Privacy Policy

Effective Date: February 26, 2026
Business Name: Carolyn L. Gandee, CPA
Location: Volga, West Virginia

1. Introduction

Carolyn L. Gandee, CPA (“we,” “our,” or “us”) is committed to protecting the privacy and security of our clients’ personal and financial information. This Privacy Policy explains how we collect, use, safeguard, and disclose information in compliance with federal and West Virginia law, including the FTC Safeguards Rule, IRS Publication 4557, and the Gramm-Leach-Bliley Act (GLBA).

By using our website, you consent to the practices described in this policy.

2. Information We Collect

We may collect the following types of information:

Personal Information

Name
Address
Email address
Phone number
Social Security number (when required for tax services)
Date of birth
Financial account information
Tax and income documentation

Website Usage Information

IP address
Browser type
Device type
Pages visited
Cookies and analytics data

We collect only the information necessary to provide accounting, tax preparation, and advisory services.

3. How We Use Your Information

Your information may be used to:

Prepare and file tax returns
Provide bookkeeping and advisory services
Communicate regarding services
Comply with legal and regulatory obligations
Improve website functionality

We do not sell, rent, or trade your personal information.

4. Information Security

We maintain a Written Information Security Plan (WISP) in accordance with the FTC Safeguards Rule. Our safeguards include:

Multi-Factor Authentication (MFA)
Data encryption at rest and in transit
Secure cloud-based storage
Access restrictions to authorized personnel
Annual security training
Vendor due diligence procedures

We implement commercially reasonable safeguards to protect your information against unauthorized access, alteration, disclosure, or destruction.

5. Data Sharing & Disclosure

We may share information:

With the IRS and state tax authorities for filing purposes
With trusted service providers who assist in delivering services (subject to confidentiality agreements)
When required by law or court order

We do not disclose nonpublic personal information except as permitted or required by law.

6. Data Retention

We retain records as required by IRS regulations and professional standards. When no longer required, information is securely destroyed in accordance with our data retention policies.

7. Data Breach Notification

In the event of a qualifying data breach affecting West Virginia residents, we will provide notice consistent with WV Code §46A-2A-101 and applicable federal requirements.

8. Cookies & Website Analytics

Our website may use cookies to enhance user experience. You may adjust browser settings to decline cookies; however, certain website features may not function properly.

9. Your Rights

You may request access to or correction of your personal information by contacting us at:

[cgandee@carolynlgandeecpa.com]
[304-622-0850]

10. Updates to This Policy

We may update this Privacy Policy periodically. The revised version will be posted with an updated effective date.