Privacy Policy

Last Updated: July 22, 2026

Laborde & Associates, CPA ("Laborde," "we," "us," or "our") is committed to protecting the privacy and security of your Personal Information, including sensitive financial information entrusted to us in connection with professional accounting and advisory services. As a bilingual CPA firm serving privately-held small businesses and family-owned companies since 1988, we treat our clients like family. This Privacy Policy explains how we collect, use, disclose, retain, and safeguard information when you (a) visit our website at https://labordecpa.com (the "Site"), (b) communicate with us, and/or (c) use our services, including our secure client portal.

1. INFORMATION WE COLLECT

For purposes of this Privacy Policy, "Personal Information" means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked (directly or indirectly) with a particular individual, household, or business representative.

A. Information You Provide to Us

Depending on how you interact with us, we may collect:

Contact and Business Information: Name, business name, job title, postal address, email address, telephone number, and other details you choose to provide.
Client/Engagement Information: Information needed to evaluate, open, and administer a client relationship (including information about your business, owners, and authorized contacts).
Financial and Tax Information (Sensitive): Taxpayer identification numbers, financial statements, payroll data, bank/account details, and other records necessary to provide accounting, tax, advisory, and related services. We request that sensitive documents be transmitted through our secure client portal whenever possible.
Communications: Information you provide when you contact us by phone, email, through web forms, by mail, or in person (including the content of messages and attachments).
Payments and Billing (as applicable): Invoices, payment status, and related billing details (note: payment card processing, if used, may be handled by third-party processors under their policies).

B. Information Collected Automatically (Site and Online Services)

When you visit the Site, we (and service providers acting on our behalf) may automatically collect:

Device and Usage Data: IP address, approximate location derived from IP, browser type, device identifiers, operating system, referring/exit pages, date/time stamps, and pages or features used.
Cookies and Similar Technologies: Cookies, pixels, tags, and similar technologies used to operate the Site, remember preferences, understand usage, and improve performance. You can control cookies through your browser settings; blocking certain cookies may affect Site functionality.

2. CLIENT PORTAL (SECURE DOCUMENT TRANSMISSION)

To help protect sensitive financial and tax documents, we make available a secure client portal hosted at https://secure.netlinksolution.com/nextgen/ (the "Client Portal"). The Client Portal is designed to transmit documents using encryption in transit and to restrict access via authenticated credentials.

How we use it: We may provide portal access to you (and, at your direction, to your authorized representatives) to exchange files, requests, and messages related to your engagement.
Security: We use reasonable administrative, technical, and physical safeguards intended to protect information submitted through the Client Portal and within our systems. No method of transmission or storage is 100% secure; however, the Client Portal is the preferred method for sending sensitive information.
Your responsibilities: Please keep your portal credentials confidential, use strong passwords, and notify us promptly if you suspect unauthorized access.

3. HOW WE USE YOUR INFORMATION

We use Personal Information for the following business and professional purposes:

Provide and administer services: Deliver CPA and advisory services (including accounting, tax preparation and compliance, income strategy, asset protection, and wealth preservation), manage engagements, and provide client support.
Communicate with you: Respond to inquiries, send service-related notices, appointment and engagement communications, requests for information, and other administrative messages.
Operate and improve the Site: Maintain, troubleshoot, and improve the Site and related systems, including analytics and performance.
Compliance, legal, and professional obligations: Meet legal, regulatory, and professional responsibilities, including those set by the Texas State Board of Public Accountancy (TSBPA), the American Institute of Certified Public Accountants (AICPA), and applicable tax and recordkeeping rules.
Security and fraud prevention: Protect our clients, personnel, and business, including monitoring, preventing, and investigating suspected fraud, misuse, or security incidents.
Business operations: Internal reporting, audits, training, quality assurance, and business continuity.

4. SHARING / DISCLOSURE OF YOUR INFORMATION

We do not sell your Personal Information. We may disclose Personal Information in the following circumstances:

Service providers and vendors: To trusted third parties that help us run our business and provide services (e.g., website hosting, analytics, IT support, secure portal providers, document management, communications tools), subject to confidentiality and security obligations appropriate to the relationship.
Professional advisors: To our attorneys, insurers, consultants, and other advisors as needed for business, compliance, or risk management purposes.
Legal and compliance disclosures: When required or permitted by law; in response to subpoenas, court orders, or other lawful requests; or to protect the rights, property, or safety of Laborde, our clients, or others.
Business transfers: In connection with a merger, acquisition, financing, reorganization, dissolution, or sale of all or a portion of our assets, where Personal Information may be transferred as part of the transaction, subject to applicable confidentiality obligations.

5. DATA SECURITY

We maintain reasonable safeguards designed to protect Personal Information, including appropriate access controls, encryption where appropriate (including SSL/TLS for the Site), and practices intended to reduce risks of loss, misuse, and unauthorized access. Despite these measures, no security program can guarantee absolute security. You are responsible for maintaining the confidentiality of any credentials you use to access the Client Portal or other protected areas.

6. DATA RETENTION

We retain Personal Information for as long as reasonably necessary to:

provide our services and administer our client relationships;
meet legal, regulatory, tax, accounting, and professional obligations (including record retention requirements);
resolve disputes and enforce our agreements; and
maintain business records and security logs.

Retention periods vary depending on the nature of the information, the engagement, and applicable laws and professional standards. When information is no longer needed, we will take reasonable steps to delete, destroy, or de-identify it consistent with applicable requirements and our retention practices.

