Garcia Multi Services

PRIVACY NOTICE & DATA HANDLING 1. WHAT WE COLLECT. To deliver services we collect identifying information (name, address, phone, email), government identifiers (SSN, ITIN, EIN, driver's license), financial data (income, deductions, bank account, refund routing), dependents' information, business records, immigration document data when relevant, signed agreements and signature images, and platform usage metadata (IP-related data, browser/device user-agent, timestamps, audit logs). 2. WHY WE COLLECT IT. Information is used to (a) prepare and file the services you request, (b) communicate with you and the relevant agencies, (c) comply with federal and state tax, anti-fraud, and recordkeeping laws, (d) protect against identity theft and unauthorized access, and (e) maintain accurate business records. 3. SECTION 7216 (TAX RETURN INFORMATION). Federal law (26 U.S.C. § 7216 and 26 C.F.R. § 301.7216) restricts how tax-return preparers may use or disclose tax-return information. Garcia will not use or disclose tax-return information for purposes other than preparing your return, unless you provide a separate written, signed consent that specifically authorizes the use or disclosure. 4. WHO WE SHARE WITH. Information is shared only as needed to deliver services: the IRS and state tax agencies; bank-product and refund-disbursement providers you elect to use; payroll and e-file software vendors under written confidentiality obligations; auditors, attorneys, or insurers under legal obligation of confidentiality; and, where required, in response to lawful subpoena or court order. Garcia does not sell personal information. 5. SECURITY MEASURES. Access is restricted to authorized staff with role-based permissions, individual login credentials, multi-factor or PIN protection where applicable, encrypted-in-transit transmission, restricted document storage, and activity logging. Despite reasonable safeguards, no electronic system is 100% secure; you agree to assist us by safeguarding your own passwords and devices. 6. RETENTION. Garcia retains client records for the period required by federal and state law (generally a minimum of three (3) years, and longer where required for audit defense, IRS preparer recordkeeping, or pending matters). After the retention period, records are securely destroyed or anonymized. 7. YOUR RIGHTS. You may request to review the categories of information we hold about you, request correction of inaccurate records, withdraw a prior consent (without affecting actions already taken in reliance on it), and request deletion subject to legal retention requirements. 8. DATA BREACH RESPONSE. If we discover unauthorized access to your unencrypted personal information, we will notify you without unreasonable delay and as required by applicable state breach-notification law, and we will provide the steps we are taking to contain and remediate the incident. 9. CHILDREN. Garcia does not knowingly collect information directly from minors except as part of a parent or guardian's return or filing. 10. UPDATES. Garcia may update this Privacy Notice. Material changes will be communicated through the platform; continued use of services after notice constitutes acceptance of the updated notice. By signing, you acknowledge that you have received and understand this Privacy Notice.