PRIVACY POLICY

Last Updated: August 28, 2026

This Privacy Policy explains how Striv CPAs, doing business as Striv CPAs (“Striv,” “we,” “us,” or “our”), collects, uses, discloses, retains, and protects Personal Information.

For purposes of this Privacy Policy, “Personal Information” generally means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked to an individual or household. The precise definition may vary under applicable law.

1. Scope of This Privacy Policy

This Privacy Policy applies to Personal Information collected through:

  • The website located at strivcpas.com and pages linking to this Policy;
  • Website contact, consultation, and scheduling forms;
  • Email, telephone, and other communications with prospective and current clients;
  • Online consultations and events;
  • Striv’s client intake and professional-service processes;
  • Client portals and other systems operated by or on behalf of Striv; and
  • Other interactions in which this Privacy Policy is provided.

This Policy does not necessarily apply to:

  • Independent third-party websites or platforms;
  • Information governed exclusively by a separate contract or notice;
  • Employee and job-applicant information covered by a separate policy; or
  • Information that has been lawfully deidentified or aggregated so that it cannot reasonably be associated with an individual.

Client information may also be governed by engagement letters, professional confidentiality obligations, Internal Revenue Code requirements, separate tax-information consents, and financial privacy notices. When another notice or signed agreement provides additional protection or more specific terms for particular information, that document will apply to that information.

2. Personal Information We Collect

The information Striv collects depends on how you interact with us and which services you request.

A. Identifiers and contact information

We may collect:

  • Name;
  • Business name;
  • Mailing and business addresses;
  • Email address;
  • Telephone number;
  • Job title or role;
  • Account or client identification number; and
  • Other contact details.

B. Business and professional information

We may collect:

  • Industry and business type;
  • Ownership and entity information;
  • Business size, revenue range, and number of employees;
  • Professional history and responsibilities;
  • Business goals, growth plans, and transaction plans;
  • Existing accounting, payroll, tax, and financial systems;
  • Information about advisers, employees, owners, contractors, and business contacts; and
  • Information provided during an introductory consultation or engagement evaluation.

C. Tax, accounting, payroll, and financial information

When necessary to evaluate or perform professional services, we may collect:

  • Tax returns, schedules, forms, elections, notices, and supporting documentation;
  • Taxpayer identification numbers and Social Security numbers;
  • Income, deductions, assets, liabilities, ownership interests, and transaction records;
  • Bank, payment, investment, and financial account information;
  • Accounting records, ledgers, financial statements, invoices, and receipts;
  • Payroll records, compensation, withholding, benefits, and employee or contractor information;
  • Government identification and identity-verification information;
  • Information concerning dependents or other individuals appearing in financial or tax records;
  • Business valuations, forecasts, budgets, cash-flow information, and key performance indicators;
  • Information concerning an acquisition, sale, financing, restructuring, or other transaction; and
  • Other information reasonably necessary to provide requested services or comply with legal and professional obligations.

Some of this information may be considered sensitive Personal Information under applicable law.

D. Engagement and transaction information

We may collect:

  • Services requested or received;
  • Engagement status and history;
  • Contracts, authorizations, consents, and electronic signatures;
  • Billing and payment history;
  • Communications and document requests;
  • Client preferences;
  • Complaints, questions, and support requests; and
  • Records concerning the administration of a client relationship.

Where payment processing is offered, payment-card or banking information may be collected directly by a payment processor rather than stored by Striv.

E. Communications

We may collect information contained in:

  • Contact-form submissions;
  • Emails and attachments;
  • Telephone messages;
  • Consultation notes;
  • Client-service communications;
  • Surveys and feedback; and
  • Other correspondence.

Do not send highly sensitive tax or financial information through a general contact form or ordinary unencrypted email. Use an approved secure portal or encrypted transfer method.

