Privacy Policy

Introduction

Kohari Gonzalez Oneyear & Brown CPAs & Advisors ("KGOB," "we," "our," or "us") is committed to protecting your privacy and maintaining the confidentiality of your personal and financial information. As a professional accounting firm operating in North Carolina, we are bound by strict confidentiality requirements under the American Institute of CPAs (AICPA) Code of Professional Conduct and North Carolina General Statutes.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website kgob.com, use our services, or engage with us through email marketing campaigns.

Information We Collect

Personal Information You Provide

When you interact with our services, we may collect:

• Contact Information: Name, title/salutation, email address, phone number, mailing address
• Business Information: Company name, business type, industry
• Financial Information: Tax documents, financial statements (only when you engage our professional services)
• Marketing Preferences: Interest type (business owner or individual/family), preferred office location, consent to receive marketing communications
• Consultation Booking: Preferred date/time, consultation type, questions or concerns

Automatically Collected Information

• Usage Data: Pages visited, time spent on site, referring URLs
• Device Information: Browser type, operating system, IP address
• Cookies: Session cookies for website functionality and analytics

How We Use Your Information

We use your information for the following purposes:

• Professional Services: To provide accounting, tax preparation, advisory, and consulting services
• Communication: To respond to inquiries, schedule consultations, and provide service updates
• Marketing: To send newsletters, tax tips, event invitations, and promotional offers (only with your explicit consent)
• Event Management: To manage RSVPs for community events (Santa + Toys for Tots, Free Coffee Fridays, Networking Breakfasts)
• Website Improvement: To analyze usage patterns and enhance user experience
• Legal Compliance: To comply with applicable laws, regulations, and professional standards

Professional Confidentiality (AICPA & NC Law)

This means your tax returns, financial statements, business strategies, and personal financial information are protected with the same level of confidentiality as attorney-client privilege in North Carolina.

Information Sharing and Disclosure

We may share your information only in the following limited circumstances:

• With Your Consent: When you explicitly authorize us to share information
• Service Providers: With third-party service providers who assist us (e.g., software platforms, email service providers) under strict confidentiality agreements
• Professional Advisors: With attorneys, consultants, or other professionals assisting with your engagement
• Legal Requirements: When required by law, court order, subpoena, or government regulation
• Business Transfers: In connection with a merger, acquisition, or sale of assets (with notice to you)

We do NOT sell your personal information to third parties.

Your Privacy Rights

Under the California Consumer Privacy Act (CCPA), General Data Protection Regulation (GDPR), and North Carolina law, you have the following rights:

To exercise any of these rights, contact us at privacy@kgob.com or call (704) 599-3355. We will respond within 45 days.

Email Marketing & Consent

When you sign up for our Holiday Money-Saver Kit or other resources, you may opt in to receive:

• Tax tips and year-end planning guides
• Invitations to community events (Santa + Toys for Tots, Free Coffee Fridays, Networking Breakfasts)
• Updates about our services and special offers

Your consent is explicit and voluntary. We only send marketing emails to those who have checked the consent box. You can unsubscribe at any time by clicking the "Unsubscribe" link in any email or contacting us directly.

Data Security

We implement industry-standard security measures to protect your information:

• Encryption of data in transit and at rest (TLS/SSL)
• Secure cloud storage with MongoDB Atlas (SOC 2 Type II certified)
• Access controls and authentication (JWT tokens, password hashing)
• Regular security audits and monitoring via Sentry
• Employee training on data protection and confidentiality

Data Retention

We retain your information for different periods depending on its purpose:

• Client Records: 7 years after engagement completion (IRS requirement for tax records)
• Marketing Leads: Until you request deletion or unsubscribe (minimum 2 years for compliance proof)
• Consultation Records: 3 years after last contact
• Event RSVPs: 1 year after event date

Third-Party Services

We use the following third-party services to operate our business:

• Email Service: Resend (for transactional and marketing emails)
• Scheduling: Custom In-House System (for consultation booking)
• Video Conferencing: Zoom (for virtual meetings)
• Analytics: Sentry (for error tracking and performance monitoring)
• Database: MongoDB Atlas (for secure data storage)

Each service provider has their own privacy policy and is required to maintain confidentiality under our service agreements.

Cookies and Tracking

We use cookies and similar tracking technologies to enhance your experience:

• Essential Cookies: Required for website functionality (e.g., session management)
• Analytics Cookies: Help us understand how visitors use our site
• Preference Cookies: Remember your settings and preferences

You can control cookies through your browser settings. Disabling cookies may limit website functionality.

Children's Privacy

Our services are not directed to individuals under 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a minor, please contact us immediately.

Changes to This Privacy Policy

We may update this Privacy Policy annually or as required by law. We will notify you of material changes by email (if you've provided one) or by posting a notice on our website. Your continued use of our services after changes constitutes acceptance of the updated policy.