DON PARTNERS | WEBSITE LEGAL POLICY PACK
Don Partners
Website Legal Policy Pack
Terms of Use • Privacy Policy • Accessibility Statement • Private Launch Checklist
Website
donpartnersfirm.com
Company
Don Partners
Effective date
July 28, 2026
Market
United States-based businesses
Status
Counsel-review draft
Important: This is a tailored drafting and implementation aid, not a substitute for review by Don Partners’ attorney, privacy counsel, professional-liability carrier, or licensing adviser.
Page
DON PARTNERS | WEBSITE LEGAL POLICY PACK
Terms of Use
Last updated: July 28, 2026
These Terms of Use (“Terms”) are a binding agreement between you and Don Partners (“Don Partners,” “we,” “us,” or “our”) governing your access to and use of donpartnersfirm.com and any page, form, scripted chat, scheduling feature, content, or communication made available through the website (collectively, the “Site”).
By accessing or using the Site, checking an acceptance box, submitting information, or requesting that we contact you, you acknowledge that you have read and agree to these Terms and our Privacy Policy. If you do not agree, do not use the Site.
1. Who May Use the Site
The Site is intended only for:
individuals who are at least 18 years old and legally capable of entering a contract;
authorized representatives of businesses organized, operating, or subject to tax obligations in the United States; and
other United States persons whom Don Partners expressly agrees to evaluate or serve.
The Site is not directed to children under 13. Don Partners does not knowingly collect personal information from children under 13 through the Site. The Site is not offered to persons located outside the United States, and Don Partners does not represent that the Site or its services are appropriate or available in other jurisdictions.
Access to the Site does not guarantee that Don Partners will accept you or your business as a client. We may decline, limit, suspend, or discontinue an inquiry or service relationship when permitted by law, including because of capacity, conflicts, risk, incomplete information, location, service scope, or professional obligations.
2. Nature of the Website and Scripted Intake Assistant
The Site includes an automated, rules-based front-desk intake assistant. It presents prewritten questions and response options in a manually designed sequence to collect lead information, identify a requested service, and facilitate scheduling. It is not a generative artificial-intelligence agent, does not independently reason or make professional judgments, and does not provide tax, accounting, legal, investment, or financial advice.
Some messages may appear instantly or outside ordinary business hours because the sequence is automated. Statements such as “online,” “replies instantly,” or similar wording describe the availability of the automated intake flow and do not mean that Brandon Castro or another professional is personally reviewing or responding in real time.
The intake assistant may route, prioritize, or filter inquiries based on answers you submit, but it does not determine eligibility for any tax position, legal right, financial product, or professional service. A human must review any inquiry before Don Partners accepts an engagement or provides professional advice.
3. No Professional Relationship or Advice Through the Site
Site content and scripted messages are provided for general informational and intake purposes only. They are not tax, accounting, legal, investment, or financial advice and should not be relied upon to make or delay a decision.
Submitting information, using the intake assistant, scheduling a consultation, or receiving a response does not create an accountant-client, tax-preparer-client, fiduciary, attorney-client, advisory, or other professional relationship. A professional relationship begins only when Don Partners expressly accepts the engagement in a separate written engagement letter or other written agreement signed or accepted by the appropriate parties.
Do not use the Site for emergencies, filing-deadline extensions, time-sensitive tax elections, responses to government notices, or any matter for which missing a deadline could cause harm. You remain responsible for tracking and meeting all deadlines unless a signed engagement agreement expressly states otherwise.
4. Do Not Submit Highly Sensitive Information Through Public Intake
Do not send Social Security numbers, taxpayer identification numbers, full tax returns, banking credentials, payment-card numbers, passwords, authentication codes, unredacted government identification, or other highly sensitive documents through the public website chat or general contact form.
If Don Partners accepts an engagement, it may provide a separate approved method for exchanging sensitive documents. You are responsible for using only the approved channel and for verifying unusual payment, credential, or document requests through a known Don Partners contact method.
5. User Information and Acceptable Use
You agree to provide information that is accurate, current, complete, and submitted with proper authority. You may not:
impersonate another person or falsely claim authority to act for a business;
submit another person’s personal, financial, or tax information without authorization;
use the Site for unlawful, fraudulent, abusive, harassing, defamatory, or deceptive conduct;
probe, scan, test, disrupt, overload, scrape, reverse engineer, or circumvent the Site or its security;
upload malware, harmful code, automated traffic, or content that infringes another person’s rights;
copy, frame, mirror, republish, or commercially exploit the Site except as expressly permitted in writing; or
use information obtained from the Site to build a competing dataset, service, or solicitation list.
We may preserve and disclose information when reasonably necessary to investigate suspected misuse, protect the Site or others, enforce these Terms, or comply with law.
