Privacy Policy

TaxPlus | www.taxplus.com

Los Angeles, California | Effective Date: January 2026 | Last Revised: July 2026

TaxPlus (“we,” “us,” or “our”) is committed to protecting the privacy and confidentiality of your personal and financial information. This Privacy Policy explains how we collect, use, disclose, and protect information obtained through our website located at www.taxplus.com (the “Site”), and in connection with the professional tax, accounting, and business formation services we provide.

Please read this Privacy Policy carefully. By using our Site or engaging our services, you acknowledge that you have read and understood this policy. If you do not agree with these practices, please discontinue use of the Site and contact us directly to discuss your privacy preferences.

This Privacy Policy applies to information collected through our Site and through our professional services engagements. It does not apply to information collected by third-party websites or services that may be linked from our Site.

1. Who We Are & Our Regulatory Context

TaxPlus provides tax preparation, tax resolution, business formation, and accounting services in Los Angeles, California. As a tax services firm, we are subject to overlapping federal and state privacy obligations that are more stringent than those applicable to general businesses. These obligations arise from:

Federal Law – IRC § 7216 & § 6713: Internal Revenue Code § 7216 is a federal criminal provision that prohibits tax return preparers from knowingly or recklessly disclosing or using tax return information furnished in connection with the preparation of an income tax return, except as permitted by law or with taxpayer consent. Violations may result in a fine of up to $1,000, imprisonment of up to one year, or both. Unauthorized disclosure involving identity theft may result in fines of up to $100,000. Section 6713 provides a corresponding civil penalty of $250 per unauthorized disclosure, up to $10,000 per calendar year.

See: 26 U.S.C. § 7216; 26 U.S.C. § 6713; Treas. Reg. §§ 301.7216-1 through 301.7216-3; IRS Rev. Proc. 2013-14 (Form and Content of Consent to Disclose or Use Tax Return Information).

California State Law – CCPA/CPRA: The California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), and further updated by regulations effective January 1, 2026, provides California residents with extensive rights regarding their personal information. We comply with applicable CCPA/CPRA requirements and have incorporated those rights and our obligations into this Privacy Policy.

See: California Civil Code §§ 1798.100–1798.199.100 (CCPA/CPRA); California Privacy Protection Agency Regulations, effective January 1, 2026; California Revenue and Taxation Code §§ 19542, 19542.1.

2. Information We Collect

A. Information You Provide to Us

When you use our Site or engage our services, you may provide us with:

Contact & Identity Information: Name, mailing address, email address, telephone number.

Tax & Financial Information (in connection with professional services): Social Security Number (SSN) or Individual Taxpayer Identification Number (ITIN), Employer Identification Number (EIN), income documents, prior-year tax returns, financial statements, bank account information, and other documents necessary to prepare your tax returns or provide tax resolution or accounting services. This information is collected and governed under IRC § 7216 and applicable California law, not solely under our general website privacy practices.

Business Information: For business formation clients, we may collect business name, ownership structure, registered agent information, and related entity details.

Inquiry & Communication Information: Messages, questions, and correspondence you submit through our Site contact forms, email, or telephone.

B. Information We Collect Automatically

When you visit our Site, we may automatically collect:

Usage Data: IP address, browser type, pages visited, time spent on pages, referring URL, and similar technical information.

Cookies & Similar Technologies: We use cookies, web beacons, and similar tracking technologies for website functionality, analytics, and advertising purposes. You may control cookie settings through your browser or, where applicable, through a cookie consent tool on our Site. We honor Global Privacy Control (GPC) browser signals as required under the CCPA/CPRA.

See: California Privacy Protection Agency, GPC Enforcement Guidance; CCPA/CPRA, Cal. Civ. Code § 1798.135; Google Ads Financial Products and Services Policy, support.google.com/adspolicy/answer/2464998.

C. Sensitive Personal Information

Under California law (CCPA/CPRA), certain categories of information are classified as “Sensitive Personal Information” and receive heightened protection. The following categories of sensitive personal information we may collect include:

• Social Security Number (SSN) or government-issued identification numbers

• Financial account information

• Tax return and income information

• Information about individuals under the age of 16 (automatically classified as sensitive personal information under 2026 CCPA regulations)

We use sensitive personal information only as necessary to provide our services, as required by law, or as otherwise permitted under the CCPA/CPRA. We do not use sensitive personal information to infer characteristics about you beyond what is necessary for our services.

See: Cal. Civ. Code § 1798.121 (CPRA – Sensitive Personal Information); CPPA Regulations effective January 1, 2026 (expanding definition of sensitive personal information to include neural data and personal information of consumers under 16).

