Privacy Policy

Privacy Policy for Candour Tax & Bookkeeping Services.

Effective Date: January 13, 2026

This Privacy Policy outlines how Candour Tax & Bookkeeping Services (“Candour,” “we,” “us,”
or “our”) collects, uses, discloses, and protects the personal information of clients, prospective
clients, and visitors to our website. We are committed to ensuring the privacy and security of
your personal information in compliance with all applicable domestic (state and federal,
including CCPA/CPRA), cross-state, and international (such as GDPR) privacy laws and
regulations.

1. πŸ“Œ Collection of Personal Information

We collect various categories of personal information (“PI”) necessary to provide our tax and
bookkeeping services and operate our business. This includes, but is not limited to:

Category of Personal InformationExamples of Data Collected
IdentifiersName, contact information (address, phone, email), IP address, SSN,
Tax Identification Numbers (TINs).
Financial InformationBank account details, income/revenue data, expense records,
investment information, credit/debit card numbers.
Business DetailsBusiness name, structure (e.g., LLC, Corporation),
industry, employee information (for payroll services).
Protected ClassificationMarital status, dependent information (as required for tax filings).
Professional/EmploymentJob title, employer, employment history (as required for tax filings).
Website UsageBrowsing history, search terms, device information,
cookies (see Section 8).

2. βš™οΈ Use of Personal Information

We use your PI for the following business purposes:

  • Service Delivery: Providing contracted bookkeeping, accounting, payroll, and tax preparation/filing services.
  • Communication: Responding to inquiries, providing customer support, and communicating important updates, reminders, and information related to your services.
  • Legal Compliance: Internal record-keeping, regulatory compliance, auditing, and satisfying legal or government requirements.
  • Security: Maintaining the safety, security, and integrity of our systems and services, including fraud prevention.
  • Service Improvement: Analyzing usage to improve our services and website functionality.

3. πŸ”„ Disclosure and Sharing of Personal Information

We may disclose or share your PI with the following categories of recipients, subject to strict
confidentiality agreements:

  • Government Agencies: Disclosed to the IRS, state tax authorities, and other governmental bodies as strictly required by law for tax and regulatory compliance.
  • Service Providers (Processors): Third-party service providers who assist us in delivering our services (e.g., payroll providers like QuickBooks, ADP, Paychex, Gusto, or secure document portals). These parties are only authorized to use your PI as necessary to perform their services for us.
  • Professional Advisors: Professionals working with us in providing services (e.g., tax advisors, legal consultants, auditors).
  • With Your Consent: Any other party with your explicit consent or as otherwise permitted by law.
  • Business Transfers: In the event of a merger, acquisition, or asset sale, your PI may be transferred as part of that transaction.

4. πŸ” Data Security

We are committed to safeguarding your PI and have implemented comprehensive technical,
physical, and organizational measures to prevent unauthorized access, disclosure, alteration, or
destruction of data, including:

  • Encryption: Using industry-standard encryption protocols (e.g., SSL/TLS) for data in transit and encryption for sensitive data at rest.
  • Access Control: Implementing role-based access to PI, multi-factor authentication, and restricting access to only necessary personnel.
  • Physical Security: Secure storage facilities and restricted access to client files and server infrastructure.
  • Training: Mandatory, continuous employee training on data privacy, confidentiality policies, and security best practices.

Disclaimer: While we strive to maintain the security of client information, it is important to note
that no method of data transmission over the Internet or storage is 100% secure. Therefore, we
cannot guarantee absolute security.

5. 🚨 Data Breach Notification

In the event of a data breach that compromises the security of your non-public personal
information, we will take prompt action to mitigate the breach. We will notify you and relevant
regulatory authorities as required by applicable laws and regulations, including state-specific
breach notification laws. We will make reasonable efforts to provide you with information about
the breach and any steps you can take to protect yourself.

6. 🌍 Cross-State and International Data Transfers

As we utilize cloud-based solutions and serve clients who may reside outside of our primary
jurisdiction, your PI may be transferred to, stored in, and processed in a country other than where
you reside, including the United States.

