Privacy Policy
Koffex Accounting

Effective Date: September 3, 2026
Last Updated: September 11, 2026

1. Introduction

Koffex Accounting (“we,” “us,” or “our”) operates the website www.koffexaccounting.com (the “Site”). This Privacy Policy explains how we collect, use, disclose, and protect information from visitors to our Site. By using our Site, you agree to the practices described in this policy.

This Site is intended for use by residents of the United States. If you are located outside the United States, please be aware that information we collect may be transferred to and processed in the United States.

This policy applies only to information collected through our website. It does not apply to information collected through other means, including information you provide to us as a client in connection with our accounting, tax, payroll, Fractional CFO, or IRS Tax Resolution services. Information collected in the course of providing professional services is governed by our separate Client Privacy Notice provided at the start of our engagement, as required under the Gramm-Leach-Bliley Act (GLBA) and applicable regulations.

2. Financial Institution Privacy Notice (GLBA)

As a provider of tax preparation and accounting services, Koffex Accounting is a financial institution subject to the Gramm-Leach-Bliley Act (GLBA) and the FTC’s Standards for Safeguarding Customer Information (Safeguards Rule, 16 CFR Part 314). We are also subject to the CFPB’s Regulation P (12 CFR Part 1016), which governs the privacy of nonpublic personal financial information. We are required to provide clients with an initial privacy notice describing how we collect, use, and protect nonpublic personal information in the course of our professional services relationship.

Our GLBA Client Privacy Notice is provided to clients at the start of the engagement and is available upon request. That notice governs the collection and use of nonpublic personal financial information provided to us in our capacity as your accounting and tax services provider. This website Privacy Policy governs information collected through this Site only.

To request a copy of our GLBA Client Privacy Notice, please contact us at contact@koffexaccounting.com

3. Tax Return Information and IRC 7216

Under Internal Revenue Code Section 7216, tax return preparers are prohibited from disclosing or using tax return information for any purpose other than preparing a tax return without the specific written consent of the taxpayer.

If you are a tax client of Koffex Accounting, we will not use your tax return information to market additional services to you, refer you to third-party providers, or share your information with any third-party tool or platform without obtaining your prior written consent in the form required by IRC 7216 and the applicable Treasury Regulations. Any consent required under IRC 7216 will be presented to you separately as part of our engagement process.

4. Information We Collect

Information You Provide Directly

When you use our contact form or request a consultation through our Site, we may collect:

  • First and last name
  • Email address
  • Phone number
  • The service you are interested in
  • Any message or inquiry you submit

When you sign up for our email newsletter, we collect your email address.

Submitting a contact form or consultation request does not create a client relationship. An engagement begins only upon execution of a signed written engagement letter. Please do not transmit Social Security numbers, financial account numbers, tax identification numbers, or other sensitive information through the contact form. Use the secure Client Portal for the transmission of sensitive documents and information.

Information Collected Automatically

When you visit our Site, certain information is collected automatically through cookies and similar technologies, including:

  • IP address
  • Browser type and version
  • Device type and operating system
  • Pages visited and time spent on each page
  • Referring website or source
  • Date and time of your visit

This information is collected through Google Analytics and our web hosting provider, GoDaddy. It is used to help us understand how visitors use our Site and to improve our content and user experience.

5. How We Use Your Information

We use the information we collect for the following purposes:

  • To respond to your consultation requests and inquiries
  • To send you our email newsletter, if you have subscribed
  • To analyze Site traffic and understand how visitors use our website
  • To improve the content, design, and functionality of our Site
  • To comply with applicable legal obligations

We do not sell, rent, or share your personal information with third parties for marketing purposes.

6. Cookies and Tracking Technologies

Our Site uses cookies, which are small text files stored on your device when you visit a website. We use the following types of cookies:

  • Strictly necessary cookies: Required for the Site to function properly. These cannot be disabled.
  • Analytics cookies: Set by Google Analytics to help us understand visitor behavior on our Site. These cookies collect anonymous data about how visitors use the Site, including pages visited, time spent, and traffic sources.
  • Functional cookies: Used to remember preferences and enable certain site features.