3. How We Use Your Information

A. General Website Information

Information collected automatically through our Site (usage data, cookies) is used to:

• Operate, maintain, and improve the Site

• Analyze usage patterns and optimize user experience

• Deliver and measure the effectiveness of advertising (including Google Ads campaigns), subject to your cookie and privacy preferences

• Respond to your inquiries and communications • Comply with legal obligations

B. Tax Return Information (IRC § 7216 Governed Uses)

Tax return information you provide in connection with professional services is governed by IRC § 7216 and its regulations. Under these rules, we may use and disclose your tax return information without your consent only in limited, specified circumstances, including:

• To prepare and file your tax return(s)

• Within our firm, among employees and professionals who need the information to assist in preparing your return

• To third-party service providers engaged by our firm solely to assist in the preparation, processing, or electronic filing of your return (subject to confidentiality obligations)

• As required by law, such as in response to a valid court order, subpoena, or request by the IRS, California FTB, or other taxing authority

• For internal quality or peer review related to tax return preparation

Any other use or disclosure of your tax return information — including for marketing non-tax services — requires your prior written consent in the form and content required by Treas. Reg. § 301.7216-3 and IRS Rev. Proc. 2013-14.

See: 26 U.S.C. § 7216; Treas. Reg. § 301.7216-2 (Permissible Disclosures Without Consent); Treas. Reg. § 301.7216-3 (Disclosure or Use Permitted Only With Taxpayer Consent); IRS Rev. Proc. 2013-14.

C. Marketing Communications

We may use contact information (name, address, email, phone number, and tax return form type) to send you general educational tax information and notifications about our services, as permitted under Treas. Reg. § 301.7216-2(n). We will not use your tax return information to market non-tax preparation services without your explicit written consent.

You may opt out of marketing communications at any time by contacting us at [insert email] or by using the unsubscribe mechanism in any email we send you.

4. How We Share Your Information

We do not sell your personal information or tax return information. We do not share your information except in the following circumstances:

Service Providers: We may share information with third-party vendors who assist us in operating our Site, providing services, processing payments, or delivering communications. These vendors are contractually required to handle your information confidentially and only for the purposes for which they are engaged.

Tax Authorities: We share tax return information with the IRS, California Franchise Tax Board (FTB), and other applicable taxing authorities as required to prepare, file, or resolve your tax matters.

Legal Compliance: We may disclose information to comply with applicable law, regulation, court order, subpoena, or government request, or to protect the rights, property, or safety of TaxPlus, our clients, or others.

Professional Advisors: We may share information with attorneys or other professional advisors engaged by our firm in connection with our legal or compliance obligations, subject to applicable confidentiality obligations.

With Your Consent: We may share information in other circumstances with your prior written consent, in the form required by IRC § 7216 where applicable.

Business Transfers: In the event of a sale, merger, acquisition, or other transfer of our business, client information may be transferred as part of that transaction, subject to the acquiring party honoring this Privacy Policy and applicable legal obligations.

See: 26 U.S.C. § 7216; Treas. Reg. § 301.7216-2; Cal. Civ. Code § 1798.140(ad) (CCPA “sale” and “sharing” definitions); California FTB, Revenue and Taxation Code § 19542.

5. Cookies, Tracking, and Digital Advertising

Cookies: Our Site may use first- and third-party cookies for functionality, analytics (such as Google Analytics), and advertising purposes (such as Google Ads remarketing and conversion tracking). Cookies that are not strictly necessary for Site functionality will only be set with your consent where required by applicable law.

Google Ads: We may use Google Ads to promote our services online. Google Ads tracking technologies (such as conversion tags and remarketing lists) may collect information about your visits to our Site and your interactions with our ads. This data is handled in accordance with Google’s Privacy Policy (policies.google.com/privacy) and our contractual agreements with Google.

Global Privacy Control (GPC): We recognize and honor Global Privacy Control (GPC) browser signals as a valid opt-out of the sale and sharing of your personal information, as required under the CCPA/ CPRA. When a GPC signal is detected, we will not sell or share your personal information as defined under California law.

Do Not Track: Our Site does not currently respond to “Do Not Track” signals from browsers. You may, however, control cookie-based tracking through your browser settings or a cookie consent tool on our Site.

Opting Out of Interest-Based Advertising: You may opt out of interest-based advertising through the Digital Advertising Alliance at optout.aboutads.info or the Network Advertising Initiative at optout.networkadvertising.org.

