1. Information you provide
The public consultation form asks for your full name, email address, phone number, and, if you choose, a brief description of what you would like to discuss. The website also creates a submission identifier and records the submission time and the version of the website notice acknowledged when you submit the form.
We also receive information you choose to provide when you contact Tavella CPA Group by email or telephone. Information submitted after onboarding through the client portal is handled through that service and the applicable engagement process.
Do not submit Social Security numbers, tax returns, bank information, or other sensitive financial documents through the public website. Existing clients should use the secure client portal.
2. Information collected automatically
When you use the website, hosting, security, and operational systems may process technical information such as an IP address, browser and device information, requested pages, referring page, date and time, and diagnostic or security events. If you submit a consultation request, the website may retain the first public page path from that browser tab, the referring URL without its query string, any UTM campaign labels supplied in the landing-page URL, and a limited on-site source label supplied by the consultation link you selected. This limited attribution information is used to understand which public resources lead to consultation requests. It does not include the contents of another website, a search query, or a browsing history.
The website also keeps cookie-free daily aggregate counts for public page views and selected interactions, including consultation-button clicks, form starts, accepted consultation requests, downloads, use of public tools, and good, needs-improvement, or poor Core Web Vitals rating buckets. These counts are grouped by the first public landing-page path in a browser tab, the public interaction-page path, broad traffic channel, generalized source, and interaction type. The aggregate measurement system does not store an IP address, user agent, cookie, session identifier, device identifier, form value, full referring URL, or search query.
3. How information is used
Tavella CPA Group uses website information to:
- Review your consultation request and determine whether the firm may be able to assist.
- Respond to you and communicate about possible next steps.
- Maintain consultation-request records and prevent duplicate, fraudulent, or abusive submissions.
- Use privacy-restricted, cookieless measurement to understand which public pages and resources are useful.
- Measure whether an advertisement led to a consultation request without enabling personalized advertising.
- Operate, secure, diagnose, and improve the website.
- Meet legal, regulatory, professional, security, and recordkeeping obligations.
4. Service providers
The website is published through OpenAI Sites and delivered using Cloudflare infrastructure. Cloudflare D1 stores consultation-request records. The public consultation form is processed by a first-party endpoint on this website rather than a separately embedded form provider.
Cloudflare D1 also stores the aggregate website counts described in this notice. To reduce automated form abuse without adding a CAPTCHA, the consultation endpoint may temporarily use a one-way HMAC value derived from the edge-provided network address and a secret key. The raw network address is not stored in the rate-limit table. The temporary value expires and stops affecting submissions within 24 hours; expired rows are removed during a later consultation-endpoint cleanup cycle.
When email delivery is configured, Resend processes the contact details, selected topic, and optional brief description needed to notify Tavella CPA Group that a request was received. Resend also processes the visitor’s email address to send a transactional acknowledgement with next steps; that acknowledgement does not repeat the visitor’s brief description.
The acknowledgement and confirmation page may include an optional link to schedule a call through Calendly. If you follow that link, Calendly processes information under its own terms and privacy practices.
The website links to the TaxDome client portal for document exchange, requests, signatures, invoices, completed work, and onboarding. When you follow that link or use TaxDome, TaxDome processes information under its own terms and privacy practices.
Google Tag Manager helps deploy and control the privacy-restricted measurement tags described below. Google Analytics 4 helps Tavella CPA Group understand website traffic and interactions, and Google Ads conversion measurement may help determine whether an advertisement led to a consultation request. Before Google Tag Manager loads, this website sets Google's analytics storage, advertising storage, advertising user-data, and advertising-personalization consent signals to denied. The website never changes those signals to granted. In this denied state, Google may still process limited page, device, and event information through cookieless requests under its own terms and privacy practices. For more information, see How Google uses information from sites or apps that use its services.
These providers may process information on behalf of Tavella Group, LLC to provide their respective services. Information may also be disclosed when required by law, needed to protect rights or security, or involved in a business transfer subject to applicable protections.
