Privacy Policy
What this website records about you, why, and how to ask us about it.
Version 1.0 · Effective
Who we are
This policy covers the United States pages of this website, operated by Umair Manzoor PC, a CPA firm licensed by the Montana Board of Public Accountants. Umair Manzoor is a Certified Public Accountant, licensed in Montana. It also covers the country page at umairmanzoor.com, for the technical request information described below and the cookie that remembers your country choice.
Umair Manzoor PC is responsible for the personal information described here. You can reach us by email at hello@umairmanzoor.com, by phone or WhatsApp on +1 646 372 3934, or by mail at 1001 S. Main Street #12848, Kalispell, MT 59901. That is a mailing address.
Umair Manzoor PC, UM Tax and Accounting Inc. and Umair Manzoor & Co. Chartered Accountants are separate entities. Each is responsible only for its own work.
This policy describes only the practices of Umair Manzoor PC.
What the site records and why
You can read every page of this site without giving us any personal information. Today the site records only the following:
- Server logs. Our hosting provider may record technical information about each request, such as the time, the page requested, the requesting IP address and the browser type, to run and secure the service. The site’s own code does not write request logs; it only counts visits, as the next item describes.
- Visit counts without cookies. We also count visits on our own server, without cookies: the pages read, the site you came from, and your browser, device type, screen size and language. Your IP address is used briefly, to estimate your country and to tell one visit from another, and is not stored. None of this is sent to another company. This happens whatever you choose in the cookie settings, because it uses no cookies and identifies no one.
- Your country choice. If you choose a country, on the country page at umairmanzoor.com or with the region switcher in the footer, a cookie remembers that choice so the home address opens that country’s site. The Cookie Policy lists it.
- Staff sign-in. Authorized staff sign in to a private admin area with Microsoft. Visitors never sign in. Staff sign-ins and admin actions are logged, and where an IP address is involved, only a keyed hash of it is stored, never the address itself.
- Inquiries through our form. If you send the inquiry form, we keep what you enter: your name, email address, phone number if given, where you’re based, what you’re interested in, your message, and any other details the form asks for, such as your company, revenue, timeline or how you heard of us. We also keep the page and any campaign link that brought you to the form, your browser type and a keyed hash of your IP address, never the address itself. Your email address and phone number are stored encrypted. We use them to reply to you and to keep a record of the inquiry. We email you a confirmation through Microsoft 365. A security check by Cloudflare Turnstile helps stop automated spam. We keep inquiries that don’t lead to an engagement for 24 months after our last contact, and spam for 30 days. If you tick the reminders and updates box, we keep a record of that consent for 3 years after you unsubscribe.
- Deadline reminders and occasional tax updates by email, if you ask for them. If you tick the reminders and updates box on our inquiry or booking form, or sign up on our Tax deadlines page, we keep your email address, the wording you agreed to and when you agreed, and send you an email about once a month listing the tax deadlines due in the next 45 days, and occasional tax updates. Every email has an unsubscribe link, and unsubscribing takes effect at once.
- Calls you book. If you book a call on the site, we keep your name, email address, phone number if given, your notes and your time zone as part of your inquiry, with your email address and phone number encrypted. We set up the call in our Microsoft 365 calendar with a Microsoft Teams link, and email you a confirmation, reminders and a link to reschedule or cancel. If you lose that email, Find my booking sends the link again, only to the address on the booking. A booking is kept with your inquiry, on the same timetable.
- Privacy requests. If you use our privacy request form, we keep the type of request, your email address, your name and details if you give them, and a keyed hash of your IP address, never the address itself, with your address, name and details encrypted. We email you a link to confirm the request comes from you. We delete a request you never confirm after 30 days, and keep a request we have answered for 3 years after we close it, as a record of our answer.
If you email us at hello@umairmanzoor.com, your message is received in our business email account, which our email provider hosts, and we use it to reply to you. WhatsApp is a service of Meta that you choose to use: if you message us there, Meta handles the message under its own terms, and we handle the conversation the same way as an email you send us.
The site does not run advertising or social media tags, a chat widget, embedded maps or videos, or an error-monitoring service. It uses Google Analytics as the cookie policy describes, and only as your choices allow. Besides Google Analytics, one thing from another company loads, and only on the pages with our inquiry and booking forms, including Find my booking, and on our Tax deadlines page, which has a sign-up box: Cloudflare Turnstile, a security check that helps stop automated spam. It runs in its own frame, may store what it needs for that check in your browser, and does not see what you type into the form. Everything else, including the fonts and images, is served from this site. The WhatsApp and social media links are ordinary links that load nothing until you click them. We do not use automated decision-making.
We send deadline reminders and occasional tax updates by email only to people who ask for them on our forms or our Tax deadlines page. Every email identifies us, gives our mailing address and includes a working unsubscribe link, as the CAN-SPAM Act requires. We never use tax return information for marketing without the written consent that section 7216 of the Internal Revenue Code requires.
If we add advertising or any other feature that collects personal information, we will update this policy first.
Client information and tax return information
The Gramm-Leach-Bliley Act treats firms that prepare tax returns as financial institutions and limits how they share nonpublic personal information about their clients. Umair Manzoor PC shares that information with nonaffiliated third parties only as follows: with the service providers listed on this page, and as the law requires or permits.
The FTC Safeguards Rule (16 CFR Part 314) requires the firm to protect client information. On this website that means:
- Our hosting provider serves the site over encrypted connections (HTTPS).
