page, browser and device type, approximate location from IP address, interactions with forms and buttons, session recordings	Your device, through cookies and similar technologies (Section 6)
Geolocation	Approximate location derived from IP address; the service address for an order	Your device; you
Professional information	Law firm or agency name, bar or role, title	You
Legal-process information	Case caption, court, index or docket number, the documents to be served, the name and addresses of the party to be served, the result of each attempt	Clients; courts; public records; licensed data providers (Section 3)
Contents of legal documents	Personal information contained in the documents a client uploads for service or filing — which, depending on the case, may include financial, medical, family-law, employment or immigration details, or government identifiers, about the parties and others named in them	Clients; courts (Sections 3 and 7)
Inferences	Interests inferred from browsing and order history, used for advertising measurement	Derived from the activity above

We do not ask for Social Security numbers, driver’s license numbers, financial account numbers or other government identifiers through forms on the Site. Where a service requires an identifier of that kind (for example, certain skip-tracing or financial-institution service), we collect it for that order only, through the client portal or a secure channel we designate. Court documents that a client uploads for service or filing may themselves contain information of that kind about the parties; we handle those documents as Sections 3 and 7 describe.

3. Information about parties to legal process

Most of the personal information we handle is about people who have never visited this website: defendants, respondents, witnesses, tenants, registered agents and others whom a client has asked us to serve with legal documents, locate, or investigate.

Where it comes from. Our clients (law firms, companies, government agencies and individuals) give us the party’s name, last known addresses and the documents to be served. We may supplement that with information from public records, court records, commercial data providers licensed for permissible purposes, and our own observations in the field.

Why we use it. To attempt service of process as the law and the client’s instructions require; to prepare the affidavit or proof of service that the court requires; to locate a party when service cannot be made at the address given; and to keep the records that process-serving law and our licensing require.

Legal requirements and applicable exemptions. We process personal information relating to legal proceedings to perform lawful service of process, comply with applicable court rules and legal obligations, maintain required records, and establish, exercise or defend legal claims. Certain information and processing activities may qualify for exceptions or exemptions under applicable privacy laws (for example, a party being served cannot require us to delete the affidavit of service). We apply those exceptions only when their legal requirements are satisfied and honor all rights that remain applicable.

What we do not do. We do not sell information about parties to legal process, do not use it for advertising, and do not share it with anyone other than the client who ordered the service, the court, our process servers and service providers bound by confidentiality, and as the law requires.

4. How we use information

We use personal information for these business purposes:

• To provide the services you order: receiving documents, attempting service, preparing and delivering affidavits, filing with courts, and communicating with you about your order.
• To create and manage your portal account and process payments.
• To respond to your questions and requests.
• To operate, secure and improve the Site, including analytics about how it is used.
• To advertise our services, including showing you ads on other platforms based on your visit to the Site, and measuring whether our advertising works (Sections 5 and 6).
• To send marketing email you can unsubscribe from (Section 12).
• To comply with law, court rules and our licensing obligations; to keep required records; to detect and prevent fraud; and to establish, exercise or defend legal claims.

We do not use personal information for automated decisions that have legal or similarly significant effects on you.

5. How we share information

We do not sell personal information for money. We do share some personal information in ways that California and other state laws treat as a “sale” or “sharing,” as described here, and you can opt out (Section 6).

Who	What	Why
Service providers	Identifiers, customer records, order information, legal-process information, device activity	Hosting (WP Engine, Cloudflare), payment processing, email delivery, the client portal, review requests, data providers for locating parties, and our process servers and investigators. Our service providers may use the information only to perform services for us, under written terms, professional and licensing obligations, or confidentiality duties that restrict any other use.
Advertising and analytics platforms	Identifiers (such as a hashed email or an advertising cookie ID), device and internet activity, inferences	Google (Analytics and Ads), Meta, Microsoft (Bing Ads and Clarity), TikTok and LinkedIn receive information through cookies and pixels on the Site to measure our advertising and to show you our ads elsewhere. This is “sharing” for cross-context behavioral advertising under California law. Clarity also records how visitors interact with pages (session replay). Section 6 explains how to opt out.
Courts, clients and parties	Legal-process information, affidavits	To file proofs of service, to report results to the client who ordered the service, and as service of process itself requires.
Legal and safety	Any category	To comply with a subpoena, court order or legal obligation; to protect the rights, property or safety of Undisputed Legal, our clients, our staff or others; and to enforce our Terms and Conditions.
Business transfers	Any category	In a merger, acquisition or sale of all or part of our business, to the successor, under this policy.

We do not provide information about parties to legal process to advertising or analytics platforms, and we do not use it for advertising.

