Privacy Statement

This privacy statement was last changed on February 4, 2024, and last checked on February 4, 2024.

Prosperity Financial Accounting. (“PFA,” “we,” “our,” “us”) values and respects the privacy of individuals. This Privacy Policy (“Privacy Policy”) describes the types of information, including Personal Data, that PFA processes as part of our websites, including https://www.ProsperityFinancialAccounting.com/ and other online tools (collectively, the “Services”). This Privacy Policy outlines individual rights regarding PFA’s collection, use, and disclosure of Personal Data related to the Services.

As used in this Privacy Policy, the term “Personal Data” means information that identifies an individual or a household directly or indirectly by reference to identifier(s) such as name, identification number, location data, online identifier, or one or more factors specific to an individual’s physical, physiological, genetic, mental, economic, cultural, educational, commercial, professional or social identity.

The terms of this Privacy Notice are not intended to supersede any corporate agreements in place with your employer or other organization that you are affiliated with, which has contracted to use PFA services (“Agreement(s)”). In the event of a conflict between this Privacy Notice and such Agreement(s), the terms of the Agreement(s) will prevail.

If you have questions about our privacy practices, please take a look at the end of this Privacy Policy for information about how to contact us.

1. Purpose and categories of data

Some Personal Data is collected from Users through the Services.

Types of Personal Data Collected.

i. Among the types of Personal Data collected through the Services, by PFA itself or through third parties, are

Cookies, Usage Data, Email Address, First Name, Last Name, Phone Number, and IP Address.

ii. Details of each type of Personal Data collected are provided in the dedicated sections of this Privacy Policy or

through explanatory messages displayed prior to the data collection.

iii. Personal Data may be freely provided by the User or, in the case of Usage Data, collected automatically when

using the Services.

iv. Unless specified otherwise, all Personal Data requested by the Services is required for a User to use the

Services. Failure to provide this data may make it impossible for PFA to provide the Services. In cases where

the Services indicate that some Personal Data is not required. Users are free not to communicate this data

without impacting the availability or the functionality of the Services.

v. Users who are uncertain about which Personal Data is required for the Services are welcome to contact PFA.

vi. Users are responsible for any third-party Personal Data obtained, published, or shared by such Users through

the Services and confirm that they have the third party’s consent to provide such data to PFA.

vii. In addition to the information contained in this Privacy Policy, PFA may provide the User with additional and

contextual information concerning particular Services or the collection and processing of Personal Data upon

request.

PFA processes Personal Data, including sharing it with third parties, where processing is necessary for our legitimate commercial

interests and performance of the Services as further described in this Section. PFA does not sell Personal Data that we collect.

The purposes for which each type of Personal Data is collected through the Services are as follows:

· Providing the Services to Users

· Performing analytics on the Services

· Contacting the User

· Displaying content from external platforms

· Managing contacts and sending messages

· Performing platform services and hosting

· Managing registration and authentication

· Performing tag management

· Managing system logs and maintenance

· Performing internal operations, such as improving the effectiveness of our Services

· Conducting audits

· Providing information to our representatives and advisors, such as our attorneys, accountants, and others, to help us comply with legal, accounting, or security requirements

· Transferring information as part of a merger or sale of the business

· Resolving disputes between Users, customers, and PFA

· Protecting the rights, safety, and information of PFA, our customers, and their members, and third parties

· Complying with our legal obligations, responding to enforcement requests, protecting PFA’s rights and interests (or those of its Users or third parties), and detecting any malicious or fraudulent activity

A User’s Personal Data may be used for legal purposes by PFA in court or the stages leading to possible legal action arising from improper use of the Services. The User acknowledges and agrees that PFA may be required to reveal Personal Data upon request of public authorities.

PFA may aggregate, combine, anonymize, and/or pseudonymize any data we collect and process, including Personal Data. This may be done to perform the Services, correct data currently held by PFA, and expand data sets and research.

