Privacy policy

Who we are

ADA Mitigation (“we”, “us”) operates adamitigation.com. The controller responsible for the personal data described here is [legal entity name], 82 Nassau Street, New York, NY 10038, United States. You can reach us at litigation-support@adamitigation.com.

What we collect

Information you send us

When you request a free scan or use the contact form, we receive your name, email address, and — where you provide them — your company, phone number, website address and the content of your message.

Website addresses you ask us to review

To run a scan we retrieve publicly available pages at the address you give us and store the technical results.

Technical data

Our hosting provider records standard server logs (IP address, timestamp, requested page, user agent) for security and to keep the service running. [Confirm your host’s retention period.]

Preferences stored in your browser

If you switch the colour theme, that choice is stored locally in your browser so the site remembers it. It never leaves your device and we cannot read it.

What we do not do

• We do not sell, rent or trade your personal data.
• We do not use advertising or cross-site tracking cookies on this website.
• We do not add you to a marketing list because you asked for a scan.

Why we process it, and on what basis

• To answer your enquiry and deliver a scan or proposal — performance of a contract or steps taken at your request (GDPR Art. 6(1)(b)).
• To follow up once about your enquiry — our legitimate interest in responding to prospective clients (Art. 6(1)(f)), and your consent where you gave it via the form (Art. 6(1)(a)).
• To keep the site secure and available — legitimate interest (Art. 6(1)(f)).
• To meet legal, tax and professional obligations — legal obligation (Art. 6(1)(c)).

How long we keep it

Enquiries that do not become engagements are deleted after [24] months. Records connected to an engagement are kept for as long as professional, tax and limitation rules require. Server logs are kept for [30] days.

Who else sees it

Only processors we need to run the business: our hosting provider, our email provider, and our customer relationship system. [List providers and their locations here.] Each is bound by a data processing agreement. Where a provider processes data outside the EEA or the UK, transfers rely on [adequacy decision / EU Standard Contractual Clauses].

Your rights

If the GDPR or UK GDPR applies to you, you have the right to access your data, to have it corrected or erased, to restrict or object to processing, to data portability, and to withdraw consent at any time without affecting processing already carried out. You may complain to your national supervisory authority.

If you are a California resident, you may request disclosure of the categories and specific pieces of personal information collected, request deletion or correction, and are entitled not to be discriminated against for exercising those rights. We do not sell or share personal information as the CCPA/CPRA defines those terms.

To exercise any of these rights, write to litigation-support@adamitigation.com. We respond within one month.

Security

The site is served over HTTPS. Access to enquiry data is limited to the people who need it. We keep the systems we control patched and use multi-factor authentication on the accounts that hold personal data.

Children

This site is aimed at businesses and is not directed at children. We do not knowingly collect data from anyone under 16.

Changes

If we change this policy we will update the date below and, for material changes, say so on this page. Last updated 29 August 2026.

Accessible formats

Need this policy in large print, plain text or another format? Ask litigation-support@adamitigation.com and we will send it within two business days.