Audited source 1: Homepage / intake form
pelaezlawfirm.com/
“Free In Depth, No Obligation Case Evaluation”: name, email, phone, “How May We Help You?”*, optional policy checkbox, no notice. Tags: Meta Pixel 1982679661936774, G-BZ18XD9Q5G, AW-10803752483, TTD Universal Pixel, YouTube, live chat. HTTP 200, live Chrome check October 13, 2026.
Audited source 2: Contact page
pelaezlawfirm.com/contact-us/
Same form, plus live chat (“David · OPERATOR”), WhatsApp hand-off, and “Call Me Instead” scheduler. Ad-exchange cookies from adsrvr, adnxs, pubmatic, casalemedia, rubiconproject, bidswitch. No cookie banner. HTTP 200, October 13, 2026.
Audited source 3: Privacy Policy / Terms
pelaezlawfirm.com/privacy-policy/
“Last updated: January 2, 2023”; “created with the help of the Free Privacy Policy Generator”; names no vendors; phone-only contact (210-274-6448). Terms also dated January 2, 2023. /disclaimer/ and /accessibility/ return 404. Checked October 13, 2026.
10+
Ad/tracking services w/o consent
175
axe failures (4 pages)
Executive pitch
pelaezlawfirm.com asks injured people to describe what happened in a required form, a live chat, a WhatsApp hand-off, and a call-back scheduler, and none of them says that contacting the firm doesn’t create an attorney-client relationship. The site has no disclaimer page at all. Meanwhile the Meta Pixel, Google Ads, The Trade Desk, and six programmatic ad-exchange cookie syncs fire with no consent banner and ignore Global Privacy Control. The Privacy Policy is a January 2023 free-generator template that names none of these services and lists a different phone number than the rest of the site. axe found 175 accessibility failures on 4 pages, including 67 homepage images with no description.
2026 → 2027 exposure
Do now (2026): replace the 2023 template policy; add a consent manager that honors GPC; remove ad tech from intake pages; add confidentiality notices to the form, chat, WhatsApp, and scheduler; publish a Disclaimer; fix the WCAG 2.2 AA failures. Conditional: Texas TDPSA rights. 2027: a bilingual legal hub that matches the live ad stack, forms, and chat.
Executive key takeaway
The biggest risk: the firm collects accident and injury details through four intake channels with no notice and no disclaimer page, while Meta, Google Ads, and programmatic ad exchanges track every visitor with no consent and ignore GPC, under a 2023 template policy that names none of them. The full report unlocks the exact replacement language for all 5 critical and 2 warning findings, plus the 2027 roadmap item, along with the 8-step roadmap.
Free preview: finding 1 of 8
2026: Privacy Policy is a 2023 free-generator template that names none of the 10+ ad and tracking services running
2026 GAP
Privacy notice · Transparency · FTC Section 5 · Active 2026 finding
Current state (verified October 13, 2026 CT)
/privacy-policy/ (HTTP 200) reads
“Last updated: January 2, 2023” and states
“This Privacy Policy has been created with the help of the Free Privacy Policy Generator.” It is built on the generator’s boilerplate (“Interpretation And Definitions”, “Usage Data”, “Company … refers to Crash Angels, 5511 I-10 Suite 1, San Antonio, TX 78201”). It describes cookies and “pixel tags” generically but
never names Google, Meta, The Trade Desk, the live chat, or WhatsApp (zero matches for “Google” or “analytics”). Its only contact method is
“By phone number: 210-274-6448”, a different number from the 210-801-9314 shown everywhere else on the site, and no email. The Terms of Service are also dated
“Last updated: January 2, 2023.”
Requirement
A privacy notice should be current, match the data and vendors the site actually uses, and give a working contact method. A three-year-old template that names no vendors can’t show what injured visitors were told.
Exact language / corrective action that should be there
Privacy Policy — Pelaez Law Firm, PLLC (Crash Angels). Effective date: [Month Day, 2026]. Who we are: Pelaez Law Firm, PLLC d/b/a Crash Angels, 5511 I-10 Suite 1, San Antonio, TX 78201, 210-801-9314, info@pelaezlawfirm.com. What we collect: name, email, phone, the description of your accident and injuries you type into our forms, live-chat and WhatsApp messages, call-back requests, and device/usage data. Tools we use: Google Analytics 4 (G-BZ18XD9Q5G), Google Ads (AW-10803752483), Meta Pixel, The Trade Desk advertising pixel, YouTube embeds, Google reCAPTCHA, and our live-chat provider, which receives what you type in chat. We do not sell personal data. We update this policy when our tools or forms change.
Recommended fix
Replace the generator text with a firm-specific, dated policy in English and Spanish, and fix the contact phone and email.