See: CCPA/CPRA, Cal. Civ. Code § 1798.135 (GPC Requirement); Google Ads Financial Products and Services Policy; Google Privacy Policy, policies.google.com/privacy.

6. Your Privacy Rights

A. California Residents – CCPA/CPRA Rights

As a California resident, you have the following rights under the CCPA/CPRA (as amended and effective January 1, 2026):

Right to Know: You have the right to request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources from which we collected it, our business or commercial purpose for collecting or sharing it, and the categories of third parties to whom we have disclosed it.

Right to Delete: You have the right to request deletion of personal information we have collected about you, subject to certain exceptions permitted by law.

Right to Correct: You have the right to request correction of inaccurate personal information we maintain about you.

Right to Opt Out of Sale/Sharing: We do not sell your personal information. However, certain sharing of personal information for cross-context behavioral advertising may constitute “sharing” under the CCPA/CPRA. You may opt out of such sharing at any time via a “Do Not Sell or Share My Personal Information” link on our Site or by submitting a request using the contact information below.

Right to Limit Use of Sensitive Personal Information: You have the right to limit our use of sensitive personal information to the purposes authorized by the CCPA/CPRA.

Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/ CPRA rights.

Right to Opt Out of Automated Decision-Making (ADMT): To the extent we use automated decision- making technology that produces significant decisions affecting you (such as in connection with service eligibility), you have the right to opt out of such processing and to receive a meaningful explanation of the logic and likely outcomes involved, consistent with the CPPA’s 2026 ADMT regulations.

See: Cal. Civ. Code §§ 1798.100, 1798.105, 1798.106, 1798.110, 1798.115, 1798.120, 1798.121, 1798.125 (CCPA/CPRA); CPPA Final Regulations effective January 1, 2026 (ADMT, cybersecurity, and risk assessment requirements).

B. Submitting a Privacy Rights Request

To submit a CCPA/CPRA request, you may: • Email us
• Call us
• Mail us a letter

*see https://www.taxplus.com/#contus

We will verify your identity before processing your request and respond within 45 days of receipt (extendable by an additional 45 days with notice). We will not charge a fee for responding to a verifiable consumer request unless requests are manifestly unfounded or excessive.

We are required to document and retain records of CCPA/CPRA requests and our responses for a period of at least 24 months.

C. Authorized Agents

You may designate an authorized agent to submit privacy requests on your behalf. We may require written proof of the agent’s authorization and may verify your identity directly.

7. Data Retention

We retain personal information for as long as necessary to fulfill the purposes for which it was collected, to provide our services, and to comply with applicable legal, tax, regulatory, and professional obligations. Specific retention periods may vary:

Tax Records & Client Files: Federal law and professional standards generally require tax records to be retained for a minimum of three (3) years from the date a tax return was due or filed, whichever is later. In many cases, we retain records for longer periods to comply with audit requirements, statutes of limitations, or professional standards.

Website & Marketing Data: Usage data and marketing-related personal information is retained in accordance with our data minimization practices and applicable law.

Cybersecurity Audit Records: Consistent with the CPPA’s 2026 regulations, where applicable, cybersecurity audit reports are retained for a minimum of five (5) years.

See: IRS recordkeeping guidelines; Cal. Civ. Code § 1798.100 (CCPA data retention); CPPA Final Regulations (2026) cybersecurity audit report retention requirements.

8. Data Security

We maintain reasonable technical, administrative, and physical security measures designed to protect your personal and financial information from unauthorized access, disclosure, use, alteration, or destruction. These measures include, where appropriate:

• Encryption of data in transit and at rest

• Multi-factor authentication for access to systems containing taxpayer data

• Access controls limiting access to information on a need-to-know basis

• Vendor management practices requiring third-party service providers to implement appropriate security measures

• Regular review and testing of security procedures

IRS Security Guidance for Tax Professionals: Consistent with IRS Publication 4557 (Safeguarding Taxpayer Data) and the IRS “Security Six” recommendations, our firm maintains anti-virus software, firewall protections, two-factor authentication, data backup services, drive encryption, and virtual private network (VPN) protocols for systems used to access taxpayer data.

No data transmission over the internet or electronic storage is completely secure. While we use commercially reasonable efforts to protect your information, we cannot guarantee absolute security. In the event of a data breach affecting your personal information, we will notify you in accordance with applicable law.

See: IRS Publication 4557 (Safeguarding Taxpayer Data); CPPA Final Regulations, effective January 1, 2026 (cybersecurity audit and written security program requirements); California Civil Code § 1798.81.5 (reasonable security obligation); California Civil Code § 1798.29 and § 1798.82 (California data breach notification law).

