Legal
Privacy Policy
Introduction & Scope
This Privacy Policy ("Policy") describes how Hanmi CPA ("we," "us," or "our") collects, uses, and protects personal information in connection with our tax preparation, tax consulting, and financial advisory services, as well as our website (collectively, the "Services").
By engaging our Services or using our website, you acknowledge that you have read and understood this Policy. This Policy applies to current and prospective clients and to visitors to our website.
Information We Collect
We collect only the information necessary to provide you with professional tax and accounting services.
| Category | Examples |
|---|---|
| Identity Information | Full name, Social Security Number (SSN) or ITIN, date of birth, driver's license number |
| Contact Information | Mailing address, phone number, email address |
| Tax & Financial Information | Income documents (W-2, 1099, K-1), assets and liabilities, investment records, business financial statements |
| Foreign Asset Information | Foreign bank accounts (FBAR), foreign financial assets (FATCA / Form 8938), foreign investment funds (PFIC / Form 8621), visa and residency history |
| Employment & Business Information | Employer details, business entity information, EIN, payroll records |
| Website Usage Information | IP address, pages visited, time on site — collected in aggregate for service improvement purposes only |
How We Use Your Information
We use the information we collect exclusively for the following purposes:
- Preparing and filing federal and state tax returns (Form 1040, 1120-S, 1065, 1120, and related schedules)
- Fulfilling foreign asset reporting obligations (FBAR / FinCEN 114, Form 8938, Form 8621, Form 5471, and related filings)
- Providing tax consulting, tax planning, and financial advisory services
- Communicating with the IRS, state tax authorities, or FinCEN on your behalf
- Responding to audits, notices, and correspondence from taxing authorities
- Meeting our legal and professional obligations under IRS Circular 230 and applicable law
- Internal administration and service quality improvement
- Sending tax-related notices or newsletters, with your consent
We do not sell, rent, or share your personal information with third parties for marketing purposes.
Disclosure of Information
We share your information only in the following limited circumstances:
| Recipient | Reason & Conditions |
|---|---|
| IRS & State Tax Authorities | Submission of tax returns, taxpayer authentication, and audit representation — always under your authorization |
| FinCEN (FBAR) | FBAR filing via BSA E-Filing System, submitted on your behalf with your explicit authorization |
| Tax Software Vendors | Third-party tax preparation and e-filing platforms used by our firm, bound by strict confidentiality agreements |
| Korean Tax Professionals | Only when you engage us for Korean tax filing services and provide explicit written consent |
| Legal Requirements | Court orders, subpoenas, or mandatory legal disclosures — we will notify you in advance whenever permitted by law |
All staff and contractors at Hanmi CPA are bound by confidentiality obligations and access client information only to the extent necessary to perform their duties.
Data Security
We take the protection of your personal information seriously and maintain the following safeguards:
- Encrypted file transfer via a secure client portal for document exchange
- Role-based access controls and multi-factor authentication on all internal systems
- Locked storage and cross-cut shredding for physical documents
- Regular staff training on data security and privacy best practices
- A Written Information Security Program (WISP) maintained in accordance with IRS Publication 4557
Data Retention
We retain client records in accordance with applicable tax law and professional standards:
| Record Type | Retention Period |
|---|---|
| Tax Returns & Supporting Documents | Minimum 7 years (IRS statute of limitations is 6 years; we retain 1 additional year as a buffer) |
| FBAR Records | Minimum 6 years (31 C.F.R. § 1010.430) |
| Foreign Asset Filings (FATCA / PFIC) | Minimum 7 years or until resolution of any open examination |
| Engagement Letters & Agreements | 7 years after the conclusion of the engagement |
| Website Access Logs | 12 months |
Upon expiration of the applicable retention period, records are destroyed using methods that render recovery impossible (cross-cut shredding or secure digital deletion).
Your Rights
You have the following rights with respect to the personal information we hold about you:
- Access: Request a copy of the personal information we hold about you
- Correction: Request correction of inaccurate or incomplete information
- Deletion: Request deletion of information that we are not legally required to retain
- Restriction: Request that we limit our use of your information for certain purposes
- Marketing Opt-Out: Unsubscribe from newsletters or non-essential communications at any time
To exercise any of these rights, please contact us using the details below. We will respond within 30 days of receiving your request.
Cookies & Website Analytics
Our website may use minimal cookies and analytics tools to improve user experience. Information collected includes:
- Pages visited, time on site, and click patterns — in aggregate form only, not linked to any individual
- Device type and browser version
- General geographic region (city/state level only)
You may disable cookies through your browser settings. Doing so may affect certain website functionality. We do not use behavioral tracking cookies or serve targeted advertising on our website.
Changes to This Policy
We may update this Policy from time to time to reflect changes in law, our services, or our data practices. When we make material changes, we will:
- Update the "Last Updated" date at the top of this page
- Notify active clients by email when changes are significant
Your continued use of our Services after a change is posted constitutes your acceptance of the revised Policy.
For questions about this Policy or how we handle your personal information, please contact us through any of the following channels. We are committed to addressing your concerns promptly and transparently.