We may collect or receive personal information for a number of purposes connected with our business operations, which may include the following: (click to expand)

2. Disclosure practices

A. PFA will only disclose Personal Data as set forth in this Privacy Policy, as permitted by law, or with the User’s consent. Where third parties are processing Personal Data on our behalf, they will be required to agree, by contractual means or otherwise, to process the Personal Data in accordance with applicable law and to act only on PFA’s instructions.

B. In addition to being accessible by PFA, in some cases, Personal Data may be accessible to certain types of persons involved with the operation of the Services (administration, sales, marketing, legal, system administration) or external parties (such as third party technical service providers, mail carriers, hosting providers, IT companies, communications agencies) appointed, if necessary, as Data Processors by PFA.

C. PFA may disclose Personal Data to the following entities and for the listed purposes:

· Customers and Other Authorized Business Partners. For the purpose of providing the Services, PFA will share Personal Data with a User’s designated organization (i.e., PFA’s customer).

· Employees. Only authorized employees have access to Personal Data.

· Contractors and Service Providers. PFA employs other companies and individuals to perform functions on our behalf. Examples of such functions include fulfillment activities, sending postal mail and e-mail, removing repetitive information from customer lists, analyzing data, providing technical support, and providing customer service. PFA may share Personal Data with these contractors and service providers as PFA deems necessary for such third parties to perform their functions related to the Services.

· To Comply with Legal Processes, Protect the Company, or Enforce our Rights. PFA may further disclose Personal Data when it is necessary to (i) conform to legal requirements or comply with legal processes; (ii) enforce or apply our conditions of use and other agreements; (iii) protect the rights, safety, or property of PFA, our affiliates, our customers, service providers, Users or the public, or (iv) prevent a crime or protect national security (including exchanging information with other companies and organizations for fraud protection and credit risk reduction).

· As Part of a Merger or Sale of Business. PFA may disclose or transfer Personal Data in connection with a substantial corporate transaction, such as the sale of our business, a divestiture, merger, consolidation, or asset sale, or in the unlikely event of bankruptcy.

3. Mode & Place of Processing Data

A. PFA takes appropriate security measures to prevent unauthorized access, disclosure, modification, or unauthorized

destruction of Personal Data. PFA utilizes industry-accepted reasonable security practices and has implemented

reasonable technical and organizational measures to protect the confidentiality, security and integrity of User’s Personal

Data. The measures that PFA has implemented take into account the currently available security technologies, cost, and

risk presented by the type of Personal Data PFA processes. Although PFA uses reasonable security measures to help

protect Personal Data against unauthorized disclosure or loss, PFA cannot guarantee the security of Personal Data

transmitted to PFA over the Internet. While PFA strives to use commercially acceptable means to protect Personal Data,

there is no guarantee that information may not be accessed, disclosed, altered, or destroyed.

B. The processing of Personal Data is carried out using computers and/or IT-enabled tools, following organizational

procedures and modes strictly related to the purposes indicated herein or through the Services.

C. PFA may process Personal Data relating to Users if one of the following applies:

· Users have given their consent for one or more specific purposes. Note: Under some legislation, PFA may be allowed to process Personal Data until the User objects to such processing (“opt-out”) without relying on consent or any other legal bases specified herein. This, however, does not apply whenever the processing of Personal Data is subject to European data protection law;

· Provision of data is necessary for the performance of an agreement with the User and/or for any pre-contractual obligations thereof;

· Processing is necessary for compliance with a legal obligation to which PFA is subject;

· Processing is related to a task that is carried out in the public interest or the exercise of official authority vested in PFA or

· Processing is necessary for the purposes of the legitimate interests pursued by PFA or by a third party.

D. In any case, PFA will gladly help clarify the specific legal basis that applies to processing a User’s Personal Data, particularly whether the processing of Personal Data is a statutory or contractual requirement or a requirement necessary to enter into a contract.

