Audited source 1: Homepage
www.georgeescobedo.com/
Meta Pixel script (connect.facebook.net/fbevents.js), TrustedSite, LeadConnector form. Footer “© 2025”. axe 19. HTTP 200, October 13, 2026.
Audited source 2: Contact page
www.georgeescobedo.com/contact-us/
Form is a third-party iframe (link.myacademyconnect.com, “Website Contact Form”). No cookie banner. axe 5. October 13, 2026.
Audited source 3: Privacy Policy
www.georgeescobedo.com/privacy-policy/
No date. Says cookie use “is in no way linked to any personally identifiable information.” No Terms page (/terms/ redirects home). October 13, 2026.
3
Undisclosed third parties
Executive pitch
georgeescobedo.com loads the Meta Pixel script on every page, including the contact page, and sends contact-form entries through a third-party form host (LeadConnector, via link.myacademyconnect.com). The Privacy Policy is undated, names none of these services, and claims cookie use “is in no way linked to any personally identifiable information.” There is no cookie banner, no Terms of Use, and the footer still says © 2025.
2026 → 2027 exposure
Do now (2026): rewrite the Privacy Policy to name Meta, LeadConnector, and TrustedSite; add a consent manager that honors GPC; add an intake notice beside the form; fix accessibility. Conditional: Texas TDPSA rights. 2027: a dated legal hub.
Executive key takeaway
The biggest risk: an undated policy that says cookies aren’t linked to personal information, while the Meta Pixel and a third-party form host run on the page where injured workers describe their case. The full report unlocks the exact replacement language for all 4 critical and 2 warning findings, plus the 2027 roadmap item, along with the 8-step roadmap.
Free preview: finding 1 of 7
2026: Undated Privacy Policy says cookies are “in no way linked” to personal data and names none of the live services
2026 GAP
Privacy notice · Vendor disclosure · FTC Section 5 · Active 2026 finding
Current state (verified October 13, 2026 CT)
/privacy-policy/ has no effective or updated date. It says:
“Cookies can also enable us to track and target the interests of our users to enhance the experience on our site. Usage of a cookie is in no way linked to any personally identifiable information on our site.” It does not name the Meta Pixel (
connect.facebook.net/en_US/fbevents.js), LeadConnector (
link.myacademyconnect.com,
backend.leadconnectorhq.com), or TrustedSite (
_tccl_visit,
trustedsite_visit cookies), all of which load on the homepage and contact page.
Requirement
A privacy notice should be dated and match the tools actually running. A “not linked to personal information” claim is hard to defend when an ad pixel loads beside an intake form.
Exact language / corrective action that should be there
Replace the cookie paragraph with: “Our website uses the Meta Pixel to measure our advertising, TrustedSite to display a security badge, and LeadConnector to receive and store contact-form submissions on our behalf. These services may receive your IP address, device information, the pages you visit, and what you type into the form. You can refuse non-essential cookies using the Cookie Settings link.” Add “Last updated: [date].”
Recommended fix
Rewrite and date the policy, name each vendor, and link it beside the form.
