Privacy Policy
Last updated: August 8, 2025
1) Who we are & scope
McElroy Comprehensive Accounting LLC (“McElroy,” “we,” “us,” or “our”) operates www.mcelroyaccounting.tax (the “Site”). This Policy explains how we collect, use, disclose, and protect personal information in connection with the Site and our client services (the “Services”). This Policy is not a HIPAA Notice of Privacy Practices.
2) What we collect
A. On our website (Wix)
We do not collect names, emails, phone numbers, company names, or other contact details directly on the Site. The Site uses Wix’s native functionality to produce basic visitor statistics (e.g., page views, device/browser information, approximate location from IP) via essential/analytics cookies to operate and improve the Site.
B. Via our external Typeform link
If you choose to complete our client discovery questionnaire hosted by Typeform, any personal information you submit there (e.g., name, email, phone, company, engagement details) is collected on Typeform’s platform under Typeform’s privacy practices. We receive your responses from Typeform to respond to your inquiry and evaluate whether we can provide Services.
Sensitive data caution: Please do not submit Protected Health Information (PHI), full Social Security numbers, bank details, or tax return documents through Typeform or ordinary email. If sensitive information is needed, we will provide a secure client portal or encrypted channel.
3) Why we use your information
-
Respond to inquiries and determine engagement suitability
-
Provide and manage accounting/tax Services (if engaged)
-
Operate, secure, and improve the Site (limited visitor statistics)
-
Comply with legal, tax, and professional obligations
4) How we share information
We do not sell or share personal information for cross-context behavioral advertising. We disclose information only as reasonably necessary to:
-
work with service providers (e.g., IT/hosting, email, client portal, Typeform) under confidentiality/data-protection obligations;
-
comply with professional obligations or legal process; and
-
complete a business transaction (e.g., merger or acquisition).
5) Cookies & tracking
-
Wix cookies/analytics: Used for site operation and visitor statistics.
-
No advertising pixels: We do not use third-party advertising or social media tracking pixels.
You can control cookies in your browser; some features may not function without required cookies.
6) Communications
We contact you only to respond to your inquiry, schedule work, or administer an engagement. We do not send marketing email or SMS campaigns.
7) Children
We do not market to or knowingly serve minors. The Site is not directed to children under 13.
8) HIPAA (health information)
For certain healthcare clients, we may act as a HIPAA Business Associate. In that role we handle PHI only as permitted by written Business Associate Agreements (BAAs) and applicable HIPAA Privacy/Security/Breach Notification Rules. We are not a covered entity and therefore do not publish a HIPAA Notice of Privacy Practices. Do not send PHI via Typeform or general email; use our secure portal when instructed.
9) Financial privacy & tax return information
Where applicable, we maintain safeguards consistent with federal financial-privacy and information-security requirements, and we comply with tax-preparer confidentiality rules restricting the use/disclosure of tax return information except as permitted by law or with valid consent.
10) Security
We employ administrative, technical, and physical safeguards appropriate to the sensitivity of the information we handle. For Ohio operations, our written information security program is designed to align with recognized cybersecurity frameworks.
11) Data retention
-
Typeform responses: Retained only as long as necessary to respond and, if engaged, to meet legal/professional recordkeeping obligations, then deleted or de-identified per our retention schedule.
-
Visitor statistics: Retained by us and/or Wix for limited operational/analytics purposes.
12) Your privacy choices & rights
Because we do not sell personal information, run targeted advertising, or operate outside the U.S., many consumer-privacy provisions may not apply to our Site. Where a privacy law does apply (e.g., certain state rights to access/correct/delete), you may exercise those rights by contacting us (Section 14). We will verify and respond as required by applicable law.
13) Third-party services & links
Our Site links to third-party services (e.g., Typeform). Your interactions with those services are governed by their own terms and privacy policies. We are not responsible for their practices.
14) Breach notifications (Ohio residents)
If a breach of computerized personal information creates a material risk of identity theft or fraud for Ohio residents, we will provide notice in accordance with applicable Ohio law.
15) How to contact us
Email (privacy inquiries only): office.mcelroy.tax@gmail.com
16) Changes to this Policy
We may update this Policy from time to time. We will post the revised version with a new “Last updated” date. Material changes will be highlighted or otherwise communicated as required by law.