Privacy Notice

Law Office of Martin Uli, PLLC · Last updated: August 15, 2026

This notice describes how this website collects and handles information. It is written to match what the site actually does. If you have any question about your information, contact us at info@ulilegal.com or (917) 382-4472.

1. Information you give us

The site has one contact form (the case review request form, which appears on the homepage and on practice and location pages, and below the educational tools). We collect information only when you choose to submit it. The form asks for:

• Your name and at least one way to reach you (phone number or email address);
• Optionally: the general type of legal matter and a preferred callback time.

The form has no free-text message box. We do not ask for, and cannot receive, a narrative description of your situation through the website.

2. Educational tools stay on your device

• Child Support Gross-Income Illustration: the inputs you enter (number of children, income figures, and a custody selection) and every result are processed entirely in your browser and are never sent to us or stored by us. If you submit the inquiry form on that page, we receive only your name, contact details, and the fact that the inquiry came from the illustration page.
• Legal Navigator and Legal Pathway: your selections and answers stay in your browser and are not sent to us or stored by us.
• Criminal-defense preparation checklist: the check marks stay on the open page. The website does not save or send them, and they are not added to a separate case-review request.
• DWI and DWAI first-conversation file builder: the check marks stay on the open page. The website does not save, send, or measure them, and they are not added to the separate case-review request.
• Order-of-protection Court Paper Map: the paper-organizer check marks stay on the open page. The website does not save, send, or measure them, and they are not added to the separate case-review request.
• Notice to Appear and immigration-court paper organizer: the paper-type choice and organizer check marks stay on the open page. The website does not save, send, or measure them, and they are not added to the separate case-review request. The tool does not ask for an A-number, names, dates, nationality, allegations, or immigration history.

3. A first-party session value about how you arrived

When you first arrive, your browser stores one short value in session storage (which your browser deletes when the tab session ends). It contains only: the path of the page you landed on, a coarse source category (such as "direct", "organic", or "referral"), a coarse referrer category (such as "search" or "social"), and validated campaign labels if the address contained them. It never contains full referrer addresses, search queries, click identifiers, personal information, or anything you typed.

This session value is sent with your inquiry to the website server only if you later submit the case review form, so we can see, in coarse terms, how inquiries find us. It is not sent to an analytics or advertising provider. Cloudflare processes it as the website hosting and database provider. If you never submit the form, this session value is never sent anywhere.

4. Where your submission goes

• Your submission is stored in a Cloudflare D1 database used by this website.
• Cloudflare Turnstile processes technical signals to help distinguish legitimate submissions from automated abuse. The server verifies the resulting token before accepting an inquiry.
• For rate limiting, the server converts the network address supplied by Cloudflare into a keyed one-way value. The inquiry record does not contain the network address or that rate-limit value.
• When alerting is enabled, Cloudflare sends a minimal alert to the firm's email account. The alert contains only the time and an opaque reference number; it contains none of your details and no attachments.

We do not sell your information. We do not copy it to spreadsheets automatically, and the website has no AI chat, no booking system, and no automated transcript processing.

5. Third-party services this site uses

• Cloudflare: delivers the site, runs the form endpoint, stores form submissions in D1, provides abuse screening through Turnstile, and can deliver the minimal alert described above.
• Google Workspace: receives the minimal alert in the firm's email account when alerting is enabled.

Typefaces are self-hosted: pages do not load fonts from Google or any other third-party font service.

6. Website event and advertising measurement: currently inactive

First-party aggregate website event measurement is currently switched off for everyone. If the firm later activates it, the event body will contain only an allowlisted event name and the canonical page path for coarse events such as a page view, call click, case-review click, form view, form start, form error, or educational-tool interaction. A canonical path can show which broad public page was involved, including a legal-topic page. As the website's network and hosting provider, Cloudflare necessarily processes ordinary connection information when it receives an event request. On the public production site, the event request omits browser credentials and referrer information. Controlled tests on the nonpublic staging site must use its Cloudflare Access authorization credential because every staging request is protected. The application does not read, log, hash, or store a network address or Access credential in the analytics database and does not include a name, contact information, query string, campaign label, tool answer or result, selected legal situation, legal facts, cookie, session identifier, or other visitor identifier in the event body. Browser events are combined in a separate analytics database by UTC date, page, and event type, and a global database control accepts no more than 10,000 browser event increments per UTC date. Accepted inquiry counts shown privately are derived from stored intake records, not the public event endpoint. Browser counts can be suppressed by Save-Data, rate limits, the daily budget, or storage failures. The resulting counts and directional ratios represent events or displayed stored inquiry records, not unique people, consultations, clients, or revenue, and automated traffic can inflate browser events.

Optional Google Analytics and Google Ads measurement is also currently switched off for everyone. While it is off, no Google measurement resource is loaded, no measurement cookie is created, and no consent banner is shown. If the firm decides to activate Google measurement in the future, it will remain off for you until you expressly allow it, and this notice will be updated first.

7. Cookies and local storage

• The website application does not use an account or advertising cookie to accept an inquiry. On the public site, the inactive first-party event system described in Section 6 does not use or send a cookie, session identifier, or device identifier. The nonpublic staging site requires a Cloudflare Access authorization credential for every controlled test request. Cloudflare Turnstile may process browser, device, and network signals as part of its abuse-screening service.
• Your browser stores the session value described in Section 3 (session storage, first-party only), and it retains a saved analytics preference slot that has no effect while measurement is inactive.

8. Security and its limits

We take reasonable website-security measures: submissions travel over HTTPS, they are rate-limited, internal review interfaces are not publicly available, and access to inquiry records is limited to the office. However, website forms are not an end-to-end encrypted channel and no internet transmission or storage system can be guaranteed secure. That is why we ask you not to submit sensitive details through the website.

9. Retention

Inquiry records are retained by the firm; the website does not currently have an automatic deletion schedule, and this notice does not promise a specific retention or deletion period.

10. Your choices and questions

• You can browse the entire site without submitting any personal information.
• You can call us at (917) 382-4472 instead of using the form.
• You can use the educational tools without sending us anything.
• To ask about inquiry information you submitted, contact info@ulilegal.com or (917) 382-4472, or write to Law Office of Martin Uli, PLLC, 43 W 43rd St, Suite 376, New York, NY 10036. Please include the name and contact details you used so we can locate the record.

11. Children

This website is intended for adults seeking legal services and is not directed to children.

12. Changes to this notice

If the way the site handles information changes, we will update this notice and its "last updated" date.