2026 gaps & 2027 roadmap (locked)
2026: The Meta Pixel script, TrustedSite, and LeadConnector set cookies with no consent choice, and Global Privacy Control is ignored
2026 GAPCookies / trackers · No CMP · GPC · Active 2026 finding
Current state
████████████████████████████████████████████████████████████ ████████████████████████████████████████████████████████████
Requirement
████████████████████████████████████████████████████████████
Exact language that should be there
████████████████████████████████████████████████████████████ ████████████████████████████████████████████████████████████ ████████████████████████████████████████████████████████████
2026: Injury intake goes to a third-party form host with no notice beside the form
2026 GAPThird-party form processor · Intake confidentiality · Active 2026 finding
Current state
████████████████████████████████████████████████████████████ ████████████████████████████████████████████████████████████
Requirement
████████████████████████████████████████████████████████████
Exact language that should be there
████████████████████████████████████████████████████████████ ████████████████████████████████████████████████████████████ ████████████████████████████████████████████████████████████
2026: Accessibility (WCAG 2.2 AA / ADA Title III): 29 axe failures across 3 pages
2026 GAPAccessibility · WCAG 2.2 AA · ADA website demand-letter risk
Current state
████████████████████████████████████████████████████████████ ████████████████████████████████████████████████████████████
Requirement
████████████████████████████████████████████████████████████
Exact language that should be there
████████████████████████████████████████████████████████████ ████████████████████████████████████████████████████████████ ████████████████████████████████████████████████████████████
2026: No Texas TDPSA rights section (conditional on coverage)
2026 GAPTexas Data Privacy and Security Act · Universal opt-out · Conditional
Current state
████████████████████████████████████████████████████████████ ████████████████████████████████████████████████████████████
Requirement
████████████████████████████████████████████████████████████
Exact language that should be there
████████████████████████████████████████████████████████████ ████████████████████████████████████████████████████████████ ████████████████████████████████████████████████████████████
2026: No Terms of Use, footer says “© 2025,” and the public email uses a different domain
2026 GAPFooter legal links · Site maintenance signals
Current state
████████████████████████████████████████████████████████████ ████████████████████████████████████████████████████████████
Requirement
████████████████████████████████████████████████████████████
Exact language that should be there
████████████████████████████████████████████████████████████ ████████████████████████████████████████████████████████████ ████████████████████████████████████████████████████████████
2027: A dated legal hub that matches what the site actually runs
2027 ROADMAPFuture-proof · Texas law-firm intake · 2027 readiness
Current state
████████████████████████████████████████████████████████████ ████████████████████████████████████████████████████████████
Requirement
████████████████████████████████████████████████████████████
Exact language that should be there
████████████████████████████████████████████████████████████ ████████████████████████████████████████████████████████████ ████████████████████████████████████████████████████████████
2026–2027 Integrated Remediation Roadmap
⚑
Step 1
Publish / fix the Privacy Policy
Date it; name Meta, LeadConnector, TrustedSite.
⚑
Step 2
Consent manager + GPC
Gate analytics and ad tags.
⚑
Step 3
Intake notice on every form
No attorney-client relationship.
⚑
Step 4
Vendor disclosures
LeadConnector DPA.
⚑
Step 5
WCAG 2.2 AA fixes
Labels, contrast, iframe titles.
⚑
Step 6
Accessibility statement
Contact route for help.
⚑
Step 7
Footer + Terms
Current © year; Terms of Use.
⚑
Step 8
2027 Legal hub
Privacy+Cookie+TX rights+A11y.
2027 Texas Law-Firm Web Intake Privacy & Accessibility Readiness
Step 1
Publish / fix the Privacy Policy
Date it; name Meta, LeadConnector, TrustedSite.
Step 2
Consent manager + GPC
Gate analytics and ad tags.
Step 3
Intake notice on every form
No attorney-client relationship.
Step 4
Vendor disclosures
LeadConnector DPA.
Step 5
WCAG 2.2 AA fixes
Labels, contrast, iframe titles.
Step 6
Accessibility statement
Contact route for help.
Step 7
Footer + Terms
Current © year; Terms of Use.
Step 8
2027 Legal hub
Privacy+Cookie+TX rights+A11y.
Get the full George Escobedo Privacy Snapshot
6 more findings with live evidence and word-for-word replacement language, plus the 8-step 2026–2027 roadmap.
Privacy Snapshot
$1,000
- Full report, delivered in 1 business day
- Ready-to-upload policy pages (Privacy, Cookie, SMS, Accessibility)
Website Upgrade
$2,000
- Full report and policy pages
- New accessible (WCAG 2.2 AA) website, delivered in 5 business days
- Up to 2 rounds of revisions
Get the full report →