6. Communications Consent
When you separately provide a telephone number or email address and affirmatively request or consent to contact, you authorize Don Partners and service providers acting solely on its behalf to contact you about your inquiry, requested services, contact verification, scheduling, appointment reminders, document requests, service updates, and related follow-up. Contact may occur by telephone call, email, or text message as disclosed at the point of collection.
Consent to receive automated or marketing communications is not a condition of purchasing professional services. Message frequency varies. Message and data rates may apply. You represent that you are the subscriber or customary user of the number provided and will promptly notify us if the number changes.
You may opt out of:
text messages by replying STOP;
marketing emails by using the unsubscribe link; and
other marketing communications by using the contact method stated in the Privacy Policy.
For text-message help, reply HELP or use the contact method shown on the Site. Don Partners may send a single confirmation of an opt-out and may continue non-marketing communications when permitted by law, such as responses you request or communications necessary to an active engagement. Opt-out requests will be honored within the time required by applicable law.
7. No Guarantee of Availability, Outcome, or Tax Result
The Site, appointment availability, response times, and all content are provided on an “as available” basis. Don Partners does not guarantee that an appointment will be available, that an inquiry will be accepted, or that any strategy, filing, representation, or other service will achieve a particular outcome, refund, tax savings, resolution, or processing time. Government agencies, financial institutions, software providers, and other third parties control many relevant decisions and timelines.
Testimonials, examples, estimates, or descriptions of past matters do not guarantee similar results. Any estimate is subject to verification, assumptions, scope, facts, law, and a separate engagement agreement.
8. Intellectual Property
The Site and all original material made available by Don Partners—including its text, layout, graphics, branding, logos, photographs, video, audio, software, code, workflows, scripted intake sequences, question trees, databases, compilations, and arrangement—are owned by Don Partners or used under license and are protected by United States and international intellectual-property laws.
Copyright © 2026 Don Partners. All rights reserved.
Subject to these Terms, Don Partners grants you a limited, revocable, nonexclusive, nontransferable license to access and use the Site for your own legitimate evaluation of Don Partners’ services. No other right or license is granted by implication, estoppel, or otherwise.
Names, logos, service names, and trade dress displayed on the Site may be trademarks of Don Partners or their respective owners. You may not use them in a way that suggests sponsorship, endorsement, or affiliation without written permission.
If you submit comments, questions, feedback, or other material through the Site (“User Submissions”), you retain any ownership rights you already possess. You grant Don Partners a nonexclusive, worldwide, royalty-free license to host, store, reproduce, transmit, and use the User Submission only as reasonably necessary to respond to you, evaluate or provide requested services, operate and secure the Site, maintain business records, improve internal intake operations using appropriately limited information, and comply with law. This license is subject to the Privacy Policy, applicable professional duties, Internal Revenue Code section 7216 and its regulations where applicable, and any signed engagement agreement. It does not authorize Don Partners to publicly identify you, publish confidential tax information, or sell tax return information.
You represent that you have the rights and permissions needed to submit a User Submission. If you believe Site content infringes your copyright, notify Don Partners through the contact method on the Site with identification of the work, the allegedly infringing material, your contact information, a good-faith statement, an accuracy/authority statement under penalty of perjury, and your physical or electronic signature.
9. Privacy, Confidentiality, and Security
Our Privacy Policy explains how we handle personal information. No Internet transmission or storage system is completely secure. The public Site is not a secure client portal and should not be used for highly sensitive data.
If Don Partners receives information in connection with preparing a tax return, its use and disclosure may be restricted by Internal Revenue Code section 7216, Treasury regulations, other tax-professional rules, the Gramm-Leach-Bliley Act, the FTC Safeguards Rule, state law, and professional obligations. Nothing in these Terms authorizes a use or disclosure prohibited by those requirements.
10. Third-Party Services and Links
The Site may rely on or link to third-party services, including hosting, database, authentication, security, email-delivery, scheduling, analytics, and communication providers. Third-party services may have separate terms and privacy practices. Don Partners is not responsible for third-party sites or services it does not control, but will use service providers and data for Site operations subject to applicable law and contractual safeguards.
11. Accessibility
Don Partners seeks to provide access to its services for people with disabilities. The Accessibility Statement describes its current accessibility commitment and assistance channel. If you cannot access content or complete an intake step, contact Don Partners using an available telephone or email method and identify the page or feature involved and the accommodation or format requested.
An accessibility statement does not waive any right or defense and does not represent that every feature is free from all accessibility barriers.
12. Disclaimers
TO THE MAXIMUM EXTENT PERMITTED BY LAW, THE SITE AND ITS CONTENT ARE PROVIDED “AS IS” AND “AS AVAILABLE.” DON PARTNERS DISCLAIMS ALL EXPRESS OR IMPLIED WARRANTIES, INCLUDING WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE, NON-INFRINGEMENT, ACCURACY, SECURITY, AND UNINTERRUPTED AVAILABILITY.
