Privacy Policy

The Biz CPA (Sandeep Basu, CPA) — referred to in this policy as “The Biz CPA”, “we”, “us”, or “our” — operates the website at www.thebizcpa.com (the “Site”).

This Privacy Policy explains what information we collect when you visit the Site, request a consultation, or interact with our Biz Concierge chatbot, how we use that information, and the rights you have over it. It is written to be readable for normal visitors while reflecting our obligations under the EU General Data Protection Regulation (GDPR), the UK GDPR, the California Consumer Privacy Act as amended by the CPRA (CCPA/CPRA), and Canada's PIPEDA.

Last updated: July 21, 2026.

We only collect information that we actually need. Specifically:

a. Information you give us through forms

When you submit our consultation or contact form, we collect the name, email address, phone number (optional), company name (optional), and the content of the message you send us.

b. Information you share with the Biz Concierge chatbot

Our website includes a chat widget called the Biz Concierge. When you use it, we store:

• The messages you type and the replies the assistant returns.
• A conversation identifier and timestamps so we can keep your thread together.
• If you ask us to follow up with you, the contact details you voluntarily provide in the chat (such as your name, email, or phone number).

We do not use your chatbot conversations to train third-party AI models. We process them only to answer your questions, to follow up if you request it, and to improve how the assistant responds.

c. Device and usage information

Like most websites, our servers automatically receive standard technical information when you visit, including IP address, browser type and version, device type, referring page, and the pages you view. This information is used to operate the Site securely and to diagnose issues.

d. Information we do not collect

We do not knowingly collect Social Security Numbers, government ID numbers, payment card data, banking credentials, or any similarly sensitive information through this website. Sensitive tax and financial information is handled separately through our secure client engagement process, not through public web forms or the chatbot.

We use the information described above to:

• Respond to your inquiry or consultation request.
• Power the Biz Concierge chatbot so it can answer questions about our firm and services.
• Pass your contact details to Sandeep or our team if you ask us to reach out.
• Operate, secure, and improve the Site.
• Meet our legal, regulatory, and professional record-keeping obligations as a CPA firm.

We do not use your information for automated decisions that produce legal or similarly significant effects about you.

If you are in the EU, the UK, or another GDPR-aligned jurisdiction, we rely on the following legal bases:

• Consent — when you voluntarily start a conversation with the Biz Concierge or submit a contact form. You may withdraw consent at any time.
• Steps prior to entering a contract — when you request information about engaging our services.
• Legitimate interests — to keep the Site secure, prevent abuse, and improve our services, balanced against your rights.
• Legal obligation — when we must retain or disclose records to comply with applicable law or professional standards.

We use a small number of strictly necessary technologies to make the Site work, for example, local browser storage that keeps your Biz Concierge conversation visible if you navigate between pages or come back later.

We do not use cookies or trackers for cross-site advertising. If we add analytics or other optional cookies in the future, we will update this policy and, where required, ask for your consent first.

By providing a telephone number and submitting this form, you agree to receive SMS text messages to respond to your questions, send you updates on the service, and general support from The Biz CPA. Message frequency may vary. Message and data rates may apply. You can reply STOP to opt out of further messaging and HELP for assistance or call (363) 200-4713. Please see our Privacy Policy.

No personal information, mobile number, or messaging consent information will be shared with third parties or affiliates for marketing or promotional purposes.

We do not sell or rent your personal information, and we do not “share” it for cross-context behavioral advertising as those terms are defined under the CCPA/CPRA.

We disclose limited information only to:

• Service providers who help us run the Site, host our database, send email, and operate the chatbot. These providers are contractually bound to protect your information and use it only on our instructions.
• AI model providers who process Biz Concierge messages on our behalf to generate replies. We instruct these providers not to use your conversations to train their models.
• Authorities or other parties when we are legally required to do so, or to protect our rights, safety, or the integrity of our services.
• Successors in connection with a merger, acquisition, or sale of our business, subject to confidentiality protections.

We are based in the United States. If you are accessing the Site from outside the U.S., please be aware that information we collect (including your chatbot messages and any details you send through a form) will be transferred to and processed in the United States.

Where required by GDPR, UK GDPR, or PIPEDA, we rely on appropriate safeguards, such as Standard Contractual Clauses with our service providers, to protect your information when it crosses borders.

We keep your information only as long as we need it for the purposes described in this policy, and then we delete or anonymize it. As a general rule:

• Consultation and contact form submissions are retained for as long as needed to follow up with you and, if we go on to work together, for the duration of the engagement plus any period required by professional record-keeping rules.
• Biz Concierge conversations are retained for a limited period to help us improve responses and follow up on open questions, and are then deleted or de-identified.
• Technical logs are retained for a short period for security and diagnostic purposes.

You can ask us to delete information sooner, subject to legal holds — see Section 11.

We use industry-standard administrative, technical, and physical safeguards to protect information, including encrypted transmission (HTTPS/TLS), access controls, hosted databases with row-level security, and least-privilege access for staff.

No method of transmission or storage is 100% secure. Please do not send sensitive financial documents, Social Security Numbers, or banking information through the website or chatbot, we will give you a secure channel once an engagement begins.

a. If you are in the EU, UK, or another GDPR-aligned region

You have the right to:

• Access the personal information we hold about you.
• Rectify information that is inaccurate or incomplete.
• Erase your information (the “right to be forgotten”).
• Restrict or object to certain processing.
• Receive your information in a portable format.
• Withdraw consent at any time, without affecting prior processing.
• Lodge a complaint with your local data protection authority (for example, the UK ICO or your EU member-state regulator).

b. If you are a California resident (CCPA / CPRA)

You have the right to:

• Know what personal information we have collected about you and how we use and disclose it.
• Request deletion of your personal information.
• Correct inaccurate personal information.
• Opt out of the “sale” or “sharing” of personal information — although, as noted above, we do not sell or share personal information as those terms are defined under California law.
• Not be discriminated against for exercising any of these rights.

c. If you are in Canada (PIPEDA)

You have the right to access and correct your personal information and to withdraw consent to its use, subject to legal and contractual restrictions.

d. How to exercise your rights

Send your request to sandeep@thebizcpa.com with enough detail for us to verify your identity and locate your information. We will respond within the timeframe required by applicable law.

Our Site and services are intended for businesses and adults. They are not directed to children under 13 (or under 16 in jurisdictions where that is the relevant age), and we do not knowingly collect personal information from children. If you believe a child has provided us information, please contact us and we will delete it.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or services. When we do, we will update the “Last updated” date at the top of this page. If the changes are material, we will provide a more prominent notice on the Site.

If you have questions about this Privacy Policy or how we handle your information, please contact us:

• The Biz CPA — Sandeep Basu, CPA
• 696 Old Bethpage Rd. Suite 190, Old Bethpage, NY 11804
• Email: sandeep@thebizcpa.com / info@thebizcpa.com
• Phone: (516) 262-1728 / (363) 200-4713 (support/SMS)

You can also reach us through our contact page.