Our Privacy Commitment

At Get Your ITIN, we are deeply committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy comprehensively explains how we collect, use, disclose, and safeguard your information when you engage our ITIN application services.

Information Collection Scope

We collect information that is strictly necessary and appropriate for processing your ITIN application efficiently and in compliance with IRS requirements. Our data collection is purpose-driven and transparent.

Information Usage Framework

Your information is used exclusively for legitimate business purposes directly related to your ITIN application service. We never sell your data or use it for unrelated marketing purposes.

• ITIN Application Processing: Preparing, reviewing, and submitting your complete IRS Form W-7 application package with all required supporting documentation.
• Service Communication: Providing regular application status updates, important notifications, and responsive customer support throughout the process.
• Document Verification: Conducting thorough document review and verification to ensure IRS compliance and application accuracy.
• Legal and Regulatory Compliance: Meeting all IRS requirements, tax regulations, and legal obligations associated with ITIN applications.
• Service Quality Improvement: Analyzing anonymized, aggregated data to enhance our application processes, customer service, and operational efficiency.
• Fraud Prevention: Implementing security measures to detect and prevent fraudulent activities, identity theft, and unauthorized access attempts.

Information Sharing & Disclosure

We maintain a strict policy against selling or renting your personal information. Disclosure only occurs under specific, limited circumstances:

• IRS Submission Requirements: Required information sharing with the Internal Revenue Service as mandated for ITIN application processing. We share only the minimum necessary information.
• Trusted Service Providers: Limited information sharing with carefully vetted partners who provide essential services such as document verification, secure data storage, or payment processing under strict confidentiality agreements.
• Legal Compliance Obligations: Disclosure when required by law, court order, or legal process, or to protect our rights, property, or safety, or that of our clients or others.
• Business Transfers: In the event of a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred subject to the same privacy protections.

Comprehensive Data Security

We implement multi-layered security measures to protect your information throughout its lifecycle:

• Encryption Standards: End-to-end encryption of all sensitive data both in transit (using TLS 1.3 protocols) and at rest (AES-256 encryption).
• Secure Infrastructure: Enterprise-grade secure servers with regular security updates, intrusion detection systems, and comprehensive monitoring.
• Access Controls: Strict role-based access controls ensuring only authorized personnel can access client information, with comprehensive audit logging.
• Document Security: Secure encrypted storage for all submitted documents with automatic secure deletion after mandated retention periods.
• Employee Training: Regular privacy and security training for all team members with strict confidentiality agreements and background checks.
• Physical Security: Secure facilities with controlled access, surveillance systems, and environmental controls for any physical document storage.

Data Retention Policy

We retain your information only for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required or permitted by law.

• Active Applications: Retained throughout the application process until IRS processing is complete and final status is confirmed.
• Completed Applications: Core application data retained for 7 years to comply with IRS record-keeping requirements and tax regulations.
• Financial Records: Payment and transaction records maintained for 7 years for accounting and tax compliance purposes.
• Documentation: Supporting documents securely destroyed 90 days after application completion, unless specific retention is legally required.
• Marketing Data: Basic contact information retained until you opt-out or request deletion, with easy unsubscribe options provided.