Privacy Policy

What we collect

To prepare and file your taxes, we collect the information necessary for that purpose: your name, contact details, Tax Registration Number, income and financial records, and any supporting documents relevant to your engagement, such as bank statements, receipts, payroll records, or prior filings. If you contact us through our website, we also collect what you submit through that form.

How documents are handled

Documents you upload through our client portal are transmitted directly to encrypted storage and never pass through email. Every upload is scanned for malware before any GTCL staff member can access it; a file that fails scanning is quarantined and never made visible to anyone. Every view and download of a document, by you or by our staff, is logged, including who accessed it and when.

Where your data is stored

Our systems, including document storage and our client database, are hosted on Cloudflare, with data stored in North America. Cloudflare’s infrastructure encrypts data at rest by default and holds SOC 2 compliance.

Third-party processors

We share information with third parties only where necessary to deliver our services or as required by law:

• Cloudflare, our infrastructure provider, hosting our application, document storage, and database.
• Our transactional email provider, used solely to send notifications related to your engagement, such as document request updates. We do not use your information for marketing without separate consent.
• Our malware scanning provider, used to scan uploaded documents before they are stored, which does not retain your files after scanning.
• Tax Administration Jamaica (TAJ) and other relevant authorities, where required to file or resolve a matter on your behalf.

Retention

We retain tax records for approximately seven years, consistent with standard record-keeping expectations for tax matters. Deletion outside that window is a manual action taken by an administrator and is logged; it does not happen automatically or silently.

Your account

Client portal accounts are invite-only and protected by mandatory multi-factor authentication. You can review your own document access history from your account at any time.

Contact us

Questions about this policy or your data can be sent to info@gtclfinancial.com or by phone at 876-672-1133.