Written Information Security Policy (WISP)

At Second Chance Taxes, we are committed to safeguarding sensitive client information. This policy outlines the measures we take to protect personal, financial, and proprietary data, ensuring compliance with industry standards and regulations.

 We prioritize the security of the information entrusted to us. By implementing robust security measures, we ensure that client data remains confidential, secure, and protected from unauthorized access or misuse.

 Second Chance Taxes handles and safeguards various types of sensitive information, including:

• Personally Identifiable Information (PII): Name, address, Social Security numbers, and other identifying details.
• Financial Data: Bank account information, transaction records, and tax return details.
• Business Information: Proprietary business records, contracts, and operational tax data.
• Confidential Client Communications: Emails, files, and documents shared during tax consultations.

3.1 Data Encryption

All sensitive data is encrypted during transmission and storage to prevent unauthorized access.

3.2 Access Control

Access to client information is restricted to authorized personnel based on role-based permissions.

3.3 Secure Storage

• Physical Records: Stored in locked cabinets within secure office spaces.
• Digital Data: Protected by firewalls, encryption, and secure cloud-based storage solutions.

3.4 System Monitoring

Continuous system monitoring helps detect and mitigate security threats in real time.

3.5 Secure Communication

Client communications are conducted through encrypted channels to prevent unauthorized interception.

• Retention: Client information is retained only for as long as necessary for operational and legal purposes.
• Disposal: Outdated or unnecessary data is securely deleted or shredded to prevent recovery.

All employees receive regular training on data security protocols and confidentiality best practices. Each staff member signs a confidentiality agreement to uphold our commitment to protecting client data.

In the event of a data breach, Second Chance Taxes will:

1. Contain and investigate the breach immediately.
2. Notify affected clients and stakeholders promptly.
3. Implement corrective measures to prevent future occurrences.

Our security practices are reviewed and updated regularly to adapt to emerging threats and new technologies.