Search for:
SBA 8(a) Business Development Program Consulting Services
Cybersecurity Maturity Model Certification (CMMC)
Providing You Guidance to Innovate and Grow Your Business
Government Contractor Consulting Services
Healthcare Industry M&A Report: What We Saw in 2021 and What’s Ahead
Cannabis Accounting, Tax & Business Advisory Services
Providing You Guidance to Innovate and Grow Your Business
Government Contractor Consulting Services
Providing You Guidance to Innovate and Grow Your Business
Government Contractor Consulting Services
General Data Protection Regulation (GDPR) for Higher Education Institutions
Government Contractor Consulting Services
2021 US Middle-Market Private Equity Report
Advisory, Accounting & Tax Services for Special Purpose Acquisition Companies (SPACs)
Risk Management Consulting Services for the Financial Services Industry
Government Contractor Consulting Services
Providing You Guidance to Innovate and Grow Your Business
Government Contractor Consulting Services
Providing You Guidance to Innovate and Grow Your Business
Government Contractor Consulting Services

COVID-19 Guidance Center

Tax Implications and Financial Business Guidance Regarding the Coronavirus

Transaction Advisory Services

Helping businesses navigate financial due diligence engagements and domestic and cross-border transactions.

Employee Retention Credit Tax Services

Expanded Employee Retention Credit (ERC) & how our professionals can assist you.

How Can We Guide You?

Cherry Bekaert

Privacy Policy

shadow

Privacy Policy of Cherry Bekaert LLP

Effective Date/Last Updated: June 30, 2022

“Cherry Bekaert” is the brand name under which Cherry Bekaert LLP and Cherry Bekaert Advisory LLC, independently owned entities, provide professional services in an alternative practice structure in accordance with applicable professional standards. Cherry Bekaert LLP is a licensed CPA firm that provides attest services, and Cherry Bekaert Advisory LLC and its subsidiary entities provide tax and advisory services.

As used in this Policy, “Cherry Bekaert,” “the Firm,” “we” or “us” or “our” means Cherry Bekaert LLP and Cherry Bekaert Advisory LLC. Cherry Bekaert is committed to protecting the privacy of your personal information. We have created this Privacy Policy (“Policy”) to inform you how we collect, store, use and protect your personal information and of your rights when you access this website, cbh.com (the “Site”).

Please read this Policy carefully before using the Site or submitting personal information to us. This Policy is incorporated into and subject to the Terms of Use. BY ACCESSING OR USING THE SITE, YOU CONSENT TO THE COLLECTION, USE, AND SHARING OF YOUR PERSONAL INFORMATION AS SET FORTH IN THIS PRIVACY POLICY. If you do not agree to this Privacy Policy or our Terms of Use, you may not use our Site.

We reserve the right to revise this Policy at any time. If we make any material changes, we will update the date noted above. We reserve the right to provide notice of any changes in other ways, as well. Your use of this Site after such changes constitutes your agreement to the Policy as amended. Except as authorized by you, or as permitted or required by applicable law, we will handle your personal information in accordance with the terms of the Policy in effect at the time of the collection.

Under no circumstance do we provide personal information to non-Cherry Bekaert companies for the purpose of independent telemarketing or direct mail marketing of any product or service of these companies. In fact, we do not disclose any information except in the limited situations described below.

We hope that by taking a few moments to read our Policy, you will have a better understanding of what we do with the information you provide us and how we keep it private and secure.

  1. INFORMATION WE COLLECT ABOUT YOU AND HOW WE COLLECT IT

We collect personal information when you visit or use our Site, products, and services. Personal information is any information that relates to you, identifies you personally, or could be used to identify you, such as your name, mailing address, email address, or telephone number.  Below is a summary of the types of information we collect and how we collect it.

  • Information You Voluntarily Provide to Us.  We collect information you give us voluntarily when you use our Site. For example, when you contact us you may provide your name, email address and any information in your message. You do not have to provide this information to access or use the other sections of the Site. If you wish to access certain secure areas of the Site, such as the client portal, you must provide certain personal information in order to create an account or user profile and to log in to those areas.
  • Information Collected Automatically As you navigate through and interact with our Site, we may compile statistical information concerning your usage of the Site through analytics services, such as those provided by Google Analytics. To do so, we may collect certain information about your equipment, browsing actions and patterns, including:
    • Details of your visits to our Site, such as traffic data, location data, logs and other communication data and the resources that you access and use on the Site.
    • Information about your computer and internet connection, including your IP address, operating system, and browser type.
    • Information about the type of device you are using, mobile ad identifiers, the time and length of your visit, and the website that referred you to our Site.
    • Information about your preferences to make your use of the Site more productive, via the use of Cookies. For more information regarding Cookies, please see Section 2 below.