Nothing in this section excludes a warranty or right that cannot lawfully be excluded.
13. Limitation of Liability
TO THE MAXIMUM EXTENT PERMITTED BY LAW, DON PARTNERS AND ITS OWNERS, PERSONNEL, CONTRACTORS, LICENSORS, AND SERVICE PROVIDERS WILL NOT BE LIABLE FOR INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, PUNITIVE, OR CONSEQUENTIAL DAMAGES, LOST PROFITS, LOST DATA, BUSINESS INTERRUPTION, OR DAMAGES ARISING FROM RELIANCE ON SITE CONTENT, EVEN IF ADVISED OF THE POSSIBILITY.
TO THE MAXIMUM EXTENT PERMITTED BY LAW, THE TOTAL AGGREGATE LIABILITY ARISING FROM OR RELATING TO THE SITE OR THESE TERMS WILL NOT EXCEED THE GREATER OF (A) $100 OR (B) THE AMOUNT YOU PAID DON PARTNERS SPECIFICALLY FOR ACCESS TO THE SITE DURING THE SIX MONTHS BEFORE THE EVENT GIVING RISE TO THE CLAIM.
These limitations do not apply where prohibited by law and do not modify liability established in a separate signed engagement agreement.
14. Indemnification
To the extent permitted by law, you agree to defend, indemnify, and hold harmless Don Partners and its owners, personnel, contractors, and service providers from third-party claims, damages, liabilities, and reasonable costs arising from your unlawful misuse of the Site, material violation of these Terms, unauthorized submission of another person’s information, or infringement of a third party’s rights.
15. Governing Law and Disputes
These Terms are governed by the laws of the State of Texas, without regard to conflict-of-law principles. Before filing a claim relating solely to the Site, each party agrees to provide written notice describing the dispute and allow 30 days for a good-faith informal resolution, unless emergency relief or a filing deadline makes that impracticable.
Any court proceeding relating solely to the Site or these Terms must be brought in a state or federal court with jurisdiction in the Texas county where Don Partners maintains its principal office, and each party consents to that venue and jurisdiction. A separate engagement agreement may contain different dispute terms and will control for disputes relating to professional services.
16. Changes, Suspension, and Termination
We may modify the Site or these Terms from time to time. The “Last updated” date identifies the current version. Material changes will be posted through a reasonably conspicuous notice when required by law. Changes apply prospectively from their stated effective date.
We may suspend or terminate Site access for conduct that violates these Terms, threatens security, or creates legal or operational risk. Sections that by their nature should survive termination will survive, including intellectual property, disclaimers, limitations, indemnification, dispute terms, and records-related provisions.
17. General Terms
These Terms and the Privacy Policy are the complete agreement governing public Site use, but they do not replace a signed engagement agreement. If a provision is unenforceable, it will be narrowed to the minimum extent necessary and the remaining provisions will remain effective. Failure to enforce a provision is not a waiver. You may not assign these Terms without our written consent; Don Partners may assign them in connection with a merger, reorganization, asset transfer, or succession, subject to applicable confidentiality and privacy requirements. Headings are for convenience only.
18. Contact
Questions about these Terms may be submitted using the contact method identified on donpartnersfirm.com. Legal notices should be sent to the business mailing address Don Partners identifies in its engagement documents or official business communications.
DON PARTNERS | WEBSITE LEGAL POLICY PACK
Privacy Policy
Last updated: July 28, 2026
This Privacy Policy explains how Don Partners (“Don Partners,” “we,” “us,” or “our”) collects, uses, discloses, retains, and protects personal information through donpartnersfirm.com, its scripted website intake assistant, scheduling and communication processes, and related interactions that link to this Policy (collectively, the “Services”).
This Policy covers website visitors, prospective clients, business contacts, and representatives of United States-based businesses. A separate engagement agreement, tax-return consent, Gramm-Leach-Bliley privacy notice, client-portal notice, or other legally required notice may apply after Don Partners accepts an engagement. If a more specific notice conflicts with this general website Policy, the more specific notice controls for the information and activity it covers.
1. Scope and U.S.-Only Services
The Services are intended for adults located in the United States and primarily for representatives of United States-based businesses. They are not directed to persons outside the United States or children under 13. Don Partners does not knowingly collect personal information online from children under 13. If you believe a child has submitted information, contact us so we can evaluate and delete it as required.
