Privacy Policy

KPMG Spark (“our,” “we,” or “us”) is a wholly-owned subsidiary of KPMG LLP (U.S.)[1] We take your privacy very seriously. This KPMG Spark Privacy Policy describes the policies and procedures regarding the collection, use, and disclosure of your information in connection with your use of https://kpmgspark.com/ or any other platforms or website(s) offering the KPMG Spark Services (collectively, “Website”) or any KPMG Spark content, products, or services made available by us (together with the Website, the “KPMG Spark Services” or “Services”). We receive information about you from various sources, including without limitation:

  1. if you register for the Services, through your user account (i.e., your “Account”);
  2. Your use of the Services generally; and
  3. from third-party websites and services.

We use your Personal Information in order to provide you with KPMG Spark’s Services. Please review this Privacy Statement to learn more about how we collect, use, share and protect the personal information that we have obtained.  It will help you make informed decisions about sharing your personal information with us. Please be aware that by engaging in KPMG Spark’s activities (e.g., using online services), you consent to the collection and processing of your personal information as set forth in this KPMG Spark Privacy Policy.

The defined terms in this KPMG Spark Privacy Policy, if not defined herein, shall have the same meaning as in the KPMG Spark Terms of Service, available at https://kpmgspark.com/tos (the “Terms of Service” and together with the Privacy Policy, the “Terms”). You should read the Terms before accessing or using the Services. By accessing and using our Services, you consent to the terms of this KPMG Spark Privacy Policy and agree to be bound by the Terms of Service. Please note that with respect to the KPMG Spark Services, this KPMG Spark Privacy Policy applies instead of any other privacy terms you may have with us.

1.  We collect your Personal Information.

The KPMG Spark Services include online back-office business, tax, and accounting services designed for small-and-medium-sized businesses. The information we gather enables us to personalize, improve and continue to operate the Services. In connection with certain aspects of the Services, we may request, collect and/or display some of your Personal Information. “Personal Information” is information about an identifiable individual and may include information such as the individual’s name, personal email address, telephone number, bank account details, credit card information, taxation details, and accounting and financial information.[2]

We may collect Personal Information directly from you when you:

  • register to use the Services,
  • use the Services,
  • access the KPMG Spark blog or marketing materials such as newsletters,
  • contact KPMG Spark, and/or
  • access the Website or related landing pages.

You can choose not to provide your Personal Information, but it may limit our ability to provide you with the Services.

2.  We may receive Personal Information from you about others.

Through your use of the Services, we may also collect information from you about someone else. If you provide us with Personal Information about someone else, you warrant and represent that you are authorized to disclose that information to us and that we may collect, use and disclose such information for the purposes described in this KPMG Spark Privacy Policy.

This means that you must take reasonable steps to ensure the individual concerned is aware of and/or consents to the various matters detailed in this KPMG Spark Privacy Policy, including the fact that their Personal Information is being collected, the purposes for which that information is being collected, the intended recipients of that information, the individual's right to obtain access to that information, our identity, and how to contact us.

Where requested to do so by us, you must also assist us with any requests by the individual to access or update the Personal Information you have collected from them and entered into the Services.

3.  We collect, hold, and use your Personal Information for certain purposes.

We collect your Personal Information so that We can provide you with the Services. In doing so, we may use the Personal Information we have collected from you for purposes related to the Services, including but not limited to:

  • verify your identity and perform client screening,
  • administer the Services,
  • carry out marketing or training relating to the Services,
  • assist with the resolution of technical support issues or other issues relating to the Services,
  • comply with applicable rules, laws, and regulations,
  • communicate with you,
  • perform analytics in order to enhance the client experience,
  • send you administrative information or updates,
  • communicate with our service providers for internal business purposes or to address your inquiries or requests,
  • provide you notices of any changes and upgrades to our Website, Services, Privacy Policy, or Terms,
  • protect you from and prevent fraud and other criminal activity, claims, and other liabilities, and
  • fulfill legally valid obligations or requests.

By using the Services, you consent to your Personal Information being collected, held, and used in this way and for any other use you authorize. We will only use your Personal Information collected in connection with the Services for the purposes described in this Privacy Policy or in accordance with your express consent.

Note. we collect financial information, such as your bank account or credit card number, credit card type and expiration date, and other such information for payment of your Membership Fee, using third-party payment processors.

4.  We also may collect, hold, and use your Personal Information for other purposes.

KPMG may, with the assistance of third parties, collect, hold, and use the Personal Information you provide to KPMG Spark for the additional purposes of:

  1. improving the delivery or quality of services or technology to you and other clients (including, but not limited to, for software/machine learning purposes related to the Services);
  2. thought leadership projects allowing you and other clients to evaluate various business transactions and opportunities (e.g., white papers, client alerts, articles, and blogs); and/or
  3. providing marketing materials and other presentations to you, other clients, and prospective clients, in each case to the extent permitted by applicable law and subject to Section 13 below; and
  4. when your Personal Information is used outside of KPMG or such third parties assisting us, KPMG will de-identify your Personal Information by removing data components that make the data attributable to you, or through obfuscation or other means.