E. The Personal Data is processed at PFA’s operating offices and other places where the parties involved are located.

F. Depending on the User’s location, data transfers may involve transferring the User’s Personal Data to a country other

than their own.

G. Users are entitled to learn about the legal basis of Personal Data transfers to a country outside the European Union or

any international organization governed by public international law or set up by two or more countries, such as the UN,

and about the security measures taken by PFA to safeguard their Personal Data.

4. Retention of Personal Data

A. Personal Data shall be processed and stored for as long as required by the purpose(s) for which it has been collected.

· Personal Data collected for purposes related to the performance of a contract between PFA and the User (or User’s employer) shall be retained until such contract has been entirely performed.

· Personal Data collected for PFA’s legitimate business interests shall be retained as long as needed to fulfill such purposes.

· PFA may be allowed to retain Personal Data for a more extended period whenever the User has given consent to such processing, as long as such consent is not withdrawn.

· PFA may be obliged to retain Personal Data for an extended period whenever required to do so for the performance of a legal obligation or upon order of an authority.

B. Once the applicable retention period expires, Personal Data shall be deleted. Therefore, the right to access, the right to

erasure, the right to correct, and the right to data portability cannot be enforced after the expiration of the applicable

retention period.

5. Rights of Users

A. Users may exercise certain rights regarding their Personal Data processed by PFA.

B. In particular, Users have the right to do the following:

· Withdraw their consent at any time. Users have the right to withdraw consent where they have previously consented to processing their Personal Data.

· Object to processing of their Personal Data. Users have the right to object to processing their Personal Data if the processing is carried out on a legal basis other than consent.

· Access their Personal Data. Users have the right to learn if PFA is processing their Personal Data, obtain disclosures regarding certain aspects of such processing, and obtain a copy of the Personal Data undergoing processing.

· Verify and seek rectification. Users have the right to verify the accuracy of their Personal Data and ask for it to be updated or corrected.

· Restrict the processing of their Personal Data. Users have the right, under certain circumstances, to restrict the processing of their Personal Data. Where Users have and exercise such rights, PFA will not process a User’s Personal Data for any purpose other than storing it.

· Have their Personal Data deleted or otherwise removed. Users have the right, under certain circumstances, to obtain the erasure of their Personal Data from PFA.

· Receive their Personal Data and have it transferred to another controller. Users have the right to receive their Personal Data in a structured, commonly used, and machine-readable format and, if technically feasible, to transmit it to another controller without any hindrance. This provision is applicable provided that the Personal Data is processed by automated means and that the processing is based on the User’s consent, on a contract the User is part of, or on pre-contractual obligations thereof.

· Lodge a complaint. Users have the right to bring a claim before their competent data protection authority.

C. Where Personal Data is processed for a public interest, in the exercise of an official authority vested in PFA, or for the

legitimate interests pursued by PFA, Users may object to such processing by providing grounds related to their

particular situation to justify the objection.

D. Should a User’s Personal Data be processed for direct marketing purposes, they can object to that processing at any time without providing any justification. PFA does not process Personal Data collected for direct marketing purposes.

E. Any requests to exercise User rights can be directed to PFA through the contact details in this Privacy Policy.

6. How we respond to Do Not Track signals & Global Privacy Control

The Services do not support “Do Not Track” requests. To determine whether any third-party services used by or linked to the Services honor “Do Not Track” requests, please read the privacy policies for those services.

7. Cookies

When a User first accesses the Services from certain jurisdictions, the User will receive a message advising the User that cookies are in use. By clicking “accept,” the User agrees to PFA’s use of cookies as described in this Privacy Policy. If the User does not wish to receive cookies, they may withdraw their consent, set their browser to reject cookies or alert the User when a cookie is placed on their device. Suppose the User withdraws consent or limits or disables cookies when the User visits or uses the Services. In that case, the User may not be able to utilize the full functionality of the Services. For more information about our specific use of cookies, please reference our “Cookie Policy.” PFA may also permit select third parties to use cookies to collect information about Users’ online activities across other websites or, over time, to assist us with Services analytics.

