What we collect, and what we do with it.
This notice covers information collected through this website. Information you provide once we are formally engaged is governed by your engagement letter and by the confidentiality obligations that attach to a CPA practice.
Who is responsible
Gulzari CPA LLC operates this site and is responsible for the information described here. The practice is based in Kissimmee, Florida, United States.
What the site collects
- Diagnostic submissions. If you complete the cross-border diagnostic, we receive the answers you enter — entity type, jurisdiction, scale band, and the structural facts you select — together with the name and email address you supply at the final step.
- Correspondence. Anything you send us by email or through a form.
- Technical logs. Our hosting provider records standard request data — IP address, user agent, timestamp, and the URL requested — for operational security.
We measure aggregate traffic and page-load performance. It is cookieless, it records no identifier that persists between visits, and it is served over a first-party path on this domain. We do not use advertising cookies, we do not run cross-site trackers, and we do not sell or share personal information for cross-context behavioral advertising.
What we do not collect
The diagnostic is designed so that you never upload a document to complete it. Do not send tax returns, account statements, passports, or identification numbers through this site. If we need those, we will send you a secure channel once you are engaged.
How diagnostic answers are handled
Your answers stay in your browser while you work through the four steps. They are held in that tab only and are cleared when you close it. Nothing is transmitted until you press the confirm-and-send control on the final step, and that screen shows you exactly what will be sent before you press it. If you leave before then, we never receive anything.
When you do send, two things happen. Your structural answers — jurisdiction, scale band, entity type, and the friction vectors you selected — are passed to a third-party AI provider in the United States, which generates the written analysis you see. Your name and email are not included in what is sent there. Separately, the full submission including your name and email is stored in our own database so that we can reply to you.
We use the submission for one purpose: to assess whether we can help and to reply to you. Submitting the diagnostic does not engage the firm and does not obligate either of us — see our terms of use.
Cookies
The public site sets no cookies at all. Two functional cookies exist and are set only if you are given a link to them: a review-mode cookie used by the client during a design review, and an internal dashboard cookie. Both are strictly functional, contain no personal information, and are not used for analytics or advertising.
Who else sees your information
We use a small number of processors to run the site: a hosting and edge provider, a managed database provider, and an email provider. They process data on our instructions only. We do not disclose your information to anyone else except where we are legally required to, or where you ask us to coordinate with your attorneys or other advisers.
Retention and deletion
Diagnostic submissions that do not lead to an engagement are retained for twelve months and then deleted. You can ask us to delete yours sooner at any time and we will do it without asking why — see section 09. Deleting a submission does not require you to have been a client.
Correspondence is retained for as long as needed to answer it. Information belonging to an engaged client is retained under the record-retention terms of the engagement letter and the applicable professional standards.
International transfers
The firm is in the United States and information submitted through this site is processed there. If you are in the United Kingdom, the European Economic Area, or another jurisdiction with transfer restrictions, submitting information to us means it will be transferred to the United States.
Your rights
Depending on where you live you may have the right to access, correct, delete, or receive a copy of your information, and to object to or restrict how we use it. California residents additionally have the rights described in the CCPA as amended, including the right not to be discriminated against for exercising them. We will not charge you for making a request and we will respond within the period the applicable law allows.
To make a request, contact us through the intake form and mark it as a privacy request.
Children
This site is directed at businesses and their principals. It is not for anyone under 18.
Changes
If this notice changes materially we will update the date at the top of this page. This version is dated 26 July 2026.