While all of this information can be associated with the IP address you used when visiting the Site, it will not be associated with you as an individual or with any other information you may submit through the Site or that we may store about you for any other purposes. We may use this information to generate aggregate statistics about visitors to our Site. Please check your web browser if you want to learn what information your browser sends or how to change your settings.

  1. COOKIES AND OTHER TRACKING TECHNOLOGIES

We use cookies and other web technologies to collect and store certain types of information when you visit the Site. A cookie is a small file consisting of letters and numbers that automatically collect certain information from you. This file uniquely identifies and recognizes your browser or device and transmits information back to the server. Depending on the cookie type, it may perform functions such as remembering your user preferences, improving the quality of your visit, recording the website pages you view, remembering the name or address you entered during a visit, or delivering ads that are targeted to your interests and browsing activity.

Types of Cookies.

First and Third Party Cookies. First party cookies are generally placed on your computer or device by the website you are visiting. For example, we may use a first party cookie to improve website security. Third party cookies are placed on your computer or device by a source other than the website you are visiting in order to enable third-party features such as advertising, analytics, videos, or interactive content.

Essential or Strictly Necessary Cookies. These cookies are necessary for the website to function and cannot be switched off in our systems. They are usually set in response to actions taken by you which amount to a request for services, such as setting your privacy preferences, logging in or filling in forms. These cookies do not store any personally identifiable information.

Performance and Functionality Cookies. Although these are non-essential cookies, they help the website perform and function as designed. For example, performance and functionality cookies may help the website display videos, enable chat sessions, or recognize whether you visited the website before.

Analytics Cookies. These cookies track your usage of the website. The information these cookies collect can be used for various purposes such as understanding how visitors use the website, site and content customization, or advertising and marketing.

Advertising Cookies. Advertising and marketing cookies perform functions such as helping customize your website experience, personalizing ads based on your online activities and interests, measuring the effectiveness of ads, preventing an ad from reappearing, and serving you targeted advertisements. Information from these cookies may be shared with third parties or third parties may place these cookies on your computer or device. Advertising and marketing cookies may track your online activities.

The Site uses essential, functional, and performance cookies to function and perform as designed; analytics cookies to understand how you use the Site, improve its functionality and other related purposes; and advertising cookies to help us with our advertising and marketing activities.  We and our third-party partners and service providers may collect and track information about your online activities over time and across different websites, applications, and devices.

Embedded Content and Social Media Widgets. The Site contains embedded content (e.g., videos) and Social Media Widgets (e.g., LinkedIn). Embedded content may place third party cookies on your device that track your online activity to enhance your experience or assess the success of their application. Social Media Widgets allow us to integrate social media functions into the Site. These widgets may place third party cookies on your device for tracking and advertising purposes. We have no direct control over the information these cookies collect, and you should refer to their website privacy policy for additional information.

Controlling cookies. You may control cookies, including preventing or stopping the installation and storage of cookies, through your browser settings and other tools. Most browsers will allow you to block or refuse cookies. However, you may need to manually adjust your preferences each time you visit a site. For more information, see the Help section of your browser. Please note that if you block certain cookies, some of the services and functionalities of our Site may not work.

IMPORTANT: BY USING THE SITE, YOU CONSENT TO THE PROCESSING OF ANY PERSONAL INFORMATION FOR THE PURPOSES AND FUNCTIONS DESCRIBED ABOVE.

Do Not Track. “Do Not Track” is a privacy preference that you can set in your Internet search browser that sends a signal to a website that you do not want the website operator to track certain browsing information about you. However, because our Site is not configured to detect Do Not Track signals from a user’s computer, we are unable to respond to Do Not Track requests. Cookies set when you visit our Site may track you over time and across third party websites.