8. Security

We are committed to the security of personal data. We take appropriate security measures to limit abuse of and unauthorized access to personal data. This ensures that only the necessary persons have access to your data, that access to the data is protected, and that our security measures are regularly reviewed.

9. Third-party services

The Services may contain links to third-party websites, applications, and services not operated by PFA. These links are provided as a service and do not imply any endorsement by PFA of the activities or content of these websites, applications, or services nor any association with their operators. PFA is not responsible for any third party’s privacy policies or practices, including websites or services directly linked to or from our Services.

10. Amendments to this privacy statement

We reserve the right to make amendments to this privacy statement. It is recommended that you consult this privacy statement regularly to be aware of any changes. In addition, we will actively inform you wherever possible.

11. Accessing and modifying your data

Please contact us if you have any questions or want to know which personal data we have about you. Please make sure to always clearly state who you are, so that we can be certain that we do not modify or delete any data of the wrong person. We shall provide the requested information only upon receipt of a verifiable consumer request. You can contact us by using the information below. You have the following rights:

11.1 You have the following rights with respect to your personal data

You may submit a request for access to the data we process about you.
You may object to the processing.
You may request an overview, in a commonly used format, of the data we process about you.
You may request correction or deletion of the data if it is incorrect or not or no longer relevant, or to ask to restrict the processing of the data.

11.2 Supplements

This section, which supplements the rest of this Privacy Statement, applies to citizens and legal permanent residents of California (CPRA), Virginia (CDPA), Utah (UCPA), Connecticut (CTDPA), Colorado (CPA) and Nevada (NRS 603A)

California

Right to know what personal information is being collected about you

A consumer shall have the right to request that a business that collects personal information about the consumer disclose to the consumer the following:

The categories of personal information it has collected about that consumer.
The categories of sources from which the personal information is collected.
The business or commercial purpose for collecting or selling personal information.
The categories of third parties with whom the business shares personal information.
The specific pieces of personal information it has collected about that consumer.

The right to know whether personal information is sold or disclosed and to whom

A consumer shall have the right to request that a business that sells the consumer’s personal information, or that discloses it for a business purpose, disclose to that consumer:

The categories of personal information that the business collected about the consumer.
The categories of personal information that the business sold about the consumer and the categories of third parties to whom the personal information was sold, by category or categories of personal information for each third party to whom the personal information was sold.
The categories of personal information that the business disclosed about the consumer for a business purpose.

The Right to equal service and price, even if you exercise your privacy rights

A consumer shall have the right to request that a business delete any personal information about the consumer which the business has collected from the consumer.

A business that receives a verifiable request from a consumer to delete the consumer’s personal information pursuant to subdivision (a) of this section shall delete the consumer’s personal information from its records and direct any service providers to delete the consumer’s personal information from their records.

A business or a service provider shall not be required to comply with a consumer’s request to delete the consumer’s personal information if it is necessary for the business or service provider to maintain the consumer’s personal information in order to:

Complete the transaction for which the personal information was collected, provide a good or service requested by the consumer, or reasonably anticipated within the context of a business’s ongoing business relationship with the consumer, or otherwise perform a contract between the business and the consumer.
Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity; or prosecute those responsible for that activity.
Debug to identify and repair errors that impair existing intended functionality.
Exercise free speech, ensure the right of another consumer to exercise his or her right of free speech, or exercise another right provided for by law.
Comply with the California Electronic Communications Privacy Act pursuant to Chapter 3.6 (commencing with Section 1546) of Title 12 of Part 2 of the Penal Code.
Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when the businesses’ deletion of the information is likely to render impossible or seriously impair the achievement of such research, if the consumer has provided informed consent.
Exercise free speech, ensure the right of another consumer to exercise his or her right of free speech, or exercise another right provided for by law.
To enable solely internal uses that are reasonably aligned with the expectations of the consumer based on the consumer’s relationship with the business.
Comply with a legal obligation.
Otherwise use the consumer’s personal information, internally, in a lawful manner that is compatible with the context in which the consumer provided the information.

