or call us at (847) 220-1560
Privacy Policy
A Commitment to Your Privacy
About Our Firm
Information We Collect
Essential Personal Information
- Full legal name and any previous names, aliases, or maiden names
- Birth information (date, place, country of birth)
- Contact details (residential and mailing address, phone numbers, email addresses)
- Government identification numbers (Social Security Number, A-Number, USCIS receipt numbers, etc.)
- Current immigration status and history
- Passport and travel document information
- Employment records and work history
- Educational credentials and academic records
- Family relationships, marital history, and dependents
Supporting Documentation
- Identification documents (passport, driver’s license, state ID)
- Immigration records (I-94, visas, prior petitions and approvals)
- Educational certificates and transcripts
- Employment verification documents (offers, pay stubs, tax records)
- Financial records (where required for affidavits of support or fee waiver requests)
- Family documents (birth, marriage, divorce, and death certificates)
- Medical records (when relevant to your immigration matter, such as Form I-693)
- Professional credentials, licenses, and certifications
- Criminal history records (where applicable, including dispositions and expungements)
Social Media and Online Presence Information
Effective with USCIS policy updates published in the Federal Register on September 16, 2025 (under Executive Order 14161), certain immigration applications now require disclosure of social media identifiers used over the past five (5) years on designated platforms. As part of representing you, we may collect, review, and submit:
- Social media usernames and identifiers for designated platforms
- Publicly available online posts or profiles relevant to your case
- Other digital identifiers as required by U.S. Citizenship and Immigration Services (USCIS), the U.S. Department of State, or other adjudicating agencies
We do not request or store passwords, private messages, or other non-public account credentials. Clients are strongly advised to review their online presence with us before submission of any application.
Digital and Website Information
When you use our website or online services, we may automatically collect:
- IP address, device identifiers, and browser type
- Operating system and device settings
- Website interaction patterns, pages visited, and referring URLs
- Cookies, pixels, and similar tracking technologies (see Cookies section below)
- Communication preferences and consultation scheduling data
- Information submitted through contact forms, intake forms, or chat tools
How We Use Your Information
Primary Uses
- Preparing immigration applications, petitions, motions, and appeals
- Providing legal consultation and advice
- Managing your immigration case timeline and strategy
- Communicating case updates, status changes, and required follow-ups
- Filing documents with USCIS, the Executive Office for Immigration Review (EOIR), Department of State, Customs and Border Protection (CBP), and other relevant agencies
- Responding to Requests for Evidence (RFEs), Notices of Intent to Deny (NOIDs), or other official correspondence
- Maintaining accurate and complete client records
Administrative Uses
- Scheduling and confirming appointments
- Processing payments (note: USCIS now requires electronic payments only — paper checks are no longer accepted)
- Sending important notifications, deadline reminders, and case status updates
- Managing ongoing client communications
- Maintaining case histories and conflict-check records
- Ensuring compliance with professional, ethical, and regulatory requirements
Information Protection
Security Measures
- Encrypted data storage (at rest and in transit)
- Secure, password-protected client portals
- Role-based access control systems
- Regular security updates, patching, and vulnerability assessments
- Staff security and confidentiality training
- Physical office security including locked storage and access controls
- Secure document disposal (cross-cut shredding for physical, certified deletion for digital)
- Multi-factor authentication for systems containing sensitive client data
Professional Standards
- Attorney-client privilege protection consistent with Illinois Rules of Professional Conduct
- Ethical compliance measures under the ABA Model Rules and Illinois ARDC standards
- Regular privacy and data-handling audits
- Written confidentiality agreements with all employees, contractors, and vendors
- Professional conduct standards applicable to immigration practitioners
Data Breach Notification
In the unlikely event of a data breach involving your personal information, we will notify affected individuals in accordance with the Illinois Personal Information Protection Act (815 ILCS 530) and any other applicable federal or state law. Notifications will describe the nature of the breach, the information involved, steps we have taken in response, and recommended actions you may take to protect yourself.
Information Sharing
We share your information only:
- With your explicit, written authorization
- As necessary to prepare and file your immigration applications and petitions with relevant government agencies (e.g., USCIS, DOS, EOIR, DOL, CBP, ICE)
- As required by valid court order, subpoena, or applicable law
- With trusted service providers (such as cloud storage, document translation, and case management vendors) bound by confidentiality obligations
- To protect the legal rights, safety, or property of the Firm, our clients, or others
- To comply with mandatory professional reporting obligations
Attorney-Client Privilege
Communications between you and the Firm relating to legal representation are protected by attorney-client privilege and the attorney work-product doctrine. We will assert these protections to the fullest extent permitted by law and will not disclose privileged information except as required by law or with your informed consent.
Illinois TRUST Act and Way Forward Act
As an Illinois-based firm, we operate consistent with the Illinois TRUST Act (5 ILCS 805) and the Illinois Way Forward Act, which restrict the participation of state and local agencies in federal civil immigration enforcement. While these laws apply primarily to government entities, our policies and practices align with their spirit of protecting immigrant communities from unwarranted disclosure.
SMS, Text, and Mobile Information
Your mobile phone number and SMS opt-in information remain strictly confidential. We do not sell, rent, share, or transfer your mobile information to any third parties or affiliates for marketing or promotional purposes. Text messaging enrollment data, including consent records, is retained internally for compliance and operational purposes only and is not distributed to external entities.
