LAST UPDATED: November 22, 2023
FirmWorks, a subsidiary of Rightworks, and its subsidiaries and affiliates, and owner of CPA Practice Advisor, (“FirmWorks”, “we”, or “us”), recognizes the importance of protecting the privacy of information provided to us by those who use our products and services and associated websites, including this CPA Practice Advisor website (collectively, “Websites”). Our goal is to provide you with an experience that delivers the information, resources and services that are helpful to you. In order to achieve this goal, we may collect information from you. This policy describes how personally identifiable and anonymous information about our publication subscribers, online media product users and event registrants may be collected, used and shared.
We will only process your Personal Data in accordance with applicable data protection and privacy laws. Importantly, we note that we are a “controller” for those services where we make decisions on how personal information is used in connection with our services, and we are a “processor” for those services where we only use personal information as allowed by our customers. For the purposes of UK and EU data protection legislation, when acting as a “controller”, the data controller is [FirmWorks].
How do we collect your information?
Like many websites, we use pixel tags, also known as web beacons, clear gifs, or web bugs, which are small graphic files that allow us and third parties to monitor the use of the Websites and collect usage data. We may use pixel tags, either provided by us or by our third-party advertisers, service providers and ad networks, to collect information about your visit, including the IP address of the computer that downloaded the page on which the tag appears, the pages you view, the links you click and other actions taken in connection with our Websites and use them in combination with our cookies to provide offers and information of interest to you. Pixel tags help us improve our understanding of our web traffic and visitor behavior, as well as gauge the response to our promotional efforts.
Our Websites use the following types of cookies for the purposes set out below:
- Strictly Necessary Cookies
- Analytics and Performance Cookies
- Analytics and Performance Cookies
- Social Media Cookies
- Functionality Cookies
- Targeting or Advertising Cookies
You can find more information about cookies and how they work, what cookies have been set on your computer or mobile device and how to manage and delete them at http://www.allaboutcookies.org and http://www.youronlinechoices.com/uk.
When is personally identifiable information collected? How is your information used?
We may use your contact information to send notices for subscription renewal or provide you with information about products or services you have ordered with us. We may also use your contact information to send you e-newsletters or other promotional e-mails that contain targeted, relevant content that may be useful to your business. All promotional e-mails you receive from us will include an option to opt out of similar e-mail communications in the future.
We may include Personal Data, such as your name, address, telephone and fax numbers, and e-mail address, as well as “demographic” information such as the type of business you work for, your job responsibilities and certain information about your company. We will tell you at the time we collect information whether the information requested is necessary for you to participate in a particular feature. The information we collect is used to respond to your specific requests, to send you periodic information and special offers from FirmWorks and our sponsors, to provide you with updates on FirmWorks offerings and features, to provide you with product information from manufacturers in our database, and to provide our sponsors and business partners with data about our users.
We may disclose aggregated information about users and information that does not identify any individual, without restriction. We also reserve the right to disclose your Personal Data if we are required to do so by law, or in the good faith belief that disclosure of the information is reasonably necessary to comply with legal process, to respond to claims, or to protect or advance the rights, property, safety, or well-being of our company, our employees, customers, or the public. In the unlikely event that all FirmWorks assets or substantially all of its assets are acquired, then user and customer information, which may include Personal Information, may be one of the transferred assets.
We use the information we collect, including Personal Data and Website usage data:
- to enable you to use our Websites, to create an account or profile, to process information you provide via our Websites (including verifying that your email address is active and valid) and to process your transactions;
- to provide related customer service and care, including responding to your questions, complaints, or comments and sending surveys (with your consent) and processing survey responses;
- to provide you with information, products, or services that you have requested;
- to receive and process job applications for jobs with us;
- with your consent, to provide you with information, products, or services that we otherwise believe will interest you, including special opportunities from us and our third-party partners;
- to tailor content, recommendations, and advertisements we and third parties display to you, both on the Websites and elsewhere online;
- for internal business purposes, such as to improve our Websites and services;
- to administer and process contests, sweepstakes, and promotions;
- to comply with regulatory and legal obligations; and
How do we secure and store your information?
We use reasonable precautions, including appropriate technical, administrative, and physical procedures, to try to protect collected Personal Data from loss, misuse, or alteration.
Many of our Websites contain links to websites owned and operated by unaffiliated third parties. These links are provided as a service to you, and do not constitute our endorsement or support of those third parties or their websites. Each third party website has its own information collection and use practices, and we advise you to review their policies.
FirmWorks is not responsible or liable for third party privacy practices or the content of third party sites. We are not responsible or liable for any breach of security or for the actions of these parties.