  1. WHY WE COLLECT YOUR INFORMATION

In general, we use the personal information we collect only for the purpose for which it was collected, for compatible purposes, as permitted or required by law, as necessary to carry out our contractual duties and obligations, and as otherwise provided in this Policy. For example, we may use your personal information in the following ways:

  • To Operate Our Site.  We may use your personal information to enable use of this Site, provide you with information or services, or to administer the Site.
  • For Internal Use. We may use your personal information to operate our business, including analyzing your information and other uses; to review, improve, and monitor our website, applications, online services, and overall client experience; to provide customization to meet specific needs; to assess trends, interests, and the demands of clients; and to carry out our obligations and enforce our rights, including those arising from any contracts entered into between you and us, including for billing, payment, and collections.
  • To Communicate with You. We may use your personal information to communicate with you, including sending messages about the availability of our Site, security, or other service-related issues. (You may change your communication preferences at any time. Please be aware that you cannot opt-out of receiving service messages from us, including security and legal notices.) We may also send you administrative or account-related information to keep you updated about your account and the Site. Such communications may include information about Policy updates, confirmations of your account actions or transactions, security updates or tips, or other relevant transaction-related information. Site-related communications are not promotional in nature.
  • To Provide Customer Support.  We may use your personal information to provide customer service and engage in quality control activities concerning our properties and services.
  • To Enforce Compliance with Our Terms and Agreements or Policies.  When you access or use our Site, you are bound to our Terms and Conditions and this Policy. To ensure compliance, we may process your personal information in connection with monitoring, investigating, preventing, and mitigating prohibited, illicit or illegal activities on our Site. We may also process your personal information to: investigate, prevent or mitigate violations of our internal terms, agreements or policies; enforce our agreements with third parties and business partners; and, as applicable, collect fees based on your use of our Site. We cannot operate our Site in accordance with our terms, agreements or policies without processing your personal information for such purposes.
  • To Ensure the Security of the Services.  We may process your personal information as necessary or appropriate to protect the rights, property, security, and safety of the Firm, our employees and clients, our information systems, and the public. Keeping you safe requires us to process your personal information, such as your device information, activity information and other relevant information. We use such information to combat spam, malware, malicious activities or security risks; improve and enforce our security measures; and to monitor and verify your identity so that unauthorized users do not gain access to your information.
  • To Maintain Legal and Regulatory Compliance.  Our Site is subject to certain laws and regulations which may require us to process your personal information. We may also use your personal information to respond to law enforcement requests, as required by applicable law, court order, governmental regulations, and for other lawful processes or public safety purposes.
  • To Engage in Marketing Activities. We may process your contact information or information about your interactions on our Site to send you marketing communications and keep you updated about the Site; provide you with information about events or other materials; and deliver targeted marketing to you.
  • Other Purposes. We may use your personal information to evaluate or conduct a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of our assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which personal information held by us is among the assets transferred.

We do not share your personal information with any third-party advertisers for their advertising purposes.

  1. DISCLOSURE OF YOUR INFORMATION

In general, we will not disclose your personal information except with your consent and as described in this Policy. We may disclose your data for the same reasons that we may use it (see Sections 1-3 above), including disclosing it to our affiliates and non-affiliated third parties, as we deem necessary to carry out those purposes. We endeavor to choose affiliates and non-affiliates whose standards for the protection of data match ours.

  • Service Providers.  We may disclose your personal information to our service providers for various purposes including to manage, improve, or optimize the Site; for IT services or cloud storage; for performance of obligations arising from any contract we enter into with you including processing payments; to process requests for information; and to engage in marketing activities. These service providers may engage additional companies to assist in supporting us. Such companies do not have any independent right to use or disclose your personal information except as we request.
  • To Maintain Legal and Regulatory Compliance.  We reserve the right to disclose any information collected through our Site to legal authorities if it is, in our sole opinion, necessary to investigate, prevent or otherwise take action regarding suspected fraud, situations involving threats or potential harm or if otherwise required by law (such as by a subpoena, court order or other legal means).
  • To Protect You, Us or Others.  We may disclose your personal information if we believe, in good faith, that such disclosure would protect your interests or rights or the interests or rights of others, including Cherry Bekaert and its personnel; to protect the integrity of the Site; and to protect against and investigate fraud.
  • Within Our Corporate Organization.  Cherry Bekaert is part of a corporate organization that has multiple legal entities, business processes, management structures and technical systems. Cherry Bekaert may, subject to applicable law, disclose your personal information within this organization to conduct its business and provide services to you.
  • Mergers and Acquisitions. We may assign, license, or otherwise disclose your personal data in connection with certain business transactions, such as a sale, acquisition, merger, or change in control, or in preparation for any of these events. In such event, we will take appropriate steps under the circumstances and to the extent possible to ensure that the recipient agrees to provide privacy protections substantially similar to those established by this Policy. Any entity that acquires all or substantially all of the Firm’s assets will have the right to continue using your data consistent with this Policy, applicable law, or as otherwise agreed to by you.
  1. LINKS TO THIRD-PARTY SITES AND THIRD-PARTY INTEGRATIONS

We may provide links to websites or resources outside of our Site for your informational purposes only. We may also provide links to third-party integrations. Third party integrations are websites or platforms that synchronize with our Site to provide you with additional functionality, tools, or services, such as maps, sending requested information, etc.