6. Cookies, trackers and your choices

What runs on the Site. We use cookies, pixels and similar technologies from these providers: Google Analytics 4 and Google Ads; Meta Pixel; Microsoft Bing Ads and Microsoft Clarity (session replay); TikTok Pixel; and LinkedIn Insight Tag. We also use cookies that are necessary for the Site, the portal and the checkout to work, which cannot be turned off.

Do Not Sell or Share My Personal Information. You may opt out of the sharing described in Section 5 by emailing [email protected] with “Do Not Sell or Share” in the subject line, or by calling (800) 774-6922. We will apply the opt-out to the browser or account you identify. Opting out does not stop ads from appearing elsewhere, and it does not affect your orders.

Your other controls. Your browser lets you block or delete cookies, and the advertising platforms offer their own controls: Google (adssettings.google.com), Meta (your ad preferences), Microsoft, TikTok and LinkedIn (their account settings). Industry opt-out pages are at optout.aboutads.info and optout.networkadvertising.org.

Do Not Track. Browsers’ “Do Not Track” signals have no common standard, and we do not respond to them.

7. Sensitive personal information

We collect sensitive personal information only when a specific service requires it — for example, a government identification number needed to locate a party or to serve a financial institution — and only through the client portal or a secure channel we designate, never through a public form on the Site. The documents a client uploads for service or filing may also contain sensitive personal information about the parties and others named in them. We process sensitive personal information contained in legal documents only as reasonably necessary to perform the requested services, comply with applicable law and court requirements, maintain required records, protect the security and integrity of our operations, and establish, exercise or defend legal claims. We do not use such information for targeted advertising or unrelated marketing purposes, and we do not use it to infer characteristics about you. We keep it no longer than the order and our record-keeping obligations require, and we protect it with the safeguards described in Section 11. California residents may ask us to limit the use of their sensitive personal information to these purposes; because these are the only purposes we use it for, no further limitation is needed, but you may contact us at any time to confirm.

8. Your rights and how to exercise them

Depending on where you live, you may have the right to:

• Know what personal information we have collected about you, where it came from, why we use it, and whom we have shared it with, and to receive a copy.
• Correct inaccurate personal information.
• Delete personal information we hold about you, subject to the exceptions the law allows (including records we must keep for legal process, record-keeping and the defense of claims).
• Opt out of the sale or sharing of your personal information and of targeted advertising (Section 6).
• Limit the use of sensitive personal information (Section 7).
• Port your information to you or another provider in a usable format.
• Not be discriminated against for exercising these rights. We will not deny services, charge a different price or provide a different level of service because you exercised a right.

How to submit a request. Email [email protected] with “Privacy Request” in the subject line, call (800) 774-6922, or write to Undisputed Legal Inc., Attn: Privacy, One World Trade Center, 85th Floor, New York, NY 10007.

Verification. We will verify your identity before acting on a request to know, correct or delete by matching the information you provide with what we hold (for example, your account email and a recent order number), and we may ask for more if needed to protect your information. Opt-out requests are not subject to verification. An authorized agent may submit a request on your behalf with your written permission; we may ask you to confirm it.

Timing and exceptions. We respond within the time applicable law requires: generally 15 business days for opt-out requests and 45 days for other requests, which may be extended once by a further 45 days where the law allows and we tell you why. These rights are subject to the exceptions applicable law provides. In particular, we may retain records to the extent permitted or required by applicable law — including records that process-serving law, court rules, our licensing, tax or accounting law, a legal hold, or the establishment, exercise or defense of legal claims require us to keep, such as service records and affidavits — and a deletion request does not reach those records. Where an exception applies to part of a request, we will fulfil the rest and tell you which records we must keep and why. If we decline a request, we will explain the reason, and you may appeal by replying to our response; we will answer the appeal within the time the applicable law sets and, where the law requires, tell you how to contact your state’s attorney general if you are not satisfied. Exercising these rights is free, unless requests are manifestly unfounded or excessive.

9. State-specific rights

California (CCPA/CPRA). California residents have each right in Section 8. Section 2 is our notice of the categories of personal information collected, their sources and our purposes; Section 5 is our disclosure of the categories sold or shared (identifiers, device and internet activity, and inferences, to advertising and analytics platforms) and disclosed for a business purpose (each category, to service providers); and Section 6 is our “Do Not Sell or Share” mechanism. We do not knowingly sell or share the personal information of consumers under 16. Section 7 is our notice of sensitive personal information. Under California’s “Shine the Light” law (Civil Code § 1798.83), you may request a list of third parties to whom we disclosed personal information for their own direct marketing in the prior year; we do not make such disclosures. We retain each category of personal information for the periods in Section 11. Metrics on the requests we received in the prior year are available on request.

Connecticut (Connecticut Data Privacy Act). To the extent the Act applies to us, Connecticut residents have the rights to access, correct, delete and port their personal data, to opt out of targeted advertising and the sale of personal data, and to appeal a refused request, all as described in Sections 6 and 8.

