Privacy Policy

1. Who We Are and How to Contact Us

3B Tax & Accounting LLC d/b/a 3B Global Enterprise Advisors (the Firm, we, us or our) operates this website. 3B Global Enterprise Advisors is our technology advisory and engineering division and service brand. For privacy questions or requests, email compliance@3baccounting.com with “Privacy Request” in the subject line.

This notice covers this website, introductory scheduling, business inquiries and related relationship administration. For these purposes, the Firm determines why and how information is used. Where we process personal data solely on a client’s instructions, our role and obligations are set by the engagement and any required data-processing agreement. Contact the relevant client first for requests about data it controls; we will assist as required.

2. Information We Collect and Its Sources

You may provide identifiers and contact information such as your name, business email, phone number and organization; professional information such as role and business needs; and correspondence, scheduling details and business, financial or technical context. We may receive related information from your authorized representatives, the scheduling provider, and service providers involved in administering the relationship.

Hosting and network providers may process IP addresses, browser and device information, request timestamps and security logs. If a paid engagement uses invoicing or payment services, information may include billing details, transaction records and payment status. Payment credentials entered into a provider’s own interface are processed under that provider’s arrangements. This website itself has no payment, account-registration or file-upload form.

Provide only information relevant to the inquiry and that you are authorized to share. Relevant confidential context can be discussed, but credentials, government identifiers, health records, tax returns and restricted program information should be exchanged through a suitable secure channel and any required agreement, not general booking fields.

3. How We Use Information

We use contact, professional and correspondence information to respond, arrange meetings, assess delivery fit, prepare proposals and administer relationships. Billing and transaction records support payment administration, accounting and legal recordkeeping. Technical information supports website delivery, security, troubleshooting and abuse prevention. We may also use relevant records to satisfy legal obligations, resolve disputes and establish or defend legal claims.

Providing information is generally voluntary, but without contact details or required engagement information we may be unable to respond, schedule or provide the requested service. We do not use this website to make solely automated decisions producing legal or similarly significant effects about visitors.

4. GDPR and UK GDPR Legal Bases

Where the EU GDPR or UK GDPR applies, processing must have an applicable legal basis. Responding to a person’s request for an engagement and performing a contract with that person may rely on pre-contractual steps or contractual necessity. Business contact administration, service security and responding to corporate representatives may rely on legitimate interests in operating and protecting the business, balanced against individual rights. Statutory recordkeeping and required disclosures rely on legal obligations. Consent is used where required, including for optional communications or technologies that require it.

You may withdraw consent at any time without affecting processing that was lawful before withdrawal. You may object to processing based on legitimate interests, and may object to direct marketing at any time. Special-category or other specially protected data requires an additional applicable legal condition and appropriate arrangements; this notice is not blanket authorization to process it.

5. Calendly, Cookies and Analytics

Our scheduling page provides an optional embedded Calendly scheduler. It loads only after you choose “Load Calendly Scheduler.” Loading it connects your browser to Calendly and its supporting services, which may process device and network information and use cookies or similar technologies under their own notices and controls. You may instead open Calendly directly. Use “Unload Scheduler” to stop the embedded scheduler; this does not erase information already submitted or cookies already set. Browser settings and Calendly’s controls govern those cookies.

Information entered in Calendly is processed by Calendly and made available to the meeting organizer. Campaign labels in booking links are passed to Calendly for attribution; do not place personal information in those labels.

The scheduling page records page-view, scheduler-view, time-selection and booking-completion event names in a temporary browser data layer. The current site does not send these events to a 3B analytics service or database. These event records exclude booking payloads, names, email addresses and appointment identifiers. Industry search operates locally in your browser. We have not added advertising pixels or cross-site advertising trackers to this release. Necessary platform or provider technologies may operate separately.

6. Analytics & Performance Measurement

We utilize Google Analytics 4 ("GA4"), a web analytics service provided by Google LLC / Google Ireland Limited ("Google"), to evaluate how visitors interact with our website and to improve user experience.

