We collect information you provide directly to us, including:

• Personal Information: Name, email address, phone number, mailing address, Social Security Number (for tax preparation), date of birth, and employment information. • Financial Information: Income details, tax documents, bank account information (for refund direct deposit), investment records, and expense documentation. • Business Information: For business clients, we collect EIN, business formation documents, financial statements, and related business records. • Communications: Messages, inquiries, and correspondence you send to us through our portal or other channels. • Usage Data: Information about how you interact with our services, including access times, pages viewed, and features used.

We use the information we collect to:

• Provide tax preparation, advisory, and CFO services • Process and file tax returns on your behalf • Communicate with you about your account and services • Send important notices, updates, and tax-related reminders • Improve our services and develop new features • Comply with legal obligations and professional standards • Protect against fraud and unauthorized access • Provide customer support and respond to inquiries

We do not sell your personal information. We may share your information in the following circumstances:

• Tax Authorities: We file returns and communicate with the IRS, state tax agencies, and local authorities on your behalf. • Service Providers: We use trusted third-party services for document storage, payment processing, and communication tools. All providers are bound by confidentiality agreements. • Professional Partners: With your consent, we may share information with attorneys, financial advisors, or other professionals you engage. • Legal Requirements: We may disclose information when required by law, subpoena, or government request. • Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred to the successor entity.

We implement robust security measures to protect your information:

• Encryption: All data is encrypted in transit (TLS 1.3) and at rest (AES-256). • Access Controls: Role-based access ensures only authorized personnel can access your data. • Multi-Factor Authentication: Required for all staff accessing client information. • Regular Audits: We conduct regular security assessments and penetration testing. • Secure Infrastructure: Our systems are hosted in SOC 2 Type II certified data centers. • Employee Training: All staff complete annual security awareness training.

While we strive to protect your information, no method of transmission over the Internet is 100% secure.

We retain your information for as long as necessary to provide services and comply with legal obligations:

• Tax Records: We retain tax returns and supporting documents for 7 years after filing, as required by IRS guidelines. • Account Information: Maintained while your account is active and for 3 years after termination. • Communications: Retained for 3 years for quality assurance and dispute resolution. • Financial Records: Retained in accordance with applicable accounting standards.

You may request deletion of your data, subject to our legal retention obligations.

You have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you. • Correction: Request correction of inaccurate or incomplete information. • Deletion: Request deletion of your data, subject to legal retention requirements. • Portability: Receive your data in a commonly used, machine-readable format. • Opt-Out: Unsubscribe from marketing communications at any time. • Withdraw Consent: Where processing is based on consent, you may withdraw it at any time.

To exercise these rights, contact us at privacy@eikonadvisors.com.

Our website and portal use cookies and similar technologies to:

• Essential Cookies: Enable core functionality like secure login and session management. • Analytics Cookies: Help us understand how you use our services to improve them. • Preference Cookies: Remember your settings and preferences.

You can control cookies through your browser settings. Disabling essential cookies may affect functionality.

We do not use cookies for advertising or sell data to advertisers.

We integrate with trusted third-party services:

• Document Processing: AI-powered document analysis for tax form recognition. • Cloud Storage: Secure document storage with enterprise-grade providers. • Payment Processing: PCI-compliant payment processors for billing. • Communication Tools: Secure messaging and video conferencing platforms.

Each third-party provider has their own privacy policy. We encourage you to review them. We only partner with providers that meet our security and privacy standards.

Our services are not directed to individuals under 18. We do not knowingly collect personal information from children.

If you are a parent or guardian and believe we have collected information from a child, please contact us immediately at privacy@eikonadvisors.com.

For minor dependents included on tax returns, we collect only the information necessary for tax preparation, provided by their parent or guardian.

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to Know: Categories and specific pieces of personal information collected. • Right to Delete: Request deletion of personal information collected from you. • Right to Opt-Out: Opt out of the sale of personal information (we do not sell your data). • Non-Discrimination: We will not discriminate against you for exercising your rights.

To submit a CCPA request, email privacy@eikonadvisors.com or call (555) 123-4567.

We will verify your identity before processing requests using information you have previously provided to us.

Your information is primarily stored and processed in the United States. If you access our services from outside the United States, your information may be transferred to, stored, and processed in the United States.

By using our services, you consent to the transfer of your information to the United States, which may have different data protection laws than your country of residence.

We implement appropriate safeguards for any international transfers of personal data.

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

• Posting the updated policy on this page with a new "Last Updated" date • Sending an email notification to your registered email address • Displaying a prominent notice in our client portal

Your continued use of our services after any changes indicates your acceptance of the updated policy.

We encourage you to review this policy periodically to stay informed about how we protect your information.