Interest-Based Advertising.  We also use "interest-based" ads, also known as “online behavioral advertising." Interest-based advertising is advertising that is targeted to you based on your web browsing and app usage over time and across websites or apps. You have the option to restrict the use of information for interest-based advertising and to opt-out of receiving interest-based ads. We may partner with ad networks and other advertising providers (“Advertising Providers”) who serve ads on behalf of us and others on third-party websites, apps, and Internet-enabled devices. Some of these third parties may use cookies and other technologies to collect information about your online activities over time and across third-party websites, apps, and Internet-enabled devices to deliver advertising based on your interests and preferences, as inferred from your browsing history. Some of these ads may be personalized, meaning that they are intended to be relevant to you based on information that KPMG Spark and its Advertising Providers collect about your visits to this site and elsewhere over time.

To learn more about this type of advertising and how to opt-out, you may either visit www.aboutads.info to opt out of receiving ads from those participating in the Digital Advertising Alliance (“DAA”) self-regulatory program, or visit www.networkadvertising.org/choices to opt-out receiving ads from those participating in the Network Advertising Initiative (“NAI”). Note that electing to opt-out will not stop advertising from appearing in your browser or applications, although it may make the ads you see less relevant to your interests. This opt-out works through cookies set on a particular browser, so if you delete cookies from a web browser, or use a different browser, you will need to opt out again.

Your choice to opt-out on a particular browser or device will apply only to the collection and use of information from that particular browser or device. Opting out on a particular device will not opt you out of information collection on other devices, nor will it limit cross-device sharing on those other devices. If you use different browsers on a device or multiple devices, for each browser and device you wish to opt-out of, you will need to opt-out of each device and browser separately.

5.  Your data is transmitted to our servers over the Internet.

All data, including Personal Information, that is entered into the Services by you, or automatically imported on your instruction, is transferred to our servers or to our cloud service providers (e.g., Google Workspace) as a function of transmission across the Internet. By using the Services, you consent to your Personal Information being transferred to our servers as set out in this KMPG Spark Privacy Policy.

6.  We take steps to protect your Personal Information.

We are committed to protecting the security of your Personal Information and we take reasonable, industry-standard precautions to protect it from unauthorized access, modification, or disclosure. Your Personal Information is stored on our servers. However, the Internet is not in itself a secure environment and we cannot give an absolute assurance that your Personal Information will be secure at all times. Transmission of Personal Information over the Internet is at your own risk and you should only input, or instruct the input of, Personal Information to the Services within a secure environment. You are responsible for preventing unauthorized access to your account and Personal Information, including, for example, by protecting your account credentials and limiting access to devices on which you access the Services.

We will advise you in accordance with applicable laws upon discovering or being advised of a security breach where your Personal Information is lost, stolen, accessed, used, disclosed, copied, modified, or disposed of by any unauthorized persons or in any unauthorized manner.

Finally, KPMG Spark understands the importance of protecting children's privacy, especially in an online environment. Our Services are not intentionally designed for or directed at children under the age of 18. It is our policy never to knowingly collect or maintain personal information about anyone under the age of 18, except as part of the requested services that KPMG Spark provides.

7.  We disclose your Personal Information in limited circumstances.

We reserve the right to disclose any information in limited circumstances as we reasonably believe is necessary for certain business purposes:

  • Other Service Providers, Partners, Contractors, or Vendors: For analytics and reporting, marketing and advertising, auditing, communicating with you, managing our customer database, and providing you with professional services.
  • Successor Entities: If we merge with or are acquired by another company, are involved in a bankruptcy, or if the ownership or control of all or part of our Services or their assets changes, information about you may be transferred to such entities.
  • Law Enforcement, Government Agencies, and Professional Advisors: To prevent or investigate suspected fraud, threats to physical safety, illegal activity, or violations of a contract or our policies, or to comply with a law or regulation, or if we are otherwise legally required to do so, such as in response to a court order or legal process, or to establish, protect, or exercise our legal rights or to defend against legal claims or demands.

8.  You may request access to your Personal Information.

It is your responsibility to ensure that the Personal Information you provide to us is accurate, complete, and current. Depending on where you live, you may have certain state-specific rights with respect to your Personal Information that we collect and process.  If you have submitted your Personal Information to KPMG Spark, you may have the right to request, under applicable law, that KPMG Spark provide you with reasonable access to your Personal Information, update or correct any inaccuracies in your Personal Information, or delete your Personal Information, and, in any such event, KPMG Spark will make all reasonable and practical efforts to comply with your request, so long as our doing so would be consistent with applicable law, KPMG Spark’s contractual requirements, and/or the professional standards applicable to KPMG Spark. 