Due to the design of the Internet and other factors outside our control, we cannot guarantee that communications between you and our servers will be free from unauthorized access by third parties. Any information you provide may be stored and maintained in a FirmWorks database, either housed at FirmWorks or with a third-party vendor. In the case of a sale, change of ownership or merger involving FirmWorks or any parent, subsidiary or affiliated company, your information may be transferred to a third party.
Passwords may be used by a Website to protect your Personal Data. We recommend that you do not share your passwords with anyone and notify us promptly if you believe your password security has been breached. We will never ask you for your password in an unsolicited phone call or in an unsolicited e-mail. Also, if you are using a computer that others have access to, such as one in a computer lab, Internet cafe or public library, always remember to log out and close your browser window when leaving any of our Websites.
In addition, any personally identifiable information or sensitive data that you choose to disclose through any discussion boards or other public online forums hosted on the Websites may be collected and used by others. We recommend caution when giving out personal information to others in these public online forums. When you provide information on these forums, you do so at your own risk. FirmWorks does not take any steps to protect the privacy of information you volunteer about yourself in public forums or other publicly accessible sections of our Websites. The information you share may be viewed by any other user of the Websites.
We will retain your Personal Data and any information collected from your use of our Websites for as long as you are a Subscriber or otherwise maintain a user account on our Websites and for a reasonable time thereafter.
What options do you have about how we use or share your information?
We strive to provide you with choices regarding the Personal Data you provide us. To exercise control over your information, we have provided you with the following mechanisms:
If you no longer wish for us to share your mailing address or other contact information with our sponsors or other third parties, you may adjust your account preferences, or you can send us an e-mail at email@example.com. For us to be able to locate your record, your e-mail must include your name, mailing address, e-mail address, and must identify the FirmWorks product, event, or service for which you are registered. We will strive to process your request within 10 business days, and thereafter we will no longer share your contact information with third parties. Please note that we will not be able to stop third parties from sending you information about their products or services if your information was shared with them before we received your request.
Regarding e-mail specifically, you have the opportunity to elect to stop receiving advertising messages from FirmWorks about our products or services each time you receive such a communication from us. To unsubscribe from such advertising e-mail messages, please follow the directions included in that e-mail message. We will strive to process your request within 10 business days. Please note that during that time, you may continue to receive e-mail messages from FirmWorks about its products or services or those of our affiliates or customers.
Additionally, regardless of whether you have unsubscribed from receiving advertising and promotional material from FirmWorks, you will continue to receive transactional information from us, such as information relating to your account or payment or bill information.
How Can I Access, Correct, or Amend Information About Me?
We want to assure you that you have access to your Personal Data that we collect and store. Customers may correct or amend information that is inaccurate by reviewing and updating your account preferences or by contacting us by email at firstname.lastname@example.org or by mail at FirmWorks Attention: Data Privacy Officer, 14 Hampshire Drive, Hudson, NH 03051.
Collection and Use of Information from Children
Our Websites are not intended for children under 16 years of age. No one under age 16 may provide any personal information to or on our Websites. We do not knowingly collect personal information from children under 16. If you are under 16, do not use or provide any information on this Website or on or through any of its features. If we learn we have collected or received personal information from a child under 16 without verification of parental consent, we will delete that information. If you believe we might have any information from or about a child under 16, please send an email to: email@example.com You may also mail your request to FirmWorks at attention of the Data Privacy Officer at 14 Hampshire Drive, Hudson, NH 03051.
Our Site uses ‘SSL’ to protect Personal Data. By using a browser that supports security functions, when you access to our Websites and enter Personal Data, including your name and e-mail address, this information is transferred to our server and the information is automatically encrypted when transmitted and received by servers. Therefore if the transmitted data is intercepted by a third party, there is no need to worry about the content being stolen. If you use a browser that does not support SSL, you may not be able to access our Website or input information.
Do Not Track Signals
Your browser may offer you a “Do Not Track” option, which allows you to signal to operators of Websites and web applications and services (including behavioral advertising services) that you do not wish such operators to track certain of your online activities over time and/or across different Websites. Our Websites do not support Do Not Track requests at this time, which means that we collect information about your online activity while you are using our Websites.
California Privacy Rights
This section (“California Statement”) explains rights that certain natural persons residing in the State of California (each, a “consumer”) may have under the California Consumer Privacy Act of 2018 and such rules and regulations as may be adopted from time to time implementing and interpreting such Act (collectively, “CCPA”). When we use the term “personal information” in this California Statement, we are using that term as CCPA defines it, which CCPA generally defines “personal information” to mean information that identifies, relates to, describes, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household. However, personal information does not include publicly available, deidentified, or aggregate consumer information (which are all defined in CCPA). Also, the definition of “personal information” also does not currently apply to the collection of personal information from job applicants, employees (whether you are our employee or any employee of our customers), business owners, directors, officers, medical staff or contractors. Where we act as a “business” under CCPA (meaning we determine the manner and reasons for why we process your personal information), we may be required to disclose additional information regarding the categories of personal information we collect, the sources where we obtain that information, the purposes for why we collect that information, who we share that information with, as well as whether we sell that personal information – all of which depends on the specific service being provided.