F. Website, device, and usage information

When you use the Site, we and our service providers may automatically collect:

  • Internet Protocol address;
  • Browser and device type;
  • Operating system;
  • Device identifiers and cookie identifiers;
  • Pages visited and links selected;
  • Dates, times, and duration of visits;
  • Referring and exit pages;
  • General or approximate location derived from an IP address;
  • Site interactions, form interactions, and navigation patterns;
  • Advertising and campaign attribution data; and
  • Diagnostic, performance, and security information.

G. Information from other sources

We may receive information from:

  • Clients, prospective clients, and their authorized representatives;
  • Referrals and professional advisers;
  • Client-authorized accounting, tax, payroll, banking, or business platforms;
  • Identity-verification and fraud-prevention providers;
  • Government agencies and public records;
  • Business directories and professional networks;
  • Analytics and advertising providers;
  • Service providers supporting Striv’s operations; and
  • Parties involved in a proposed or completed business transaction.

3. How We Use Personal Information

Striv may use Personal Information to:

  • Respond to questions and consultation requests;
  • Schedule meetings and communicate with prospective clients;
  • Evaluate whether Striv can accept a proposed engagement;
  • Perform conflict, identity, independence, fraud, and compliance checks;
  • Prepare proposals, engagement letters, and service recommendations;
  • Provide tax, accounting, payroll, advisory, reporting, M&A preparation, and related professional services;
  • Prepare or submit returns, forms, filings, reports, elections, and payments when authorized;
  • Maintain books, financial records, payroll records, and reporting systems;
  • Conduct financial analysis, forecasting, tax planning, and business advisory work;
  • Coordinate with client-authorized attorneys, financial institutions, payroll providers, software providers, governmental bodies, and other advisers;
  • Operate and administer client portals and accounts;
  • Process invoices and payments;
  • Authenticate users and protect accounts;
  • Provide customer service and technical support;
  • Send administrative, transactional, deadline, security, and service-related communications;
  • Send newsletters, educational information, and marketing communications where permitted;
  • Understand how people use the Site;
  • Measure the effectiveness of website content and marketing;
  • Maintain, improve, personalize, and secure the Site;
  • Detect, investigate, and prevent fraud, misuse, security incidents, and unlawful activity;
  • Establish, exercise, or defend legal rights;
  • Comply with tax laws, professional standards, court orders, subpoenas, regulatory requirements, and other legal obligations;
  • Manage insurance, audits, risk, quality, and internal business operations;
  • Facilitate a merger, financing, reorganization, acquisition, sale, or transfer of assets; and
  • Carry out other purposes disclosed when information is collected or authorized by the person to whom it relates.

Where required, Striv will obtain consent before using information for a materially different purpose.

4. Tax-Return Information and Nonpublic Personal Information

Certain information handled by Striv may be protected tax-return information under federal law or nonpublic personal information under financial-privacy laws.

Striv uses and discloses tax-return information only as authorized by the taxpayer, permitted by applicable law, or reasonably necessary to provide requested tax-return-preparation services.

This Privacy Policy does not constitute consent under Internal Revenue Code Section 7216 or its implementing regulations. When separate consent is legally required for a particular disclosure or use of tax-return information, Striv will seek that consent through an appropriate process.

Striv does not sell tax-return information or nonpublic personal financial information. Striv does not use tax returns, taxpayer identification numbers, payroll records, financial account information, or client financial records for cross-context behavioral advertising.

Where applicable, Striv provides additional financial-privacy notices or disclosures to qualifying individual clients.

5. How We Disclose Personal Information

Striv may disclose Personal Information to the following categories of recipients.

A. Service providers and contractors

We may provide information to vendors that perform services on our behalf, such as:

  • Website hosting and maintenance;
  • Cloud storage and document management;
  • Client portals and electronic signatures;
  • Customer relationship management;
  • Scheduling and communications;
  • Email delivery;
  • Tax preparation and electronic filing;
  • Accounting, bookkeeping, and financial-reporting software;
  • Payroll processing and filing systems;
  • Payment processing;
  • Data backup and disaster recovery;
  • Cybersecurity, identity verification, and fraud prevention;
  • Analytics and website-performance measurement;
  • Advertising and campaign measurement;
  • Information technology support;
  • Printing, mailing, and document delivery; and
  • Professional-practice management.