Your Privacy Rights
Subject to applicable law and our professional obligations, you have the right to:
- Access the personal information we hold about you
- Request correction of inaccurate or incomplete data
- Receive copies of your client file and records (subject to standard reproduction fees and applicable retention rules)
- Withdraw consent for non-essential marketing communications
- File privacy complaints with the Firm or applicable regulatory authorities
- Request deletion of certain information (where applicable and consistent with our legal and ethical retention obligations)
- Understand how your information is used and shared
- Opt out of SMS and marketing communications at any time
Illinois Residents
If you are an Illinois resident, you may have additional rights under Illinois law, including under the Illinois Personal Information Protection Act and the Biometric Information Privacy Act (BIPA). To exercise these rights, please contact us at the address provided below.
International Considerations
As an immigration law firm with international clients, we:
- Handle international data transfers using reasonable security and contractual safeguards
- Strive to comply with applicable cross-border privacy standards
- Protect information transferred across jurisdictions in connection with your immigration case
- Follow applicable data protection laws to the extent they apply to our representation
European Union / United Kingdom Residents
If you are located in the European Economic Area, the United Kingdom, or Switzerland, you may have additional rights under the General Data Protection Regulation (GDPR) or UK GDPR, including rights to access, rectify, erase, restrict, and port your personal data, as well as the right to object to processing. We process personal data of EU/UK residents on the legal basis of contract performance (representing you), legal obligation, or your consent, as applicable.
Data Retention
We retain your information:
- Throughout the period of our representation
- For a minimum of seven (7) years following case closure, consistent with Illinois professional responsibility standards
- As required by applicable federal and state law
- Per professional and regulatory standards for immigration practitioners
- Based on legitimate business necessity (e.g., conflict checks, malpractice defense)
- After the applicable retention period, files are securely destroyed using certified disposal methods.
Special Categories of Information
Sensitive Data
We provide enhanced protection for sensitive categories of information, including:
- Medical and health-related information
- Religious affiliations or beliefs
- Racial or ethnic background
- Political opinions or affiliations
- Sexual orientation or gender identity
- Criminal history and arrest records
- Information related to victims of domestic violence, trafficking, or other crimes (subject to confidentiality protections under 8 U.S.C. § 1367 for VAWA, T, and U visa applicants)
Biometric Information
To the extent we collect, store, or transmit biometric identifiers or biometric information (as defined under the Illinois Biometric Information Privacy Act, 740 ILCS 14), we will comply with all applicable BIPA requirements, including written notice, written consent, and adherence to our retention and destruction policies. Biometric information collected by U.S. government agencies (such as USCIS fingerprinting at Application Support Centers) is governed by those agencies’ own policies.
Children's Information
We collect children’s information (defined as information from individuals under 13 years of age) only:
- With parental or legal guardian consent
- When legally required for immigration purposes (e.g., derivative beneficiary petitions)
- For purposes consistent with the Children’s Online Privacy Protection Act (COPPA)
- Under appropriate guardian or custodian authorization
Cookies and Tracking Technologies
Our website uses cookies and similar technologies to enhance user experience, analyze website traffic, and improve our services. These may include:
- Strictly necessary cookies: Required for the website to function (cannot be disabled)
- Performance cookies: Help us understand how visitors use the site
- Functional cookies: Remember your preferences
- Analytics cookies: Allow us to measure traffic patterns and improve content
You may control cookies through your browser settings. Disabling certain cookies may affect website functionality. We do not knowingly use cookies to collect sensitive personal information.
Communication Preferences
You can choose how we contact you regarding:
- Case updates and immigration matter communications
- Newsletters and firm announcements
- Legal alerts and policy updates
- Appointment reminders and scheduling
- Notifications regarding government processing changes
SMS / Text Message Consent and Opt-Out
By providing your mobile telephone number and opting in, you consent to receive SMS or text messages from the Firm related to your case, appointments, or firm communications. Message and data rates may apply. Message frequency varies. You may opt out at any time by replying with any of the following keywords: STOP, QUIT, END, CANCEL, REVOKE, OPT OUT, or UNSUBSCRIBE. We will honor opt-out requests within ten (10) business days, consistent with current Federal Communications Commission (FCC) rules. For help, reply HELP or contact our office directly.
Updates to This Policy
As an immigration law firm with international clients, we:
- Handle international data transfers using reasonable security and contractual safeguards
- Strive to comply with applicable cross-border privacy standards
- Protect information transferred across jurisdictions in connection with your immigration case
- Follow applicable data protection laws to the extent they apply to our representation
Contact Us
For privacy inquiries, to exercise your privacy rights, or to file a privacy-related complaint, please contact us:
Law Offices of Mary Kennedy, LLC
1750 E Golf Rd, Suite 1138
Schaumburg, IL 60173
United States
Phone: (847) 220-1560
Website: mkimmigrationlaw.com
Compliance Statement
This Privacy Policy is intended to comply with applicable laws and standards, including:
- Illinois Personal Information Protection Act (815 ILCS 530)
- Illinois Biometric Information Privacy Act (740 ILCS 14)
- Illinois Consumer Fraud and Deceptive Business Practices Act
- Illinois TRUST Act and Way Forward Act
- Federal Telephone Consumer Protection Act (TCPA) and FCC regulations
- Children’s Online Privacy Protection Act (COPPA)
- Federal immigration laws including 8 U.S.C. § 1367 confidentiality protections
- Illinois Rules of Professional Conduct and ARDC standards
- General Data Protection Regulation (GDPR) and UK GDPR (where applicable)
This Privacy Policy does not constitute legal advice. For specific legal questions about your immigration matter, please schedule a consultation with our office.