You may request access to the Personal Information we hold about you, or request that we update or correct your Personal Information. To make a Data Privacy Request, please contact us by:

We will process your request as soon as reasonably practicable, provided we are not otherwise prevented from doing so on legal or professional grounds. If we are unable to meet your request, we will let you know why. In some circumstances, it may be necessary for us to seek to arrange access to your Personal Information through a mutually agreed intermediary.

We’ll only keep your Personal Information for as long as we require it for the purposes of providing you with the Services, fulfilling our legal or professional obligations, or otherwise using it in accordance with this Privacy Policy and Terms of Service. However, we may also be required to keep some of your Personal Information for specified periods of time, for example under certain laws relating to corporations, money laundering, and financial reporting legislation, and to comply with professional standards.

9.  The KPMG Spark Services use cookies and tracking technologies.

Cookies.  In providing the Services, we utilize "cookies." A cookie is a small text file that is stored on your computer for record-keeping purposes. A cookie does not identify you personally or contain any other information about you, but it does identify your Internet-enabled device.

We and some of our affiliates and third-party service providers may use a combination of “persistent cookies” (cookies that remain on your Internet-enabled device for an extended period of time) and “session ID cookies” (cookies that expire when you close your browser) on the Website to, for example, track overall site usage, and track and report on your use and interaction with ad impressions and ad services.

You can set your browser to notify you when you receive a cookie so that you will have an opportunity to either accept or reject it in each instance. However, you should note that refusing cookies may impact your use of the Website.

Web beacons.  We may use web beacons on the Website to gather certain information. A web beacon is a small image file on a web page that can be used to collect certain information from your Internet-enabled device, such as an IP address, the time the content was viewed, web browser type, and the existence of cookies previously set by the same server. You have the option to render some web beacons unusable by rejecting their associated cookies. The web beacon may still record an anonymous visit from your IP address, but cookie information will not be recorded. If you opt to render some web beacons unusable, some features of our Activities may not be available.

Social media widgets and applications.  Our Website may permit the sharing of information between third-party social media platforms (e.g., Twitter and LinkedIn), or allow you to use your social media platform credentials to log into and access the Website. These social media platforms may collect and use Personal Information regarding your use of the Website. Information you provide via a social media platform may be collected and used by the provider of that social media platform and subject to their privacy practices. We do not have control over, or responsibility for, those providers, or their use of your information. If you do not agree to the privacy practices of those providers, do not use their social media platforms.

Analytics tools.  We use third-party usage analytics tools as part of the Website, including Google Analytics, which may be subject to separate privacy policies. More information about how Google Analytics is used by KPMG Spark can be found here: https://policies.google.com/technologies/partner-sites.

To provide website visitors with more choice on how their data is collected by Google Analytics, Google has developed the Google Analytics Opt-out Browser Add-on. The add-on communicates with the Google Analytics JavaScript (ga.js) to indicate that information about the website visit should not be sent to Google Analytics. The Google Analytics Opt-out Browser Add-on does not prevent information from being sent to us or to other web analytics services.

Additionally, in some of the Services, we and third-party providers operating on our behalf, may monitor recipient actions such as e-mail open rates through embedded links within the messages.

10.  You can opt-out of certain communications.

To opt-out from receiving communications from KPMG Spark, please email us at help@kpmgspark.com. Please note, we send billing information, product information, Services updates and Services notifications to you via email and/or SMS text messaging. Our emails and text messages will contain instructions describing how you can choose to be removed from any mailing or messaging lists not essential to provision or receipt of the Services. We will remove you from such nonessential mailings relating to KPMG Spark at your request. Please read the applicable unsubscribe instructions carefully. Please further note that requesting to be removed from one mailing or messaging list may not result in your being removed from all mailing or messaging lists to which you are subscribed. You may need to send separate requests to be removed from each specific mailing or messaging list to which you are subscribed.

11.  You are responsible for the transfer of your data to third-party applications.

The Services may allow you, the Subscriber, or another Authorized User within the relevant subscription to the Services to transfer your data, including Personal Information, electronically to and from third-party websites, services and applications. This KPMG Spark Privacy Policy does not apply to the practices of such third parties that we do not own or control. While we attempt to facilitate access only to those third-party websites, services, and applications that share our respect for your privacy, we have no control over, and take no responsibility for, the privacy practices or content of these websites, services, and applications. You are responsible for checking the privacy policy of any such applications so that you can be informed of how they will handle Your Personal Information.