• Data Collection & Telemetry: GA4 uses first-party cookies (including _ga) to gather pseudonymized usage metrics, such as unique identifier tokens, browser and device metadata, interaction events, and masked IP addresses. IP addresses are automatically anonymized by default prior to storage.
• Consent & User Control: Analytics cookies remain inactive by default and are deployed only upon your explicit consent via our cookie settings. You may update your preferences or revoke consent at any time through our Cookie Preference Center or via the Google Analytics Opt-Out Browser Add-on.
• International Data Transfers: Information generated by these analytics cookies may be transmitted to and stored on Google servers located in the United States, governed by standard contractual clauses for cross-border data protection. For further details, review Google’s Privacy & Terms.

The Google tag loads on website pages other than the Terms of Service and Privacy Policy, where analytics tracking is disabled. Before analytics consent is granted, analytics cookie storage is denied and Google may receive cookieless measurement signals. Your analytics preference controls cookie storage; declining does not prevent the tag itself from loading.

7. Newsletter and Marketing Choices

The newsletter signup is not currently active on this website. If introduced, the collection point will identify the signup provider and explain the subscription choice before submission. Booking a strategy session does not itself subscribe you to a newsletter.

You can stop optional marketing communications by using an unsubscribe option where provided or emailing compliance@3baccounting.com. Essential service, security, billing and legal communications may continue where appropriate. We may retain a limited suppression record to respect your choice.

8. Who Receives Information

Information may be disclosed to authorized employees and subcontractors who need it for their work; hosting, scheduling, communications, CRM, invoicing and payment providers; professional advisers; and authorities or other recipients where required by law or necessary to protect legal rights. Access and disclosures must be limited to the purpose and subject to appropriate confidentiality and contractual restrictions where required.

Client-controlled project information may be disclosed to the client and its authorized participants in accordance with the engagement. A business reorganization or transfer may involve information subject to applicable protections and notice requirements. This is not permission for unrestricted disclosure of nonpublic personal information.

9. Third-Party Business and Payment Services

The Firm uses proprietary systems and third-party business services, which may include Intuit, Stripe, Zelle and other payment rails for applicable business transactions. Their use depends on the service or payment method selected; these providers are not all embedded in this website. Providers may process identifiers, transaction details and device information for service delivery, security and fraud prevention under their own terms.

Review Intuit’s Privacy Statement, Stripe’s Privacy Policy, Zelle’s Website Privacy Notice and Calendly’s Privacy Notice. Zelle’s website notice concerns its website; a payment through a financial institution is also subject to that institution’s applicable notices. Links do not extend a provider’s policy to all of the Firm’s activities.

10. International Processing

The Firm operates in the United States. Information may be processed in the United States and other countries where authorized personnel or service providers operate. Their laws may differ from those in your location.

Where applicable law restricts a transfer, an appropriate transfer mechanism and any required supplementary safeguards must be established, such as an applicable adequacy decision or approved contractual safeguards. This notice does not assert that every provider or transfer is certified under a particular framework. Contact us for information about safeguards relevant to your information or a copy where available, subject to appropriate redactions.

11. Retention

We retain inquiry and relationship information for the period reasonably needed to respond, administer the relationship and preserve relevant business records. Retention depends on the type and sensitivity of the information, the purpose, legal and tax recordkeeping requirements, contractual duties, unresolved disputes and applicable limitation periods. Security logs and backup records are governed by their operational purpose and applicable provider or engagement arrangements.

When retention is no longer needed, information should be deleted, anonymized or placed beyond ordinary use subject to lawful backup and retention requirements. Client-project retention and return arrangements are established in the engagement. You may ask us about the retention criteria applicable to your records.

12. Security, Confidentiality and Incident Response

We maintain reasonable administrative, technical and organizational safeguards proportionate to the information and services involved. Access, confidentiality, secure transmission and retention requirements must reflect the relevant data classification. No system can guarantee absolute security. References to ISO standards or SOC 1/SOC 2 criteria do not establish certification, audited compliance or the existence of an assurance report.