You can control or disable cookies through your browser settings. A cookie consent banner is planned for a future update to this Site. Please note that disabling certain cookies may affect the functionality of the Site. To opt out of Google Analytics tracking specifically, you can use the Google Analytics Opt-out Browser Add-on available at tools.google.com/dlpage/gaoptout.

Do Not Track / Global Privacy Control: Our Site does not currently respond to browser-level Do Not Track (DNT) signals. We are evaluating our approach to Global Privacy Control (GPC) opt-out signals and will update this section when that process is complete.

7. SMS and Text Messaging

If you provide your mobile phone number through our Site or in connection with our services, and you have consented to receive text messages from us, we may send you appointment reminders, service updates, or responses to your inquiries via SMS. Message and data rates may apply. You can opt out at any time by replying STOP to any text message we send you.

Mobile opt-in information and consent to receive text messages are not shared with third parties or affiliates for marketing purposes.

8. Third-Party Services

We use the following third-party services that may collect or process data on our behalf:

Google Analytics

We use Google Analytics (GA4) to analyze how visitors interact with our Site. Google Analytics collects data such as your IP address, browser type, device information, and pages visited. This data is processed by Google in accordance with their Privacy Policy, available at policies.google.com/privacy. Google Analytics is operated by Google LLC, based in the United States.

GoDaddy

Our Site is hosted on servers provided by GoDaddy. GoDaddy may collect server log data including IP addresses and access times as part of standard hosting operations. GoDaddy’s privacy policy is available at godaddy.com/legal/agreements/privacy-policy.

Mailchimp

If you subscribe to our email newsletter, your email address is stored and managed through Mailchimp, an email marketing platform operated by Intuit Inc. Mailchimp’s privacy policy is available at mailchimp.com/legal/privacy. You can unsubscribe from our newsletter at any time by clicking the unsubscribe link in any email we send you.

Elementor and Google reCAPTCHA

Our contact forms are built using Elementor, a WordPress page builder. Form submissions are processed and stored within our WordPress installation hosted on GoDaddy. Our forms use Google reCAPTCHA to help prevent spam and abuse. Google reCAPTCHA collects hardware and software information, such as device and application data, and sends this data to Google for analysis. Google’s use of reCAPTCHA data is governed by Google’s Privacy Policy at policies.google.com/privacy and Terms of Service at policies.google.com/terms.

TaxDome (Client Portal)

We use TaxDome as our secure Client Portal for the collection, storage, and exchange of client documents and sensitive financial information. TaxDome is operated by TaxDome Inc. If you use the Client Portal, your information is subject to TaxDome’s privacy policy, available at taxdome.com/policies/privacy. The Client Portal is the appropriate channel for transmitting sensitive documents, tax information, and financial records. Please do not transmit sensitive information through the contact form on this Site.

9. Data Retention

We retain information for the following periods:

  • Contact form submissions: Up to 24 months from the date of submission, unless a client relationship is established, in which case the applicable client record retention period applies.
  • Newsletter subscriber information: Retained while you remain subscribed, plus 12 months following unsubscribe.
  • Website analytics data (Google Analytics): Retained in accordance with our Google Analytics data retention setting, currently set to 14 months.
  • Client records: In accordance with standard accounting and tax record-keeping requirements, client-related records are generally retained for a minimum of seven years, or as otherwise required by applicable law.

We may retain information for longer periods where required by law, regulation, or professional standards.

10. Data Security

We take reasonable measures to protect the information collected through our Site from unauthorized access, loss, or misuse. Our Site is hosted on GoDaddy’s secure servers and uses HTTPS encryption for all data transmitted between your browser and our Site. Sensitive client documents are stored and transmitted through the TaxDome Client Portal, which maintains its own security controls.