2026 gaps & 2027 roadmap (locked)
2026: Meta Pixel, Google Ads, The Trade Desk, and six ad-exchange cookie syncs fire with no consent banner
2026 GAPCookies / trackers · No CMP · Programmatic ad tech · Active 2026 finding
Current state
████████████████████████████████████████████████████████████ ████████████████████████████████████████████████████████████
Requirement
████████████████████████████████████████████████████████████
Exact language that should be there
████████████████████████████████████████████████████████████ ████████████████████████████████████████████████████████████ ████████████████████████████████████████████████████████████
2026: Injury intake form has no attorney-client or confidentiality notice, and the site has no disclaimer page at all
2026 GAPTexas bar · Confidentiality · Point-of-collection notice · Active 2026 finding
Current state
████████████████████████████████████████████████████████████ ████████████████████████████████████████████████████████████
Requirement
████████████████████████████████████████████████████████████
Exact language that should be there
████████████████████████████████████████████████████████████ ████████████████████████████████████████████████████████████ ████████████████████████████████████████████████████████████
2026: Live chat, WhatsApp hand-off, and “Call Me Instead” scheduler collect intake through outside vendors with no notice
2026 GAPThird-party chat processor · Vendor disclosure · Active 2026 finding
Current state
████████████████████████████████████████████████████████████ ████████████████████████████████████████████████████████████
Requirement
████████████████████████████████████████████████████████████
Exact language that should be there
████████████████████████████████████████████████████████████ ████████████████████████████████████████████████████████████ ████████████████████████████████████████████████████████████
2026: Accessibility (WCAG 2.2 AA / ADA Title III): 175 axe failures across 4 pages, including 67 images with no description
2026 GAPAccessibility · WCAG 2.2 AA · ADA website demand-letter risk
Current state
████████████████████████████████████████████████████████████ ████████████████████████████████████████████████████████████
Requirement
████████████████████████████████████████████████████████████
Exact language that should be there
████████████████████████████████████████████████████████████ ████████████████████████████████████████████████████████████ ████████████████████████████████████████████████████████████
2026: Texas TDPSA consumer rights and Global Privacy Control ignored (conditional on coverage)
2026 GAPTexas Data Privacy and Security Act · Universal opt-out · Conditional
Current state
████████████████████████████████████████████████████████████ ████████████████████████████████████████████████████████████
Requirement
████████████████████████████████████████████████████████████
Exact language that should be there
████████████████████████████████████████████████████████████ ████████████████████████████████████████████████████████████ ████████████████████████████████████████████████████████████
2026: Legal footer shows only “Privacy Policy”: no Disclaimer, Terms link, Cookie Policy, or Accessibility statement
2026 GAPFooter legal links · Transparency · Texas bar advertising hygiene
Current state
████████████████████████████████████████████████████████████ ████████████████████████████████████████████████████████████
Requirement
████████████████████████████████████████████████████████████
Exact language that should be there
████████████████████████████████████████████████████████████ ████████████████████████████████████████████████████████████ ████████████████████████████████████████████████████████████
2027: Texas personal-injury legal hub tied to the live ad stack, forms, and chat
2027 ROADMAPFuture-proof · Texas personal-injury intake · 2027 readiness
Current state
████████████████████████████████████████████████████████████ ████████████████████████████████████████████████████████████
Requirement
████████████████████████████████████████████████████████████
Exact language that should be there
████████████████████████████████████████████████████████████ ████████████████████████████████████████████████████████████ ████████████████████████████████████████████████████████████
2026–2027 Integrated Remediation Roadmap
⚑
Step 1
Replace 2023 template policy
Firm-specific, dated, real contact.
⚑
Step 2
Consent manager + GPC
Gate Meta, Ads, Trade Desk.
⚑
Step 3
Strip ad tech from intake
No pixels on form pages.
⚑
Step 4
Form confidentiality notice
EN/ES; brief summary only.
⚑
Step 5
Chat / WhatsApp notices
Greeting + vendor disclosure.
⚑
Step 6
Publish Disclaimer page
No attorney-client relationship.
⚑
Step 7
WCAG 2.2 AA fixes
67 images, buttons, links, statement.
⚑
Step 8
2027 Legal hub (EN/ES)
Privacy+Cookie+TX rights+A11y.
2027 Texas Law-Firm Web Intake Privacy & Accessibility Readiness
Step 1
Replace 2023 template policy
Firm-specific, dated, real contact.
Step 2
Consent manager + GPC
Gate Meta, Ads, Trade Desk.
Step 3
Strip ad tech from intake
No pixels on form pages.
Step 4
Form confidentiality notice
EN/ES; brief summary only.
Step 5
Chat / WhatsApp notices
Greeting + vendor disclosure.
Step 6
Publish Disclaimer page
No attorney-client relationship.
Step 7
WCAG 2.2 AA fixes
67 images, buttons, links, statement.
Step 8
2027 Legal hub (EN/ES)
Privacy+Cookie+TX rights+A11y.
Get the full Crash Angels Privacy Snapshot
7 more findings with live evidence and word-for-word replacement language, plus the 8-step 2026–2027 roadmap.
Privacy Snapshot
$1,000
- Full report, delivered in 1 business day
- Ready-to-upload policy pages (Privacy, Cookie, SMS, Accessibility)
Website Upgrade
$2,000
- Full report and policy pages
- New accessible (WCAG 2.2 AA) website, delivered in 5 business days
- Up to 2 rounds of revisions
Get the full report →