1. Introduction
At Stora Tax, we are committed to protecting your privacy and ensuring that your personal information is handled with care and responsibility. This Privacy Policy outlines how we collect, use, store, and disclose your personal information when you use our services in both Canada (Quebec) and the United States.
By using the services provided by Stora Tax, you agree to the practices described in this Privacy Policy. If you do not agree to the terms, please discontinue using our services.
2. Information We Collect
A. Personal Information:
- Name
- Email Address
- Mailing Address
- Phone Number
- Tax Identification Numbers (SIN, SSN)
- Financial Information (e.g., income, expenses, tax returns, etc.)
B. Document Information:
- Tax returns
- Receipts
- Financial statements
- Other tax-related documents
C. Usage Information:
- IP address
- Device and browser information
- Cookies and tracking technologies
- Log files, referring/exit pages
3. How We Use Your Information
We use your information for the following purposes:
- To provide, maintain, and improve our tax document storage and sharing services.
- To verify your identity and ensure compliance with applicable tax laws.
- To communicate with you regarding updates, services, or support requests.
- To process and store your tax-related documents securely.
- To prevent fraud, detect unauthorized access, and enhance the security of our services.
- To comply with legal obligations and tax authorities in Canada and the U.S.
4. How We Share Your Information
We do not sell or rent your personal information to third parties. We will only share your information in the following circumstances:
A. With Your Consent:
We will share your personal information with third parties (such as tax professionals or accountants) only with your explicit consent.
B. Service Providers:
We may share your information with trusted third-party service providers (e.g., cloud storage providers, IT support) to help us operate and maintain our services.
C. Legal Compliance:
We may disclose your information to governmental or regulatory bodies if required to do so by law, such as in response to a court order, subpoena, or investigation, or to comply with tax authorities.
5. Cross-Border Data Transfers
Since Stora Tax operates in both Canada and the United States, your data may be transferred between these two countries. We ensure that any such transfers comply with applicable data protection laws, including PIPEDA and Quebec’s Bill 64, as well as U.S. privacy regulations.
6. Data Security
We take the security of your personal information very seriously. We implement industry-standard security measures to protect your data, including:
- Encryption: All sensitive information, such as tax documents and personal data, is encrypted during transmission and storage.
- Access Controls: Access to your personal information is restricted to authorized personnel only.
- Monitoring and Auditing: We regularly monitor and audit our systems to detect and address potential vulnerabilities.
While we take every precaution to protect your data, no method of transmission or storage is completely secure. Therefore, we cannot guarantee absolute security.
7. Data Retention
We retain your personal information for as long as necessary to provide you with our services and comply with legal obligations. Once your data is no longer needed, it will be securely deleted or anonymized in accordance with applicable data retention policies and legal requirements.
8. Your Rights
You have rights regarding your personal information, and these rights may differ depending on your location:
A. In Quebec (Canada):
- Access and Correction: You have the right to access and correct the personal information we hold about you.
- Consent Withdrawal: You may withdraw your consent to the collection and use of your personal information at any time.
- Data Portability: You may request a copy of your personal data in a portable format.
- Deletion: You may request the deletion of your personal information, subject to any legal obligations to retain it.
B. In the United States:
- Access and Deletion (CCPA): If you are a resident of California or another state with specific privacy laws, you may request access to or deletion of your personal information.
- Opt-Out of Data Sales (if applicable): You may request that we do not sell your personal information (though we do not engage in this practice).
To exercise your rights, please contact us using the information provided below.
9. Cookies and Tracking Technologies
We use cookies and similar tracking technologies to enhance your user experience, analyze site traffic, and improve our services.
10. Third-Party Links
Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites.
11. Children’s Privacy
Our services are not intended for individuals under the age of 18. We do not knowingly collect personal information from minors.
12. Changes to This Privacy Policy
We may update our Privacy Policy from time to time. Any changes will be posted on this page with an updated effective date.
13. Contact Us
If you have any questions or concerns regarding this Privacy Policy or our data practices, please contact us at:
- Email [Your contact email]
- Phone [Your contact number]
- Mailing Address [Your company’s address]