Categories of Personal Information We Collect
Depending on the nature of your relationship with us (e.g., subscriber, media partner, or FirmWorks employee), we may collect the following categories of Personal Information about you, including:
- Identifiers such as name, postal address, email address, account name, or telephone number;
- Information that identifies, relates to or is capable of being associated with an individual, such as financial information;
- Characteristics of protected classifications under California or federal law such as race, sex/gender or marital status;
- Commercial information such as subscription history;
- Internet or other electronic network activity information such as browsing history;
- Geolocation data, available through your device, if enabled;
- Audio, electronic, or similar information;
- Professional or employment-related information;
- Education information;
- Inferences drawn from any of the information identified above, including about your preferences.
If you are a resident of California and are not a job applicant, employee/contractor, or employee/contractor of another company interacting with us in your job role, you have the right to request what category of personal information we collect about you, how we use that personal information, and the categories of third parties we disclose that personal information. You also have the right to request that we delete your information. To make a request, you can contact us by email to our Data Privacy Officer at firstname.lastname@example.org or in writing to FirmWorks, Attention: Data Privacy Officer, 14 Hampshire Drive, Hudson NH 03051. Provide us enough information to verify your identify. We will use information you provide to us to verify your request. If we cannot initially verify your identity, we may request additional information to complete the verification process, such as, for example, a copy of your driver’s license and/or a recent utility or credit card bill.
California residents also have certain rights regarding the “sale” of “personal information” (as such terms may be defined by CCPA). California residents have the right to opt out of such “sale” of their “personal information” in accordance with CCPA by sending an email to our Data Privacy Officer at email@example.com or in writing to FirmWorks, Attention: Data Privacy Officer, 14 Hampshire Drive, Hudson NH 03051.
We will not discriminate against you because you have exercised any of your privacy rights under the CCPA.
Users Outside of the United States and Consent to Transfer
Your EU Data Subject Rights
If you are a resident of the European Economic Area (EEA), we collect and process Personal Data about you only where we have a legal basis for doing so under applicable data protection law, including under the European General Data Protection Regulation (GDPR). The legal bases will depend on the purpose for which we process your Personal Data. This means we collect and use your Personal Data only where:
- We need it to provide the services including to operate the Websites.
- Provide customer support and personalized features and to protect the safety and security of the Websites.
- It satisfies a legitimate interest (which is not overridden by your rights and interests), such as for research and development, to market and promote the Websites and to protect our legal rights and interests.
- You give us consent to do so for a specific purpose.
- We need to process your Personal Data to comply with a legal obligation.
If you have consented to our use of Personal Data about you for a specific purpose, you have the right to change your preferences at any time.
We note that we are a “controller” for those services where we make decisions on how personal information is used in connection with our services, and we are a “processor” for those services where we only use personal information as allowed by our customers.
Where we make decisions on how personal information is used in connection with our Websites, products or services (where we are acting as a controller), we are responsible for the obligations of a “controller” under applicable laws in connection with the processing of personal information – for example, we use this Privacy Statement and other notices to provide you with information about our use of personal information, as required by law. Where we only use personal information as allowed by our customers (where we are acting as a processor), our customers are similarly responsible for the obligations of a “controller” under applicable laws in connection with the processing of personal information.
We may use your email address to send you newsletters or marketing emails. We will ask for your consent consistent with the applicable law when you first provide your Personal Data. You can opt out by following the unsubscribe instructions included in these emails, or you can contact us at firstname.lastname@example.org or in writing to FirmWorks, Attention: Data Privacy Officer, 14 Hampshire Drive, Hudson NH 03051.
Requesting Access to Your Personal Data.
You have the right to request access to any Personal Data we hold about you as well as related information, including the purposes for processing the Personal Data, the recipients or categories of recipients with whom the Personal Data has been shared, where possible, the period for which the Personal Data will be stored, the source of the personal information, and the existence of any automated decision making.
Requesting Correction of Your Personal Data.
You have the right to obtain without undue delay the rectification of any inaccurate Personal Data we hold about you.
Requesting Erasure of Your Personal Data.
You have the right to request that Personal Data held about you is deleted.
Requesting Restriction of Processing Your Personal Data.
You have the right to prevent or restrict processing of your Personal Data.
Requesting Transfer of Your Personal Data.
You have the right to request transfer of Personal Data directly to a third party where this is technically feasible.
Last updated: November 22, 2023
For any questions about this policy, please direct to our data privacy officer at email@example.com or in writing to FirmWorks, Attention: Data Privacy Officer, 14 Hampshire Drive, Hudson NH 03051.