These providers are permitted to process information only for authorized purposes and subject to appropriate contractual obligations where required.

B. Government agencies and taxing authorities

When authorized or required, we may disclose information to:

  • The Internal Revenue Service;
  • State and local taxing authorities;
  • Payroll and employment agencies;
  • Secretaries of state and business-registration authorities;
  • Courts, regulators, law-enforcement agencies, and other government bodies; and
  • Other agencies involved in a filing, audit, examination, inquiry, or legal proceeding.

C. Client-authorized parties

At a client’s request or with appropriate authorization, we may disclose information to:

  • Attorneys;
  • Banks and lenders;
  • Investment, insurance, and financial professionals;
  • Payroll and benefits providers;
  • Business owners, employees, officers, and representatives;
  • Buyers, sellers, investors, and transaction advisers;
  • Auditors, valuation professionals, and due-diligence providers; and
  • Other parties designated by the client.

Additional consent may be required before tax-return information is disclosed.

D. Professional advisers and insurers

We may disclose information as permitted by law to attorneys, auditors, insurers, consultants, and other professional advisers for legal advice, risk management, claims administration, insurance, quality review, compliance, or protection of legal rights.

E. Legal, regulatory, and security purposes

We may disclose information when we reasonably believe disclosure is necessary to:

  • Comply with law, legal process, or professional obligations;
  • Respond to a subpoena, court order, warrant, or government request;
  • Prevent, investigate, or address fraud or security incidents;
  • Protect Striv, its clients, its personnel, or another person;
  • Enforce contracts or policies;
  • Establish, exercise, or defend legal claims; or
  • Respond to an emergency involving safety or security.

F. Business transactions

Information may be reviewed, disclosed, or transferred in connection with a proposed or completed merger, sale, financing, reorganization, acquisition, dissolution, bankruptcy, or transfer of some or all of Striv’s business or assets.

Any recipient will be required to handle Personal Information in accordance with applicable law and any commitments that continue to apply.

G. With consent or at your direction

We may disclose information for another purpose when you direct us to do so or provide legally sufficient consent.

6. Cookies and Similar Technologies

The Site may use cookies, pixels, tags, scripts, local storage, and similar technologies. These technologies may be operated by Striv or by third parties.

They may include:

Strictly necessary technologies

These support security, network management, accessibility, form submission, fraud prevention, and basic Site functionality.

Functional technologies

These remember preferences or enable enhanced features such as scheduling, embedded media, or chat functions.

Analytics technologies

These help Striv understand Site traffic, navigation, performance, visitor interactions, and technical issues.

Advertising and measurement technologies

These may measure advertising performance, associate visits with a marketing campaign, limit repetitive advertisements, or help deliver advertisements based on online activity.

Striv may use a tag-management system to deploy or manage analytics and advertising technologies. The specific providers and cookies currently in use should be identified through the Site’s Cookie Settings tool.

7. Cookie and Advertising Choices

You can manage nonessential cookies through:

Cookie Settings: [INSERT COOKIE SETTINGS LINK]

You may also adjust browser settings to block or delete cookies. Blocking certain cookies may cause parts of the Site to function incorrectly.

Where required by applicable law, Striv will obtain consent before placing nonessential cookies or similar technologies.

Targeted advertising and legally defined “sales” or “sharing”

Striv does not sell Personal Information in exchange for money.

However, analytics or advertising providers may collect online identifiers and website-interaction information through the Site. Some state privacy laws may define that activity as a “sale,” “sharing,” or processing for targeted advertising, even when no money is exchanged.

