Lotus Tax & Advisory, A Professional Corporation
Last Updated: 7/7/2026
Lotus Tax & Advisory, A Professional Corporation (“Lotus,” “we,” “us,” or “our”) respects your privacy and is committed to protecting the personal and financial information you share with us. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you visit our website (getlotus.co), use our client portal, or engage us for tax preparation, accounting, or advisory services.
This policy is intended to comply with applicable federal and state privacy laws, including the Gramm-Leach-Bliley Act (GLBA), IRS data safeguarding requirements for paid tax return preparers (IRS Publication 4557), and, where applicable, the California Consumer Privacy Act / California Privacy Rights Act (CCPA/CPRA).

1. Information We Collect
a. Information you provide directly:
Contact information (name, email, phone number, mailing address)
Tax and financial information (Social Security numbers, EINs, income statements, W-2s, 1099s, bank account and routing numbers, investment and brokerage statements, and other documents necessary to prepare returns or provide advisory services)
Business information (entity formation documents, payroll data, financial statements)
Communications you send us through the contact form, email, phone, or client portal
b. Information collected automatically:
IP address, browser type, device information, and pages visited on our website (via [analytics tool — CONFIRM WHICH TOOLS ARE ACTUALLY IN USE])
Cookies and similar tracking technologies (see Section 6)
c. Information from third parties:
Information from our secure client portal provider ([NAME OF PORTAL PROVIDER])
Information from financial institutions, employers, or government agencies when necessary to complete engagements, and only with your authorization where required

2. How We Use Your Information
We use collected information to:
Prepare and file tax returns and provide accounting/advisory services
Communicate with you about your engagement, deadlines, and deliverables
Operate and maintain the client portal and secure document exchange
Comply with legal, regulatory, and professional obligations (including IRS and state tax authority requirements)
Improve our website and services
Respond to inquiries submitted through our contact form
We do not use your tax or financial information for marketing purposes without your express written consent, consistent with IRC Section 7216 restrictions on disclosure and use of tax return information by preparers.

3. How We Share Your Information
We do not sell your personal information. We may share information only in the following circumstances:
Service providers: With vendors who support our operations (e.g., client portal hosting, e-signature, secure file storage, IT support), under contractual confidentiality obligations
Legal and regulatory requirements: When required by law, subpoena, court order, or requests from tax authorities (IRS, FTB, etc.)
With your consent: When you authorize us to share information with a third party (e.g., a mortgage lender, financial advisor, or attorney)
Business transfers: In the event of a merger, acquisition, or sale of firm assets, subject to confidentiality protections
Any disclosure or use of tax return information beyond what is necessary to prepare your return requires your specific written consent under IRC Section 7216 and its implementing regulations.

4. Data Security
We maintain a Written Information Security Plan (WISP) as required by the FTC Safeguards Rule and IRS guidance for paid preparers. Safeguards include:
[Encryption in transit and at rest — CONFIRM SPECIFICS]
Multi-factor authentication on the client portal and internal systems
Restricted employee access to client data on a need-to-know basis
Secure, paperless document workflows (no physical mailing of sensitive documents)
Regular review of our security practices and vendor agreements
No method of electronic transmission or storage is 100% secure. While we take reasonable and industry-appropriate measures to protect your information, we cannot guarantee absolute security.

5. Data Retention
We retain client tax and financial records for [X years — CONFIRM YOUR RETENTION POLICY; IRS generally recommends preparers retain records for at least 3 years, though many firms retain longer] to comply with IRS recordkeeping requirements, professional standards, and potential audit or dispute needs. After this period, records are securely deleted or destroyed.

6. Cookies and Tracking
Our website may use cookies and similar technologies to:
Remember your preferences
Understand site usage through analytics
Improve website performance
You can control cookies through your browser settings. Disabling cookies may affect website functionality. [ADD COOKIE CONSENT BANNER LANGUAGE IF SERVING CALIFORNIA OR EU VISITORS.]

7. Your Privacy Rights
Depending on your state of residence, you may have the right to:
Request access to the personal information we hold about you
Request correction of inaccurate information
Request deletion of your information (subject to our legal and regulatory retention obligations as a tax preparer)
Opt out of certain disclosures of your information (as required under GLBA)
To exercise these rights, contact us at hello@getlotus.com. We will verify your identity before processing any request, given the sensitivity of tax and financial data involved.
California Residents: [If CCPA/CPRA thresholds are met, add required CCPA notice content: categories of personal information collected, purposes, third parties, and the right to opt out of “sale” or “sharing” — confirm applicability with counsel.]

8. Children’s Privacy
Our services are not directed to individuals under 18, and we do not knowingly collect personal information from children.

9. Changes to This Policy
We may update this Privacy Policy from time to time. The “Last Updated” date at the top reflects the most recent revision. Material changes affecting how we handle your tax or financial data will be communicated directly to active clients.

10. Contact Us
Lotus Tax & Advisory, A Professional Corporation
8583 Irvine Center Dr. Suite 1005, Irvine, CA 92618
Email: hello@getlotus.com
Phone: (949) 345-0598

The brackets still aren’t cosmetic — “confirm specifics,” retention years, and CCPA applicability are load-bearing for a firm handling SSNs and bank data. Publishing with those unresolved is a real liability gap, not a nitpick.