Privacy Policy
Last updated: January 2025
1. Information We Collect
We collect only what is needed to operate the Site and respond to inquiries. That includes:
- Name, email address, phone number, and message content you submit through the contact form
- Information you provide when scheduling a consultation through our scheduling provider
- Cookies and analytics data (see Section 3)
- IP address, user-agent, and basic server-log data automatically recorded by our hosting provider
We do not collect tax documents, financial records, or other sensitive client data through this Site. Those are exchanged only through our secure client portal under a signed engagement.
2. How We Use Your Information
Information you submit is used to respond to your inquiry, schedule a consultation, follow up on an existing engagement, and improve the Site. We do not sell your information. We do not use it for advertising.
4. Third-Party Services
The following providers process data on our behalf:
- Schematic, contact form submission and email forwarding
- Cloudflare Turnstile, bot protection on forms
- Cloudflare Web Analytics, privacy-respecting traffic analytics
- Google Analytics 4, loaded only after consent
- Calendly, appointment scheduling on the contact page
- Google Maps, embedded map of our office
5. Data Retention
Contact-form messages are retained in our email system for up to three years for client-service continuity, then deleted. Engagement records are retained for seven years to meet professional and tax-record requirements.
6. Your Rights
If you are a resident of the European Union, the United Kingdom, or California, you have the right to access, correct, delete, or request a copy of your personal information, and to object to or restrict certain processing. California residents have the additional right to opt out of any "sale" of personal information. We do not sell personal information. To exercise any of these rights, email hello@mitchellcpa.com.
7. Children's Privacy
The Site is not directed to children under 13, and we do not knowingly collect information from children under 13.
8. Security
The Site is served over HTTPS. Client documents are exchanged through an encrypted portal rather than email. We restrict internal access to client information to staff who need it for their work.
9. Changes to This Policy
We may update this policy from time to time. Updates will be posted to this page with a new "Last updated" date.
10. Contact
Privacy questions can be sent to hello@mitchellcpa.com or by mail to 1220 SW Morrison St, Suite 800, Portland, OR 97205.