If we become aware of a personal data breach, we assess the affected information, contain and investigate the incident, and provide notices required by applicable law and contract. Where we act as a processor, we notify the client controller without undue delay. Where a GDPR controller must notify its supervisory authority, the applicable rule is without undue delay and, where feasible, within 72 hours of awareness, subject to the statutory risk exception. Notices to affected individuals follow the applicable legal requirements. Information may be supplied in stages as the scope, consequences and remediation become known.

13. Your Privacy Rights

Depending on your location, the applicable law and our role, you may request access to or a copy of your information, correction, deletion, restriction of processing, portability, or withdrawal of consent. You may object to legitimate-interest processing and direct marketing. Exceptions may apply, including required records, legal claims and the rights of others.

Email compliance@3baccounting.com and describe your request. We may ask for proportionate verification or evidence that an authorized agent may act for you. Please do not send identity documents unless we arrange a suitable channel. We respond within applicable deadlines; GDPR requests are generally addressed within one month, with permitted extensions explained. You may complain to the data-protection authority where you live, work or believe an infringement occurred, including the UK Information Commissioner where applicable.

14. California Privacy Rights — CCPA/CPRA

Where the CCPA, as amended by the CPRA, applies to the Firm and the information concerned, California residents may request to know the categories and specific pieces of personal information collected, the sources, purposes and recipient categories; request deletion or correction; opt out of sale or sharing for cross-context behavioral advertising; and limit certain uses or disclosures of sensitive personal information. These rights are subject to statutory conditions and exceptions. We will not unlawfully discriminate or retaliate for exercising them.

The collection, purpose, source and recipient categories for this site are described above. The current website implementation does not include a Firm-operated sale of personal information or cross-context behavioral advertising integration. It does not use sensitive information to infer characteristics about visitors. If practices change, applicable notices, opt-out mechanisms and recognition of qualifying signals such as Global Privacy Control must be in place before the relevant processing.

Submit a request to compliance@3baccounting.com, including an authorized-agent request. We verify requests when required and respond within applicable periods, generally 45 days for verifiable access, deletion or correction requests, with permitted extensions explained. A request to opt out of sale or sharing is not subject to the same identity-verification requirement. Rights under this section apply when legally available; naming the law does not imply that every activity falls within its scope.

15. Children’s Information

This website is directed to business decision-makers and is not intended for children under 16. We do not knowingly solicit children’s personal information through this marketing website. Contact us if you believe a child has submitted information so we can assess and address it. Student or other minor-related data in a client project requires separate authorization, safeguards and applicable contractual arrangements.

16. Miscellaneous Legal Disclosures

The Firm evaluates services and accepts clients case by case on lawful, non-discriminatory grounds. It does not offer Public Accounting Services, Regulated Investment Services, Banking Services or Legal Services under this website’s technology-services framework. Coordination with licensed providers does not transfer their regulated role to the Firm.

No tax savings, financial results, financing approval or third-party product performance is guaranteed. Business-capital or payment-service references do not represent that the Firm is a regulated financial-services entity. Economic and regulatory factors, including changes in tax law, filing status and entity structure, may affect outcomes. These disclosures supplement the Terms of Service without expanding an engagement.

17. Updates and Relationship to Agreements

Last Updated: November 4, 2026. We may update this notice by posting a revised version and date. Changes take effect on posting for the practices described, subject to applicable law. Where a change requires additional notice or consent, we will provide or obtain it before the relevant processing. An update cannot retroactively authorize processing that required consent or remove statutory rights.

This notice explains information practices; viewing the website or continuing an engagement does not itself constitute consent to optional tracking, marketing or new processing requiring consent. Contractual terms and their amendments are governed by Section 2 of the Terms of Service and the applicable executed agreements. Posting a privacy update does not override a signed engagement or data-processing agreement.