Privacy policy

1. Introduction

Apex Legacy Trust (“we,” “our,” or “us”) is committed to protecting the privacy and security of personal and financial information entrusted to us by individuals and businesses. This Privacy Policy describes how we collect, use, protect, and safeguard information in connection with our tax preparation, tax resolution, and related professional services.

We maintain administrative, technical, and physical safeguards designed to protect customer information in accordance with applicable federal regulations and industry standards.

2. Regulatory and Security Framework

Our information security practices are designed to align with applicable guidance and standards, including but not limited to:

  • Federal Trade Commission (FTC) Safeguards Rule – 16 CFR Part 314

  • IRS Publication 4557 – Safeguarding Taxpayer Data

  • IRS Publication 5417 – Basic Security Plan Considerations for Tax Professionals

  • IRS Publication 5708 – Creating a Written Information Security Plan

  • IRS Publication 5709 – Data Safety and Security Guidance

We maintain a Written Information Security Plan (WISP) that governs how sensitive information is accessed, stored, transmitted, and protected.

3. Information We Collect

Depending on the services provided, we may collect personal and business information including, but not limited to:

  • Full legal name

  • Email address

  • Mailing address

  • Telephone number

  • Social Security Number (SSN)

  • Employer Identification Number (EIN)

  • Date of birth

  • Financial and tax-related documents

  • Government-issued photo identification (such as a state driver’s license or passport) for identity verification and fraud prevention purposes

We collect this information solely for legitimate business, compliance, and regulatory purposes related to tax preparation, tax resolution, and associated services.

4. Use of Information

Information collected is used only for purposes including:

  • Preparing and filing federal, state, and local tax returns

  • Providing tax resolution and administrative representation services

  • Responding to IRS or state tax agency correspondence

  • Verifying client identity and preventing fraud

  • Communicating with clients regarding their engagement

  • Complying with legal and regulatory requirements

We do not use personal information for marketing unrelated to our services.

5. Data Sharing and Disclosure

Apex Legacy Trust does not sell, rent, trade, or disclose personal information to third-party advertisers, marketers, or data brokers.

Information may be disclosed only when:

  • Required by law or legal process

  • Necessary to carry out authorized tax services (e.g., submissions to the IRS or state agencies)

  • Required to protect against fraud, unauthorized access, or security threats

All disclosures are limited to what is reasonably necessary.

6. Cookies and Website Data

Our website may collect limited technical data through cookies and similar technologies, consistent with standard website operations. This may include IP address, browser type, device information, and usage data.

These cookies are used for:

  • Website functionality

  • Security

  • Performance and analytics

We do not use cookies for third-party advertising or behavioral tracking.

7. Client Portal and Document Submission

If you choose to use our secure client portal:

  • You agree to submit only documents relevant to the services we are providing

  • You acknowledge that documents submitted may contain sensitive personal or financial information

  • You understand that we use secure systems and reasonable safeguards to protect submitted data

Users are strictly prohibited from attempting to upload malicious code, malware, or engaging in unauthorized access, penetration testing, or misuse of the portal. Unauthorized or malicious activity may result in access termination and may be referred to appropriate authorities as permitted by law.

8. Data Security Measures

We implement reasonable and appropriate safeguards to protect information from unauthorized access, disclosure, alteration, or destruction. These measures may include:

  • Secure access controls

  • Encryption where appropriate

  • Limited access to sensitive data

  • Secure document storage and transmission

  • Ongoing review of security practices

No method of transmission or storage is completely secure; however, we take data security seriously and continually evaluate our safeguards.

9. Your Responsibilities

Clients are responsible for:

  • Providing accurate information

  • Protecting their own login credentials

  • Not transmitting sensitive information through unsecured channels unless directed

If you believe your information has been compromised, please notify us promptly.

10. Changes to This Policy

We reserve the right to update this Privacy Policy as necessary to reflect changes in legal requirements, technology, or business practices. Updates will be posted on this page with a revised effective date.

11. Contact Information

If you have questions about this Privacy Policy or our data protection practices, please contact us through the contact information provided on our website.