Privacy Policy for Fiscal Integrity Group (FIG)
Effective Date: October 31, 2024.
In this Privacy Policy, "we," "us," "our," and "FIG" refer to Fiscal Integrity Group. "You" and "your" refer to our clients, website visitors, and any individuals whose personal information we process.
1. Introduction
Fiscal Integrity Group (FIG) is dedicated to safeguarding the privacy and security of our clients' personal and financial information. This comprehensive Privacy Policy outlines our practices regarding the collection, use, disclosure, and protection of your information when you engage with our services or visit our website at https://fiscalintegritygroup.com/. This policy applies to all services provided by FIG, including but not limited to tax preparation, accounting, bookkeeping, payroll, and financial consulting services.
2. Disclaimer
FIG is not a law office, and we are not your lawyers. The information provided on our website, marketing materials, emails, videos, or audio content should not be considered as accurate or complete legal or financial advice. It is your responsibility to consult with your own lawyer or local government authorities for verification and legal counsel before taking any information into consideration or making decisions based on our content. We strongly recommend seeking professional legal advice for your specific situation.
3. Identity and Contact Details
Fiscal Integrity Group (FIG) is the data controller responsible for your personal data.
Contact Information:
Address: 1140 West Olympic Blvd, Los Angeles CA 90064.
4. Information We Collect
4.1 Personal Information
Full name
Date of birth
Social Security number
Contact information (address, phone number, email)
Financial information (income, expenses, assets, liabilities)
Tax identification numbers
Employment information
Marital status
Dependents' information
Investment details
Insurance policy information
4.2 Business Information
Business name and structure
Employer Identification Number (EIN)
Financial statements
Payroll information
Business tax returns
Vendor and client lists
Business licenses and permits
Corporate governance documents
4.3 Website Usage Information
IP address
Browser type and version
Device information
Pages visited
Time and date of visits
Referring website addresses
Search terms used to reach our site
4.4 Third-Party Information
Credit reporting agencies
Government agencies
Financial institutions
Other professional service providers (with your consent)
Public records
Social media platforms (if you choose to connect your accounts)
4.5 Sensitive Information
Health information (for medical expense deductions)
Political affiliations (for certain tax-exempt organizations)
Religious beliefs (for charitable contribution documentation)
Biometric data (if used for identity verification)
Racial or ethnic origin (if required for specific tax credits)
5. How We Collect Information
Direct submission by clients
Website forms and interactive features
Email communications
Phone conversations
In-person meetings
Automated technologies or interactions (e.g., cookies, pixel tags, web beacons)
Public records and databases
Third-party service providers
Social media platforms
Mobile applications
Surveys and feedback forms
SMS Text Messaging
"Text Messaging Opt-In and Consent:
Fiscal Integrity Group values your privacy and is committed to protecting your personal information. We collect and store text messaging opt-in data and consent solely for the purpose of providing our services to you. We hereby affirm that this information, including your phone number and any related opt-in or consent data, will not be shared, sold, rented, or otherwise disclosed to any third parties, except as required by law or with your explicit permission. This data is maintained securely and used exclusively for communication between Fiscal Integrity Group and you, our valued client."
SMS Terms & Conditions
5.1- SMS Consent Communication:
The information (Phone Numbers) obtained as part of the SMS consent process will not be shared with third parties for marketing purposes.
5.2- Types of SMS Communications:
If you have consented to receive text messages from Fiscal Integrity Group, you may receive messages related to the following (provide specific examples):
• Appointment reminders
• Follow-up messages
• Billing inquiries
• Promotions or offers (if applicable)
Example: "Hello, this is a friendly reminder of your upcoming appointment with Tax Advisors at one of our locations on [Date] at [Time]. Reply STOP to opt out of SMS messaging at any time."
5.3- Message Frequency:
Message frequency may vary depending on the type of communication. For example, you may receive up to 20 SMS messages per week related to your [appointments/billing, etc.].