5. Cookies and privacy-restricted measurement
The website uses necessary technologies to deliver and secure its pages, process consultation requests, and support protected administrative functions. Hosting and security providers may use necessary technologies as part of those services.
Analytics. Google Analytics 4 helps Tavella CPA Group understand how visitors reach and use public pages. The website configures Google Analytics storage as denied before tags load and does not provide a control that changes it to granted. Google may receive cookieless measurement requests containing information such as public page URLs and titles, referring pages, browser and device information, and interactions such as public-page views, button clicks, public-resource selections, and a successfully completed consultation request.
First-party aggregate measurement. The website sends selected public-page interactions and broad Core Web Vitals rating buckets to a same-origin endpoint and adds them to daily aggregate counters. The endpoint accepts only approved event names, public landing and interaction paths, a generalized source or channel, and a limited interaction label. It does not store the exact performance value, create an analytics cookie or persistent visitor profile, or attempt to identify a person or follow a browser across sessions.
Advertising measurement. Google Ads conversion measurement may help Tavella CPA Group understand whether an advertisement led to a consultation request. The website configures advertising storage, advertising user data, and advertising personalization as denied, enables ads-data redaction, and does not change those settings to granted. Tavella CPA Group does not use Google Ads remarketing, personalized advertising, or enhanced conversions through this website.
Tavella CPA Group does not send Google the name, email address, phone number, brief description, tax information, form-field values, website lead identifier, or other information entered in the consultation form. A successful submission is reported only as a generic conversion event. Tavella Group, LLC does not sell personal information.
The public website does not store a measurement-preference cookie and is not designed to set Google Analytics or Google Ads cookies while all Google storage signals are denied. Blocking Google scripts in your browser does not prevent you from using the website or submitting a consultation request.
6. Privacy controls and browser signals
The website does not ask you to opt in to Google storage because its implementation keeps all Google analytics and advertising storage signals denied. No website setting is needed to keep those signals disabled.
Some browsers offer signals such as “Do Not Track” or Global Privacy Control. These signals are not interpreted uniformly, but the website does not enable Google measurement storage regardless of the signal your browser sends. You may also use your browser or a content blocker to prevent requests to Google; core website functions remain available.
7. Data retention
Consultation requests that do not result in an engagement are ordinarily deleted or de-identified within 24 months after the last interaction, unless retention is reasonably necessary for legal, security, fraud-prevention, or professional-recordkeeping purposes. Records for accepted clients are governed by the engagement agreement and the firm’s client-record retention policy.
Aggregate website counts may be retained to compare website performance over time because they do not contain visitor or device identifiers. Temporary HMAC rate-limit values are used only to limit repeated form submissions from the same network window. They expire and stop affecting submissions within 24 hours, and expired rows are removed during a later consultation-endpoint cleanup cycle.
8. Security
Tavella Group, LLC and its service providers use reasonable administrative, technical, and organizational measures designed to protect website information. The public website uses encrypted HTTPS connections, and consultation records are stored in the site’s managed database with access limited to authorized administrative functions. No website, storage system, or electronic transmission can be guaranteed completely secure.
9. Your choices
You may contact Tavella CPA Group to ask about accessing, correcting, or deleting personal information you submitted through this website. Identity verification may be required, and some information may need to be retained for legal, regulatory, professional, security, or recordkeeping reasons. Requests will be handled as required by applicable law.
No website preference is required to keep Google analytics or advertising storage disabled. You may additionally block Google scripts through your browser or a content-blocking tool without affecting consultation-form access or other core website functions.
10. Children’s information
This website is intended for adults seeking tax and accounting services and is not directed to children under 13. Tavella Group, LLC does not knowingly collect personal information from children under 13 through the public website.
11. Changes to this notice
Material changes will be posted on this page with a revised effective date. When applicable law requires additional notice or consent, that notice or consent will be provided before the change takes effect.
12. Contact
Questions or privacy requests may be directed to Tavella Group, LLC, operating as Tavella CPA Group, at stefano@tavellagroup.com or (862) 246-1378.