Effective date: October 05, 2026
1. Who We Are
CPA Ethics Online is operated by Allison M. McLeod, LL.M., CPA, A PLLC (“we,” “us,” or “our”). This policy explains how we collect and use personal information when you visit our website, create an account, purchase or complete a course, or contact us.
For privacy questions or requests, email admin@cpaethicsonline.com.
Business mailing address: 1155 Union Cir. #307796, Denton, TX 76203.
2. Information We Collect
Information you provide
Depending on how you use the website, we collect:
- Account information, such as your name, username, email address and login credentials.
- Contact and billing information, such as your telephone number and billing address.
- Professional information, such as licensing state and license number, where supplied for course records or certificates.
- Purchase information, including the courses purchased and related order details.
- Assessment answers, evaluation responses and optional course reviews.
- Messages and information you send when requesting support or a refund.
Course and transaction records
We record enrollments, access dates, course progress, relevant video progress, assessment attempts and results, evaluation submissions, completion dates and certificate details.
We retain order information and payment references, such as transaction identifiers, payment status and refund records. Payment information needed to authorize a transaction is handled by PayPal or the payment provider selected at checkout.
Technical information
Our website and service providers may record IP addresses, browser and device information, requested pages, access times and diagnostic or security information. Cookies and similar technologies may store account-session information, shopping-cart information and consent preferences. Optional technologies are described in the cookie section below.
3. How We Use Information
We use information to:
- Create and manage accounts.
- Process purchases, payments and refund requests.
- Provide course access and record learning progress.
- Administer assessments and evaluations and issue completion certificates.
- Maintain course and CPE records and respond to applicable reporting or audit requests.
- Send account, purchase, course and support communications.
- Diagnose technical problems, maintain security and prevent misuse.
- Keep business records and meet applicable legal obligations.
- Display an optional public course review when you consent to publication.
Providing the information needed for an account, payment or course record is necessary for us to deliver those services. Optional review publication and optional cookie consent are separate choices.
Where applicable data protection law requires a legal basis, we rely on performance of our contract with you for account, purchase and course services; legal obligations for required records and disclosures; legitimate interests in operating and securing the service, subject to your rights; and consent for optional review publication and optional cookies where consent is required.
4. Who Receives Information
We share information as needed with providers that support the website and its services, including:
- Hosting, email delivery, security and backup providers.
- PayPal and other payment providers enabled at checkout.
- Vimeo for embedded course video delivery.
- The cookie consent provider, where its service processes consent information.
We may disclose relevant course or completion records to licensing authorities, accrediting bodies or other authorized parties when required by law, applicable CPE obligations or your request.
We may disclose information when legally required or reasonably necessary to investigate misuse, protect rights or respond to a legal claim.
Payment and video providers may also process information under their own privacy policies. You can review them here:
5. Evaluations and Optional Public Reviews
Course evaluations are used to administer and improve courses and maintain required records.
If you choose to submit a public review and give permission to publish it, we may display your review, rating and initials with a verified-buyer label. Your account email address and license number are not included in the public review.
Contact us if you want to withdraw permission for a published review. Withdrawal does not require deletion of separate course or evaluation records that we must retain.
6. Cookies and Similar Technologies
Cookies are small files stored on your device. Similar technologies can also store or access information in your browser.
We use necessary cookies for functions such as login sessions, shopping carts, checkout security and remembering your cookie choices.
Other cookies or technologies may support preferences, usage measurement or third-party embedded services. The Cookie Policy and consent controls identify the technologies actually enabled, their providers, purposes and durations.
Where consent is required, optional technologies are not activated until you choose to allow them. You can accept or reject optional cookies and change or withdraw your choices through the website’s Cookie Settings control. Necessary cookies remain available to provide the services you request.
Embedded videos may involve requests to Vimeo and its use of device information or cookies. Where consent is needed before loading an embedded service, the website asks for permission before loading it.
Blocking cookies through your browser may affect login, checkout or course features. Rejecting optional cookies does not itself withdraw your enrollment.
[Add the working Cookie Settings control and approved Cookie Policy link before publication.]
7. Retention
We retain information for as long as needed for the purposes described in this policy, including providing courses and course history, meeting CPE and business record-keeping requirements, resolving payment disputes and complying with applicable law.
Different records have different retention needs. Account and course records may be retained after course access expires. Order and refund records may be retained for accounting, tax or dispute purposes. Operational, security and email logs are retained for the period needed for troubleshooting and security. Backup copies may remain until the applicable backup retention period ends.
When information is no longer needed, we delete it or anonymize it, subject to applicable retention obligations.
8. Security
We use reasonable technical and organizational measures to protect personal information. Access is limited to people and service providers who need it for the purposes described above.
No website or method of electronic transmission is completely secure. Keep your login credentials confidential, and do not send passwords or full payment card details in support messages.
9. International Processing
CPA Ethics Online operates in the United States. Information may be processed in the United States and in other countries where our providers operate. Privacy protections may differ from those in your country.
[If EEA/UK transfer rules apply, add the verified destinations, applicable transfer mechanism or safeguards, and how individuals can obtain information about those safeguards. This paragraph must be completed before publication where required.]
10. Your Choices and Privacy Rights
You can update available account information through your profile or contact us for help.
Depending on the law that applies to you, you may have rights to request access, correction, deletion or a portable copy of your information; restrict or object to certain processing; or withdraw consent where processing is based on consent.
To make a request, email [privacy contact email address]. We may need to verify your identity before acting on it. We will respond within the period required by applicable law.
Some information may need to be retained to meet legal or CPE recordkeeping obligations or to resolve disputes. We will explain any applicable limitation on your request.
Withdrawing consent does not affect processing already carried out lawfully before withdrawal. You may also have the right to complain to your local data protection authority.
11. Other Websites
Links to external websites are provided for convenience. This policy does not cover websites we do not operate. Review their privacy policies before providing information.
12. Policy Updates
We may update this policy to reflect changes in services, data practices or legal requirements. The effective date will appear at the top of this page. Where required, we will give notice of significant changes or obtain consent before using information for a new purpose.