PRIVACY POLICY

Last updated: May 17, 2026

Rebel Sage Legal respects your privacy. This policy explains what personal information this website collects, why, how we use it, and your rights.

1. WHO WE ARE

Rebel Sage Legal is a corporate legal practice operated by Kristina Kang, admitted to practise law in Ontario (Law Society of Ontario) and New York (New York State), with limited services in British Columbia. Contact: hi@rebelsagelegal.com.

2. WHAT WE COLLECT

We collect only what you give us or what's needed to run the site:

♠ Information you submit through forms, email, or the intake process — name, email address, company name, jurisdiction, and a description of what you need.

♠ Email address you submit to subscribe to The Dispatch newsletter.

♠ Automatically-collected technical data — IP address, browser type, pages visited, referral source, time on page. Collected through Squarespace (our website

host) and any analytics tools we run.

♠ Cookies — small data files stored on your device. See Section 9.

3. HOW WE USE IT

♠ To respond to your inquiry and assess whether we can work together.

♠ To complete a conflict check before any engagement.

♠ To send The Dispatch newsletter, if you've subscribed.

♠ To operate, secure, and improve the website.

♠ To comply with legal and professional obligations (including Law Society of Ontario record-keeping rules).

4. LEGAL BASIS (PIPEDA AND OTHER LAWS)

We collect and use your personal information based on your consent. For website operation and security, we rely on legitimate business interests as permitted under PIPEDA. We comply with Canada's Anti-Spam Legislation (CASL) for all commercial electronic messages.

5. WHO WE SHARE IT WITH

We do not sell your personal information. We share it only with:

♠ Service providers who help us run the practice (website host Squarespace; email/newsletter provider, Squarespace Email Campaigns / Mailchimp; calendly;

Google Analytics 4 (Google LLC).

♠ Other professionals, with your consent, where required to advise you (e.g., co-counsel, accountants, foreign counsel).

♠ Authorities or regulators where required by law or by the rules of professional conduct applicable to a lawyer.

6. INTERNATIONAL TRANSFERS

Our website host and several service providers store data on servers located in the United States. By using this website, you understand that your information may be transferred to, stored in, and processed in jurisdictions outside Canada, including the United States, and may be subject to the laws of those jurisdictions.

7. HOW LONG WE KEEP IT

♠ Intake and inquiry information: retained for the period required by professional rules (typically the longer of seven years from the matter closing or as required

by LSO/NY State Bar rules), or deleted on request if no engagement results.

♠ Newsletter email: until you unsubscribe.

♠ Website analytics: as set by the analytics tool, typically up to 26 months.

8. YOUR RIGHTS

You have the right to:

♠ Access the personal information we hold about you.

♠ Correct inaccurate information.

♠ Withdraw consent and ask us to delete information that is not required by law or professional rules.

♠ Unsubscribe from The Dispatch at any time, using the link in every email.

♠ Lodge a complaint with the Office of the Privacy Commissioner ofCanada (priv.gc.ca) if you believe we have mishandled your data.

To exercise any of these rights, email hi@rebelsagelegal.com. We respond within 30 days under PIPEDA. If you are a California resident, you also have rights under the CCPA/CPRA, including the right to know, delete, and opt out of sale (we do not sell data). If you are in the EU/UK, you have rights under the GDPR/UK GDPR. Email us to exercise these rights.

9. COOKIES AND TRACKING

This website uses cookies for essential functions (session, security, preferences) and, depending on settings, for analytics. You can disable cookies in your browser settings — some site features may not work properly without them.

10. SECURITY

We take reasonable steps to protect your information, including encryption in transit (HTTPS), access controls, and use of reputable service providers. No system is perfectly secure. If a breach affects you, we will notify you and applicable regulators as required by law (including the NY SHIELD Act and PIPEDA breach notification rules).

11. CHILDREN

This website is not directed to anyone under the age of 16. We do not knowingly collect personal information from children.

12. CHANGES TO THIS POLICY

We may update this policy. The "Last updated" date above will reflect any changes. Material changes will be communicated through the website or by email to subscribers.

13. CONTACT

Privacy questions, requests, and complaints:

Kristina Kang, Rebel Sage Legal

hi@rebelsagelegal.com