2. Information We Collect
Depending on how you interact with us, we may collect:
Information you provide
identifiers and contact information, such as name, business name, job title, email address, telephone number, mailing address, and state;
inquiry and intake information, such as requested service, business type, general revenue range, tax concern, IRS issue, bookkeeping need, preferred appointment time, and answers selected in the scripted intake flow;
communications, such as chat entries, emails, text messages, call notes, attachments, feedback, and records of consent or opt-out choices;
scheduling information and appointment metadata;
professional-service information you later provide through an approved channel, which may include financial, accounting, tax, identity, dependent, employee, beneficial-owner, and government-correspondence information; and
other information you choose to provide.
Do not submit Social Security numbers, taxpayer identification numbers, full tax returns, bank credentials, payment-card numbers, passwords, authentication codes, or unredacted identity documents through the public website chat or general contact form.
Information collected automatically
When you use the Site, we and our service providers may automatically collect:
Internet Protocol address;
device, browser, operating-system, language, and general location information derived from IP address;
date, time, referring page, pages or screens viewed, clicks, session activity, and diagnostic or error data;
cookie, local-storage, authentication, security, or similar identifiers; and
email-delivery events such as delivery, bounce, complaint, unsubscribe, and—if enabled—open or link-interaction events.
The exact automatic data depends on the Firebase features, analytics tools, email settings, cookies, and other technologies actually enabled. Don Partners should not state that it uses advertising cookies, cross-context behavioral advertising, or Google Analytics unless those tools are in fact enabled.
Information from other sources
We may receive information from scheduling providers, referral sources, public business records, identity or fraud-prevention services, government agencies when authorized, and other persons acting with your permission or on behalf of your business.
3. How We Use Information
We may use personal information to:
operate, maintain, secure, troubleshoot, and improve the Services;
provide the scripted intake flow and remember the step or choices you make;
respond to inquiries, verify contact details, evaluate requested services, identify conflicts or risk, and decide whether to offer a consultation or engagement;
schedule and administer consultations, reminders, follow-ups, and requested communications;
provide tax preparation, bookkeeping, IRS representation or support, advisory, or related professional services after an engagement is accepted;
authenticate users, prevent abuse and fraud, protect systems, and maintain audit logs;
comply with tax laws, recordkeeping duties, legal process, professional standards, insurance requirements, and regulatory requests;
establish, exercise, or defend legal and professional claims;
send service-related communications;
send marketing communications where permitted by law and consistent with your choices; and
create aggregated or deidentified information that is not reasonably linkable to an individual, subject to legal restrictions applicable to tax return information.
Where tax-return information is involved, Don Partners will use and disclose it only as permitted by Internal Revenue Code section 7216, Treasury regulations, a valid taxpayer consent that satisfies applicable requirements, or another applicable legal exception. A checkbox accepting this general Privacy Policy is not intended to serve as a section 7216 consent for a use or disclosure that requires a separate prescribed consent.
4. Scripted Intake Automation; No Generative AI Decision-Making
The website assistant is an automated, manually designed decision tree. It displays prewritten questions and response options based on the selections or information a visitor provides. It is not represented as a generative AI tax adviser and does not independently produce professional advice.
The flow may categorize, route, prioritize, or filter leads based on submitted answers and scheduling rules. It does not make legally or similarly significant decisions, determine a tax position, or establish a professional relationship. Don Partners personnel review matters before accepting an engagement or providing professional advice.
If Don Partners later enables a generative AI service, automated profiling with significant effects, or a new vendor that receives personal or tax information, this Policy and the underlying consent and vendor-review process must be updated before use.
5. How We Disclose Information
We may disclose personal information in the following circumstances:
Service providers
We may provide information to vendors that perform services for us, such as website hosting, cloud databases, authentication, security, email delivery, scheduling, communications, document exchange, customer management, analytics, professional software, and technical support. They may process information only for contracted business purposes and subject to applicable confidentiality, security, and legal restrictions.
Current website infrastructure includes Google Firebase for hosting and/or related cloud functions and data services, and Resend (operated by Plus Five Five, Inc.) for email delivery. Depending on configuration, these providers may process identifiers, content routed through their services, IP or device information, logs, and delivery or diagnostic data. Firebase services may process data on Google infrastructure in the United States or other locations depending on the product and selected data location. Resend processes email content, recipient and sender information, and delivery-related data as needed to transmit and secure email.
Professional and authorized parties
After an engagement begins, we may disclose information to Don Partners personnel, authorized tax preparers, professional advisers, software providers, government agencies, financial institutions, or other parties as necessary to perform requested services, but only as authorized by law, a valid consent, or an applicable exception.
Legal, safety, and business events
We may disclose information when reasonably necessary to comply with law, legal process, professional duties, insurance obligations, or government requests; protect rights, safety, systems, or property; investigate fraud or misuse; or complete a merger, reorganization, financing, or transfer of all or part of a business. Any successor remains subject to applicable restrictions on tax return information and other protected data.
