Last Updated: April 8, 2026

Who

This Privacy Policy describes how the Law Office of JD White PLLC (“Firm,” “we,” “us,” or “our”) collects, uses, and protects information through our website at https://jdwhitepllc.com and through third-party legal practice management and payment platforms we use to serve clients. Please read this policy carefully.

1. Who We Are

Our website address is: https://jdwhitepllc.com. The Law Office of JD White PLLC is a solo legal practice licensed in Washington, DC and North Carolina.

2. Information We Collect

Website Comments

When visitors leave comments on the site, we collect the data shown in the comments form, as well as the visitor’s IP address and browser user agent string to assist with spam detection. An anonymized string created from your email address (a “hash”) may be provided to the Gravatar service to determine whether you are using it. The Gravatar service privacy policy is available at: https://automattic.com/privacy/. After approval, your profile picture may be publicly visible in the context of your comment.

Media Uploads

If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.

Contact and Intake Information

When you contact us through our website contact form or intake questionnaire, we may collect your name, email address, phone number, and a description of your legal matter. This information is used solely to respond to your inquiry and to evaluate a potential attorney-client relationship.

3. Cookies

If you leave a comment on our site, you may opt in to saving your name, email address, and website in cookies. These are for your convenience so you do not have to fill in your details again when you leave another comment. These cookies will last for one year.

If you visit our login page, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.

When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for one year. If you select “Remember Me,” your login will persist for two weeks. If you log out of your account, the login cookies will be removed.

If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after one day.

4. Embedded Content from Other Websites

Articles on this site may include embedded content (e.g., videos, images, articles). Embedded content from other websites behaves in the exact same way as if the visitor had visited the other website directly. These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction if you have an account and are logged in to that website.

5. Third-Party Legal Practice Platforms

To provide legal services and manage our practice efficiently, we use the following third-party platforms. Each platform maintains its own privacy practices, which are linked below.

MyCase – Practice Management

We use MyCase to manage client matters, documents, communications, billing, and scheduling. When you interact with the client portal, MyCase may collect your name, contact information, matter details, and payment information. MyCase employs bank-level encryption and is SOC 2 Type II certified.

LawPay – Online Payment Processing

We use LawPay (AffiniPay) to process client payments, including credit and debit card transactions. LawPay is specifically designed for legal professionals and is compliant with the payment processing rules of state bar associations, including those of DC and North Carolina. LawPay uses PCI-DSS Level 1 compliant processing and does not store your full card information on our servers.

Clio (Quincy) – Legal Workflow & Intake

We may use Clio or Clio-integrated tools (including QUO/Quincy) for client intake, document automation, and matter management. Any information submitted through Clio-powered intake forms or portals is subject to Clio’s privacy and security practices. Clio is SOC 2 Type II certified and compliant with applicable data protection regulations.

We do not sell, rent, or share your information with these platforms beyond what is necessary to provide legal services to you.

6. Who We Share Your Data With

We do not sell or rent your personal information to third parties. We may share your information in the following limited circumstances:

With third-party service providers (MyCase, LawPay, Clio) as described in Section 5, solely to deliver legal services.
If you request a password reset, your IP address will be included in the reset email.
When required by law, court order, or in connection with legal proceedings.
With your explicit written consent.

Visitor comments may be checked through an automated spam detection service (Akismet), which is an industry-standard tool used widely across professional and legal websites.

7. How Long We Retain Your Data

If you leave a comment, the comment and its metadata are retained indefinitely so we can recognize and approve any follow-up comments automatically rather than holding them in a moderation queue.

For users who register on our website (if any), we store the personal information provided in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.

Client matter information retained through MyCase or Clio is subject to applicable professional responsibility rules governing records retention, including those of the DC Bar and North Carolina State Bar.

8. Your Rights Over Your Data

If you have an account on this site, or have left comments, you may request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You may also request that we erase any personal data we hold about you. This does not include any data we are obligated to keep for administrative, legal, or professional responsibility purposes.

To exercise these rights, please contact us using the information in Section 10 below.

9. Data Security

We take the security of your personal information seriously. Our third-party platforms (MyCase, LawPay, Clio) employ industry-standard security measures including SSL/TLS encryption, multi-factor authentication, and data center security protocols. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

10. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us:

Law Office of JD White PLLC
Website: https://jdwhitepllc.com
Washington, DC

11. Changes to This Policy

We reserve the right to update this Privacy Policy at any time. When we do, we will revise the “Last Updated” date at the top of this page. We encourage you to review this policy periodically to stay informed about how we are protecting your information.

Privacy Policy

Who