Gallagher LLP Privacy Notice

This Privacy Notice addresses the collection and use of personal information by Gallagher LLP (referred to as “our,” “us,” “we,” or “Gallagher”) in relation to our clients, potential clients, and users of our website (referred to as “you” or “your” in this Privacy Notice). References to Website refer to the Gallagher website.

We may obtain your personal information in a variety of ways, both online and offline. Examples include in the course of carrying out business intake procedures, from or about individuals who are our clients or prospective clients, from or about individuals in the course of providing legal services to our clients, and from or about individuals in the course of operating our business generally, including marketing data.

This Privacy Notice explains the types of personal data we collect, how we use it, who we disclose it to, how we protect it, and your legal rights. Please read the following carefully as it explains our views and practices regarding your personal data and how it is handled. “Personal data” means any information which identifies you, such as your name or phone number. “Personal data” also includes other information like your date of birth, gender, and ethnicity, which, when combined, identifies you. When data is stored in a way that does not identify you personally, it is not considered personal data. Aggregate or deidentified data or various types of publicly available data does not fall into the definition of “personal data”.

Processing of Personal Data

Categories of personal data you provide to us.

  • Contact information, such as your first and last name, salutation, nicknames, billing and mailing addresses, phone number, email address, and company name.
  • Financial information, such as bank accounts and payment information.
  • Interaction information based on our provision of legal services to you, including communications by email or other methods, notes of calls or meetings held or planned, court records, or records related to visits to our website.
  • Professional or employment-related information, such as your job title, employer information, work history, and education history.
  • Demographic information, such as racial or ethnic origin, religious beliefs, health data, or citizenship status.
  • Online identifiers, such as your IP address, MAC address, SSIDs, and other device or persistent identifiers, device characteristics (such as browser information), web server logs, and cookies.
  • Marketing information, such as your preferences for receiving our marketing communications and details about your engagement with them.
  • Audio, electronic, and visual information, such as photographs, video and voice recordings of conversations with you as permitted by law, and security camera recordings of your activity in our office space.

Purpose for Collecting and Processing Personal Data

We primarily use your personal data in order to provide legal services to you. Most commonly we will use your personal data to:

  • Perform a contract we have entered into with you
  • Fulfill a legal obligation
  • Manage, develop, and enhance the website
  • Analyze website engagement and traffic
  • Consider your application for employment
  • Engage in marketing activities

Some of the personal information described in the “Categories of Personal Information” section above also constitutes “sensitive data” under the Maryland Online Data Privacy Act of 2024 (“MODPA”). We use and disclose sensitive personal information in order to provide legal services to you, to fulfill a legal obligation, or for our business and compliance functions.

Disclosure of Personal Data

We may disclose your personal data to the following categories of third parties:

  • Our service providers. We use other companies or contractors (service providers) to assist us with the provision of legal services. While we may use a service provider to assist in relation to any of the purposes for which we may collect personal information, they generally fit within one or more of the following categories of service providers:
    • Infrastructure and technology service providers such as SaaS vendors;
    • Marketing, advertising, research, event, and communications providers; or
    • Providers of administrative services such as confidential waste disposal, IT support service providers, or document processing services.
  • Third parties engaged in the course of the services we provide to clients such as arbitrators, mediators, clerks, witnesses, opposing party and their lawyers, document review platforms and experts such as tax advisors or valuers.
  • External auditors, accountants, and legal and other professional advisors.
  • Government or regulatory authorities as required by law.

Data Retention

We keep the categories of personal data described above for as long as necessary or permitted for the purposes described in this Privacy Notice or otherwise authorized by law. This generally means holding the information for as long as necessary to fulfill the purposes for which it was obtained, to manage our operations or your relationship with us, to protect or defend legal claims, or as we are otherwise required or permitted to keep your personal information by applicable laws or regulations.

Safeguarding Your Personal Data

We take the security and protection of your personal data very seriously. To protect your personal information, we maintain physical, electronic, and procedural safeguards in keeping with industry standards and practices, and we review and adjust these safeguards regularly in response to advances in technology.

Information of Minors

Gallagher does not knowingly collect any personal information from children under the age of 16. If you believe we are collecting information about an individual under 16, please notify us immediately so that we can take appropriate action. If we become aware that a child under the age of 16 has provided us with personal information, we will delete the information from our records.

Website Technologies

We use cookies – a small file placed on the hard drive of your computer when you visit the Website – to display information more effectively and to store your preferences and settings. The cookies we set are called first-party cookies.

