Detailed Security Policy
At FinTax Business Solutions, we recognize the importance of protecting our clients’ financial, accounting, tax, business, and personal information. This Security Policy explains the general security practices and principles we follow when handling client information and delivering our services.
1. Our Security Commitment
We are committed to handling client information responsibly and taking reasonable measures to protect sensitive information against unauthorized access, misuse, loss, alteration, or disclosure.
Our security practices are designed to support the confidentiality, integrity, and appropriate availability of information used in our services.
2. Client Information Protection
Depending on the services provided, we may handle information such as:
Accounting and financial records
Tax-related information
VAT and GST information
Business and company documents
Invoices and transaction records
Payroll-related information
Bank and reconciliation information
Contact and identification information
Supporting documents and reports
We use such information only for legitimate business and service-related purposes.
3. Access Control
Access to client information is limited to authorized individuals who require the information to perform their assigned responsibilities.
We aim to follow the principle of providing access only where it is reasonably necessary for the delivery of services.
4. Secure Document Handling
Client documents may be received, stored, reviewed, prepared, or transferred through appropriate digital communication and document-sharing methods.
We take reasonable steps to ensure that confidential documents are handled responsibly and are shared only with authorized parties or where required for legitimate business, legal, or regulatory purposes.
5. Password & Account Security
We encourage the use of strong and unique passwords for systems and accounts used in connection with our business operations.
Where supported by the relevant platform, additional security measures such as multi-factor authentication may be used.
Access credentials should not be unnecessarily shared between individuals.
6. Data Transmission
Where client information is transmitted electronically, we aim to use reputable and appropriate communication or file-sharing platforms.
Clients are encouraged to avoid sending highly sensitive information through unsecured or publicly accessible channels.
7. Data Storage & Retention
We retain information only for as long as reasonably necessary for service delivery, business administration, legal, regulatory, accounting, or record-keeping purposes.
Information that is no longer required may be securely deleted, archived, or disposed of in accordance with applicable requirements.
8. Data Backup
Where appropriate, important business and client information may be backed up to reduce the risk of data loss.
Backup practices may vary depending on the systems, platforms, and tools used to deliver a particular service.
9. Third-Party Platforms
We may use reputable third-party software, cloud platforms, accounting systems, communication tools, or document-sharing services to provide or support our services.
Where third-party platforms are used, their own security and privacy policies may also apply.
We do not control the security practices of independent third-party providers and recommend that clients review their relevant policies where appropriate.
10. Confidentiality
Confidential client information will not be intentionally disclosed to unauthorized parties.
Information may be disclosed where:
The client has authorized the disclosure
Disclosure is necessary to provide an agreed service
Disclosure is required by applicable law or regulation
Disclosure is necessary to protect legitimate business or legal interests
11. Employee & Authorized Personnel Responsibility
Individuals working with FinTax Business Solutions are expected to handle client information responsibly and maintain appropriate confidentiality.
Access to information should be limited according to work responsibilities and service requirements.
12. Security Awareness
We encourage responsible security practices when handling client information, including:
Using secure passwords
Keeping software and devices appropriately updated
Avoiding unauthorized access to client information
Verifying recipients before sharing confidential documents
Using appropriate security measures when working remotely
13. Security Incidents
If we become aware of a suspected security incident involving client information, we will take reasonable steps to investigate the issue, contain the risk, and take appropriate corrective action.
Where required by applicable law or regulation, affected parties or relevant authorities may be notified.
14. Client Responsibilities
Clients also play an important role in protecting their information.
Clients should:
Use secure passwords for accounts shared with us
Avoid sharing unnecessary sensitive information
Verify email addresses and recipients before sending confidential documents
Notify us if they suspect unauthorized access to information or accounts
Maintain appropriate security on their own devices and systems
15. Remote Service Security
As FinTax Business Solutions may provide services remotely, client information may be accessed and processed through online communication, accounting, document-sharing, and collaboration platforms.
We aim to handle remote access and digital information responsibly and restrict access to authorized individuals.
16. Security Limitations
While we take reasonable measures to protect information, no method of electronic storage, communication, or internet transmission can be guaranteed to be completely secure.
Therefore, we cannot guarantee absolute security against every possible security threat, cyberattack, system failure, or unauthorized access.
17. Policy Updates
We may update this Security Policy from time to time to reflect changes in our business operations, technology, security practices, or applicable requirements.
Any updated version will be published on this page with the revised effective date.