Privacy policy

Personal data protection

In accordance with Regulation (EU) 2016/679 (GDPR) and the French Data Protection Act of 6 January 1978 as amended.

Data controller

The controller of the data collected on this site is the firm Kimbrough & Associés (details above).

Data collected and purposes

The firm collects only strictly necessary data. When you use the contact form or write to the firm, the following may be collected:

Identity and contact data: surname, first name, email address, telephone number, company where applicable;
Content of your request: the subject and message you send us;
Technical browsing data (see the “Cookies and trackers” section).

This data is processed solely in order to: respond to your request and contact you; manage the resulting relationship; comply with the firm's legal and professional obligations. No data is used for commercial prospecting or transferred to third parties.

Legal basis

your consent and/or the performance of pre-contractual measures taken at your request, for handling your contact requests (Art. 6.1.a and 6.1.b GDPR);
the firm's legitimate interest in ensuring the proper functioning and security of the site (Art. 6.1.f GDPR);
compliance with the legal obligations to which the firm is subject (Art. 6.1.c GDPR).

Recipients

The data is intended solely for authorised members of the firm. It may be processed, for technical purposes only, by the firm's hosting and email providers, acting as processors within the meaning of the GDPR.

Transfers outside the European Union

The data you send us (emails and the contact form) is hosted by our provider OVH, in France, and accessed by the firm using email software connected to those servers: as such, it is not transferred outside the European Union.

On the Contact page, the site displays an access map provided by Google Maps. When you consent, your IP address may be transmitted to Google LLC (United States). This transfer is framed by the adequacy decision « EU–US Data Privacy Framework » of 10 July 2023, to which Google is certified, and, on a subsidiary basis, by the European Commission's standard contractual clauses. A copy of the safeguards may be obtained on request.

Retention period

Contact requests (prospects): kept for the time needed to handle the request, then archived for a maximum of 5 years from the last contact left without follow-up;
Data relating to a client matter: kept for the duration of the relationship and then in accordance with the lawyer's legal and professional obligations (in particular limitation periods).

Mandatory nature of the data

The data requested in the contact form is necessary to handle your request; failing that, the firm will not be able to follow up.

Your rights

You have the right of access, rectification, erasure, restriction and objection to processing, the right to data portability, the right to withdraw your consent at any time (without affecting the lawfulness of processing already carried out) and the right to give directives concerning the fate of your data after your death.

To exercise these rights, write to contact@kimbroughlaw.com or by post to the registered office (above), providing proof of identity. You may also lodge a complaint with the French data protection authority, the CNIL — www.cnil.fr, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07.

Cookies and trackers

The site does not use any audience-measurement or advertising cookie without your consent. The only third-party service liable to set cookies or establish a connection to an external server is:

The fonts are self-hosted and generate no call to any third-party server.

No non-strictly-necessary cookie or third-party service is set before your consent, which is collected via a banner allowing you to accept, reject (as easily as to accept) or configure it by purpose. You can change or withdraw your choices at any time via the “Manage cookies” module, available on every page, or set your browser to refuse cookies.

Last updated: 21 June 2026.