Koffex Accounting maintains a written information security program in accordance with the FTC Safeguards Rule, 16 CFR Part 314, designed to protect customer information through administrative, technical, and physical safeguards. In the event of a data breach affecting your personal information, we will notify affected individuals and the Illinois Attorney General as required under the Illinois Personal Information Protection Act (PIPA), 815 ILCS 530, and any other applicable breach notification laws.

However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

11. Children's Privacy

This Site is not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13. If we become aware that we have inadvertently collected personal information from a child under 13, we will take steps to delete that information as promptly as possible. If you believe we may have collected information from a child under 13, please contact us at contact@koffexaccounting.com.

12. Disclosure of Information

We do not sell, rent, or share your personal information with third parties for marketing purposes. We may disclose your information in the following circumstances:

  • Service providers: We share information with third-party service providers listed in Section 7 above solely to operate our Site and provide our services.
  • Legal compliance and compelled disclosure: We may disclose your information if required to do so by law, subpoena, court order, or government or regulatory authority, including the IRS, the Illinois Department of Financial and Professional Regulation (IDFPR), or other applicable regulators. Notwithstanding the foregoing, tax return information may only be disclosed as permitted or required under IRC 7216 and Treas. Reg. 301.7216-2, or with your prior written consent.
  • Protection of rights: We may disclose information where we believe it is necessary to investigate, prevent, or take action regarding illegal activities, suspected fraud, violations of our Terms and Conditions, or situations involving potential threats to safety.
  • Business transfer: In the event of a merger, acquisition, sale of assets, or other business transfer, your information may be transferred as part of that transaction, subject to applicable law. Tax return information will not be transferred in connection with any such transaction without your prior written consent as required under IRC 7216 and Treas. Reg. 301.7216-2. We will notify you via email or a prominent notice on our Site if such a transfer occurs and your information becomes subject to a different privacy policy.

13. Your Privacy Rights

General Rights

Depending on where you are located, you may have the following rights regarding your personal information:

  • The right to access the personal information we hold about you
  • The right to request correction of inaccurate information
  • The right to request deletion of your personal information
  • The right to opt out of email communications at any time

To exercise any of these rights, please submit a written request to contact@koffexaccounting.com with the subject line “Privacy Rights Request.” We will verify your identity before processing your request. We will respond to verified requests within 45 days of receipt. If we need additional time, we will notify you of the extension within the initial 45-day period. You may designate an authorized agent to submit a request on your behalf, provided you supply written authorization confirming the agent’s authority.

California Privacy Rights (CPRA)

If you are a California resident, you have rights under the California Consumer Privacy Act as amended by the California Privacy Rights Act (CPRA). Personal information collected and used in connection with providing financial and tax services is exempt from CPRA requirements under the GLBA exemption. We nonetheless describe your rights below as a matter of transparency.

Your rights under CPRA include:

  • The right to know what personal information we collect, use, disclose, and share
  • The right to request deletion of your personal information
  • The right to request correction of inaccurate personal information
  • The right to opt out of the sale or sharing of your personal information for cross-context behavioral advertising
  • The right to limit use and disclosure of sensitive personal information
  • The right not to be discriminated against for exercising your privacy rights

We do not sell personal information. We do not share personal information for cross-context behavioral advertising purposes. To submit a California privacy rights request, please contact us at contact@koffexaccounting.com.

Categories of personal information collected in the prior 12 months: identifiers (name, email, phone, IP address), internet activity information (pages visited, browser type), and geolocation data (approximate location based on IP address). Retention periods by category are described in Section 8 above.

14. Links to Third-Party Websites

Our Site may contain links to external websites that are not operated by us. This Privacy Policy does not apply to those sites. We encourage you to review the privacy policies of any third-party websites you visit.

15. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make changes, we will update the “Last Updated” date at the top of this page. We encourage you to review this policy periodically.

16. Contact Us

If you have any questions about this Privacy Policy or how we handle your information, please contact us:

Koffex Accounting
16151 Weber Rd. Ste 204, Crest Hill, IL 60403
Phone: (815) 588-0200
Email: contact@koffexaccounting.com
Website: www.koffexaccounting.com