Example:
"Message frequency may vary. You may receive up to 20 SMS messages per week regarding your appointments or account status."
5.4- Potential Fees for SMS Messaging:
Please note that standard message and data rates may apply, depending on your carrier’s pricing plan. These fees may vary if the message is sent domestically or internationally.
5.5- Opt-In Method:
You may opt-in to receive SMS messages from Fiscal Integrity Group in the following ways:
• Verbally, during a conversation
• By submitting an online form
• By filling out a paper form
5.6- Opt-Out Method:
You can opt out of receiving SMS messages at any time. To do so, simply reply "STOP" to any SMS message you receive. Alternatively, you can contact us directly to request removal from our messaging list.
5.7- Help:
If you are experiencing any issues, you can reply with the keyword HELP. Or you can get help directly from us at https://secure.fiscalintegritygroup.com/support
Additional Options:
• If you do not wish to receive SMS messages, you can choose not to check the SMS consent box on our forms.
5.8- Standard Messaging Disclosures:
• Message and data rates may apply.
• You can opt-out at any time by texting "STOP."
• For assistance, text "HELP" or visit our [Privacy Policy] and [Terms and Conditions] pages.
• Message frequency may vary
Appointment Reminders:
We may send you text messages to confirm or reschedule appointments.
Important Updates:
We may send you text messages to notify you of critical information regarding your account, such as tax deadlines, important financial updates, or changes to our services.
Two-Factor Authentication:
We may send you text messages containing codes for two-factor authentication to enhance the security of your account.
Marketing and Promotional Messages (with explicit consent):
With your explicit and verifiable consent, we may send you text messages with marketing or promotional information about our services. You may opt-out of receiving these messages at any time by replying "STOP" to any message you receive from us.
We will only send text messages to phone numbers you provide, and you can opt-out of receiving any type of text message at any time by replying "STOP" to any message you receive from us. Message frequency will vary depending on the type of messages and your account activity. Standard message and data rates may apply.
Data Use and Retention:
Information collected through text messages, such as your phone number and message content, will be used solely for the purposes described above.
Text Messaging Originator Opt-in Data and Consent: We will not share your text messaging opt-in data or consent with any third parties.
We will retain text message content for a period of 30 days unless required to retain it for longer periods by law or for legitimate business purposes.
6. Use of Information and Legal Basis
We use the collected information for the following purposes, each with its corresponding legal basis:
Providing tax preparation and accounting services (Legal basis: Contractual necessity)
Conducting tax planning and consulting (Legal basis: Contractual necessity)
Processing payroll (Legal basis: Contractual necessity)
Performing bookkeeping services (Legal basis: Contractual necessity)
Communicating with clients about their accounts and services (Legal basis: Legitimate interests)
Improving our services and website functionality (Legal basis: Legitimate interests)
Complying with legal and regulatory requirements (Legal basis: Legal obligation)
Detecting and preventing fraud (Legal basis: Legitimate interests)
Conducting internal analytics and research (Legal basis: Legitimate interests)
Providing personalized tax and financial advice (Legal basis: Contractual necessity)
Marketing our services to you (Legal basis: Consent)
Responding to your inquiries and support requests (Legal basis: Legitimate interests)
Maintaining and updating client records (Legal basis: Legal obligation)
Conducting risk assessments and due diligence (Legal basis: Legal obligation)
Defending against legal claims (Legal basis: Legitimate interests)
7. Information Sharing and Disclosure
We do not sell, rent, or trade client information to third parties. We may share information in the following circumstances:
With your explicit consent
To comply with legal obligations
To protect our rights, privacy, safety, or property
In connection with a business transfer or acquisition
To enforce our contractual rights
To professional advisors, such as lawyers, auditors, and insurers
7.1 Service Providers
We may share your information with third-party service providers who perform services on our behalf, such as:
Cloud storage providers
Email service providers
Payment processors
Software vendors
IT support and maintenance providers
Professional liability insurance providers
Document destruction services
These service providers are contractually obligated to protect your information and use it only for the purposes we specify.
