Short answer: A California lawyer website redesign is the moment your tracking stack gets rebuilt from scratch, and almost nobody treats it that way. Analytics tags, advertising pixels, call tracking, chat, heatmaps and form handlers all get re-added to the new site by a developer working from whatever list they were given — and the privacy policy describing them does not get rewritten. In California that gap matters more than in most states, because the disclosure obligations attach to what you actually collect. This guide sets out how to carry tracking and disclosure through a rebuild without breaking either.
A redesign is the only time you will ever have a complete list of what your website collects. Use it.
What California adds to a redesign
California’s attorney advertising rules sit at Rules 7.1 through 7.5 of the California Rules of Professional Conduct, and on most website questions California is conventional — we cover that in the California attorney advertising rules guide. The obligation that catches California law firm sites is not in the advertising rules at all. It is the state’s consumer privacy regime, and it lands on the pages nobody briefs.
We wrote about that in our guide to California law firm website content. What a redesign changes is timing. Ordinarily a firm never has occasion to enumerate every tool touching visitor data. During a rebuild somebody has to, because each one has to be reinstalled.
That makes the redesign the cheapest opportunity you will get to make the privacy policy describe the actual website, rather than a generic one a plugin generated in 2021.
Inventory what the current site collects
Before the new site is built, list every component on the existing one that receives, observes or stores visitor data. Most firms are surprised by the length of the list, and the surprise is the point.
Analytics. Advertising pixels — often several, from campaigns that ended years ago. Call tracking, which swaps phone numbers and records. Live chat, which stores transcripts on a vendor’s systems. Contact and intake forms, and wherever they deliver. A CRM integration. Scheduling widgets. Heatmap or session-recording tools, which capture what a visitor typed. Embedded maps, video and review widgets, each loading third-party resources.
Two things reliably fall out of this exercise. There is nearly always at least one tag still firing from a vendor the firm stopped using, and there is nearly always a session-recording tool nobody remembers approving, capturing form input on pages where people describe legal problems.
Decide what comes back, before it comes back
The default behaviour is to reinstall everything, because removing something requires a decision and reinstalling does not. Reverse that default: each tool has to earn its place on the new site.
| Component | What it collects | Decision at rebuild |
|---|---|---|
| Analytics | Behaviour, source, device | Keep, configure retention |
| Advertising pixels | Visits tied to ad profiles | Keep only for live campaigns |
| Call tracking | Numbers, recordings | Keep if used, disclose it |
| Live chat | Transcripts of legal problems | Keep, review vendor terms |
| Session recording | Keystrokes, form input | Usually remove |
| Dormant vendor tags | Whatever they always did | Remove |
The session-recording row is the one worth pausing on. A tool that replays what a visitor typed into an intake form is capturing the substance of a prospective client’s legal problem, including what they typed and deleted. Whether that is acceptable is a question for your counsel; what is not defensible is that it is usually running because a marketing vendor switched it on.
Rewrite the policy to match, and test before launch
Once you have the final list, the privacy policy can be written against reality instead of a template. What it has to say, and which obligations apply to your firm, is a question for privacy counsel — this guide does not state California’s current requirements, thresholds or exemptions, because they change. What a marketing agency can do, and what the redesign makes possible, is hand counsel an accurate inventory.
Three checks belong in the launch sequence rather than after it. Verify analytics and conversion tracking fire on staging, so you keep a continuous baseline and can tell whether the rebuild helped. Submit a real test through every form and confirm it arrives where intake actually reads. And load the new site with a blocker to see which third-party resources it calls, which is the fastest way to catch a tag that came back without being asked for.
One California-specific planning note: the state is the most competitive legal search market in the country, so a rebuild that loses ground takes longer to recover here than anywhere else. Keeping URLs stable and tracking continuous is worth more in California than the design refresh is.
California lawyer website redesign: frequently asked questions
Does a redesign require updating the privacy policy?
If the tools collecting data change, the document describing them is out of date. A rebuild almost always changes that set, which makes it the natural moment to correct the policy. What the policy must contain is a question for privacy counsel.
Will a California lawyer website redesign affect rankings?
It does when URLs change without redirects or when content is thinned. California’s markets are the most contested in the country, so recovery from a badly executed rebuild takes longer here. Keep URLs stable and improve content rather than shortening it.
Should analytics be installed before or after launch?
Before, on staging, and verified. Installing after launch loses the continuity that tells you whether the redesign worked, and it is the most common reason a firm cannot answer that question six months later.
What about session recording on a law firm website?
These tools can capture what a visitor typed into an intake form, which on a law firm site is the substance of a legal problem. Whether that is appropriate for your firm is a question for your counsel, and a redesign is the point at which the decision can actually be made rather than inherited.
How long should a law firm redesign take in California?
Eight to sixteen weeks is typical, and the constraint is content decisions rather than design. Add time for the tracking and policy work described here; it is a week of effort that prevents a year of confusion.
California lawyer website redesign: the short version
If you take one thing from this guide, take this: before the new site is built, ask your developer for a list of every script the current site loads. Compare it to your privacy policy. The gap between those two documents is the thing your redesign is uniquely well placed to fix, and it is the one item on this list that will not fix itself later.
Official source: the State Bar of California.
Legal Web Agency is a marketing agency, not a law firm, and nothing here is legal advice. Nothing here states what privacy obligations apply to your firm or what your policy must say. Confirm with the State Bar of California, your privacy counsel and your ethics counsel.
Related reading: Law Firm Website Redesign: Complete 2026 Guide, plus California law firm website content and the California advertising rules guide.


