Privacy Policy for BastaCPA.com
Effective Date: October 21, 2025 · Last Updated: October 21, 2025
On this page: Scope Information We Collect How We Use Information Data Security Cookies Data Retention Data Sharing Your U.S. Privacy Rights Email & Newsletter Third-Party Links Children's Privacy Changes Contact
This policy is tailored for a U.S.-based accounting firm serving U.S. clients. It covers data collected via our website, secure client portal and file uploads, contact forms, newsletter signups, and third-party analytics.
1. Information We Collect
A. Information You Provide Directly
- Name, email address, and phone number
- Company name and job title
- Financial records or tax documentation (uploaded through our secure client portal)
- Payment details (if applicable)
- Message contents from our contact form or consultation requests
- Newsletter signup details
B. Information Collected Automatically
When you visit BastaCPA.com, our systems and analytics tools (such as Google Analytics) may collect IP address, browser type and operating system, pages viewed, time spent, referring URLs, and general location (city/state). We use cookies and similar technologies to improve your experience, analyze website traffic, and optimize content.
C. Information from Third-Party Services
We integrate with third-party platforms to deliver services securely, including QuickBooks Online, Xero, or Gusto (for bookkeeping and payroll), Karbon (for communication and data management), and email marketing tools newsletters. Each third party maintains its own privacy policy and practices.
2. How We Use Your Information
- Provide accounting, tax, and advisory services
- Manage secure document uploads and client portal access
- Respond to inquiries and schedule consultations
- Send updates, newsletters, and educational content (with your consent)
- Improve website performance and security
- Comply with legal and regulatory obligations
We do not sell or rent your personal information.
No mobile information will be shared with third parties/affiliates for marketing or promotional purposes. All other categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.
3. Data Security
- SSL encryption across the website and client portal
- Secure cloud storage with restricted employee access
- Two-factor authentication for staff accessing client files
- Regular system audits and data backups
While we follow industry best practices, no system can guarantee absolute security. You share data at your discretion, understanding these inherent limitations.
5. Data Retention
We retain client and communication records only as long as necessary to provide services, satisfy tax and legal recordkeeping obligations, and resolve disputes. When data is no longer needed, it is securely deleted or anonymized.
7. Your Privacy Rights (U.S. Clients)
Depending on your state, you may have rights under laws such as the California Consumer Privacy Act (CCPA/CPRA), including the right to access, correct, or delete your personal information and opt out of marketing communications. We may verify your identity before fulfilling certain requests.
To exercise your rights, email us at iSupport@bastacpa.com.
9. Links to Third-Party Websites
Our site may link to third-party websites or services (e.g., payment processors, client login portals). We are not responsible for their content or privacy practices. Please review their policies before submitting personal information.
10. Children’s Privacy
Our website and services are not directed to children under 18, and we do not knowingly collect data from minors. If we become aware of such data, we will delete it promptly.
11. Changes to This Policy
We may update this Privacy Policy periodically. The latest version will always be available on this page with the effective date shown at the top.
12. Contact Us
BastaCPAEmail: iSupport@bastacpa.com
Website: https://www.bastacpa.com
100 Pine Street, Suite 1250
San Francisco, CA 94111