6. Sale, Sharing, and Targeted Advertising
Don Partners does not sell personal information for money and does not authorize Firebase, Resend, or another service provider to sell personal information submitted to Don Partners. Don Partners also does not sell or disclose tax return information for advertising or unrelated commercial purposes.
Using a cloud host or email-delivery provider to process information on Don Partners’ behalf is generally a service-provider disclosure, not a “sale,” when the relationship and use are properly limited by contract and law. Vendor processing does not justify a blanket statement that Don Partners may sell client data.
Don Partners does not currently state that it shares personal information for cross-context behavioral advertising or processes it for targeted advertising. If Don Partners later enables advertising pixels, audience matching, cross-site tracking, or a data arrangement that qualifies as a “sale,” “sharing,” or targeted advertising under applicable state law, it must update this Policy and provide any required notice, opt-out mechanism, browser-signal recognition, contract, and—where sensitive or tax-return information is involved—affirmative or separately prescribed consent before the practice begins.
Mobile telephone numbers, text-message originator opt-in data, and consent records will not be sold or shared with third parties or affiliates for their own marketing or promotional purposes.
7. Cookies and Similar Technologies
The Site may use cookies, local storage, and similar technologies that are strictly necessary for operation, security, preferences, form or chat state, authentication, and performance. Optional analytics or advertising technologies should not load until any consent required by applicable law has been obtained.
You can control cookies through browser settings and any preference tool provided on the Site. Blocking necessary technologies may prevent features from working. Don Partners should maintain an accurate cookie inventory and avoid claiming that a banner or browser setting provides controls that the Site has not implemented.
8. Email, Telephone, and Text Communications
We use contact information to respond to requests and, when authorized, to send calls, emails, or text messages about inquiries, consultations, reminders, document requests, services, and related follow-up.
Marketing emails will identify the sender, use non-deceptive subject lines and headers, include a valid physical postal address, provide a clear unsubscribe method, and honor opt-out requests within the period required by law. Transactional or relationship messages will be treated according to their primary purpose.
For text messages, message frequency varies and message and data rates may apply. Consent is not a condition of purchase. Reply STOP to opt out and HELP for help. We may send one opt-out confirmation and may continue communications otherwise permitted by law. We retain consent and opt-out records as needed for compliance.
9. Legal Bases and Consent
United States law generally does not use a single universal “legal basis” framework. Depending on the information and context, we process information to respond to your request, perform or consider a contract, operate and secure our business, comply with legal and professional duties, protect rights, and act with consent where consent is required.
You may withdraw consent prospectively through the method provided at collection or by contacting us, but withdrawal does not affect processing already lawfully completed and may prevent us from providing a requested feature or service. Tax-return-information consents are governed by their separate terms and applicable Treasury regulations.
10. Data Retention
We retain information only for as long as reasonably necessary for the purposes described in this Policy, including to evaluate inquiries, provide services, maintain consent and opt-out evidence, comply with tax-preparer and professional recordkeeping requirements, secure systems, resolve disputes, and enforce agreements.
Retention depends on the type of record, sensitivity, engagement status, legal obligations, limitation periods, insurance requirements, and backup cycles. Prospective-client intake that does not result in an engagement should be deleted or deidentified under a documented schedule unless needed for compliance, security, conflict checking, or dispute prevention. Don Partners should adopt and follow a written retention schedule rather than promise one universal deletion period.
11. Security
Don Partners uses reasonable administrative, technical, and physical safeguards designed to protect information. Measures should include a written information security plan, access controls, multifactor authentication where available, encryption in transit, secure configuration, vendor oversight, workforce training, incident response, backups, and periodic risk assessment appropriate to the sensitivity of taxpayer and financial information.
No method of transmission or storage is completely secure. The public Site is not a secure client portal. If you suspect unauthorized access or receive an unusual request involving payment, credentials, or sensitive documents, contact Don Partners through a known method rather than replying to the suspicious request.
12. Your Privacy Rights and Choices
Depending on your state, residency, relationship with Don Partners, the type of information, and whether an exemption applies, you may have rights to:
confirm whether we process your personal information;
access or obtain a portable copy;
correct inaccuracies;
delete certain information;
opt out of targeted advertising, sale, or certain profiling;
limit or withdraw consent for certain sensitive-data processing;
appeal a denied privacy request; and
receive equal service without unlawful discrimination for exercising a right.
These rights are not absolute. Exceptions may apply to information governed by the Gramm-Leach-Bliley Act, tax-preparer confidentiality rules, business-to-business or employment exemptions, legal claims, security, recordkeeping, or other law.
To submit a request, use the privacy contact method shown on the Site and state “Privacy Request.” Describe the request, your state of residence, and the information or interaction involved. We may reasonably verify identity and authority before responding. An authorized agent may submit a request where permitted by law, but we may require proof of authority and direct verification.
