Sundial VFO | Last updated: August 6, 2026

Who We Are

Sundial VFO (“we,” “us,” or “our”) provides virtual financial officer, accounting, and related professional services. Our website address is https://sundialvfo.com. This policy explains what personal data we collect through our website and professional engagements, why we collect it, and the rights you have over it.

What Personal Data We Collect and Why We Collect It

Comments

When visitors leave comments on our site, we collect the information shown in the comment form, along with the visitor’s IP address and browser user agent string, to assist with spam detection.

We may submit an anonymized, hashed version of your email address to the Gravatar service to determine whether you have an account there. Gravatar’s privacy policy is available at https://automattic.com/privacy/. Once a comment is approved, the associated profile picture is visible to the public alongside it.

Media

Please avoid uploading images that contain embedded location data (EXIF GPS). Visitors to the site can download and extract location data from any images we publish.

Contact Forms

When you submit an inquiry through a contact form on our site, we collect the information you provide — typically your name, email address, phone number, and the content of your message — solely to respond to your inquiry and to maintain a record of the communication. We do not use this information for marketing purposes without your consent.

Cookies

If you leave a comment, you may opt in to having your name, email address, and website saved in a cookie for your convenience, so you do not need to re-enter this information the next time you comment. These cookies last for one year.

If you visit our login page, we set a temporary cookie to determine whether your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.

When you log in, we also set cookies to save your login information and screen display preferences. Login cookies last two days, and screen option cookies last one year. If you select “Remember Me,” your login will persist for two weeks. Logging out removes your login cookies.

If you edit or publish an article, an additional cookie is saved in your browser. This cookie contains no personal data and simply records the post ID of the article you edited. It expires after one day.

Embedded Content From Other Websites

Pages on this site may include embedded content — such as videos, images, or articles — from other websites. Embedded content behaves exactly as if the visitor had visited the source website directly.

These third-party websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with the embedded content, including tracking your activity if you have an account and are logged in to that website.

Analytics

We use website analytics tools to understand how visitors use our site, including pages visited, time on site, and general geographic and device information. This data is collected in aggregate or pseudonymized form and is used solely to improve our website and services. We do not use analytics data to identify individual visitors.

Who We Share Your Data With

We do not sell your personal data. We may share personal data with:

Service providers who perform functions on our behalf, such as website hosting, spam filtering, email delivery, and IT support, under confidentiality obligations consistent with this policy.

Professional advisors, such as auditors or legal counsel, where necessary to operate our business.

Regulators, courts, or government authorities where required by law, subpoena, or other legal process.

Third-party technology and AI-assisted platforms used in connection with client engagements, as described below.

How Long We Retain Your Data

Comments and their associated metadata are retained indefinitely, so that we can recognize and automatically approve legitimate follow-up comments rather than holding them in a moderation queue.

If you register an account on our website, we store the personal information contained in your user profile. You can view, edit, or delete this information at any time, except your username, which cannot be changed. Site administrators can also view and edit this information.

Client and engagement records, including personal, financial, and tax-related information, are retained in accordance with applicable professional standards, IRS record-retention requirements, and our internal records-retention policy.

What Rights You Have Over Your Data

If you have an account on this site or have left comments, you may request an exported file containing the personal data we hold about you, including any data you have provided to us. You may also request that we erase personal data we hold about you, except where we are required to retain it for administrative, legal, regulatory, or security purposes.

To exercise these rights, please contact us using the information in the “Your Contact Information” section below.

Use of Third-Party Technology and AI-Assisted Services

In delivering our professional services, our firm uses third-party technology platforms, which may include artificial intelligence (AI) tools, to support functions such as communication management, document processing, research, and workflow automation. These platforms may process data associated with your engagement, including personally identifiable information, financial information, and tax-related documents.

We exercise due diligence in selecting third-party providers and require that they maintain reasonable data security standards. However, data processed through these platforms is also subject to the privacy policies and terms of service of those providers.

Our use of AI-assisted tools does not alter our professional obligations under IRS Circular 230, applicable state board of accountancy rules, or any other professional standards. All professional judgments and conclusions remain the responsibility of our licensed staff, and AI-assisted output is reviewed by qualified personnel before it is relied upon.

By signing an engagement letter with us, you consent to our use of these third-party technology tools in connection with your engagement.

Where We Send Your Data

Visitor comments may be screened through an automated, third-party spam detection service. Client data processed through the third-party and AI-assisted platforms described above may be transmitted to and stored by those providers, including on servers located outside your home jurisdiction, subject to that provider’s own security and privacy practices.

Your Contact Information

If you have questions about this policy or wish to exercise your data rights, please contact us at mailto:Stephen@quickencoach.com.

Additional Information

How We Protect Your Data

We maintain administrative, technical, and physical safeguards designed to protect personal data against unauthorized access, use, disclosure, alteration, or destruction. These measures include access controls, encryption of data in transit, restricted employee access on a need-to-know basis, and ongoing staff training on data security and confidentiality obligations, consistent with the safeguarding requirements applicable to financial and tax information under the Gramm-Leach-Bliley Act and related regulations.

What Data Breach Procedures We Have in Place

In the event of a suspected or confirmed data breach, we will investigate promptly, take reasonable steps to contain and remediate the incident, and notify affected individuals and applicable regulators in accordance with applicable state and federal law.

What Third Parties We Receive Data From

We may receive data from spam and security detection services, website analytics providers, and, in the course of client engagements, from clients themselves and from financial institutions, employers, or government agencies that clients authorize us to contact on their behalf.

What Automated Decision-Making and/or Profiling We Do

We do not use automated decision-making or profiling to make decisions that produce legal or similarly significant effects concerning individuals. Where AI-assisted tools are used to support research, document processing, or drafting, all substantive professional conclusions are reviewed and finalized by our licensed staff.

Industry Regulatory Disclosure Requirements

As a firm providing accounting, tax, and financial services, we are subject to professional and regulatory obligations including, as applicable, IRS Circular 230, state board of accountancy rules, and the safeguarding requirements of the Gramm-Leach-Bliley Act and its implementing regulations. Nothing in this policy limits or supersedes those professional obligations.