7. INTERNATIONAL DATA TRANSFERS

Laborde is based in the United States. If you access the Site or provide Personal Information from outside the United States, you understand that your information may be transferred to, processed, and stored in the United States and other jurisdictions where we or our service providers operate. These jurisdictions may have data protection laws that differ from those in your place of residence. Where required, we use appropriate safeguards for cross-border transfers (for example, contractual protections with service providers).

8. CALIFORNIA PRIVACY RIGHTS (CCPA/CPRA NOTICE)

This section applies to California residents to the extent the California Consumer Privacy Act, as amended by the California Privacy Rights Act ("CCPA/CPRA"), applies to our processing.

A. Categories of Personal Information We Collect

Depending on your interaction with us, we may collect categories of Personal Information described above, including identifiers (e.g., name, contact details), internet activity (e.g., Site usage), and professional/business information. We may also collect sensitive information necessary to provide CPA services (e.g., tax identifiers, financial account information, payroll and tax records) when you engage us.

B. Purposes for Collection and Use

We collect and use Personal Information for the purposes described in Section 3 (How We Use Your Information), including providing services, operating the Site, security, and compliance.

C. Sale or Sharing of Personal Information; Opt-Out

We do not sell Personal Information and do not knowingly "share" Personal Information for cross-context behavioral advertising as those terms are defined under the CCPA/CPRA. Accordingly, we do not offer an opt-out from sale/sharing because we do not engage in those activities. If our practices change, we will update this policy and provide any required opt-out mechanisms.

D. California Consumer Rights

Subject to applicable exceptions and verification requirements, California residents may have the right to:

Know/Access: Request information about the categories and specific pieces of Personal Information collected, used, and disclosed.
Delete: Request deletion of Personal Information we collected from you (subject to legal and other exceptions).
Correct: Request correction of inaccurate Personal Information.
Limit use and disclosure of sensitive personal information: Where applicable under the CCPA/CPRA.
Non-discrimination: Not be discriminated or retaliated against for exercising CCPA/CPRA rights.

E. How to Exercise California Rights

To submit a request, see Section 12 (How to Exercise Rights and Contact Us). We will verify your request, which may require matching information you provide with information we have on file and, where applicable, confirming your authority as an authorized agent.

9. EUROPEAN PRIVACY RIGHTS (GDPR/EEA & UK)

This section applies if you are located in the European Economic Area ("EEA") or the United Kingdom ("UK") and the General Data Protection Regulation (GDPR) (and UK GDPR, as applicable) applies to our processing.

A. Data Controller

Laborde & Associates, CPA is the data controller for Personal Data processed under this Privacy Policy, unless otherwise stated in writing for a specific engagement.

B. Lawful Bases for Processing

We process Personal Data only when we have a lawful basis, including:

Contract: Processing is necessary to perform a contract with you or to take steps at your request before entering into a contract (e.g., providing services).
Legal obligation: Processing is necessary to comply with legal and regulatory obligations (e.g., tax, accounting, anti-fraud, and recordkeeping requirements).
Legitimate interests: Processing is necessary for our legitimate interests (e.g., securing our systems, improving services, responding to inquiries, and operating our business) and those interests are not overridden by your rights.
Consent: Where required, we will rely on your consent (e.g., certain marketing communications), and you may withdraw consent at any time.

C. Your GDPR Rights

Subject to conditions and limitations under applicable law, you may have the right to:

Access your Personal Data;
Rectification of inaccurate or incomplete data;
Erasure ("right to be forgotten");
Restriction of processing;
Data portability;
Object to processing (including processing based on legitimate interests and direct marketing);
Withdraw consent where processing is based on consent; and
Lodge a complaint with your local supervisory authority.

To exercise these rights, see Section 12 (How to Exercise Rights and Contact Us).

D. International Transfers (EEA/UK)

If we transfer Personal Data out of the EEA/UK, we will implement appropriate safeguards as required (for example, the European Commission’s Standard Contractual Clauses or the UK International Data Transfer Addendum, as applicable), unless an exception applies.

10. BILINGUAL SERVICES (ENGLISH/SPANISH)

We are a bilingual firm and strive to communicate clearly with our clients and community. This Privacy Policy is provided in English; a Spanish-language version may be made available upon request. If you would like a Spanish copy, please contact us using the information in Section 12.

11. CHILDREN'S PRIVACY (COPPA)

Our Site and services are intended for adults and businesses and are not directed to children under 13. We do not knowingly collect Personal Information from children under 13. If you believe a child under 13 has provided Personal Information to us, please contact us so we can take appropriate steps to delete the information.

12. HOW TO EXERCISE RIGHTS; DATA PRIVACY CONTACT

To exercise applicable privacy rights (including CCPA/CPRA or GDPR rights) or to ask questions about this Privacy Policy, please contact our Data Privacy Contact:

Data Privacy Contact
Laborde & Associates PC, CPAs
1518 S. Flores St.
San Antonio, TX 78204
Email: info@labordecpa.com
Phone: (210) 227-2800

Verification and Authorized Agents

For your protection, we may need to verify your identity before processing certain requests. If you use an authorized agent (where permitted by law), we may require proof of authorization and may still need to verify your identity directly with you.

13. THIRD-PARTY LINKS

Our Site may contain links to third-party websites or services. We are not responsible for the privacy practices or content of those third parties. We encourage you to review the privacy policies of each website or service you use.

14. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. We will update the "Last Updated" date at the top of this page when changes are posted. Your continued use of the Site after changes become effective constitutes your acceptance of the updated Privacy Policy.