You acknowledge and agree that we are not responsible for the availability of third-party sites, resources, or integrations and do not endorse and are not responsible or liable for any content, advertising, goods, services or other materials on, available through, or provided by such sites, resources, or integrations.  We are not responsible for the privacy or other practices of such sites and cannot guarantee the security of personal information that you provide to, or that is collected by, such sites.  We encourage you to review the privacy policies and terms and conditions on those linked sites.

  1. SECURITY

We take precautions to protect data and information under our control from misuse, loss or alteration. Our security measures include industry-standard physical, technical and administrative measures to prevent unauthorized access to or disclosure of your information, to maintain data accuracy, to ensure the appropriate use of information, and to otherwise safeguard your personal information. However, no system for safeguarding personal or other information is 100% secure and although we have taken steps to protect your personal information from being intercepted, accessed, used or disclosed by unauthorized persons, we cannot fully eliminate security risks associated with personal information.

Please recognize that protecting your personal information is also your responsibility. We ask, among other things, that you take appropriate steps to safeguard the password, security questions and answers, and other authentication information you use to access our Site.

  1. YOUR CHOICES

You have the right to limit the information you provide us.  If you choose not to provide certain information we request, however, we may be unable to provide you access to certain of our services and content.

We may sometimes send you email communications about our products and services.  To opt-out of receiving these communications, please click the “unsubscribe” link.  

  1. RETENTION

We will retain your personal information only for as long as is necessary for the purposes set out in this Policy. We will retain and use your personal information to the extent necessary to comply with our legal obligations (for example, if we are required to retain your data to comply with applicable laws), resolve disputes, enforce our legal agreements and policies, and to address other legitimate business needs.

  1. CHILDREN’S PRIVACY

Our Site is not intended to attract children under 16. Accordingly, we do not knowingly solicit or collect personal information from anyone we know to be under 16 years of age. If you are a parent or guardian and are aware that your child has provided us with personal information, please contact us.  If we become aware that we have collected personal information from children without verification of parental consent, we will take steps to remove such information from our environment.

  1. APPLICABLE LAW

This Policy is governed by the internal substantive laws of Virginia without regard to its conflict of laws principles. Jurisdiction for any claims arising under or out of this Privacy Policy shall lie exclusively with the state and federal courts within Virginia. If any provision of this Policy is found to be invalid by a court having competent jurisdiction, the invalidity of such provision shall not affect the validity of the remaining provisions of this Policy, which shall remain in full force and effect.

  1. INTERNATIONAL TRANSFERS

When you access or use our Site, we may transfer your personal information to other countries where Cherry Bekaert conducts business. Such countries may be located outside of the country or jurisdiction where you are located and may have data protection laws that are less protective than the laws of the jurisdiction in which you reside.  If you do not want your information transferred to or processed or maintained outside of the country or jurisdiction where you are located, you should not use the Site.

  1. CALIFORNIA RESIDENTS

This section, which supplements and amends the information contained in the Policy, only applies to California residents. The other provisions of the Policy continue to apply, except as modified by this section.

Shine the Light.  California Civil Code Section 1798.83 permits you to request information regarding the disclosure of your personal information by us to third parties for the third parties’ direct marketing purposes. Such requests must be submitted to us in accordance with the instructions in the Contact Us section of this Policy.  Please mention when contacting us that you are making a “California Shine the Light” inquiry. Within 30 days of receiving such a request, we will provide a list of the categories of personal information disclosed to third parties for third-party direct marketing purposes during the immediately preceding calendar year, along with the names and addresses of these third parties.  This request may be made no more than once per calendar year.  We reserve the right not to respond to requests submitted other than in accordance with the instructions specified in this paragraph.

Eraser Law.  If you are a California resident under the age of 18, and a registered user of any site where this policy is posted, California law permits you to request and obtain removal of content or information you have publicly posted. You may submit your request using the contact information at the end of this Policy. Please be aware that such request does not ensure complete or comprehensive removal of the content or information you have posted and that there may be circumstances in which the law does not require or allow removal even if requested.

California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA). The following provisions describe our policies and practices regarding the collection, use, and disclosure of personal information relating to California residents, including information we obtain when such individuals access or use the Site or through other channels (e.g., phone and email conversations, or through our authorized services providers), in accordance with the CCPA and CPRA.

Any terms defined within the CCPA or CPRA have the same meaning when utilized within this section.

