Privacy Policy
Last Revised: May 24, 2018

Transparency
We care about your privacy.  For this reason, we collect and use personal data only as it might be needed for us to deliver to you our world-class services.


Our Privacy Policy is intended to describe to you how and what data we collect, and how and why we use your personal data. It also describes options we provide for you to access, update or otherwise take control of your personal data that we process.  

If at any time you have questions about our practices or any of your rights described below, you may reach our Data Protection Officer (“DPO”) and our dedicated team that supports this office by contacting us at privacy@oditax.com.  This inbox is actively monitored and managed so that we can deliver an experience that you can confidently trust.


What information do we collect and how
We collect information so that we can provide the best possible experience when you utilize our Services.  Much of what you likely consider personal data might be collected directly from our clients when they first engage with our firm or at any point in the future through structured written communication. These personal data may include full name, phone number, email addresses, passport/ID related information, residence address and bank account numbers of physical persons related in any way with the operation of the client firm.  


Why and how do we use your information
We strongly believe in both minimizing the data we collect from you and limiting its use to the purpose of delivering an exceptional experience when interacting with us or for legal compliance.


We may use the data collected,toprovecomplianceto regulatory requirements or to contact you directly and communicate with you regarding services you have purchased from us. We may also contact you with offers for additional services we think you’ll find valuable. This communication may include email and telephone calls


Sharing your data with third parties
We only share your personal data as necessary for any third party to provide the services as requested or as needed on our behalf. These third parties (and any subcontractors) are subject to strict data processing terms and conditions and are prohibited from utilizing, sharing or retaining your personal data for any purpose other than as they have been specifically contracted for (or without your consent).

We may share your personal data with third parties with which we have partnered in order to integrate their services into our own Services and with trusted third party service providers as necessary for them to perform services on our behalf, such as:

  • Processing credit card payments
  • Offer Cloud Productivity Services
  • Government Authorities


We may also share your personal data in case of compliance with legal, regulatory and law enforcement requests. We cooperate with government and law enforcement officials and private parties to enforce and comply with the law. We will disclose any information about you to government or law enforcement officials or private parties as we, in our sole discretion, believe necessary or appropriate to respond to claims and legal process, to protect our property and rights or the property and rights of a third party, to protect the safety of the public or any person, or to prevent or stop activity we consider to be illegal or unethical.

To the extent we are legally permitted to do so, we will take reasonable steps to notify you in the event that we are required to provide your personal information to third parties as part of legal process. 


Transfer of personal data outside EU
Before moving your personal data to a jurisdiction outside European Union, there should be a permission granted by the respective Personal Data Protection Commissioner Office, as this is required by relevant law. In all cases the new jurisdiction will have to meet all data protection requirements set by the GDPR regulation.


How you can access, update or delete your data
You can access or gain ownership of your personal data at any time. Please send your request to privacy@oditax.com. Expect a response within 20 working days. 


You can change your personal data at any time.  Please send your request to privacy@oditax.com. Expect a response within 20 working days.

You can also make a request to delete your personal data. In such a case, the request will be honored only to the extent it is no longer necessary for any Services purchased or required for our legitimate business purposes or legal or contractual recordkeeping requirements. Please send your request to privacy@oditax.com. Expect a response within 20 working days. 


How we secure, store and retain your data
We follow generally accepted standards to store and protect the personal data we collect, both during transmission and once received and stored, including utilization of encryption where appropriate. 

Our versioning and permission-based technology gives multilevel access to your personal data only to those people within our organization that are accountable to ensure the high-quality level of service you enjoy. Any breach of data privacy comes to our attention for corrective measures right away and immediately notify the respective Data Protection Authority. 

We retain personal data only for as long as necessary to provide the Services you have requested and thereafter for a variety of legitimate legal or business purposes. These might include retention periods:

  • mandated by law, contract or similar obligations applicable to our business operations;
  • for preserving, resolving, defending or enforcing our legal/contractual rights; or
  • needed to maintain adequate and accurate business and financial records.


If you have any questions about the security or retention of your personal data, you can contact us at privacy@oditax.com.


Changes in our Privacy Policy
We reserve the right to modify this Privacy Policy at any time. If we decide to change our Privacy Policy, we will post those changes to this Privacy Policy and any other places we deem appropriate, so that you are aware of what information we collect, how we use it, and under what circumstances, if any, we disclose it. If we make material changes to this Privacy Policy, we will notify you here, by email, or by means of a notice on our home page, at least thirty (30) days prior to the implementation of the changes.


Data Protection Authority
If you are a resident of the European Economic Area (EEA) and believe we maintain your personal data subject to the General Data Protection Regulation (GDPR), you may direct questions or complaints to our lead supervisory authority in your country of residence.


Contact us
If you have any questions, concerns or complaints about our Privacy Policy, our practices or our Services, you may contact our Office of the DPO by email at privacy@oditax.com.

We will respond to all requests, inquiries or concerns within 20 business days.