Privacy Policy
Your privacy and the security of your financial information are our top priorities
Last Updated: January 25, 2026
Zenith Financial Advisors (“we,” “our,” or “us”) is committed to protecting your privacy and maintaining the confidentiality of your personal and financial information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our tax preparation, accounting, and financial advisory services.
By using our services, website, or client portal, you consent to the practices described in this Privacy Policy. We encourage you to read this document carefully to understand our practices regarding your information.
1. Information We Collect
Personal Information
We collect personal information that you voluntarily provide to us, including:
- Full name, date of birth, and Social Security Number (SSN) or Individual Taxpayer Identification Number (ITIN)
- Contact information (email address, phone number, mailing address)
- Employment information and income details
- Banking and financial account information for direct deposits or payments
- Spouse and dependent information for tax filing purposes
- Citizenship and residency status for cross-border tax matters
Tax Documents and Financial Records
To provide our tax services, we collect and process:
- W-2 forms, 1099 forms, and other income statements
- Previous tax returns and tax-related correspondence
- Investment statements and foreign financial account information (FBAR/FATCA)
- Business financial records for corporate tax clients
- Receipts and documentation for deductions and credits
- Foreign tax documents for expat and cross-border clients
Automatically Collected Information
When you visit our website or use our client portal, we automatically collect:
- Device information (browser type, operating system, device type)
- IP address and general location data
- Usage data (pages visited, time spent, actions taken)
- Referral source and navigation patterns
2. How We Use Your Information
We use your information for the following purposes:
- Tax Preparation Services: To prepare, review, and file your federal, state, and international tax returns
- Client Communication: To respond to inquiries, provide updates on your filings, and send important tax deadline reminders
- IRS and Tax Authority Representation: To represent you before tax authorities when authorized
- Service Improvement: To enhance our services, website functionality, and client experience
- Compliance: To comply with legal obligations, including IRS regulations and anti-money laundering requirements
- Billing and Payments: To process payments for our services and maintain accurate financial records
- Security: To detect, prevent, and respond to fraud, unauthorized access, or other security issues
3. Data Protection and Security
We implement industry-leading security measures to protect your sensitive information:
Technical Safeguards
- 256-bit SSL/TLS Encryption: All data transmitted between your browser and our servers is encrypted using bank-level 256-bit SSL encryption
- SOC 2 Type II Compliance: Our infrastructure and processes are audited annually to meet SOC 2 Type II security standards
- Encrypted Storage: All stored documents and personal data are encrypted at rest using AES-256 encryption
- Multi-Factor Authentication: We require multi-factor authentication for all client portal access
- Regular Security Audits: We conduct regular penetration testing and vulnerability assessments
Administrative Safeguards
- Staff training on data protection and privacy best practices
- Strict access controls limiting data access to authorized personnel only
- Background checks for all employees handling sensitive information
- Documented incident response procedures
- Regular review and updating of security policies
4. Third-Party Services
We work with trusted third-party service providers to deliver our services. These providers are contractually obligated to protect your information:
- Stripe: We use Stripe for secure payment processing. Stripe is PCI DSS Level 1 certified, the highest level of certification in the payments industry. We do not store your full credit card details on our servers.
- Cloud Infrastructure: Our platform is hosted on secure, SOC 2 compliant cloud infrastructure with data centers in the United States
- Email Services: We use secure email providers for client communications, with encryption for sensitive information
- Analytics: We use privacy-respecting analytics to improve our website and services
We require all third-party providers to maintain appropriate security measures and to use your information only for the purposes we specify.
5. Cookies and Tracking Technologies
Our website uses cookies and similar technologies to enhance your experience:
Essential Cookies
Required for the website to function properly, including maintaining your session when logged into the client portal.
Functional Cookies
Remember your preferences and settings to provide a personalized experience.
Analytics Cookies
Help us understand how visitors interact with our website so we can improve our services.
You can manage your cookie preferences through your browser settings. Note that disabling certain cookies may affect website functionality.
6. Your Privacy Rights
You have the following rights regarding your personal information:
- Access: Request a copy of the personal information we hold about you
- Correction: Request correction of inaccurate or incomplete information
- Deletion: Request deletion of your personal information, subject to legal retention requirements
- Portability: Request a copy of your data in a portable format
- Opt-Out: Unsubscribe from marketing communications at any time
- Restriction: Request limitation of processing in certain circumstances
Please note that we are required by law to retain certain tax-related records for a minimum of 7 years. We will inform you if a deletion request cannot be fully honored due to legal obligations.
7. Data Retention
We retain your information for the following periods:
- Tax Returns and Supporting Documents: Minimum 7 years from the filing date, as required by IRS regulations
- Client Account Information: Duration of the client relationship plus 7 years
- Communication Records: 3 years from the date of communication
- Website Usage Data: 26 months from collection
8. Contact Us About Privacy
If you have questions, concerns, or requests regarding this Privacy Policy or how we handle your information, please contact us:
9. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the updated policy on our website and updating the “Last Updated” date. We encourage you to review this policy periodically.
Questions About Our Privacy Practices?
We're committed to transparency and protecting your information. If you have any questions about how we handle your data, please don't hesitate to reach out.