This section does not apply to personal information we collect about you as a job applicant to, an employee of, owner of, director of, officer of, or contractor of the Firm.  This section also does not apply to personal information we collect about you as an employee, owner, director, officer, or contractor of a company, partnership, sole proprietorship, non-profit, or government agency when your communications or transactions with the Firm occur solely within the context of the Firm conducting due diligence regarding, or providing or receiving a product or service to or from, such company, partnership, sole proprietorship, non-profit, or government agency.

Please read this section carefully before using the Site or submitting information to us. By accessing or visiting the Site, you indicate your understanding that the collection, use, and sharing of your information is subject to the terms of this section and our Terms of Use. Except as otherwise noted, any capitalized terms not defined in this section have the meaning set forth in the Policy and Terms of Use.

IF YOU DO NOT CONSENT TO THE COLLECTION, USE, AND SHARING OF YOUR INFORMATION AS DESCRIBED IN THIS SECTION, PLEASE DO NOT PROVIDE US WITH SUCH INFORMATION.

Categories of Personal Information, Purposes for Collection and Use, and Third-Party Disclosure

The following chart describes the categories of personal information we have collected or may collect about you and, for each such category, identifies the categories of third parties to whom we may disclose that information.

Categories of Personal Information

Categories of Third Parties to Whom Disclosed & Purposes for Disclosure

Address and other identifiers – e.g., name, postal address, email address, phone number, account name, date of birth, social security number, driver’s license number, photograph, passport number, unique personal identifier, online identifier, Internet Protocol address, email address, account name, or other similar identifiers

NOTE: The information in this category may include the following elements of “sensitive personal information”: social security number, driver’s license number, state identification card number, and/or passport number. 

Third parties as directed by you. We will share your PI with those third parties to whom you direct.

Our business partners. For example, we might share your PI with one of our business partners for purposes of collaborating to provide services to you, or to invite you to an event we are organizing. These business partners should also have their own privacy statements that set out the manner in which they will collect, use, and disclose PI. Where applicable, we encourage you to review each such business partner’s privacy statement before signing on with them.

Third parties that perform services on our behalf. For example, we share information with certain service providers, including marketing companies, professional service providers, debt collectors, information technology providers, and data storage companies. We might also authorize our service providers to collect PI on our behalf.

Governmental entities, legal service providers. We may share your PI in order to comply with the law and in the course of providing our products and services. We may also disclose information if a government agency or investigatory body submits a request.

Successors to all or portions of our business. If all or part of our business is sold, we may disclose PI in preparation for or as part of that transaction.

Protected status – e.g., citizenship, ethnic background, gender, or other similar identifiers

NOTE: The information in this category may include the following elements of sensitive personal information: racial, ethnic, or national origin. 

Third parties as directed by you. We will share your PI with those third parties to whom you direct.

Our business partners. For example, we might share your PI with one of our business partners for purposes of collaborating on providing services to you, or to invite you to an event we are organizing. These business partners should also have their own privacy statements that set out the manner in which they will collect, use, and disclose PI. Where applicable, we encourage you to review each such business partner’s privacy statement before signing on with them.

Third parties that perform services on our behalf. For example, we share information with certain service providers, including marketing companies, professional service providers, debt collectors, information technology providers, and data storage companies. We might also authorize our service providers to collect PI on our behalf.

Governmental entities, legal service providers. We may share your PI in order to comply with the law and in the course of providing our products and services. We may also disclose information if a government agency or investigatory body submits a request.

Successors to all or portions of our business. If all or part of our business is sold, we may disclose PI in preparation for or as part of that transaction.

Financial information – e.g., bank account details, credit history, income details or other similar identifiers

NOTE: The information in this category may include the following elements of sensitive personal information: log-in, financial account, debit card, or credit card number, in combination with any required security or access code, password, or credential allowing access to an account. 

Third parties as directed by you. We will share your PI with those third parties to whom you direct.

Our business partners. For example, we might share your PI with one of our business partners for purposes of collaborating on providing services to you, or to invite you to an event we are organizing. These business partners should also have their own privacy statements that set out the manner in which they will collect, use, and disclose PI. Where applicable, we encourage you to review each such business partner’s privacy statement before signing on with them.

Third parties that perform services on our behalf. For example, we share information with certain service providers, including marketing companies, professional service providers, debt collectors, information technology providers, and data storage companies. We might also authorize our service providers to collect PI on our behalf.

Governmental entities, legal service providers. We may share your PI in order to comply with the law and in the course of providing our products and services. We may also disclose information if a government agency or investigatory body submits a request.