If we deny a request and applicable law provides an appeal right, reply with “Privacy Appeal” and explain the basis for the appeal. You may also contact your state attorney general. Don Partners will respond within the timeframe required by applicable law.
Because Don Partners does not currently sell personal information or use it for targeted advertising as described above, it does not currently offer a separate “Do Not Sell or Share” link. If that practice changes or a link becomes legally required, Don Partners will implement the required mechanism before the practice begins.
13. State-Specific Notices
Texas
Texas residents may have rights under the Texas Data Privacy and Security Act, subject to applicability thresholds and exemptions. These may include access, correction, deletion, portability, opt-out, and appeal rights. Don Partners will not process sensitive personal data without consent where Texas law requires it and will maintain reasonable safeguards for sensitive personal information.
California and other states
Residents of California and other states may have additional rights if the applicable law covers Don Partners and the relevant data. Categories described in Section 2 are collected for the purposes described in Section 3 and disclosed to the categories of recipients described in Section 5. Don Partners does not use or disclose sensitive personal information to infer characteristics or for purposes that would require a “Limit the Use of My Sensitive Personal Information” link under California law.
Nothing in this Policy limits a right that cannot be waived. Don Partners may provide a supplemental state notice if its activities trigger additional requirements.
14. Tax Return Information and Financial Privacy
Tax return information is subject to special restrictions. Don Partners will not use or disclose tax return information except as allowed by Internal Revenue Code section 7216 and Treasury regulations, a legally sufficient written consent, or another applicable exception. Certain consents for individual Form 1040-series return information must follow specific content, timing, formatting, and signature rules and cannot be replaced by general acceptance of this Policy.
As a tax preparer or provider of financial advisory services, Don Partners may also be a “financial institution” for purposes of the Gramm-Leach-Bliley Act and FTC rules. When applicable, Don Partners will provide required financial privacy notices and maintain a written information security program. This website Policy supplements and does not replace those notices or safeguards.
15. Third-Party Sites and Services
The Services may link to third-party websites or tools. Their privacy practices are governed by their own notices. Don Partners is not responsible for third-party practices it does not control. Before sending sensitive information through a linked tool, confirm that it is an approved Don Partners channel.
16. Changes to This Policy
We may update this Policy to reflect changes in law, technology, vendors, or practices. The “Last updated” date identifies the current version. We will provide additional notice or obtain consent when required for a material change. We will not retroactively expand the use of tax return information or other protected information without authorization required by law.
17. Contact
Privacy questions and requests may be submitted using the contact method identified on donpartnersfirm.com. Don Partners should publish a monitored privacy email address, business telephone number, and business mailing address on or adjacent to this Policy before launch.
DON PARTNERS | WEBSITE LEGAL POLICY PACK
Accessibility Statement
Last updated: July 28, 2026
Don Partners is committed to providing people with disabilities meaningful access to its website, information, and services.
Our Standard
Don Partners is working toward substantial conformance with the Web Content Accessibility Guidelines (“WCAG”) 2.2, Level AA, as a practical technical benchmark. WCAG is a set of accessibility guidelines developed by the World Wide Web Consortium. Using WCAG as a benchmark does not imply that every page or feature will meet every criterion at all times or that WCAG is the only way to satisfy applicable law.
Accessibility Measures
Don Partners’ accessibility work includes or is intended to include:
semantic page structure and logical heading order;
keyboard access without requiring a mouse;
visible focus indicators;
meaningful labels, instructions, error identification, and status messages for forms and the scripted intake assistant;
sufficient color contrast and text resizing;
text alternatives for meaningful images;
descriptive links and page titles;
reduced-motion support where animation is used;
captions or transcripts for meaningful prerecorded media;
compatibility testing with common screen readers and keyboard-only navigation; and
an accessible alternative method to request information, communicate, and schedule a consultation.
Accessibility is an ongoing process. Don Partners plans to test and improve the Site as content and technology change.
Need Assistance or Want to Report a Barrier?
If you have difficulty accessing any part of donpartnersfirm.com, need information in another format, or need help completing an intake or scheduling step, contact Don Partners using the telephone or email method displayed on the Site.
Please identify:
the page, feature, or content involved;
the nature of the difficulty;
your preferred accessible format or method of communication; and
a way to contact you.
Don Partners will make reasonable efforts to provide the information or service through an accessible alternative and to address reported barriers. Accessibility feedback will not be used to deny or reduce service.
Third-Party Content
Some third-party tools or linked content may not be fully controlled by Don Partners. Don Partners seeks to work with providers that support accessibility and will offer a reasonable alternative when feasible if a third-party feature creates a barrier.
Page
DON PARTNERS | WEBSITE LEGAL POLICY PACK
Private Launch and Compliance Checklist
INTERNAL — DO NOT PUBLISH
Do not publish this section as a consumer-facing policy.
