Effective date: October 13, 2026
This policy applies to sba.cpa, operated by SBA CPA, and to thesbacpa.com, which now forwards to it (“we,” “us”). It covers information collected through the website. It does not replace the engagement letter or other agreements that govern our professional services to clients.
What information does the website collect?
Information you give us
When you complete a contact form, request a proposal, schedule an introductory call or subscribe to our newsletter, we collect what you enter. That usually includes your name, email address, phone number, business name, the services you are interested in and any message you write. These forms are provided through HubSpot, a customer relationship management platform, which stores the information on our behalf.
Please do not use website forms to send tax documents, Social Security numbers, bank account numbers or other sensitive financial information. See “How we protect client tax information” below for how clients exchange documents with us.
Information collected automatically
Like most websites, ours collects some information automatically when you visit, including your IP address, browser and device type, the pages you view, how you arrived at the site and how long you stay. We use Google Analytics 4 to understand how visitors use the site, and HubSpot may also record page visits associated with a form you have submitted.
Cookies
Cookies are small files a website stores in your browser. We use them to keep the site working, to remember preferences and to measure traffic through Google Analytics and HubSpot. You can block or delete cookies in your browser settings; the site will still work, although some features may not remember your choices. Google offers a browser add-on to opt out of Google Analytics.
How do we use this information?
We use the information we collect to:
- respond to your inquiry, schedule calls and prepare proposals;
- send the newsletter and other updates you have asked to receive;
- understand which pages are useful and improve the website;
- keep the website secure and prevent misuse;
- meet legal and professional obligations.
You can unsubscribe from our emails at any time using the link at the bottom of each message.
Do we sell or share personal information?
We do not sell personal information, and we do not share it with third parties for their own marketing. We share information only with service providers that help us operate the website and our business, such as HubSpot and Google, under terms that limit how they may use it, or when the law requires us to.
How we protect client tax information
Information you provide to us as a client is handled separately from website information and under stricter rules.
Federal law limits how we use tax return information. As tax return preparers, we are subject to Internal Revenue Code section 7216 and its regulations, which restrict the use and disclosure of tax return information without the taxpayer’s consent. We do not use or disclose client tax return information for any purpose outside these rules.
Professional standards apply. As a CPA firm, we follow the confidentiality requirements of the profession and of the Colorado State Board of Accountancy.
Documents move through secure portals, not website forms. Clients exchange tax documents and financial records with us through a secure client portal. We will never ask you to submit sensitive documents through a website form or ordinary email.
We use administrative, technical and physical safeguards designed to protect client information, including access controls and encrypted systems. No system is perfectly secure, but we take this responsibility seriously and review our safeguards regularly.
How long do we keep information?
We keep website inquiries and newsletter subscriptions for as long as needed to respond to you and maintain our relationship, or until you ask us to delete them. Client records are retained according to our engagement terms and professional and legal requirements.
Your choices and Colorado privacy rights
The Colorado Privacy Act gives Colorado residents rights over their personal data, including the right to access, correct and delete it and to opt out of its sale or use for targeted advertising. The Act applies to businesses that meet certain thresholds, and it exempts some entities, such as financial institutions subject to the federal Gramm-Leach-Bliley Act. The Colorado Attorney General’s office explains who is covered.
Whether or not the Act applies to us, you may ask to see, correct or delete the personal information we hold from the website at any time by contacting us at the address below. We will respond within a reasonable time and may need to confirm your identity first. Some information, particularly client records, may need to be kept to meet legal or professional obligations.
Children’s privacy
This website is not directed to children under 13, and we do not knowingly collect personal information from them.
Links to other websites
Our site links to other websites, such as the IRS and the Colorado Department of Revenue. Their privacy practices are their own, and we encourage you to read their policies.
Changes to this policy
We may update this policy from time to time. When we do, we will change the effective date at the top of this page.
Contact us
If you have questions about this policy or your information, email us at info@thesbacpa.com or call our main office. Contact details for all six offices are on our contact page.