CerteCerto · certecerto.com
5-Star Privacy Snapshot · Teaser Preview

Eric Ramos Law, PLLC

Texas · San Antonio, Laredo, Midland, McAllen · Personal injury · WordPress + Divi + WPForms + Intaker chat · Not legal advice
Compliance status
HIGH COMPLIANCE RISK
Firm / responsible attorney
Eric Ramos Law, PLLC · Eric Ramos
Website
ericramoslaw.com
Contact (live)
(210) 404-4878 · info@ericramoslaw.com
Audit date
October 13, 2026 (CT)
Audited source 1: Homepage / intake forms
ericramoslaw.com/

Two forms: WPForms #4958 (name, phone, SMS opt-in, email, Approximate Date of Injury, “Brief Description of Your Case”) and the Divi form (“Brief description of what happened*”, “GET STARTED TODAY”). Copy: “Your initial consultation is completely free and confidential.” Tags loaded: GTM-W8D2BQH, G-B2ZKTTPL9B, UA-144919167-1, UA-187168821-1, Google Ads, YouTube, Intaker. HTTP 200, live Chrome check October 13, 2026.

Audited source 2: Contact page
ericramoslaw.com/contact/

Divi form: Name*, Phone*, Email Address, “Are you a current client?”, “Brief description of what happened*”, with no notice at the form. Four Google Maps iframes without titles (San Antonio, Laredo, Midland, McAllen). The Intaker chat iframe (“Chat with us”) is present. No cookie banner. HTTP 200, October 13, 2026.

Audited source 3: Privacy Policy / Disclaimer
ericramoslaw.com/privacy-policy/

Policy text was quoted live and has no date. Its contact line is “please email us” with no address. It names no trackers and contains the Do-Not-Call override sentence. /disclaimer/ (200) says website submissions are “non-confidential.” Terms (/terms/, /terms-of-use/, /terms-and-conditions/) and /accessibility/ return 404. Checked October 13, 2026.

6
Critical gaps
2
Warnings
4
Google tags w/o consent
346
axe failures (4 pages)
Executive pitch

ericramoslaw.com asks injured people to type “what happened” and their date of injury into two forms and a third-party Intaker chat. The homepage calls the consultation “completely free and confidential,” but the footer Disclaimer says website submissions are “non-confidential,” and nothing at the forms explains this. Meanwhile Google Ads, GA4, and two retired Universal Analytics tags fire with no consent banner and ignore Global Privacy Control. The Privacy Policy is undated, names none of these tools, and claims consent to call people “even though” their number is on a Do-Not-Call list. axe found 346 accessibility failures on 4 pages, including unlabeled intake fields.

2026 → 2027 exposure

Do now (2026): date and rewrite the Privacy Policy; remove the dead UA tags; add a consent manager that honors GPC; add confidentiality notices at the forms and in the chat; fix the “free and confidential” line; bring the SMS checkbox up to TCPA/A2P standards; fix the WCAG 2.2 AA failures. Conditional: Texas TDPSA rights. 2027: a bilingual (English/Spanish) legal hub that matches the live tags, forms, and chat.

Executive key takeaway

The biggest risk: the firm collects injury facts through forms and the Intaker chat with no confidentiality notice, under a homepage “confidential” promise that its own Disclaimer contradicts. At the same time, Google Ads and analytics track visitors with no consent and ignore GPC, under an undated policy that names none of these tools. The full report unlocks the exact replacement language for all 6 critical and 2 warning findings, plus the 2027 roadmap item, along with the 8-step roadmap.

Free preview: finding 1 of 9

2026: Privacy Policy is undated, generic, and names none of the tools actually running

2026 GAP
Privacy notice · Transparency · FTC Section 5 · Active 2026 finding
Current state (verified October 13, 2026 CT)
/privacy-policy/ (HTTP 200) has no effective or last-updated date. Its only change clause reads: “Please check this privacy policy periodically to inform yourself of any changes.” Contact section: “If you have any questions about this privacy policy, please email us.”, but no email address is given. Cookie text is generic: “Our web servers also seek (as many Web sites do) to place a ‘cookie’ …” and “We use a third-party technology to place our advertisements on other Web sites … please email us.” The policy never names Google Tag Manager, Google Analytics, Google Ads, YouTube, or the Intaker chat. It refers to “ericramoslaw.com’s business units” and “other ericramoslaw.com businesses”, which reads as template text. Neither /privacy-policy/ nor /disclaimer/ appears in the page sitemap (251 URLs).
Requirement
A privacy notice should be dated, match the data the site actually collects and the vendors it actually uses, and give a working contact method. An undated notice that says “email us” but lists no address can't show what visitors were told at the time.
Exact language / corrective action that should be there
Privacy Policy — Eric Ramos Law, PLLC. Effective date: [Month Day, 2026]. Last updated: [Month Day, 2026]. Who we are: Eric Ramos Law, PLLC, 40 NE Interstate 410 Loop #102, San Antonio, TX 78216, (210) 404-4878. Privacy contact: info@ericramoslaw.com. What we collect: name, phone number, email, approximate date of injury, the description of your case you choose to type, text-message preference, chat transcripts, and device/usage data (IP address, browser, pages viewed, referring ad). Tools we use: Google Tag Manager (GTM-W8D2BQH), Google Analytics 4 (G-B2ZKTTPL9B), Google Ads conversion tracking, YouTube video embeds, Google Maps embeds, and the Intaker live-chat service, which receives what you type into the chat window. We do not sell personal data. We update this policy when our tools or forms change, and the date above shows the latest version.
Recommended fix
Rewrite and date the policy, publish it with a real contact email, add both legal pages to the sitemap, and review it whenever tags or forms change.

Get the full Eric Ramos Law Privacy Snapshot

8 more findings with live evidence and word-for-word replacement language, plus the 8-step 2026–2027 roadmap.

Privacy Snapshot
$1,000
  • Full report, delivered in 1 business day
  • Ready-to-upload policy pages (Privacy, Cookie, SMS, Accessibility)
Website Upgrade
$2,000
  • Full report and policy pages
  • New accessible (WCAG 2.2 AA) website, delivered in 5 business days
  • Up to 2 rounds of revisions
Get the full report →