Privacy policy
Effective 28 August 2026 · controller: Jorge I. Rivas, EA
What I collect. Two separate things. From the website: the email address, host country and situation you enter in a form, plus standard server logs. From clients: the tax documents you send me — identifying numbers, income statements, account balances — for the sole purpose of preparing and filing your returns.
What I do not do. I do not sell personal data, share client material with third parties for marketing, or use taxpayer material to train any model. Marketing email goes only to addresses that opted in, and every message carries a one-click unsubscribe.
Who processes data on my behalf. A short list, named on request: the secure document portal, the email provider, the scheduling calendar, and the IRS e-file transmitter. [TBD — confirm the four vendor names before publication]
How long I keep it. Client tax records are retained for seven years, which is the period in which a return can ordinarily be examined or amended, then deleted. Website enquiry data is deleted after 24 months of inactivity.
Your rights. You can ask what I hold about you, ask for a copy, ask for a correction, or ask for deletion of anything I am not required by law to keep. Write to expattaxabroad@gmail.com and you will get a reply within 30 days. If you are in the EU, UK or California, the same request routes apply and no fee is charged.
Confidentiality. As an Enrolled Agent I am bound by Treasury Circular 230 and by Internal Revenue Code §7216, which makes the unauthorised disclosure or use of tax return information a criminal offence. That standard sits above anything in this policy.