9. Children’s Privacy

Our Site is not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13 through our Site. If we become aware that we have inadvertently collected personal information from a child under 13, we will take steps to delete that information promptly.

Note regarding minors under 16: Under the 2026 CCPA/CPRA regulations, personal information of individuals under the age of 16 is automatically classified as Sensitive Personal Information and receives heightened protection. If our professional services involve the tax affairs of minors, their information is handled with the additional protections applicable to sensitive personal information.

See: Children’s Online Privacy Protection Act (COPPA), 15 U.S.C. § 6501 et seq.; CPPA Regulations effective January 1, 2026 (personal information of consumers under 16 classified as sensitive personal information).

10. Third-Party Links & Services

Our Site may contain links to third-party websites, including government agencies (such as irs.gov, ftb.ca.gov, and sos.ca.gov), professional organizations, and other resources. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party site you visit.

Our Site may integrate third-party tools such as scheduling software, web analytics platforms, or payment processors. These third parties collect information subject to their own privacy policies.

11. Google Ads & Advertising Data

TaxPlus may use Google Ads and related Google marketing services to promote our services online. In connection with these advertising services:

Data Collection by Google: Google may collect data about your interactions with our ads and Site through cookies and similar technologies. Google’s use of this data is governed by Google’s Privacy Policy, available at policies.google.com/privacy.

Sensitive Category Compliance: We comply with Google’s policies prohibiting the targeting of ads based on sensitive personal information categories, including financial status, and we do not instruct Google to use taxpayer data collected in the course of our professional services for advertising targeting purposes.

Advertising Disclosures: Our advertising does not make misleading claims about tax outcomes, guaranteed refunds, or results. All advertising claims reflect general information about our services and not guaranteed individual outcomes, consistent with Google’s Financial Products and Services Advertising Policy and applicable federal and California consumer protection law.

Opting Out of Google Ad Tracking: You may opt out of Google’s use of cookies for advertising purposes by visiting Google’s Ads Settings at adssettings.google.com, or by installing the Google Analytics Opt-Out Browser Add-On at tools.google.com/dlpage/gaoptout.

See: Google Ads Financial Products and Services Policy, support.google.com/adspolicy/answer/2464998; Google Privacy Policy, policies.google.com/privacy; FTC Act, 15 U.S.C. § 45 (prohibition on unfair or deceptive acts or practices).

12. Taxpayer Complaints & Reporting Improper Disclosure

If you believe your tax return information has been improperly disclosed or used by our firm or any of our employees, you have the right to report such conduct to:

Treasury Inspector General for Tax Administration (TIGTA): 1-800-366-4484 | tips.tigta.gov | Email: [email protected]

IRS Office of Professional Responsibility (OPR): For violations of IRS Circular 230, contact OPR at (202) 317-5655.

California Franchise Tax Board (FTB): For privacy-related complaints related to California tax information: ftb.ca.gov | (800) 852-5711

California Privacy Protection Agency (CPPA): For CCPA/CPRA complaints: cppa.ca.gov California Attorney General: oag.ca.gov

California Department of Consumer Affairs: For general consumer complaints pursuant to California Civil Code § 1789.3: 1625 North Market Blvd., Suite S-202, Sacramento, CA 95834 | (800) 952-5210

FTC IdentityTheft.gov: If you suspect your tax return information has been used in connection with identity theft: IdentityTheft.gov | IRS Form 14039 (Identity Theft Affidavit)

See: 26 U.S.C. § 7216; IRS Rev. Proc. 2013-14 (§ 7216 consent requirements including TIGTA contact); Cal. Civ. Code § 1789.3 (California consumer complaint requirements).

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, applicable law, or regulatory requirements. When we make material changes, we will update the “Last Revised” date at the top of this policy. We encourage you to review this Privacy Policy periodically. Your continued use of our Site following the posting of any revised Privacy Policy constitutes your acceptance of the changes, to the extent permitted by applicable law.

We will provide notice of material changes as required by applicable law. For clients engaged with us for professional services, material changes to how we handle tax return information governed by IRC § 7216 will be communicated to you directly.

14. Contact Us

If you have questions, concerns, or requests related to this Privacy Policy or our privacy practices, please contact us:

TaxPlus

www.taxplus.com

12803 Venice Blvd.
Los Angeles, CA 90066 Tel: 310-398-3231
Fax: 310-398-5641 Email: info@taxplus.com

4340 Genesee Ave #205 San Diego, CA 92117
Tel: 858-279-1640
Fax: (858) 279-9221
Email: Infosd@taxplus.com

— End of Privacy Policy —