  • When transferring PI internationally (e.g., for non-US clients), we ensure appropriate safeguards are in place (such as standard contractual clauses or data processing agreements) to protect your information in accordance with GDPR or other relevant international frameworks.

7. βš–οΈ Your Data Rights (US & International)

RightDescription
Right to Know/AccessThe right to confirm whether we are processing your PI and to obtain a copy of the specific pieces of PI we hold about you.
Right to CorrectionThe right to correct any inaccuracies in your personal information.
Right to DeletionThe right to request the deletion of your PI, subject to legal obligations (e.g., tax record retention).
Right to Opt-Out (Sale/Sharing)The right to direct us not to “sell” or “share” your personal information for cross-context behavioral advertising, as defined by the CCPA/CPRA. Note: Candour does not sell your PI.
Right to Object/RestrictThe right to object to the processing of your PI or request a restriction of processing under certain circumstances (e.g., if you contest the accuracy of the data).
Right to Data PortabilityThe right to receive your PI in a structured, commonly used, and machine-readable format.
Right to Withdraw ConsentWhere processing is based on consent, the right to withdraw that consent at any time.

To Exercise Your Rights: Please contact us using the contact information in Section 13. We
may require you to verify your identity before processing a request.

8. πŸͺ Cookies and Tracking Technologies

Our website uses cookies, web beacons, and similar tracking technologies to enhance your
browsing experience, analyze site usage, and support the functionality of our website.

  • You can adjust your browser settings to refuse or delete cookies. Note that disabling cookies may impact your ability to access certain features of our website.
  • “Do Not Track” Signals: We currently do not respond to browser “Do Not Track” signals.

9. πŸ”— Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the content or
privacy practices of these external sites. We recommend reviewing their respective privacy
policies before submitting any personal information.

10. ⏳ Data Retention

We retain client records for the legally mandated period for tax and accounting records, which is
typically seven (7) years, unless a longer retention period is required by law or necessary for
legal defense. Once the information is no longer needed, we will take reasonable measures to
dispose of it securely (e.g., shredding physical records, permanent erasure of digital files).

11. βš–οΈ Governing Law and Dispute Resolution

This Privacy Policy is governed by and construed in accordance with the laws of the State of
New York, without regard to its conflict of laws principles. Any dispute arising out of or relating
to this policy or our handling of PI shall be subject to the exclusive jurisdiction of the state and
federal courts located in the State of New York.

12. πŸ”„ Changes to the Privacy Policy

We reserve the right to modify or update this Privacy Policy at our discretion to reflect changes
in our practices or applicable laws. Any changes will be effective immediately upon posting the
revised policy on our website. The revised policy will indicate the date it becomes effective. We
encourage you to review the policy periodically. Your continued use of our services after the
posting of any modifications indicates your acceptance of the updated policy.

13. πŸ“§ Contact Us

If you have any questions, concerns, or requests related to your personal information or this
Privacy Policy, please contact us:

Email: info@candourtax.com

14. ⚠️ Policy Disclaimer and Limitation

This Privacy Policy is designed to outline Candour Tax & Bookkeeping Services’ practices
regarding the collection, use, and protection of personal information.

  • Legal Advice: This Privacy Policy is for informational purposes only and does not constitute legal advice. You should consult with independent legal counsel regarding the specific application of privacy laws to your circumstances.
  • No Guarantee of Absolute Security: While we implement robust security measures (as described in Section 4), the nature of electronic transmission and storage means we cannot guarantee the absolute security of your Personal Information. You acknowledge that you use our services and transmit information electronically at your own risk.
  • No Fiduciary Duty: This Policy does not create any additional fiduciary duty beyond those legally mandated in the provision of tax and bookkeeping services.
  • Policy Conflicts: We strive for compliance; however, if any provision of this Privacy Policy conflicts with mandatory applicable federal, state, or international laws, the relevant legal requirements shall prevail.

Thank you for choosing Candour Tax & Bookkeeping Services. We value your trust and are
committed to safeguarding your privacy.