Skip to main content
Notices

Privacy Policy

Last updated: July 3, 2026

Introduction

This privacy notice for Santafino, the brand name under which Santafino Wealth Management LLC and Santafino CPAs operate ("Company," "we," "us," or "our") explains how and why we might collect, store, use, and/or share ("process") your information when you use our website and related services ("Services"), such as when you:

Scope of this notice. This privacy notice applies to information we collect through our website. It does not govern the nonpublic personal information we collect about clients in connection with the financial, tax, accounting, and investment advisory services provided by Santafino Wealth Management and Santafino CPAs. That information is governed by our separate GLBA Consumer Privacy Notice, which is available upon request.

Questions or concerns? Reading this privacy notice will help you understand your privacy rights and choices. If you do not agree with our policies and practices, please do not use our Services. If you still have any questions or concerns, please email Santafino.

1. WHAT INFORMATION DO WE COLLECT?

Personal information you disclose to us

In short: We collect personal information that you provide to us.

We collect personal information that you voluntarily provide to us when you express an interest in obtaining information about us or our Services, when you participate in activities on the Services, or otherwise when you contact us.

Personal Information Provided by You. The personal information that we collect depends on the context of your interactions with us and the Services, the choices you make, and the features you use. The personal information we collect may include:

  • Names
  • Phone numbers
  • Email addresses
  • Mailing addresses
  • Job titles
  • Contact preferences
  • Other contact data

Sensitive Information. Through this website, we do not intentionally collect sensitive personal information (such as Social Security numbers, financial account numbers, or government identifiers) from general visitors. Please do not submit such information through website forms, email, or chat. Where you become a client and provide sensitive financial information in connection with our tax, accounting, or advisory services, that information is collected and protected under our separate GLBA Consumer Privacy Notice rather than under this website notice.

All personal information that you provide to us must be true, complete, and accurate, and you must notify us of any changes to such personal information.

Information automatically collected

In short: Some information – such as your IP address and/or browser and device characteristics – is collected automatically when you visit our Services.

We automatically collect certain information when you visit, use, or navigate the Services. This information does not reveal your specific identity but may include device and usage information, such as your IP address, browser and device characteristics, operating system, language preferences, referring URLs, device name, country, location, information about how and when you use our Services, and other technical information. This information is primarily used to maintain the security and operation of our Services and for internal analytics and reporting. We also collect information through cookies and similar technologies (see Section 4).

Log and Usage Data. Service-related, diagnostic, usage, and performance information our servers automatically collect when you access or use our Services and record in log files. This may include your IP address, device information, browser type and settings, information about your activity in the Services (such as date/time stamps, pages and files viewed, searches, and features used), and device event information (such as system activity and error reports).

Device Data. Information about the computer, phone, tablet, or other device you use to access the Services, which may include your IP address (or proxy server), device and application identification numbers, browser type, hardware model, Internet service provider or mobile carrier, operating system, and system configuration information.

Location Data. We may derive general, imprecise location information (such as city or region) from your IP address. We do not collect precise geolocation data through the Services.

2. HOW DO WE PROCESS YOUR INFORMATION?

In short: We process your information to provide, improve, and administer our Services, to communicate with you, for security and fraud prevention, and to comply with law. We may also process your information for other purposes with your consent.

We process your personal information for a variety of reasons, depending on how you interact with our Services, including:

  • To respond to inquiries and provide support. To respond to your inquiries and resolve any issues with a requested service.
  • To send marketing and promotional communications. Where consistent with your marketing preferences. You can opt out at any time (see Section 8).
  • To evaluate and improve our Services, products, marketing, and your experience.
  • To identify usage trends and measure campaign effectiveness.
  • To comply with legal and regulatory obligations, including recordkeeping requirements applicable to CPA firms and registered investment advisers.

3. WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?

In short: We share personal information with service providers and as required by law. We do not sell or share your personal information.

We may share your personal information with third-party vendors, service providers, and contractors who perform services for us (such as website hosting, analytics, email and marketing platforms, scheduling, and payment processing) and who are contractually required to protect it and use it only for the purposes we specify. We may also disclose information where required by law, regulation, legal process, or governmental request, or to protect our rights, safety, and property.

We do not sell your personal information, and we do not share it with third parties for cross-context behavioral (targeted or retargeted) advertising.

If you have provided us with your mobile number, we may send you text messages for service and relationship purposes (for example, to let you know we are missing a document or to follow up on a conversation). We do not send marketing text messages. We do not share mobile phone numbers, text-message consent, or opt-in data with third parties or affiliates for marketing or promotional purposes. Consent to receive text messages is not a condition of any service, message and data rates may apply, and you may opt out of text messages at any time by replying STOP or get assistance by replying HELP.

4. DO WE USE COOKIES AND OTHER TRACKING TECHNOLOGIES?

In short: We may use cookies and similar technologies to collect and store your information.

We may use cookies and similar tracking technologies (such as web beacons and pixels) to access or store information, primarily for analytics and to support the operation and security of our Services. You can manage cookies through your browser settings, and most browsers let you remove or reject cookies. If you choose to remove or reject cookies, certain features of the Services may be affected.

5. HOW LONG DO WE KEEP YOUR INFORMATION?

In short: We keep your information only as long as necessary for the purposes described here or as required by law.