A. Required facts to confirm before publication
Confirm whether “Don Partners” is only a trade name or the full legal entity name. Put the legal entity and any “doing business as” relationship in the Terms and Privacy Policy if applicable.
Add a monitored privacy email, public business telephone number, and complete business mailing address.
Confirm the principal-office Texas county before hard-coding exclusive venue.
Inventory the exact Firebase products enabled: Hosting, Firestore, Realtime Database, Authentication, Cloud Functions, Storage, App Check, Analytics, Performance Monitoring, Crashlytics, or others.
Confirm whether Google Analytics, Meta Pixel, Google Ads, reCAPTCHA, Calendly, payment providers, CRM tools, call tracking, or any other third party loads on the Site.
Confirm what the scripted chat stores, where it stores it, who can access it, and when abandoned lead data is deleted.
Confirm Resend settings, including open tracking, click tracking, retention, suppression lists, and webhook logs.
Identify the secure client portal used after engagement. Never ask for tax documents through the public chat.
Confirm whether services are truly limited to U.S.-based businesses or whether Don Partners also accepts U.S. individuals. Align website copy and intake options.
Have qualified counsel review these drafts, especially professional licensing claims, dispute terms, section 7216 consents, GLBA notices, and state-specific obligations.
B. Critical corrections to the current website
Remove the small “AI” label shown under chat bubbles. Replace it with Automated intake or no label.
Change “replies instantly” to automated intake available now or explain that instant messages are prewritten.
Keep the footer statement that Brandon provides professional advice, but change “CPA advice” if Brandon is not currently licensed as a CPA in every state where that title is displayed. Verify licensure and title advertising rules.
Do not imply the chat is secure or confidential. Display this short notice above the first free-text field:
Do not enter Social Security numbers, tax ID numbers, bank information, passwords, or tax documents here. This is a general intake form, not a secure client portal.
Do not pre-check consent boxes. Record the exact disclosure version, timestamp, page URL, IP address if appropriate, and submitted contact.
Separate required policy acknowledgment from optional marketing consent. A person should be able to request a consultation without agreeing to unrelated marketing.
C. Recommended intake consent copy
Use separate unchecked controls:
Required acknowledgment
I have read and agree to the Terms of Use and acknowledge the Privacy Policy.
Contact about the inquiry
By selecting this box and submitting, I authorize Don Partners to contact me at the telephone number and email address I provide about my inquiry, requested services, contact verification, consultation scheduling, appointment reminders, document requests, and related follow-up. Contact may be made by telephone call, email, or text message. Message frequency varies; message and data rates may apply. Consent is not a condition of purchase. Reply STOP to opt out of texts and use the unsubscribe link to stop marketing emails.
Optional marketing
I separately agree to receive occasional marketing calls, emails, or text messages from Don Partners about its services and educational content. Consent is not a condition of purchase. Message frequency varies; message and data rates may apply. Reply STOP to stop texts or use the unsubscribe link in marketing emails.
If no automated dialing, prerecorded voice, or marketing texts are used, do not claim they are used. If they are used, have TCPA counsel validate the exact written-consent disclosure and vendor workflow.
D. Email compliance operations
For every commercial email:
use accurate From, To, Reply-To, domain, and routing information;
use a truthful, non-deceptive subject line;
identify advertising when legally required;
include Don Partners’ valid physical postal address;
include a clear, functioning unsubscribe mechanism;
keep the opt-out available for at least 30 days after sending;
honor opt-outs within 10 business days and do not charge or demand extra information;
maintain a central suppression list across Resend, CRM, and manual sends; and
monitor vendors because Don Partners remains responsible for messages sent on its behalf.
Do not place all of this only in the Terms. It must be operationally present in each commercial email.
E. Text and telephone compliance operations
Keep inquiry/service consent distinct from marketing consent.
Store evidence of the disclosure, affirmative action, number, date/time, source page, and version.
Honor STOP and other reasonable revocation methods.
Configure HELP and STOP handling and send no more than a permitted confirmation after opt-out.
Scrub marketing campaigns against applicable federal and state do-not-call requirements.
Use quiet hours required by federal and state law.
Do not buy or share lead consent. Consent should identify Don Partners specifically when legally required.
Review the workflow whenever dialing technology, prerecorded/artificial voice, or mass texting changes.
F. Tax and financial-data controls
Maintain a written information security plan tailored to the firm.
Designate a qualified individual responsible for the program.
Conduct and document risk assessments.
Require multifactor authentication where feasible.
Encrypt sensitive customer information in transit and at rest where required or use effective compensating controls.
Limit access by role; remove access promptly when no longer needed.
Train personnel and test safeguards.
Maintain incident-response, backup, and recovery procedures.