Right to opt-out

You may submit a request directing us not to make certain disclosures of personal information we maintain about you. For more information about the possibility of submitting an opt-out request, please refer to our Opt-out preferences page.

Financial incentives

Selling of personal data to third parties

We have not sold consumers’ personal data in the preceding 12 months

We have not disclosed consumers’ personal information for a business purpose in the preceding 12 months.

Internet activity information, including, but not limited to, browsing history, search history, and information regarding a consumer’s interaction with an Internet Web site, application, or advertisement

12. Children

PFA does not knowingly collect Personal Data from children under the age of 18. If PFA learns that the Personal Data of persons younger than 18 years of age has been collected through the Services, PFA will take the appropriate steps to delete this information. If you are a parent or guardian and discover that your child or a minor under the age of 13 has posted, submitted, or otherwise communicated Personal Data to PFA without your consent, then you may alert us at admin @ ProsperityFinancialAccounting.com so that we may take appropriate action to remove the minor’s Personal Data from our systems.

13. Users based in the European Union or the United Kingdom

For purposes of the EU’s General Data Protection Regulation (“GDPR”) and the UK GDPR, the data controller is Prosperity Financial Accounting., with an office at 1775 Tysons Blvd 5th Floor, McLean, Virginia 22102, USA.

PFA is headquartered in the United States. By using any of the Services from outside the United States, Users acknowledge that their Personal Data will be accessed by PFA or transferred to PFA in the United States and to those entities listed in Section III of this Privacy Policy who are located around the world; and that User Personal Data will be transferred to, and stored and processed in, the United States or elsewhere in the world where PFA servers are located.

14. Definitions

A. “Data Processor”: The natural or legal person, public authority, agency, or other body that processes Personal Data on

behalf of the controller, as described in this privacy policy.

B. “Data Subject”: The natural person to whom the Personal Data refers.

C. “European Union” or “EU”: Unless otherwise specified, all references made within this document to the European Union

include all current member states to the European Union and the European Economic Area.

D. “Usage Data”: Information collected automatically through the Services (or third-party services utilized for the Services),

which can include the IP addresses or domain names of the computers utilized by the Users who use the Services, the

URI addresses (Uniform Resource Identifier), the time of the request, the method utilized to submit the request to the

server, the size of the file received in response, the numerical code indicating the status of the server’s answer

(successful outcome, error, etc.), the country of origin, the features of the browser and the operating system utilized by

the User, the various time details per visit (e.g., the time spent on each page within the Services) and the details about

the path followed within the Services with special reference to the sequence of pages visited, and other parameters

about the device operating system and/or the User’s IT environment.

E. “User”: The individual using the Services who, unless otherwise specified, coincides with the Data Subject.

10. Miscellaneous

A. This privacy statement has been prepared based on provisions of multiple legislation, including Art. 13/14 of Regulation (EU) 2016/679 (General Data Protection Regulation).

B. More details concerning the collection or processing of Personal Data may be requested from PFA at any time. Please see our contact information for inquiries.

C. Changes to this Privacy Policy

· PFA reserves the right to change this Privacy Policy at any time by notifying its Users through the Services and/or – as far as technically and legally feasible – sending a notice to Users via any contact information available to PFA. Users are strongly recommended to check the Services often, referring to the date at the top of this Privacy Policy for the last modification date.

· Should changes to this Privacy Policy affect processing activities performed based on the User’s consent, PFA shall collect new consent from the User, where required.

D. Contact Information for PFA/Data Controller

Prosperity Financial Accounting, 49 Ash St. #221, Lewiston, Maine 04240

PFA contact email: admin @ ProsperityFinancialAccounting.com