- Only authorized staff accounts can sign in to the private admin area, through Microsoft, and sensitive admin actions ask staff to sign in again.
- No tax information is collected through the site.
Under Internal Revenue Code section 7216 and Treasury Regulation section 301.7216, we use and disclose tax return information only to prepare your return, or as those rules otherwise allow, unless you give the written consent they require. The website collects no tax return information.
Where your information is held, and who helps us
The site and its database are hosted by Render Services, Inc. in its Ohio, United States region. These are the service providers involved today:
| Provider | Purpose | Information | Location |
|---|---|---|---|
| Render Services, Inc. | Hosting the site and its database | Technical information about each request, such as the time, page requested, IP address and browser type, and what you send through our inquiry, booking and privacy request forms, with your email address and phone number encrypted | Ohio, United States |
| Microsoft Corporation (Microsoft Entra ID) | Sign-in for authorized staff to the private admin area | Staff sign-in identities only; no visitor information | Set by Microsoft for the firm’s account |
| Microsoft Corporation (Microsoft 365) | Our business email: receiving the email you send us, sending the confirmation, reminder and update emails, and our own notice of your inquiry; our calendar, where a call you book is set up with a Microsoft Teams link | Your name, email address and what you send us | Set by Microsoft for the firm’s account |
| Cloudflare, Inc. (network and security) | Delivers and protects every page of the site; tells the site the country (and US state or Canadian province) a visit comes from | The technical request information: IP address, the page asked for, browser and device | United States and Cloudflare’s worldwide network |
| Cloudflare, Inc. (Turnstile) | A security check on the pages with our inquiry and booking forms, including Find my booking | Technical signals from your browser during the check, not what you type | United States |
| Google LLC (Google Analytics) | Counting visits and pages read, only as your cookie choices allow | An identifier stored in your browser, the pages you visit, your browser and approximate location | Global |
Every visit to umairmanzoor.com passes through the network of Cloudflare, Inc., which delivers and protects the site for us and for our hosting provider, Render. Cloudflare handles the technical request information (your IP address, the page you asked for, your browser and device). It also tells the site which country you are visiting from, and in the United States or Canada which state or province. We use that only to decide whether analytics runs before you make a choice, as our Cookie Policy explains. It is kept with the record of your cookie choice, never with your IP address. Apart from this, the Turnstile security check described above, and the site’s images, which are stored with Cloudflare R2, the site’s own code sends Cloudflare nothing else.
If you choose to message us on WhatsApp, Meta handles your message under its own terms and privacy policy.
Your Privacy Choices
We do not sell your personal information and we do not share it for advertising.
The “Your Privacy Choices” link at the foot of every page opens a panel where you can switch analytics on or off at any time. For visitors in most of the United States analytics is on until you turn it off; where the law of your location requires consent first (for example in Canada, the EEA, the UK and Switzerland), or where we cannot tell where you are, it stays off until you agree. We honor a Global Privacy Control signal from your browser as a request to opt out of advertising. The site uses no advertising tags.
State privacy laws
The California Consumer Privacy Act, as amended by the California Privacy Rights Act, and other state consumer privacy laws, including those of Montana, Colorado, Connecticut, Virginia, Texas and Oregon, apply to businesses that meet each law’s thresholds or conditions. Several of them also exempt information that the Gramm-Leach-Bliley Act covers.
If one of these laws applies to us, we will honor the rights it gives you.
Whether or not those laws apply, you can ask us what information we hold about you, and ask us to correct or delete it, as set out below.
How long we keep information
| Information | Kept for |
|---|---|
| Email or WhatsApp messages you send us, including a CV or application | As long as we need it to answer you, to keep a record of our work for you, or to meet a legal or professional duty. You can ask us to delete it. |
| Technical request information held by our hosting provider | For the period our hosting provider sets. The site’s own code keeps no request log. |
| Visit counts made without cookies (no IP address, nothing that identifies you) | 14 months, then deleted |
| The region_pref cookie, in your browser | 12 months, or until you delete it |
| A record of your cookie choice (consent ID, the choice, the policy version, the date, your browser type, whether your browser sent a Global Privacy Control signal and, where known, the country and province you visited from, never your IP address) | 3 years after it expires or you withdraw it |
| Inquiries sent through the form that do not lead to an engagement | 24 months after our last contact with you |
| Inquiries that lead to an engagement | 90 days after the engagement starts, then kept only in our client records |
| Form submissions marked as spam | 30 days |
| A record of your consent to deadline reminders and occasional tax updates | 3 years after you unsubscribe |
| A call you book through the site | With your inquiry, on the same timetable |
| A privacy request you never confirmed | 30 days |
| A privacy request we have answered | 3 years after we close it |
If we begin collecting other information, this table will be updated first.
Asking about your information
You can ask to see the personal information we hold about you, to correct it or to delete it. Use our privacy request form, or email hello@umairmanzoor.com, with your request. We may need to confirm that the request comes from you before we act on it.
We aim to respond within 45 days. If we need more time, we will tell you why within that period.
Children
This site and our services are not directed at children. We do not knowingly collect personal information from children under 13, in line with the Children’s Online Privacy Protection Act. If you believe a child has sent us personal information, contact us and we will delete it.
Changes to this policy
We will update this policy before we change what the site collects or how it uses information. The date at the top of the page shows when it last changed.
Version history
- Version 1.0, effective . First published version.