Privacy Policy

1. Introduction

ITIN Plus Inc. ("ITIN Plus," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services. Please read this policy carefully. By using our website or services, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

We collect information you voluntarily provide to us when you:

• Submit an application or contact form on our website
• Email or call us directly
• Upload documents through our secure client portal
• Communicate with us via WhatsApp or other messaging platforms

This information may include your full name, email address, phone number, country of residence, passport details, visa information, tax documents, and any other information you choose to provide in connection with your ITIN, EIN, or tax filing application.

We also automatically collect certain technical information when you visit our website, including your IP address, browser type, pages visited, and time spent on pages, through standard web analytics tools.

3. How We Use Your Information

We use the information we collect to:

• Process and submit your ITIN, EIN, or tax filing application to the IRS
• Communicate with you about your application status
• Respond to your inquiries and provide customer support
• Send you service-related emails and updates
• Comply with legal obligations and IRS requirements
• Improve our website and services

4. How We Protect Your Information

We take the security of your personal and financial information seriously. We implement industry-standard security measures including:

• 256-bit SSL/TLS encryption for all data transmitted through our website
• Secure encrypted document storage with restricted internal access
• No sharing of your documents or personal data with unauthorized third parties
• Strict access controls — only authorized team members handle your application

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee its absolute security.

5. Sharing Your Information

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

• With the IRS: As required to process your ITIN or EIN application
• With service providers: Trusted third-party vendors who assist us in operating our website and conducting business, under strict confidentiality agreements
• As required by law: When disclosure is required by applicable law, regulation, or legal process

6. Cookies and Tracking Technologies

We use cookies and similar tracking technologies on our website. Cookies are small data files stored on your device. We use the following categories of cookies:

• Strictly necessary cookies: Required for the website to function. These cannot be disabled.
• Analytics cookies: We do not currently run a general analytics platform. Page-level data may be inferred from advertising conversion tools (see below).
• Advertising/marketing cookies: We use the Meta (Facebook) Pixel and Google Ads conversion tracking to measure the effectiveness of our advertising campaigns. These tools may collect data about your visit and share it with Meta Platforms, Inc. and Google LLC under their respective data policies.

You can instruct your browser to refuse all cookies or alert you when cookies are being sent. You can also manage your advertising preferences via the Your Online Choices (EU) or Digital Advertising Alliance (US) opt-out pages.

7. Data Retention

We retain your personal information for as long as necessary to fulfil the purposes in this policy, or as required by law:

• Application records: 7 years, to comply with IRS record-keeping requirements
• Email correspondence: 3 years after the last interaction
• Advertising conversion data: 26 months (Meta Pixel and Google Ads platform defaults)
• Advertising pixel data: As defined by Meta and Google data retention policies

After the applicable retention period, we securely delete or anonymise your data.

8. Your Rights — GDPR (EEA, UK) & CCPA (California)

Depending on your location, you have specific rights regarding your personal data:

EEA and UK residents (GDPR/UK GDPR):

• Right of access — obtain a copy of your personal data
• Right to rectification — correct inaccurate data
• Right to erasure ("right to be forgotten") — request deletion, subject to legal obligations
• Right to restriction of processing
• Right to data portability
• Right to object to processing based on legitimate interests or for direct marketing
• Right to withdraw consent at any time (where processing is based on consent)

California residents (CCPA/CPRA):

• Right to know what personal information we collect and how it is used
• Right to delete personal information we hold about you
• Right to opt out of the "sale" or "sharing" of personal information. Note: We do not sell your personal information. However, sharing data with advertising platforms (Meta, Google) for targeted advertising may constitute "sharing" under CCPA. You may opt out via your browser's Global Privacy Control (GPC) signal or by contacting us.
• Right to non-discrimination for exercising your privacy rights

Canadian residents (PIPEDA/Law 25): You have the right to access, correct, and request deletion of your personal information, and to withdraw consent for non-essential processing.

To exercise any of these rights, contact us at apply@itinplus.com. We will respond within 30 days (GDPR) or 45 days (CCPA). For GDPR complaints, you also have the right to lodge a complaint with your local supervisory authority.

9. International Data Transfers

ITIN Plus Inc. is based in the United States. If you are located in the EEA, UK, or other jurisdictions with data transfer restrictions, your personal data may be transferred to and processed in the US. We rely on Standard Contractual Clauses (SCCs) or other lawful transfer mechanisms for such transfers, consistent with applicable data protection law.

10. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe we have inadvertently collected information from a minor, please contact us at apply@itinplus.com immediately.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a revised effective date. We recommend reviewing this policy periodically.

12. Contact Us

For privacy-related questions, data subject requests, or to opt out of marketing communications:

• Email (preferred): apply@itinplus.com
• Phone/WhatsApp: +1 (305) 216-6992

We aim to respond to all privacy requests within 30 days.