You may opt out through:

Your Privacy Choices: [INSERT PRIVACY CHOICES LINK]

An advertising opt-out does not prevent all advertising. It generally limits the use or disclosure of information for certain targeted-advertising purposes.

Tax returns, taxpayer identification numbers, financial account information, payroll records, client financial records, and other information obtained through a professional engagement are not disclosed to advertising partners for targeted advertising.

Browser-based opt-out signals

Where applicable law requires recognition of a qualifying browser-based opt-out preference signal, such as Global Privacy Control, and Striv’s systems can associate the signal with the relevant browser or device, Striv will process the signal as an opt-out request for that browser or device.

The signal may not apply across different browsers, devices, or accounts.

Do Not Track

Some browsers offer a “Do Not Track” setting. Because there is not a universally accepted technical or legal standard for these signals, the Site may not respond to traditional Do Not Track signals. This does not affect Striv’s handling of legally recognized opt-out preference signals where required.

8. Marketing Communications

Striv may send educational materials, newsletters, updates, event information, or marketing communications where permitted by law.

You may opt out of marketing emails by selecting the unsubscribe link in the email or contacting Striv.

Opting out of marketing does not prevent Striv from sending:

  • Engagement or client-service communications;
  • Document requests;
  • Filing or deadline communications;
  • Billing and payment notices;
  • Security notifications;
  • Legal notices; or
  • Other nonmarketing messages.

Striv will not use tax-return information to market non-tax-preparation services unless the use is permitted by law or supported by legally sufficient consent.

9. Data Retention

Striv retains Personal Information for as long as reasonably necessary for the purposes described in this Policy, including to:

  • Respond to inquiries and evaluate potential engagements;
  • Provide professional services;
  • Maintain business and client records;
  • Meet tax, accounting, employment, professional, contractual, insurance, and legal obligations;
  • Complete audits or quality reviews;
  • Detect or respond to security incidents;
  • Resolve disputes and enforce agreements; and
  • Establish, exercise, or defend legal claims.

Retention periods depend on factors such as:

  • The type and sensitivity of the information;
  • Whether the person becomes a client;
  • The nature and duration of an engagement;
  • Applicable statutes of limitation;
  • Government and professional recordkeeping requirements;
  • Contractual obligations;
  • Litigation holds;
  • Security considerations; and
  • Whether continued retention is reasonably necessary for a legitimate business purpose.

When information is no longer reasonably required, Striv may delete, destroy, anonymize, or securely dispose of it in accordance with applicable policies and law.

10. Information Security

Striv maintains administrative, technical, and physical safeguards designed to protect Personal Information against unauthorized access, acquisition, use, alteration, disclosure, destruction, or loss.

Depending on the information and system involved, safeguards may include:

  • Access restrictions based on business need;
  • Authentication and account-security controls;
  • Encryption and secure-transfer tools;
  • Employee confidentiality and security requirements;
  • Security awareness training;
  • Vendor assessment and oversight;
  • Backup and recovery procedures;
  • Network, endpoint, and email protections;
  • Incident detection and response procedures; and
  • Secure retention and disposal processes.

No security program can eliminate all risk. Striv cannot guarantee that information will never be accessed, used, or disclosed without authorization.

You should protect your passwords, use multifactor authentication where available, avoid sending sensitive information through ordinary email, and promptly report suspected unauthorized access.

When required by law, Striv will notify affected individuals and appropriate governmental authorities of qualifying security incidents.

11. Privacy Rights

Depending on your state of residence and subject to applicable exemptions, limitations, and verification requirements, you may have the right to:

  • Confirm whether Striv processes your Personal Information;
  • Access or obtain a copy of Personal Information;
  • Correct inaccurate Personal Information;
  • Request deletion of Personal Information;
  • Receive certain information in a portable format;
  • Learn the categories of Personal Information collected, used, or disclosed;
  • Learn the categories of sources and recipients;
  • Opt out of a legally defined sale or sharing of Personal Information;
  • Opt out of targeted advertising;
  • Limit certain uses or disclosures of sensitive Personal Information;
  • Opt out of certain profiling or automated decision-making where applicable;
  • Withdraw consent where processing is based on consent;
  • Appeal the denial of a privacy request; and
  • Exercise privacy rights without unlawful discrimination or retaliation.

