Privacy Policy

Your privacy is important to us. This policy explains how Kristy Alballero Accounting collects, uses, and protects your personal information in compliance with U.S. federal law, the California Consumer Privacy Act (CCPA), and the General Data Protection Regulation (GDPR).

1. Information We Collect

We collect the following categories of information as necessary to provide our accounting, bookkeeping, tax preparation, and related services:

A. Personal and Business Information

  • Name, mailing address, email address, and phone number
  • Business entity details, ownership information, and contact information for key personnel
  • Identification details necessary for tax return preparation, such as Social Security Numbers (SSNs) or Employer Identification Numbers (EINs)
  • Information required to prepare and file business and personal tax returns, including income and expense records, payroll information, and supporting tax documentation

B. Financial Records

  • Bank statements, credit card statements, and other account statements required to reconcile accounts and prepare accurate financial reports
  • Accounting system records and other financial data you provide to us

C. Payment Information

  • In most cases, all payment processing for our services is handled securely through QuickBooks Online (QBO) or other third-party payment processors, and we do not store your full credit or debit card details on our systems.
  • In limited cases—such as when we manage sales tax filings and remit payments on your behalf—we may collect the payment account details necessary to complete those transactions securely.

D. Internet or Device Information

  • IP address, browser type, operating system, pages visited on our website, and referring URLs when you interact with our online services

E. Sensitive Information

  • Only collected if required to deliver the requested service or meet legal obligations (e.g., government-issued identification numbers)

2. How We Use Your Information

  • Provide and manage services
  • Respond to inquiries
  • Process payments and send invoices
  • Comply with legal obligations
  • Improve services
  • Send marketing with consent where required

GDPR Legal Bases: Contract performance, legal obligation, legitimate interests, consent.

3. How We Share Your Information

We do not sell your personal information.
  • Service Providers: payment processors, hosting, IT support
  • Legal Obligations: to comply with subpoenas, court orders, tax/regulatory requests
  • Business Transfers: mergers, acquisitions with confidentiality safeguards
  • With Consent: when you authorize

4. Your Privacy Rights

U.S. Federal

Right to access, correct, delete data.

California (CCPA/CPRA)

  • Know categories/pieces of data collected
  • Request deletion
  • Request correction
  • Opt-out of sale/sharing (we do not sell)
  • No discrimination for exercising rights

Email info@kristyalballero.com to submit requests; ID verification required.

EU/UK (GDPR)

  • Access, rectify, erase data
  • Restrict or object to processing
  • Data portability
  • Withdraw consent anytime
  • Lodge complaints with supervisory authority

5. Data Security

Encryption, MFA, secure storage, role-based access. No method is 100% secure.

6. Data Retention

Data kept only as long as needed or required by law (IRS: up to 7 years).

7. Cookies and Tracking

We use cookies and tracking technologies. EU/UK visitors see a consent banner.

8. International Data Transfers

Data of non-U.S. users may be processed in the U.S. under GDPR safeguards.

10. Children’s Privacy

Our services are not marketed to or intended for children under 13 (U.S.) or 16 (EU/UK). However, in certain cases—such as when preparing an individual tax return—we may collect information about a child, including their name, date of birth, and Social Security Number, when it is required by tax laws or other legal obligations.

This information is collected solely for the purpose of fulfilling the related tax or accounting service and is handled with the same security and confidentiality measures that we apply to all sensitive personal information.

We do not knowingly collect information from children outside of these lawful service contexts. If you believe we have collected a child’s information in error, please contact us so we can promptly delete it.

11. Updates to This Policy

We may update this policy. Changes will be posted here with a new “Last Updated” date.

12. Contact Us

Kristy Alballero Accounting
Email: info@kristyalballero.com
Website: kristyalballero.com

Last Updated: 08/05/2025