Successors to all or portions of our business. If all or part of our business is sold, we may disclose PI in preparation for or as part of that transaction.

Commercial information – e.g., records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies or other similar identifiers

Third parties as directed by you. We will share your PI with those third parties to whom you direct.

Our business partners. For example, we might share your PI with one of our business partners for purposes of collaborating on providing services to you, or to invite you to an event we are organizing. These business partners should also have their own privacy statements that set out the manner in which they will collect, use, and disclose PI. Where applicable, we encourage you to review each such business partner’s privacy statement before signing on with them.

Third parties that perform services on our behalf. For example, we share information with certain service providers, including marketing companies, professional service providers, debt collectors, information technology providers, and data storage companies. We might also authorize our service providers to collect PI on our behalf.

Governmental entities, legal service providers. We may share your PI in order to comply with the law and in the course of providing our products and services. We may also disclose information if a government agency or investigatory body submits a request.

Successors to all or portions of our business. If all or part of our business is sold, we may disclose PI in preparation for or as part of that transaction.

Education or professional information, including veteran status or other similar identifiers

NOTE: The information in this category may include the following elements of sensitive personal information: union membership. 

Third parties as directed by you. We will share your PI with those third parties to whom you direct.

Our business partners. For example, we might share your PI with one of our business partners for purposes of collaborating on providing services to you, or to invite you to an event we are organizing. These business partners should also have their own privacy statements that set out the manner in which they will collect, use, and disclose PI. Where applicable, we encourage you to review each such business partner’s privacy statement before signing on with them.

Third parties that perform services on our behalf. For example, we share information with certain service providers, including marketing companies, professional service providers, debt collectors, information technology providers, and data storage companies. We might also authorize our service providers to collect PI on our behalf.

Governmental entities, legal service providers. We may share your PI in order to comply with the law and in the course of providing our products and services. We may also disclose information if a government agency or investigatory body submits a request.

Successors to all or portions of our business. If all or part of our business is sold, we may disclose PI in preparation for or as part of that transaction.

Internet or other electronic network activity – e.g., browsing history, search history, a consumer’s interaction with an internet website, application, or advertisement

NOTE: The information in this category may include the following elements of sensitive personal information: the contents of mail, email, or text messages to which the Firm was not the intended recipient.

Third parties as directed by you. We will share your PI with those third parties to whom you direct.

Our business partners. For example, we might share your PI with one of our business partners for purposes of collaborating on providing services to you, or to invite you to an event we are organizing. These business partners should also have their own privacy statements that set out the manner in which they will collect, use, and disclose PI. Where applicable, we encourage you to review each such business partner’s privacy statement before signing on with them.

Third parties that perform services on our behalf. For example, we share information with certain service providers, including marketing companies, professional service providers, debt collectors, information technology providers, and data storage companies. We might also authorize our service providers to collect PI on our behalf.

Governmental entities, legal service providers. We may share your PI in order to comply with the law and in the course of providing our products and services. We may also disclose information if a government agency or investigatory body submits a request.

Successors to all or portions of our business. If all or part of our business is sold, we may disclose PI in preparation for or as part of that transaction.

Geolocation data

NOTE: The information in this category may include the following elements of sensitive personal information: precise geolocation. 

Third parties as directed by you. We will share your PI with those third parties to whom you direct.

Our business partners. For example, we might share your PI with one of our business partners for purposes of collaborating on providing services to you, or to invite you to an event we are organizing. These business partners should also have their own privacy statements that set out the manner in which they will collect, use, and disclose PI. Where applicable, we encourage you to review each such business partner’s privacy statement before signing on with them.

Third parties that perform services on our behalf. For example, we share information with certain service providers, including marketing companies, professional service providers, debt collectors, information technology providers, and data storage companies. We might also authorize our service providers to collect PI on our behalf.

Governmental entities, legal service providers. We may share your PI in order to comply with the law and in the course of providing our products and services. We may also disclose information if a government agency or investigatory body submits a request.

Successors to all or portions of our business. If all or part of our business is sold, we may disclose PI in preparation for or as part of that transaction.

Audio, electronic, visual, thermal, olfactory, or similar information.

Third parties as directed by you. We will share your PI with those third parties to whom you direct.

Our business partners. For example, we might share your PI with one of our business partners for purposes of collaborating on providing services to you, or to invite you to an event we are organizing. These business partners should also have their own privacy statements that set out the manner in which they will collect, use, and disclose PI. Where applicable, we encourage you to review each such business partner’s privacy statement before signing on with them.