Review Firebase, Resend, scheduling, CRM, tax software, and other service providers for contracts, security, breach notice, deletion, subprocessors, and section 7216 implications.
Do not treat the website Privacy Policy as a substitute for:
– a GLBA privacy notice when required;
– a written information security plan;
– a section 7216 consent;
– an engagement letter; or
– an incident-response plan.
If a vendor or worker outside the United States may receive tax return information, obtain specialized section 7216 advice before the transfer.
G. Data minimization and retention
Ask only intake questions needed to decide whether a consultation is appropriate.
Avoid collecting exact revenue, tax liability, account numbers, or sensitive facts when a broad category is enough.
Create a written retention schedule for abandoned chats, declined leads, booked leads, clients, communications, consent evidence, suppression lists, logs, and backups.
Delete or deidentify abandoned intake data on schedule.
Preserve opt-out records sufficiently to prevent future marketing after deletion of other lead data.
Create a verified process for access, correction, deletion, portability, opt-out, and appeal requests.
H. Firebase and Resend configuration review
Firebase
Apply least-privilege Firestore/Realtime Database/Storage security rules; deny by default.
Do not rely on a hidden API key as access control.
Separate public intake data from client tax records.
Enable App Check and abuse controls where appropriate.
Restrict administrator roles and enable MFA.
Select data locations intentionally where available.
Disable unused Analytics, Performance Monitoring, Crashlytics, Cloud Messaging, or other automatic collection.
If optional analytics are enabled, implement consent and preference controls where required.
Test data export and deletion across every collection and backup path.
Resend
Execute or accept the current DPA and review subprocessors.
Use verified Don Partners domains with SPF, DKIM, and DMARC.
Disable open/click tracking unless it is needed and disclosed.
Never place Social Security numbers, tax documents, bank data, or unnecessary sensitive details in email bodies or subject lines.
Configure bounce, complaint, unsubscribe, and suppression handling.
Limit API keys and webhook secrets; rotate compromised credentials.
Set a retention approach for message content and logs consistent with the firm’s schedule.
I. Accessibility remediation target
The public Accessibility Statement is useful, but it does not fix barriers. Target WCAG 2.2 Level AA and test the actual flow.
Minimum launch tests:
complete the entire site and chat using keyboard only;
test with NVDA + Chrome or Firefox on Windows and VoiceOver + Safari on iPhone/macOS;
ensure every checkbox and input has a programmatic label;
place validation errors next to fields and announce them to screen readers;
announce newly inserted chat messages and options without stealing focus;
ensure focus moves predictably when the consent modal opens and returns when it closes;
provide an accessible name for the menu and message buttons;
use real headings in logical order;
add meaningful image alt text and empty alt text for decorative images;
meet contrast requirements for text, borders, focus indicators, and disabled/enabled states;
allow 200% zoom and narrow-screen reflow without lost content;
provide at least 24-by-24 CSS-pixel target sizes where WCAG 2.2 requires them;
avoid color-only status indicators such as the green online dot;
support reduced motion;
set the document language;
give every page a unique descriptive title; and
publish a working phone/email alternative for people blocked by the chat.
Automated scanners are useful but insufficient. Manual keyboard and screen-reader testing is required.
J. Sources verified July 28, 2026
U.S. Department of Justice, Guidance on Web Accessibility and the ADA: https://www.ada.gov/resources/web-guidance/
W3C, Web Content Accessibility Guidelines (WCAG) 2.2: https://www.w3.org/TR/WCAG22/
Federal Trade Commission, CAN-SPAM Act: A Compliance Guide for Business: https://www.ftc.gov/business-guidance/resources/can-spam-act-compliance-guide-business
Federal Communications Commission, Telephone Consumer Protection Act materials and consent/revocation rules: https://www.fcc.gov/consumers/guides/stop-unwanted-robocalls-and-texts
Texas Attorney General, Texas Data Privacy and Security Act: https://www.texasattorneygeneral.gov/consumer-protection/file-consumer-complaint/consumer-privacy-rights/texas-data-privacy-and-security-act
Internal Revenue Service, Section 7216 Information Center: https://www.irs.gov/tax-professionals/section-7216-information-center
Internal Revenue Service, Publication 4557, Safeguarding Taxpayer Data: https://www.irs.gov/pub/irs-pdf/p4557.pdf
Federal Trade Commission, Safeguards Rule: What Your Business Needs to Know: https://www.ftc.gov/business-guidance/resources/ftc-safeguards-rule-what-your-business-needs-know
Google Firebase, Privacy and Security in Firebase: https://firebase.google.com/support/privacy
Google Firebase, Data Processing and Security Terms: https://firebase.google.com/terms/data-processing-terms
Resend, Privacy Policy: https://resend.com/legal/privacy-policy
Resend, Data Processing Addendum: https://resend.com/legal/dpa