Texas, Virginia, Colorado, Oregon, Montana, Utah, New Hampshire, New Jersey, Delaware, Iowa, Nebraska, Tennessee, Indiana, Kentucky, Minnesota, Maryland, Rhode Island and other states with comprehensive privacy laws. To the extent a state’s law applies to us, its residents have the rights that law provides — generally to access, correct, delete and port their personal data, to opt out of targeted advertising, the sale of personal data and profiling in furtherance of significant decisions (we do not profile), and to appeal — as described in Sections 6 and 8. The opt-out in Section 6 is available to every visitor regardless of state. Where a state’s law does not apply to us, we consider requests from its residents in good faith, but the rights and deadlines of that law do not bind us.

Nevada. Nevada residents may direct us not to sell their covered information. We do not sell covered information for money; you may submit a request under Section 8 in any case.

New York and Florida. Section 11 describes the safeguards and breach notification that the New York SHIELD Act and the Florida Information Protection Act require.

10. International service and EU/UK data

We serve legal process in more than 120 countries from our New York office. When a client’s matter involves a party in the European Economic Area, the United Kingdom or Switzerland, we process that party’s personal information to carry out service under the Hague Service Convention, letters rogatory or the destination country’s procedure. Our legal bases under the GDPR and UK GDPR are compliance with a legal obligation and our and our client’s legitimate interest in effecting lawful service; we process only what the service requires. Where applicable law requires a lawful mechanism for transferring personal information to the United States, we determine the mechanism appropriate to the circumstances of each transfer — which, depending on those circumstances, may be a derogation for transfers necessary to perform a contract or to establish, exercise or defend legal claims, Standard Contractual Clauses, or another mechanism recognized under applicable law — and we apply the safeguards in Section 11 to the information transferred. Individuals in those jurisdictions have the rights of access, rectification, erasure, restriction, portability and objection described in Section 8, subject to the exemptions that apply to legal process, and the right to complain to their national supervisory authority. Requests may be sent to [email protected]. We do not direct this Site to residents of those jurisdictions.

11. Retention, security and breach notification

Retention. We keep personal information only as long as needed for the purposes in Section 4 and as the law requires, distinguishing records we are required by law to keep, records we keep for operational reasons, and records subject to a legal hold. Order records, affidavits and legal-process information: seven years after the order, to meet process-serving, licensing and litigation-record requirements. Portal accounts: for as long as the account is open and thereafter as our record-keeping obligations require. Payment records: as our payment processor and tax law require; we never store full card numbers. Website analytics and advertising data: for the retention period each platform applies. Marketing email lists: until you unsubscribe. Records needed for a pending or reasonably anticipated claim, investigation, audit or legal hold are kept until that need ends, whatever the period above. When no legal, regulatory, contractual or litigation-related reason to keep information remains, we delete or de-identify it; a deletion request under Section 8 does not shorten a period the law requires.

Security. We maintain reasonable administrative, technical and physical safeguards appropriate to the size of our business and the sensitivity of the information, as the New York SHIELD Act and similar laws require. These include encryption of data in transit and access limited to staff and contractors who need it. No method of transmission or storage is completely secure, and we cannot promise absolute security.

Breach notification. If a security incident affects your personal information, we will notify you and the authorities as required by the law of your state of residence — including the New York SHIELD Act, the Florida Information Protection Act, California Civil Code § 1798.82, and the breach-notification laws of the other states — without unreasonable delay and within the time each law sets.

12. Children, marketing email, third-party links, changes, contact

Children. The Site and the Services are not directed to anyone under 18, and we do not knowingly collect personal information from anyone under 16 through the Site. If you believe a child has provided us personal information through the Site, contact us and we will delete it, except for information that forms part of a legal-process record we are required to keep (for example, where a minor is a party to a proceeding), which we retain only for that purpose and the records the law requires.

Marketing email. We may send marketing email to clients and to people who ask for it, and we invite clients to leave a review after an order through a review-request service. Every marketing message includes an unsubscribe link and our postal address, as the CAN-SPAM Act requires; unsubscribing does not affect messages about your orders.

Third-party links. The Site links to courts, agencies and other websites we do not control. Their privacy policies, not this one, govern what they collect.

Changes to this policy. We will post any revised policy here with a new version number and effective date, and we will give notice of a material change by a notice on the Site or by email to clients before it takes effect. Each version is archived.

Contact. Undisputed Legal Inc., Attn: Privacy, One World Trade Center, 85th Floor, New York, NY 10007 · (800) 774-6922 · [email protected] · Fax (800) 296-0115.

Version 2026-11.2. Effective October 30, 2026. Prior versions: January 1, 2020 (effective) and April 26, 2025 (updated), archived.