Privacy Policy

1. Scope and who we are

This policy applies to information collected through www.xbrgtax.com and through your interactions with Crossbridge Global Tax ("Crossbridge," "we," "us," or "our") - a tax advisory practice based in the State of Georgia, United States. It also covers personal information shared with us before, during, or after a professional engagement.

This policy does not cover Crossbridge Legal, which operates under its own separate privacy notice.

2. Information we collect

We collect information in three ways:

Information you give us

Identifying information you provide through the contact form, email, or phone (name, email, phone, country of residence, professional referral source).
Information about your tax situation that you share to scope an engagement (citizenship, residency, asset categories, filing history, deadlines).
identification).Documents and records you provide during an engagement (returns, financial statements, account summaries,

Information collected automatically

Standard server logs (IP address, user agent, referring page, timestamps) used to operate and secure the site.
Cookies and similar technologies (see Section 7).

Information from third parties

Public registries and verification services we use to confirm credentials, sanctions screening, and conflicts of interest before forming an engagement.
Information shared by professional referrers (attorneys, financial advisors) with your authorization.

3. How we use information

We use the information we collect to:

Respond to inquiries and schedule diagnostic consultations.
Evaluate whether to accept an engagement and, if accepted, deliver the engagement.
Meet our professional, regulatory, and legal obligations (including U.S. CPA professional standards, anti-money-laundering, sanctions screening, and tax-record retention rules).
Operate, secure, and improve our website and infrastructure.
Communicate substantive updates about our services to existing clients (we do not run general marketing campaigns).

Our legal bases for processing personal information of EU and UK residents are: consent (for optional cookies and marketing), contract (to deliver the services you request), legitimate interest (security, fraud prevention, evaluating prospective engagements), and legal obligation (regulatory and record-retention requirements).

4. How we share information

We do not sell personal information. We share it only as necessary to deliver our services or comply with the law:

Service providers bound by confidentiality (cloud hosting, secure document portals, email, accounting tools, e-signature). We require contractual data protection terms from each.
Crossbridge Legal, when an engagement is referred or coordinated and you have authorized the referral.
Tax authorities and government agencies, where required to file returns, respond to notices, or comply with law.
Professional advisors (your other CPAs, attorneys, or financial advisors) with your authorization.
Legal compliance - to respond to lawful requests, enforce our terms, or protect rights, property, or safety.

5. How long we keep it

Where you contact us but do not engage us, we retain inquiry records for up to 24 months and then delete or anonymize them. Where we accept an engagement, we retain client records for the longer of (a) the period required by U.S. CPA professional standards and applicable tax-record retention rules, and (b) seven years after the engagement ends. We may retain information longer if there is an active dispute, regulatory inquiry, or legal hold.

6. How we protect it

We use a combination of administrative, technical, and physical safeguards: encrypted document portals for client file exchange, multi-factor authentication on every account that touches client data, encryption in transit and at rest, role-based access, vendor due diligence, and incident-response procedures consistent with our professional obligations. No system is perfectly secure; we work to keep ours as secure as professional practice and current technology allow.

7. Cookies and analytics

We use a small number of strictly necessary cookies for security and basic site function. We may also use privacy-respecting analytics to understand which pages are useful and which need work. We do not use cross-site advertising trackers, social-media pixels, or behavioral advertising cookies.

You can disable non-essential cookies through your browser. Disabling strictly necessary cookies may break the contact form or session security.

8. International transfers

Crossbridge is based in the United States. If you contact us from outside the U.S., your information will be transferred to and processed in the U.S. We rely on appropriate transfer mechanisms (such as Standard Contractual Clauses where applicable) and on the contractual obligations of our service providers.

9. EU and UK rights (GDPR)

If you are in the EU, EEA, or UK, you have the right to: access the personal data we hold about you, correct inaccurate data, delete data subject to legal-retention obligations, restrict or object to certain processing, port data you provided to us, and withdraw consent where processing is based on consent. You may also lodge a complaint with your supervisory authority. To exercise any of these rights, contact us using Section 13 below.

10. California rights (CCPA/CPRA)

California residents have the right to know what personal information we collect, to request deletion subject to legal

obligations, to correct inaccurate information, and to opt out of any "sale" or "share" of personal information for cross-context behavioral advertising. We do not sell or share personal information for advertising purposes. To exercise California rights, contact us using Section 13 below.

11. Children

Our services are intended for adults. We do not knowingly collect personal information from children under 16. If you believe a child has provided us information, contact us and we will delete it.

12. Changes to this policy

We may update this policy as our practices, technology, or law changes. The "Last updated" date at the top of the page reflects the current version. Material changes will be flagged on this page or notified through your existing engagement contact.

13. How to contact us

For privacy questions, data-rights requests, or any other concern about this policy, contact:

Crossbridge Global Tax
infor@xbrgtax.com