Third parties that perform services on our behalf. For example, we share information with certain service providers, including marketing companies, professional service providers, debt collectors, information technology providers, and data storage companies. We might also authorize our service providers to collect PI on our behalf.

Governmental entities, legal service providers. We may share your PI in order to comply with the law and in the course of providing our products and services. We may also disclose information if a government agency or investigatory body submits a request.

Successors to all or portions of our business. If all or part of our business is sold, we may disclose PI in preparation for or as part of that transaction.

Biometric Information

NOTE: Biometric information is considered an element of sensitive personal information.

Third parties as directed by you. We will share your PI with those third parties to whom you direct.

Our business partners. For example, we might share your PI with one of our business partners for purposes of collaborating on providing services to you, or to invite you to an event we are organizing. These business partners should also have their own privacy statements that set out the manner in which they will collect, use, and disclose PI. Where applicable, we encourage you to review each such business partner’s privacy statement before signing on with them.

Third parties that perform services on our behalf. For example, we share information with certain service providers, including marketing companies, professional service providers, debt collectors, information technology providers, and data storage companies. We might also authorize our service providers to collect PI on our behalf.

Governmental entities, legal service providers. We may share your PI in order to comply with the law and in the course of providing our products and services. We may also disclose information if a government agency or investigatory body submits a request.

Successors to all or portions of our business. If all or part of our business is sold, we may disclose PI in preparation for or as part of that transaction.

We do not sell or share your personal information, as those terms are defined in the CCPA and CPRA.  Nor do we have actual knowledge of selling personal information of minors under the age of 16.

Purposes for Collection of Personal Information

We may collect your personal information for the purposes described above in Section 3.

Sources of Personal Information

We may collect your personal information from the sources described above in Sections 1 and 2.

Consumer Rights

  • Right to Know. You have the right to request that we disclose the following to you as it relates to the 12-month period preceding our receipt of your verifiable consumer request:
    • The categories of personal information we have collected about you
    • The categories of sources from which we collected that information
    • The business or commercial purpose for collecting, selling, or sharing that information
    • The categories of third parties to whom we disclosed that information
    • The specific pieces of personal information we collected about you
  • Right to Delete. You have the right to request that we delete your personal information from our records, subject to certain exceptions. Upon receipt of a verifiable consumer request, and as required by the CCPA and CPRA, we will delete and direct applicable service providers and contractors to delete your personal information.

    We are not required to comply with your request to delete your personal information if it is necessary for us (or our service provider or contractor) to maintain your personal information in order to:

    • Complete the transaction for which the personal information was collected, provide a good or service requested by you or reasonably anticipated within the context of our ongoing business relationship with you, or otherwise perform a contract between the Firm and you
    • Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, or prosecute those responsible for that activity
    • Debug to identify and repair errors that impair existing intended functionality
    • Exercise free speech, ensure the right of another consumer to exercise their right of free speech, or exercise another right provided for by law
    • Comply with the California Electronic Communications Privacy Act pursuant to Chapter 3.6 (commencing with Section 1546) of Title 12 of Part 2 of the Penal Code
    • Enable solely internal uses that are reasonably aligned with your expectations, based on your relationship with the Firm
    • Comply with a legal obligation
    • Otherwise use your personal information, internally, in a lawful manner that is compatible with the context in which you provided the information
  • Right to Correct. You have the right, subject to certain limitations, to request that we correct any inaccurate personal information we maintain about you.  Upon receipt of a verifiable consumer request, and as required by the CPRA, we will take appropriate steps to respond to your request.
  • Right to Opt-Out of Selling or Sharing. You have the right, subject to certain limitations, to opt-out of having your personal information sold or shared. However, we do not sell or share your personal information, as those terms are defined in the CCPA and CPRA, and do not have actual knowledge that we have sold personal information of minors under the age of 16.
  • Right to Limit Use or Disclosure of Sensitive Personal Information. You have the right, subject to certain exceptions, to request that we limit the use and disclosure of your sensitive personal information, as that term is defined in the CPRA.  Upon receipt of a verifiable consumer request, and as required by the CPRA, we will take appropriate steps to respond to your request.
  • Right Against Discrimination. You have the right not to be discriminated against for exercising any of the rights described in this Section 12. For example, we generally will not provide you a different level or quality of goods or services if you exercise these rights.

Submitting Consumer Rights Requests.  To submit a consumer rights request, please contact us at (919) 782-1040 and CBHLegal@cbh.com.