12.  Additional disclosures for California residents.

This section applies to any California residents about whom KPMG Spark has collected personal information, including through use of our Website, by purchasing or utilizing the KPMG Spark Services, or by communicating with us electronically, in paper correspondence, or in person.

For purposes of this section, “personal information” means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular California consumer or household.  Personal information does not include publicly available information or information that has been de-identified.

We do not sell personal information and did not sell personal information in the previous twelve (12) months.

You may be entitled by applicable law to exercise the following rights with respect to your personal information:

  • Right to know.
    - The categories of personal information we have collected about you,
    - the sources from which that information was collected,
    - the business or commercial purpose for collecting your personal information,
    - the categories of third parties with whom we share your personal information,
    - the specific pieces of personal information we have collected about you,
    - the categories of personal information we sold about you,
    - the categories of third parties to whom we sold personal information about you, and
    - the categories of personal information we disclosed for a business purpose.
  • Right to delete.  You have the right to request that we delete the personal information that we have collected about you.
  • Right to opt-out of the sale of personal information.  You have the right to request to be opted-out from the sale of your personal information.  However, as set forth above, we do not sell personal information.
  • Right to non-discrimination. You have the right not to receive discriminatory treatment by us for the exercise of the privacy rights described above. 

In addition, under California Civil Code sections 1798.83-1798.84, California residents are entitled to request the categories of personal information that we share with our affiliates and/or third parties for those third parties’ marketing purposes, and contact information for such affiliates and/or third parties. If You are a California resident and would like to exercise this right, please submit a request using the contact information provided below.

Authorized agents. You may use an authorized agent to submit a request to opt-out of sale, request to know, or request to delete on your behalf. If you choose to use an authorized agent to exercise any such rights, the authorized agent must present signed written authorization to act on your behalf, and you will also be required to independently verify your own identity directly with us and confirm with us that you provided the authorized agent permission to submit the rights request.  You may exercise the above rights on behalf of your minor child.

Verification. To protect your personal information from unauthorized access or deletion, you may be required to verify your identity before you can submit a rights request. Under some circumstances may ask you to provide additional personal information for verification. If we are unable to verify your identity, we may refuse your rights request.

To make a Data Privacy Request, please contact us by:

We will respond to authorized and verified requests as soon as practicable and as required by law.  Please note that, where we have received your information through our business clients, or where we are otherwise operating as a service provider, we may refer you to the business with whom you have a direct relationship in order to implement your request, pursuant to applicable law. 

In addition, the above rights are subject to various exclusions and exceptions under the law, and, under certain circumstances, we may be unable to implement your request. We will advise you of any reason for denying or restricting a request.

13.  Additional non-U.S. data subject notices.

We provide our services in the U.S., and do not direct our activities to persons or businesses located outside of the U.S. However, in certain circumstances, interactions with persons outside of the U.S. may occur. To learn more about additional non-U.S. data subject notices and rights, please review KPMG’s Notice of Processing.

14.  Links to Other Sites.

Please be aware that our Activities may contain links or refer you to other websites, applications, social media platforms, collaboration platforms, products and services maintained by KPMG, KPMG International, other member firms affiliated with KPMG International, or by unaffiliated third parties (collectively, “Other Sites”). Other Sites are not governed by this KPMG Spark Privacy Statement, but by other privacy statements that may differ. KPMG Spark is not responsible for the content or practices of these Other Sites. We encourage users to review the applicable privacy policies of these Other Sites visited before disclosing any personal information.

15.  Changes to this KPMG Spark Privacy Policy.

We may amend this Privacy Policy from time to time. Use of information we collect now is subject to the Privacy Policy in effect at the time such information is collected. If we make changes in the way we collect or use information, we will notify you by posting a notice on the Website or by sending you a notice through the KPMG Spark Services, via e-mail, or by another means of electronic communication. A user is bound by any changes to this KPMG Spark Privacy Policy when he or she uses the Services after such changes have been first posted.

16.  Questions and comments.

KPMG Spark is committed to protecting the privacy of your Personal Information. If you have questions or comments about our administration of your personal information, please contact us at us-privacy@kpmg.com.

Last updated: 06/08/2022

[1]“KPMG” refers to KPMG LLP, a Delaware limited liability partnership and the U.S. member firm of the KPMG global organization of independent member firms affiliated with KPMG International Limited (“KPMG International”), a private English company limited by guarantee. KPMG International and its related entities do not provide services to clients.

[2] In some cases, sole proprietors have their personal information blended with their business information. For example, sole proprietors may use their Social Security Numbers as a taxpayer ID for their business or their home address as the address for their business. In such a situation, we may need to collect your personal information in order to provide you with the Services.