These rights are not absolute. For example, Striv may need to retain or use information to provide requested services, comply with tax and professional obligations, maintain legally required records, protect security, prevent fraud, complete a transaction, or establish and defend legal claims.

Some information may also be exempt from general state consumer-privacy laws because it is governed by federal financial-privacy requirements, tax laws, professional obligations, employment laws, or business-to-business exemptions.

Utah’s consumer-privacy law requires covered businesses to provide an accessible notice describing the categories of data processed, processing purposes, methods for exercising rights, categories shared, and categories of third-party recipients. The structure above is designed to address those core notice elements as well as broader rights that may apply to visitors from other states. (Utah Legislature)

12. How to Submit a Privacy Request

To submit a privacy request, contact Striv through one of the following methods:

Email: Admin@strivcpas.com
Subject line: Privacy Request

Mail:
Privacy Request
Striv CPAs
3300 Triumph Blvd, Suite 100
Lehi, Utah 84043

Phone: (801) 226-5454

Please provide:

  • Your name;
  • The state in which you reside;
  • The email address or telephone number associated with your interaction with Striv;
  • The right you are seeking to exercise; and
  • Sufficient information to identify the relevant records.

Do not send a Social Security number, taxpayer identification number, password, or complete financial account number with an initial request.

Verification

Striv may need to verify your identity and authority before completing a request. Verification may involve matching information supplied with information already maintained by Striv or requesting additional documentation.

Striv will use information submitted for verification only for verification, security, fraud prevention, and compliance purposes.

Authorized agents

Where permitted by law, an authorized agent may submit a request on your behalf. Striv may require proof of the agent’s authority and may contact you directly to confirm the request.

Appeals

Where applicable, you may appeal the denial of a request by replying to Striv’s decision or emailing Admin@strivcpas.com with the subject line Privacy Appeal. Include the request number, if provided, and an explanation of why you believe the decision should be reconsidered.

Striv will respond within the period required by applicable law.

13. Children’s Privacy

The Site and Striv’s professional services are not directed to children under 13, and Striv does not knowingly collect Personal Information directly from children under 13 through the public Site.

Information concerning dependents or minors may appear in tax, payroll, estate, benefit, or other client records provided by an authorized adult. That information is handled as part of the applicable professional engagement and is not used for advertising.

A parent or legal guardian who believes a child submitted Personal Information through the public Site may contact Striv to request review and deletion where appropriate.

14. Third-Party Websites and Services

The Site may contain links to websites, platforms, or services operated independently from Striv.

This Privacy Policy does not govern those third parties. Their privacy policies and terms control their collection and handling of information.

Review the policies of a third-party service before providing information to it.

15. United States Operations

Striv is based in the United States, and information may be processed and stored in the United States.

Visitors accessing the Site from outside the United States understand that United States privacy laws may differ from those in their home jurisdiction. Where non-U.S. privacy laws apply to Striv’s activities, Striv will process information in accordance with applicable requirements.

16. Changes to This Privacy Policy

Striv may revise this Privacy Policy periodically to reflect changes in its services, technology, vendors, legal obligations, or information-handling practices.

The revised Policy will be posted on this page with an updated “Last Updated” date. When required by law, Striv will provide additional notice or obtain consent before applying material changes to previously collected Personal Information.

17. Contact Striv

Questions, concerns, or complaints about this Privacy Policy or Striv’s privacy practices may be directed to:

Striv CPAs
3300 Triumph Blvd, Suite 100
Lehi, Utah 84043
Phone: (801) 226-5454
Email: Admin@strivcpas.com