We will keep your personal information for as long as necessary to fulfill the purposes set out in this privacy notice, unless a longer retention period is required or permitted by law. As a CPA firm and registered investment adviser, we are subject to legal and regulatory recordkeeping obligations (including, among others, IRS requirements and the books-and-records rules applicable to investment advisers) that may require us to retain certain records for several years or longer. When we have no ongoing legitimate business or legal need to process your personal information, we will delete or anonymize it, or, where deletion is not feasible (for example, information held in secure backup archives), we will isolate it from further processing until deletion is possible.

6. HOW DO WE KEEP YOUR INFORMATION SAFE?

In short: We use reasonable organizational and technical security measures to protect your information.

We have implemented appropriate and reasonable technical and organizational security measures designed to protect the personal information we process, consistent with our obligations under the FTC Safeguards Rule and applicable California law. However, no electronic transmission or storage technology can be guaranteed to be completely secure. Transmission of personal information to and from our Services is at your own risk, and you should only access the Services within a secure environment.

7. DO WE COLLECT INFORMATION FROM MINORS?

In short: We do not knowingly collect data from or market to children under 18 years of age.

We do not knowingly solicit data from or market to children under 18 years of age, and we do not knowingly collect personal information from children under 13 in violation of the Children's Online Privacy Protection Act (COPPA). By using the Services, you represent that you are at least 18 years of age. If we learn that we have collected personal information from a user under 18, we will take reasonable measures to promptly delete it. If you believe we may have collected such information, please email Santafino.

8. WHAT ARE YOUR PRIVACY RIGHTS?

In short: You may access, correct, delete, or opt out of certain uses of your personal information.

Depending on where you live, you may have rights to access, correct, delete, or restrict the use of your personal information, to opt out of the sale or sharing of your personal information, and to limit the use of sensitive personal information. To exercise any of these rights, contact us using the details in Section 12.

Withdrawing consent: Where we rely on your consent to process your personal information, you may withdraw it at any time by contacting us. This will not affect the lawfulness of processing before withdrawal or processing based on other lawful grounds.

Opting out of marketing: You can unsubscribe at any time using the link in our marketing emails or by contacting us. We may still send you non-marketing, service-related messages.

Cookies: You can set your browser to remove or reject cookies, which may affect certain features of the Services.

9. CONTROLS FOR DO-NOT-TRACK FEATURES

Most browsers and some mobile operating systems include a Do-Not-Track ("DNT") feature, and some browsers and extensions can transmit opt-out preference signals such as the Global Privacy Control ("GPC"). Because no uniform standard for recognizing DNT signals has been finalized, we do not respond to DNT signals. Because we do not sell personal information and do not share it for cross-context behavioral advertising, opt-out preference signals such as GPC do not apply to our processing. If our practices change, or if we become subject to a law requiring us to honor a particular signal, we will update this notice and our practices accordingly.

10. U.S. STATE PRIVACY RIGHTS

In short: Residents of California and certain other U.S. states have specific privacy rights.

Financial information exemption. Personal information we collect and process as "nonpublic personal information" under the GLBA is generally exempt from California's consumer privacy law and is governed instead by our GLBA Consumer Privacy Notice. The rights described in this Section 10 apply to personal information that is not exempt, such as information collected from general website visitors, prospects, and marketing contacts.

California residents (CCPA/CPRA). Subject to the exemption above, California residents have the right to: (1) know and access the categories and specific pieces of personal information we collect; (2) request deletion of personal information; (3) correct inaccurate personal information; (4) opt out of the sale or sharing of personal information; (5) limit the use and disclosure of sensitive personal information; and (6) not be discriminated against for exercising these rights. We do not sell personal information, and we do not share personal information for cross-context behavioral (targeted or retargeted) advertising. California's "Shine the Light" law (Civil Code §1798.83) also allows California residents to request information about disclosures of personal information to third parties for their direct marketing purposes.

Other U.S. states. Residents of other states with comprehensive privacy laws (such as Virginia, Colorado, Connecticut, Texas, and others) may have similar rights to access, correct, delete, and obtain a copy of their personal information, and to opt out of targeted advertising, sale, and certain profiling, subject to applicable exemptions including those for GLBA-regulated information. If we decline to act on a request, residents of these states may appeal our decision by contacting us with the subject line "Privacy Appeal"; if the appeal is unsuccessful, they may contact their state attorney general.

How to exercise your rights. Submit a request by email or phone. We will verify your identity before fulfilling your request by matching the information you provide with information we maintain, and we will respond within the timeframes required by applicable law. You may use an authorized agent to submit a request; we may require proof of authorization. We will only use information provided in a request to verify identity and process the request.

11. DO WE MAKE UPDATES TO THIS NOTICE?

In short: Yes, we will update this notice as necessary to stay compliant with relevant laws.

We may update this privacy notice from time to time. The updated version will be indicated by an updated "Last updated" date and will be effective as soon as it is accessible. If we make material changes, we may notify you by prominently posting a notice or by direct notification. We encourage you to review this notice periodically.

12. HOW CAN YOU CONTACT US ABOUT THIS NOTICE?

If you have questions or comments about this notice, or wish to exercise your privacy rights, you may contact us at:

Email: Email Santafino