Privacy Policy

1. Who We Are

This Privacy Policy describes how Myung Keon Kim CPA ("Firm," "we," "us," or "our") collects, uses, and protects personal information through our website at keonadvisory.com and in connection with our professional services.

We are a CPA firm located in New York City, serving individuals and small businesses with tax preparation, bookkeeping, and advisory services. Protecting your personal and financial information is both a professional obligation and a core commitment of this practice.

2. Information We Collect

We collect personal information in two contexts: through our website and through our professional services.

Through our website:

• Contact form submissions — name, email address, phone number, and the message you write to us
• Website analytics data — pages visited, referring pages, general geographic region, browser type, and device type (collected without cookies — see Section 6)

Through professional services:

• Tax identification numbers (SSN, EIN), income, deductions, and financial records you provide for tax preparation
• Business financial records for bookkeeping and accounting engagements
• Identity documents as required for client verification and IRS e-file authorization

Through our client organizer:

Clients preparing a return with us may be asked to complete our online client organizer at organizer.keonadvisory.com — a questionnaire that collects identity information, your Social Security Number, dependents' information, and the business and income facts we need to prepare your return, based on your answers.

Organizer answers are encrypted at rest using AES-256-GCM and are never stored in readable form. Once an organizer is submitted, we keep the answers only long enough to complete your return and then delete them automatically — 180 days after submission, or 365 days after you last worked on an organizer you never submitted. The permanent record of what you told us is the copy kept in your tax file, not the organizer itself.

organizer.keonadvisory.com is a separate website from keonadvisory.com, with its own sign-in through Cloudflare Access. The only cookie it sets is the secure session cookie created when you sign in there; keonadvisory.com itself still sets no cookies (see Section 6).

We collect only the information necessary to provide the services you request. We do not buy, sell, or broker personal data.

3. How We Use Your Information

We use personal information for the following purposes:

• To respond to your inquiries. Contact form submissions are used solely to reply to you and provide requested information about our services.
• To provide professional services. Tax, bookkeeping, and advisory services require processing your financial and personal information to prepare returns, reports, and filings on your behalf.
• To comply with legal and professional obligations. As a CPA firm, we are required to maintain certain records for prescribed periods under IRS regulations, AICPA standards, and New York State law.
• To improve our website. Aggregated, anonymized analytics data helps us understand which pages are useful and how to improve the site. No individual users are tracked or profiled.

We do not use your information for marketing to third parties, sell your data to data brokers, or use your data for automated profiling or decision-making.

4. How We Protect Your Information

We implement reasonable technical and organizational safeguards to protect your information, including:

• Encrypted connections (HTTPS). All data transmitted to and from keonadvisory.com is encrypted using TLS.
• Secure storage. Client tax files and financial records are stored in systems with access controls and encryption at rest.
• Limited access. Only authorized personnel at the Firm with a need-to-know basis have access to client information.
• Written Information Security Program (WISP). We maintain a WISP in compliance with IRS Publication 4557 and the FTC Safeguards Rule, which governs how we handle, store, and protect taxpayer data.

No method of transmission over the internet is 100% secure. We cannot guarantee absolute security, but we take our data protection obligations seriously and continuously evaluate our security practices.

5. Third Parties

We work with the following third-party services in connection with our website and operations:

We do not sell or share your personal information with any third party for marketing or advertising purposes.

6. Cookies

We do not use cookies on this website. Cloudflare Web Analytics, our primary analytics tool, is specifically designed to be cookie-free and does not set any tracking cookies in your browser.

If you interact with an embedded Google Map on our contact page, Google may set cookies in accordance with their own policies. You can manage cookie preferences through your browser settings.

This applies to keonadvisory.com. organizer.keonadvisory.com is a separate site and sets one cookie — the Cloudflare Access sign-in session (see Section 2).

7. Your Rights

You have the right to:

• Access personal information we hold about you
• Correct inaccurate or outdated information
• Request deletion of personal information we hold, subject to our legal and professional obligations to retain certain records
• Withdraw consent where processing is based on consent

To exercise any of these rights, contact us at info@keonadvisory.com. We will respond within 30 days.

Note: As a CPA firm, we are required by IRS regulations, AICPA standards, and applicable law to retain certain client records for prescribed periods. Deletion requests may be limited where retention is legally required.

8. California Residents — CCPA Rights

If you are a California resident, the California Consumer Privacy Act (CCPA) grants you additional rights regarding your personal information:

• The right to know what personal information we collect, use, disclose, or sell
• The right to request deletion of your personal information
• The right to opt out of the sale of your personal information (we do not sell personal information)
• The right not to be discriminated against for exercising your CCPA rights

To submit a CCPA request, email info@keonadvisory.com with the subject line "CCPA Request."

9. Children's Privacy

Our website and services are not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has submitted personal information to us, please contact us immediately and we will delete it.

10. Data Retention

Website contact form submissions are retained for as long as necessary to respond to your inquiry and for a reasonable period afterward in case of follow-up.

Client tax and financial records are retained in accordance with IRS guidelines (generally seven years), AICPA record retention standards, and applicable New York State requirements. Upon engagement termination, original documents you provided will be returned to you upon request.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the effective date at the top of this page. We encourage you to review this page periodically. Material changes will be communicated by posting a prominent notice on our website.

Continued use of our website or services after changes are posted constitutes acceptance of the updated policy.

12. Contact Us

For privacy-related questions, requests, or concerns, please contact: