Legal

Privacy Policy

We advise other businesses on handling data responsibly. It would be a poor look not to do it ourselves.

Last updated 1 August 2026

The short version. This website sets no cookies. We run no analytics, no advertising pixels, and no tracking of any kind. The only personal information we get from this site is what you choose to send us. We never sell it, and we never share it for marketing.

01Who this applies to

This policy explains how Safe Harbor Compliance Services, a division of Cantatore Law PLLC ("we", "us", "our"), handles personal information collected through www.safeharbor-compliance.com.

It covers visitors to this website. It does not cover information we hold about clients in the course of an engagement — that is governed by our engagement letter and by our professional obligations of confidentiality and attorney–client privilege, which are considerably stricter than this policy.

02Information you give us

The only information we collect directly is what you choose to send us. That may include:

your name;
your email address;
your business name, if you give one;
the subject you select and the message you write;
anything else you volunteer on a call or by email.

A note on how our contact form works. The form on our contact page does not send anything to our website or store anything on our server. When you submit it, the details you typed are placed into a new message in your own email program, addressed to us, for you to review and send yourself. Nothing leaves your device until you press send in your own mail application.

As set out in our Terms & Conditions, please do not send confidential material before a signed engagement letter is in place. Email is not a secure medium, and information sent before an attorney–client relationship exists may not be privileged.

03Information collected automatically

We do not use cookies, web beacons, advertising pixels, session recording, heat-mapping, or any analytics package on this website. We do not build profiles of visitors, and we do not track you across other websites.

As with essentially any website, the web server that delivers these pages may record basic technical information in its logs — such as an IP address, the page requested, the date and time, and the browser's user-agent string. Where such logs exist they are used only to keep the site running securely and to diagnose faults, are not used to identify individual visitors, and are retained only for a short period before being overwritten.

04Third parties

There is exactly one third party involved in serving this website:

Google Fonts. The typefaces used here are served by Google Fonts. When your browser loads them, it requests them from Google's servers, so Google receives your IP address and basic browser information. That is governed by the Google Privacy Policy. We have no access to that data and receive nothing back from Google.

Everything else — the illustrations, stylesheets, and the animation libraries behind the line-art effects — is served from our own server. There are no social-media widgets, embedded videos, chat widgets, booking widgets, or advertising networks on this site.

05How we use your information

We use what you send us in order to:

respond to your enquiry and arrange an introductory call;
run a conflict-of-interest check before we can consider acting for you;
discuss the scope and fee of a possible Compliance Review;
carry out the Review, if we go on to be engaged;
comply with our legal, regulatory, and professional obligations.

We do not use it to send you marketing you did not ask for.

06Sharing

We do not sell, rent, or trade personal information, and we do not share it with advertisers or data brokers. We will disclose information only:

to service providers who help us operate the practice — for example our email provider — and who are bound to protect it;
within Cantatore Law PLLC, where your needs extend beyond compliance and another part of the firm can help;
where you have asked or authorized us to;
where we are required to by law, court order, or the rules of a regulatory or professional body;
where disclosure is necessary to establish, exercise, or defend legal claims.

07How long we keep it

If your enquiry does not lead to an engagement, we keep the correspondence only as long as we reasonably need it — principally so that we can run accurate conflict-of-interest checks in future — and then delete it.

If you engage us, we retain your file and the materials you submit for the Review in accordance with our professional record-keeping obligations in New York and the terms of our engagement letter.

08Security

This website is served over an encrypted HTTPS connection. We take reasonable technical and organizational measures to protect the information we hold. No method of internet transmission or electronic storage is completely secure, however, and we cannot guarantee absolute security — which is why we ask you not to send sensitive material by email before an engagement is in place.

09Your choices and rights

Because we only hold what you send us, the simplest control is the most effective one: you decide what to tell us, and when.

You may contact us at any time to ask what information we hold about you, to ask us to correct it, or to ask us to delete it. We will honour such requests to the extent our professional and legal record-keeping obligations allow.

Depending on where you live, you may have additional statutory rights — for example under the California Consumer Privacy Act, or under the UK and EU General Data Protection Regulation. We will honour any right that applies to you. To exercise any of them, write to us using the details in section 12. We will not discriminate against you for making a request.

For clarity: in the last twelve months we have not sold personal information, and we have not shared personal information for cross-context behavioural advertising.

10Children

This website is intended for business owners and professionals. It is not directed at children, and we do not knowingly collect personal information from anyone under 16. If you believe a child has sent us personal information, please contact us and we will delete it.

11Changes to this policy

We may update this policy from time to time. The version published on this page is the version in force, and the "last updated" date above tells you when it last changed.

12Contact us

For any question about this policy, or to exercise any of your rights:

Safe Harbor Compliance Services
A division of Cantatore Law PLLC
641 Lexington Avenue, 15th Floor
New York, NY 10022
212-634-6369 ext. 6368
francina@cantatorelaw.com