Verification. We reserve the right to only respond to verifiable consumer requests. A verifiable consumer request is one made by any individual who is:

  1. the consumer who is the subject of the request,
  2. a consumer on behalf of the consumer’s minor child, or
  3. a natural person or person registered with the Secretary of State authorized to act on behalf of a consumer.

To verify your identity, we may ask you to verify personal information we already have on file for you. If we cannot verify your identity from the information we have on file, we may request additional information from you, which we will only use to verify your identity, and for security or fraud-prevention purposes.  Making a verifiable consumer request does not require you to create an account with us. Additionally, you will need to describe your request with sufficient detail to allow us to review, understand, assess, and respond.

Authorized Agents. You may authorize a natural person, or a business registered with the California Secretary of State, to act on your behalf with respect to the rights under this Section 12. When you submit a Request to Know or a Request to Delete, unless you have provided the authorized agent with a qualifying power of attorney, you must provide your authorized agent written permission (signed by you) to act on your behalf and verify the authorized agent’s identity with us. We reserve the right to deny requests from persons or businesses claiming to be authorized agents that do not submit sufficient proof of their authorization.

We may not be able to respond to your request or provide you with personal information if we cannot verify your identity or authority to make the request and confirm the personal information relates to you.

Our Response.  We reserve the right to charge a fee to process or respond to your request if it is excessive, repetitive, or manifestly unfounded. If we determine that a request warrants a fee, we will attempt to notify you as to why we made that decision and provide a cost estimate before completing your request. We will endeavor to respond to a verifiable consumer request within forty-five (45) calendar days of receipt, but may require an extension of up to forty-five (45) additional calendar days to respond and, in such event, will notify you of the need for the extension.

If you have an account with us, we will deliver our written response to that account.  If you do not have an account with us, we will deliver our written response by mail or electronically, at your option.  Any disclosures we provide will only cover the 12-month period preceding the receipt of your verifiable consumer request. With respect to personal information collected on and after January 1, 2022, and to the extent expressly permitted by applicable regulation, you may request that such disclosures cover a period beyond the 12 months referenced above, provided doing so would not require a disproportionate effort by us. The response we provide will also explain the reasons we cannot comply with a request, if applicable. To the extent permitted by the CCPA and CPRA, we will respond to no more than two requests during any 12-month period.

Please note that when we function as a service provider or contractor to our business clients and have received your personal information in connection with those functions, we are not obligated to respond to your requests concerning personal information. In those cases, we may direct you to the applicable business client(s) with whom you have a direct relationship.

  1. NEVADA RESIDENTS

This section, which supplements and amends the information contained in the Policy, only applies to Nevada residents. The other provisions of the Policy continue to apply, except as modified by this section.

Under Nevada law, Nevada residents may opt out of the sale of certain “covered information” collected by operators of websites or online services. We currently do not sell covered information, as “sale” is defined by such law, and do not have plans to do so. In accordance with Nevada law, you may submit to us a verified request instructing us not to sell your covered information.  Such requests can be submitted in accordance with the instructions provide in the Contact Us section of this Policy.

  1. VIRGINIA RESIDENTS

This section, which supplements and amends the information contained in the Policy, only applies to Nevada residents. The other provisions of the Policy continue to apply, except as modified by this section.

We may process the categories of personal information identified in Section 12 above for the purposes set forth in that section, and may also disclose the categories of personal information identified in Section 12 to the third parties identified in that section

Pursuant to the Virginia Consumer Data Protection Act (“VCDPA”), you may submit an authenticated request to:

  • Confirm whether we process your personal information and to access such information
  • Correct inaccuracies in your personal information, taking into the account the nature of the information and the purposes of the processing
  • Delete your personal information
  • Obtain a copy of your personal information in a portable and, to the extent technically feasible, readily usable format
  • Opt-out of the processing of your personal information for purposes of (i) targeted advertising, (ii) the sale of personal information, or (iii) profiling in furtherance of decisions that produce legal or similarly significant affects

To submit a request, please contact us at (919) 782-1040 and CBHLegal@cbh.com.

In the event we deny your request, you may, within 60 days of receipt of our decision, submit an appeal of that decision by contacting us at (919) 782-1040 and CBHLegal@cbh.com.  Within 60 days of receipt of your appeal, we will inform you in writing of any action we have taken or not taken in response to your appeal, and will therein explain the reason for our decision.  If we deny your appeal, you may submit a complaint to the Virginia Attorney General using this form.

  1. CONTACT US

If you have questions or comments about this Privacy Policy or Site, you may contact us at: (919) 782-1040 and CBHLegal@cbh.com.