There are different types of cookies. They include:

  • Strictly Necessary Cookies. These cookies are necessary for the Website to function and cannot be switched off in our systems. They are usually only set in response to actions you take, such as setting your privacy preferences, logging in or filling in forms on the Website. You can set your browser to block or alert you about these cookies, but some parts of the Website will not then work. These cookies do not store Personal Information.
  • Functional Cookies. Functional cookies enable the Website to provide enhanced functionality and personalization. They may be set by us or by third-parties whose services we have added to the Website pages. If you do not allow these cookies then some or all of these services may not function properly.
  • Performance Cookies. These cookies allow us to count visits and traffic sources so we can measure and improve the performance of the Website. They help us to know which pages are the most and least popular and see how visitors move around the Website. All information these cookies collect is aggregated and is, therefore, anonymous. If you do not allow these cookies, we will not know when you visited the Website, and will not be able to monitor its performance.

You may refuse to accept cookies by activating the appropriate setting on your device’s browser. However, if you select this setting you may be unable to access certain parts of our Website. Unless you have adjusted your browser setting so that it will refuse cookies, our system will issue cookies when you direct your browser to our Website. When you log on to the Website you may see a cookie acceptance tool at the bottom of the site. You can adjust your cookie preferences using that tool.

Additional Information for Maryland Residents

This section supplements the information contained in the other sections of this Privacy Notice and applies solely to individuals who reside in Maryland and for whom we have personal information that is subject to the MODPA. This Privacy Notice, including this additional information, is provided to comply with the MODPA and any terms defined in the MODPA have the same meaning when used in this section.

The MODPA provides specific rights to Maryland residents relating to their personal data. This section does not apply to all personal data we may collect about you. For example, it does not cover information which is already subject to HIPAA regulation and it does not apply to information collected in the course of your employment at Gallagher.

You have the following rights regarding your personal data (subject to certain exemptions):

Right Description
Right to Confirm Processing of Personal Data You have the right to confirm if we are processing your personal data
Right of Access You have the right to access your personal data
Right to Correct Inaccuracies You have the right to correct inaccuracies in your personal data
Right to Obtain Copy of Personal Data If the processing of your personal data is done by automatic means, you have the right to obtain a copy
Right to Delete You have the right to request that we delete your personal data
Right to Obtain List of Categories of Third Parties to Whom Data is Disclosed You have a right to obtain a list of the categories of third parties to which we have disclosed your personal data
Right to Withdraw Consent Where you have given consent to the processing of your data, you have the right to withdraw your consent

We have the right to decline to act on requests that are manifestly unfounded, excessive, technically unfeasible, or repetitive.

If you wish to exercise any of these rights or to contact us with any questions about your personal data, please contact:

Gallagher LLP
Re: Data Privacy
218 N Charles St #400
Baltimore, MD 21201
info@gallagherllp.com

How an Agent can Make a Request on Your Behalf

  1. A parent or legal guardian of a child can exercise any of the rights listed in the chart above on the child’s behalf
  2. A guardian or conservator may exercise any of the rights listed in the chart above on behalf of a consumer

How we Handle Requests we Receive

We may need additional information in order to verify your identity before we are able to carry out your request. We will endeavor to respond to your request within 45 days but may extend our completion time period by an additional 45 days if it is reasonably necessary. Should we need to extend our response time, we will inform you of the reason.

How to Appeal our Decision

If we decline to act regarding your request, we will inform you of the justification no later than 45 days after receiving the request. We will provide information on how to appeal our decision.

Sale of Personal Data/Targeted Advertising
We do not sell personal data and we do not process data for “targeted advertising” as defined under the MODPA.

Right to Withdraw Consent
If you affirmatively request to receive newsletters and/or client alerts, we will add you to the mailing list for these publications. If, at a later date, you do not wish to receive the newsletters or client alerts, you can unsubscribe by clicking the “Unsubscribe” link at the bottom of a newsletter or client alert.

Contact Us

Questions about this Privacy Notice or your personal data can be directed to:

Gallagher LLP
Re: Data Privacy
218 N Charles St #400
Baltimore, MD 21201
info@gallagherllp.com

Date and Changes to This Privacy Notice
This Privacy Notice is the most recent version, and the date it was last updated is located below. We reserve the right to change our Privacy Notice from time to time, and you are advised to visit our website regularly to check for any amendments. If we make a change that we are required by law to inform you of in other ways (such as by email), we will do so.

Last updated: September 12, 2025