7.2 Professional Obligations
As tax and accounting professionals, we may be required to disclose information:
To tax authorities during audits or investigations
To other professionals assisting with your financial matters (with your consent)
In response to a court order or subpoena
To professional regulatory bodies during practice reviews
8. Data Security
We implement appropriate technical and organizational measures to protect your personal information, including:
Encryption of sensitive data at rest and in transit
Secure socket layer (SSL) technology for all web communications
Next-generation firewalls and intrusion detection/prevention systems
Regular security assessments, penetration testing, and vulnerability scans
Employee training on data protection, confidentiality, and cybersecurity best practices
Multi-factor authentication for accessing client data
Regular software updates and patch management
Physical security measures for our offices, including access controls and surveillance
Data backup and disaster recovery procedures with regular testing
Comprehensive incident response plan for potential data breaches
Data loss prevention (DLP) solutions
Mobile device management (MDM) for company-issued devices
Network segmentation to isolate sensitive data
Strict access controls based on the principle of least privilege
Continuous monitoring of our systems for suspicious activities
9. Data Retention
We retain personal information for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required by law. Specific retention periods include:
Tax returns and supporting documents: 7 years from filing date
Client correspondence: 7 years from last contact
Payroll records: 4 years from tax year end
Engagement letters: 7 years from termination of services
Financial statements: 10 years from creation date
Client intake forms: 7 years from last service date
Electronic backups: 7 years on a rolling basis
Website logs: 1 year from creation date
10. Your Rights and Choices
You have certain rights regarding your personal information, including:
Access to your personal information
Correction of inaccurate or incomplete information
Deletion of your personal information (where applicable)
Objection to or restriction of certain processing activities
Data portability
Right to withdraw consent for marketing communications
Options for limiting certain types of data collection or use
California residents have additional rights under the California Consumer Privacy Act (CCPA), and EU residents have rights under the General Data Protection Regulation (GDPR). To exercise these rights, please contact us using the information provided in Section 3.
11. Children's Privacy
Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have inadvertently collected personal information from a child under 18, we will take steps to delete the information as soon as possible.
12. International Data Transfers
If we transfer your data across national borders, we ensure appropriate safeguards are in place, such as:
Standard contractual clauses approved by the European Commission
Privacy Shield certification (if applicable)
Binding corporate rules for intra-group transfers
Derogations for specific situations as provided by applicable law
Consent for specific transfers after informing you of the potential risks
13. Cookies and Tracking Technologies
We use cookies and similar tracking technologies on our website to:
Improve site functionality and performance
Analyze site usage and user behavior
Personalize content and remember your preferences
Facilitate secure access to client portals
Enable certain features of our online services
You can manage your cookie preferences through your browser settings or our cookie management tool. We respect Do Not Track (DNT) signals and do not track, plant cookies, or use advertising when a DNT browser mechanism is in place.
14. Social Media and Third-Party Links
Our website may contain links to third-party websites or social media platforms. This privacy policy does not apply to those external sites. We encourage you to review the privacy policies of any third-party sites you visit. We are not responsible for the content or privacy practices of these external sites.
15. Automated Decision-Making
FIG does not engage in automated decision-making processes that would produce legal effects or similarly significant impacts on our clients. All significant decisions related to your financial matters are made with human oversight and professional judgment.
16. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will notify you of any significant changes by:
Posting the new Privacy Policy on this page
Updating the "Effective Date" at the top of this policy
Sending an email notification to clients
Displaying a prominent notice on our website
We will obtain your consent for any material changes that affect how we use your personal information, where required by applicable law.
