Privacy Policy.

1. Who we are

Toad Tax LLC ("Toad Tax", "we", "us", or "our") is a licensed CPA firm with offices in Brooklyn, NY and Boulder, CO. We provide bookkeeping, tax preparation, payroll, and advisory services to small and mid‑sized businesses. This policy explains what personal information we collect through toadtax.com and our services, how we use it, and the choices you have.

If you'd rather not read all of this, the short version: we collect what we need to do our job, we don't sell your information, we contact you only about your inquiry or engagement, and you can tell us to stop at any time.

2. Information we collect

Information you give us

When you fill out our contact form, request a quote, or engage us as a client, you may give us:

• Identifiers — name, email, phone number, company name
• Business information — revenue stage, accounting needs, current systems
• Engagement information — the financial, tax, and payroll information needed to provide our services
• Anything else you choose to share in a free‑text message field

Information collected automatically

When you visit our site, we (and the providers we use) may automatically receive:

• Device and browser information (type, version, operating system)
• Approximate location based on IP address
• Pages viewed, referring URL, time on site
• Cookies and similar technologies (see Section 7)

3. How we use your information

We use what we collect to:

• Respond to your inquiry, send a quote, and schedule an intro call
• Deliver our accounting, tax, payroll, and advisory services
• Communicate about your engagement, deliverables, and deadlines
• Comply with our professional, legal, and tax obligations as a CPA firm
• Send occasional updates about our services (only if you opt in)
• Improve our website and detect or prevent abuse

We do not sell your personal information. We do not share it with third parties for their own marketing.

4. Right to contact & TCPA disclosure

This consent is provided in compliance with the federal Telephone Consumer Protection Act (47 U.S.C. § 227, "TCPA") and applicable state telemarketing and "mini‑TCPA" laws (including but not limited to the Florida Telephone Solicitation Act, Oklahoma Telephone Solicitation Act, and Washington's CEMA).

If your phone number is on a state or federal Do‑Not‑Call list, your submission of our contact form establishes an "established business relationship" and an inquiry permission for Toad Tax to contact you regarding that inquiry. To stop further communications, see Sections 5 and 6.

5. SMS & text messaging

If you've given us your mobile number and consented to texts, here's how the program works:

• Program purpose. Toad Tax may text you about your inquiry, scheduled calls, document requests, deadline reminders, and engagement updates.
• Frequency. Variable. Typically fewer than ten messages per month per recipient.
• Cost. Toad Tax does not charge for messages. Your carrier's standard message and data rates may apply.
• HELP. Reply HELP to any text from us for assistance, or email hello@toadtax.com.
• STOP. Reply STOP to any text from us to opt out of all further texts. You'll receive one confirmation message and then no further texts unless you opt back in.
• Supported carriers. Major U.S. carriers including AT&T, T‑Mobile, Verizon, US Cellular, Boost, Cricket, MetroPCS, and others. Carriers are not responsible for delayed or undelivered messages.

6. Email & opt-out

You can opt out of marketing emails at any time by clicking "unsubscribe" in any email we send, or by emailing hello@toadtax.com with the subject line "unsubscribe". Note that even if you opt out of marketing email, we may still send you transactional or service messages — engagement letters, invoices, tax filing notices — that are necessary to deliver the services you've engaged us for.

7. Cookies & analytics

We use a small number of cookies and similar technologies. They fall into three buckets:

• Strictly necessary — keeps the site functioning. Always on.
• Analytics — anonymous, aggregate page‑view data so we can see what's working. We do not use cross‑site tracking.
• Preference — remembers things like whether you've dismissed a banner.

Most browsers let you block or delete cookies in settings. We honor the Global Privacy Control (GPC) signal where applicable.

8. Sharing & service providers

We share information only with vendors who help us run the firm, and only to the extent they need it to do their job. These include:

• Accounting platforms (QuickBooks, Xero, NetSuite, Sage Intacct)
• Payroll processors (Gusto, Justworks, Rippling, ADP)
• Cloud hosting and email (Cloudflare, Google Workspace, Microsoft 365)
• Document signing and secure file exchange
• Practice management and CRM systems
• Legal, professional, or regulatory advisors when needed

We require these providers to keep your information confidential and use it only for the purposes we've contracted them for. We may also disclose information when required by law, subpoena, court order, or to protect our rights or those of our clients.

9. Data security

We protect your information using industry‑standard administrative, technical, and physical safeguards — encrypted storage and transmission, access controls, MFA on all systems, vendor security review, and regular staff training on confidentiality. No system is perfectly secure, but we take this seriously. If we ever experience a breach affecting your information, we'll notify you as required by law.

10. Data retention

We keep your information as long as we need it to deliver our services and to meet our professional, legal, and tax recordkeeping obligations. CPA firms are generally required to retain certain client records for seven years; some records are retained longer. When records are no longer needed, we delete or anonymize them.

11. Your rights

California residents (CCPA / CPRA)

If you are a California resident, you have the right to know what personal information we collect about you, to access or receive a copy of it, to correct inaccuracies, to request deletion (subject to legal retention obligations), and to opt out of any "sale" or "sharing" of your personal information. We do not sell or share personal information as those terms are defined under California law. To exercise these rights, email privacy@toadtax.com. We will not discriminate against you for exercising any of these rights.

EU / UK residents (GDPR / UK GDPR)

If you are in the EU, EEA, UK, or Switzerland, you have rights to access, rectify, erase, restrict processing, and port your personal data, and to object to processing based on our legitimate interests. The lawful bases we rely on are typically contract performance, legitimate interest, consent, and legal obligation. To exercise these rights, email privacy@toadtax.com. You may also lodge a complaint with your local supervisory authority.

Other states

Residents of states with comprehensive privacy laws (including Colorado, Connecticut, Virginia, Utah, and others) have rights similar to those listed above. Use the contact information in Section 14 to exercise them.

12. Children

Our services and website are not directed to anyone under 16, and we do not knowingly collect information from children. If you believe we may have inadvertently collected such information, contact us and we'll delete it.

13. Changes to this policy

We may update this policy from time to time. When we make material changes, we'll update the "Last updated" date at the top and, where appropriate, give you additional notice (e.g., a banner on the site or an email to active clients). The current version is always available at toadtax.com/privacy.html.

14. Contact us

Questions, concerns, or requests about this policy or your information:

• Email — privacy@toadtax.com
• General — hello@toadtax.com
• Phone — (800) 555‑1234
• Mail — Toad Tax LLC, Attn: Privacy, 248 Smith Street, 3rd Floor, Brooklyn, NY 11231

Thanks for reading. We'll keep this policy short and honest. If anything here is unclear, just ask.