How we handle your Personally Identifiable Information (PII) FAQ

We use a combination of advanced technology and strict internal protocols to safeguard your data. This includes encryption for data storage and transmission, secure client portals, and multi-factor authentication to ensure only authorized personnel access sensitive information. Additionally, we maintain comprehensive cyber security insurance to provide an extra layer of protection for both our firm and our clients. We do not accept any emails with attachments from clients or others.

Our firm adheres to all relevant regulations, including the FTC Safeguards Rule, IRS Publication 4557, and applicable state laws. We regularly review and update our Written Information Security Program (WISP) to stay compliant with the latest standards.

All drives containing tax files are hardware encrypted and air-gapped during non use. Access to client data is restricted to authorized staff members, all of whom are trained in information security practices.

Our cyber security insurance further reinforces our ability to address potential risks effectively.

If you receive a suspicious email or call claiming to be from our firm, do not respond or share any information even if it appears to come from us directly. Contact us directly at 855-628-2937 or mike@mctaxes.net to verify its authenticity. We will never request sensitive information via email or text.

Although we implement robust measures to prevent breaches, we are prepared with an incident response plan and carry cyber security insurance to address such situations. In the unlikely event of a breach, we will act swiftly to mitigate risks, notify affected parties, and comply with all reporting requirements, ensuring your information is protected.

Yes, we provide a secure online client portal where you can upload and access your documents safely. (You do not need a portal account BUT having one makes accessing your files seemless.) This eliminates the need for unsecured email exchanges. We also use secure messaging on our portal for any We will never ask you to send any sensitive information via email. Please be aware, if you send us any sensitive information via email or text, you do so at your own risk.

We conduct regular assessments and audits of our security measures to identify and address potential vulnerabilities. Our WISP (Written Internet Security Plan) is update at least annually to comply with federal regulations. Urgent updates are made promptly to stay ahead of emerging threats.

Our cyber security insurance provider also supports our efforts by ensuring compliance with industry standards.

We do not sell or share your personal information with third parties for marketing purposes. We may share your information with trusted third parties only when required to complete tax-related tasks or comply with legal obligations, and only with your consent.

You can enhance your security by:

Using strong, unique passwords for your accounts.
Avoiding email or phone scams by verifying requests.
Using our secure portal instead of emailing sensitive documents.
Using two factor authentication for your online portal.
Remember, we will never ask you to send any sensitive information via email.

If you have any concerns or questions, please reach out to us at 855-628-2937 or mike@mctaxes.net. We are happy to explain our security practices or assist you with any privacy-related matters.