17. Compliance with Laws and Regulations
We comply with applicable laws and regulations, including:
Internal Revenue Service (IRS) regulations
State tax agency requirements
General Data Protection Regulation (GDPR) for EU clients
California Consumer Privacy Act (CCPA) for California residents
Gramm-Leach-Bliley Act (GLBA)
Sarbanes-Oxley Act (SOX)
State-specific privacy laws
Professional ethics standards set by accounting and tax professional organizations
Fair Credit Reporting Act (FCRA)
CAN-SPAM Act
Payment Card Industry Data Security Standard (PCI DSS)
18. Dispute Resolution
If you have a complaint about our privacy practices, please contact us directly using the information provided in Section 3. We will investigate your complaint and respond within 30 days. If we cannot resolve the issue to your satisfaction, you may have the right to file a complaint with your local data protection authority. For EU residents, you can find your national data protection authority on the European Commission website.
19. Professional Confidentiality
As tax and accounting professionals, we adhere to strict confidentiality standards set by our professional organizations. This includes:
Confidentiality of client information as mandated by professional ethics codes
Ethical use of client data in accordance with professional standards
Professional secrecy obligations as required by law
Adherence to the AICPA Code of Professional Conduct
Compliance with IRS rules on tax return preparer confidentiality
20. Employee Training and Awareness
We regularly train our employees on:
Data protection principles and best practices
Privacy regulations and compliance requirements
Handling of sensitive information and personally identifiable information (PII)
Recognizing and reporting potential data breaches
Cybersecurity awareness and threat prevention
Ethical considerations in data handling
Client confidentiality and professional secrecy obligations
Proper use of company IT systems and security tools
21. Sub-processors and Third-Party Service Providers
We maintain a list of subprocessors and third-party service providers who may have access to your personal information. This list is available upon request and includes:
The name and location of the sub-processor
The services provided by the sub-processor
The types of personal information processed
The security measures implemented by the sub-processor
We conduct regular due diligence on our sub-processors to ensure they maintain appropriate security and privacy standards.
22. Data Protection Impact Assessments
We conduct Data Protection Impact Assessments (DPIAs) when implementing new technologies or processing activities that are likely to result in a high risk to the rights and freedoms of individuals. These assessments help us identify and mitigate potential privacy risks.
23. Privacy by Design and Default
We incorporate privacy considerations into our business processes and systems from the outset. This includes:
Minimizing data collection to only what is necessary
Implementing privacy-enhancing technologies
Conducting privacy impact assessments for new projects
Ensuring default privacy settings are the most protective
24. Cross-Border Data Transfers
For clients outside the United States, we comply with regulations governing the transfer of personal data across borders, including:
EU-US Privacy Shield Framework (if applicable)
Standard Contractual Clauses (SCCs)
Binding Corporate Rules (BCRs)
Adequacy decisions by the European Commission
25. Data Breach Notification
In the event of a data breach that affects your personal information, we will:
Notify affected individuals without undue delay, typically within 72 hours of becoming aware of the breach
Provide information on the nature of the breach and steps taken to address it
Offer guidance on measures you can take to protect yourself
Notify relevant supervisory authorities as required by law
26. Vendor Management
We have a comprehensive vendor management program that includes:
Privacy and security assessments of potential vendors
Contractual clauses requiring vendors to adhere to our privacy standards
Regular audits of vendor compliance with our privacy requirements
Procedures for terminating vendor relationships and ensuring data deletion
27. Data Minimization and Purpose Limitation
We adhere to the principles of data minimization and purpose limitation by:
Collecting only the personal information necessary for specified purposes
Regularly reviewing and deleting unnecessary data
Ensuring data is not used for purposes incompatible with the original collection purpose
Implementing technical measures to enforce these principles
28. Consent
By using our services or submitting personal information to us, you consent to the terms of this Privacy Policy and our processing of your information for the purposes stated herein. You have the right to withdraw your consent at any time, but please note that this may affect our ability to provide certain services to you. For any questions or concerns about this Privacy Policy, please contact our Data Protection Officer at support@fiscalintegritygroup.com.