Last updated: October 5, 2026

1. Who We Are

Firm Clients ("Firm Clients," "we," "us," "our") provides done-for-you client-acquisition services (including Meta advertising, funnels, and follow-up automation) for accounting firms and CPAs. We are the data controller for personal information collected through our website and services.

2. Information We Collect

(a) Information you provide. When you submit an application, booking, or contact form — or become a client — we may collect: your name, email address, phone number, company/firm name, role, industry and niche, revenue range, current marketing channels, offer details, application answers, scheduling information, communications with us, and client-submitted materials (such as ad account access, creative assets, call recordings, or CRM exports needed to deliver our services). Payment card details are processed by our payment processor (e.g., Stripe) and are not stored on our servers.

(b) Information collected automatically. When you visit our website, we and our service providers may automatically collect device and log data (IP address, browser type, pages visited, time spent), cookies and similar technologies, and advertising identifiers (including the Meta Pixel and similar tags) used for analytics and ad measurement.

(c) Information from third parties. We may receive information from advertising platforms (Meta, Google, YouTube, TikTok), publicly available business sources, and our payment processor (such as transaction status and card brand/last-four/country — never full card numbers).

3. How We Use Information

We use personal information to: operate and deliver our services; evaluate applications and determine fit; communicate with you (transactional messages, scheduling, support); send marketing communications where you have consented or as otherwise permitted by law; personalize and measure advertising; analyze and improve our website and services; comply with legal obligations; and protect our rights and the safety of others.

4. Consent to Calls and Texts (TCPA / CASL)

By submitting a form on our website that includes your telephone number, you provide your express consent for Firm Clients to contact you by telephone calls (including calls made with an autodialer or prerecorded voice) and by SMS/text message about your inquiry, appointments, services, and — where you have opted in — marketing. Consent is not a condition of purchase. Message and data rates may apply. You may opt out of marketing texts at any time by replying STOP, and opt out of marketing emails via the unsubscribe link. For Canadian residents, this also constitutes express consent under Canada's Anti-Spam Legislation (CASL).

5. How We Share Information

We do not sell your personal information for money. We share it only as follows: with service providers who help us operate (e.g., website hosting, HighLevel/CRM, scheduling tools, email/SMS providers, analytics, payment processing, document signing) — bound to use it only for our purposes; with advertising partners (hashed or pseudonymous event data with platforms such as Meta, Google, YouTube, and TikTok for ad measurement, retargeting, and lookalike audiences — where applicable law treats this as "sharing" or targeted advertising, you may opt out as described in Section 9); with professional advisors (legal, accounting) as needed; in corporate transactions (merger, acquisition, or sale of assets); when required by law, court order, or to protect our rights, safety, or property; and with your consent for any other purpose you authorize.

6. International Transfers

We are based in Canada and our service providers may be located in Canada, the United States, or other countries. Where required, we use appropriate safeguards (such as standard contractual clauses) for transfers subject to GDPR/UK GDPR.

7. Data Retention

We keep personal information only as long as reasonably necessary: financial and transaction records generally up to 7 years as required by law; prospect/lead data up to 24 months; client records and call recordings for the duration of the engagement and up to 24 months after it ends.

8. Cookies and Tracking

We use: strictly necessary cookies (site functionality); analytics cookies (e.g., Google Analytics); and advertising/retargeting technologies (e.g., Meta Pixel, Google Ads tags, YouTube tags). You can control cookies through your browser settings, and manage ad personalization via platform controls such as facebook.com/ads/preferences and industry opt-out tools (e.g., the Digital Advertising Alliance / NAI opt-out pages).

9. Your Privacy Rights

All users may request access to, correction of, or deletion of their personal information, and may opt out of marketing communications at any time, by contacting us. EEA / UK / Switzerland (GDPR): rights of access, rectification, erasure, restriction, portability, and objection, plus the right to lodge a complaint with your supervisory authority. California (CCPA/CPRA): right to know, delete, and correct personal information, to opt out of "sharing" for cross-context behavioral advertising, and to non-discrimination for exercising your rights — exercise by contacting us with subject line "California Privacy Request"; we verify and respond within 45 days. Other U.S. states (including Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana): similar rights of access, correction, deletion, and opt-out of targeted advertising by contacting us. Canada (PIPEDA): right to access and challenge the accuracy of your personal information ; if unresolved, you may contact the Office of the Privacy Commissioner of Canada. We verify requests as required by law and respond within the applicable statutory timeframe (generally 30-45 days).

10. Security

We use reasonable administrative, technical, and physical safeguards to protect personal information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

11. Children

Our services are for business use and are not directed to anyone under 18. We do not knowingly collect personal information from children under 16.

12. Third-Party Links

Our website may link to third-party sites or tools. We are not responsible for their privacy practices; review their policies before providing information.

13. Do Not Track / Global Privacy Control

We do not currently respond to "Do Not Track" browser signals. Where required by law, we honor Global Privacy Control (GPC) opt-out signals.

14. Changes to This Policy

We may update this policy from time to time. The revised version will be posted on this page with an updated "Last updated" date, and continued use of our website or services after changes take effect constitutes acceptance.