Privacy & data

Privacy Policy

How Legal Tax Services PLLC handles information provided by clients and website visitors.

Last updated: October 24, 2026

This Privacy Policy ("Policy") describes how Legal Tax Services PLLC ("Legal Tax Services," "we," "us," or "our") collects, uses, stores, discloses, and protects personal information in connection with our services, our website at https://legaltax.services, and our U.S. formation application portal at https://usa.legaltax.services. This Policy is incorporated by reference into our Terms and Conditions.

Scheduling and online meetings. LegalTax currently uses Koalendar to schedule consultations and Zoom to conduct online meetings. For those purposes, booking details may include name, email address, optional telephone number, jurisdiction, requested service, appointment time and information voluntarily supplied in the booking form. These providers handle relevant information under their service agreements and privacy terms. Please avoid submitting sensitive case documentation in the initial scheduling form.

1. Who We Are

Legal Tax Services PLLC is a professional limited liability company organized under the laws of the State of New York, with its principal office at 418 Broadway, Suite R, Albany, New York 12207, USA. Our founder, Juan E. Schreiber, is registered as a Foreign Legal Consultant in New York (Reg. No. 6057806). For the purposes of applicable data protection law, Legal Tax Services PLLC is the data controller responsible for the personal information described in this Policy.

2. Scope of This Policy

This Policy applies to personal information we collect from:

Visitors to our website at legaltax.services;
Prospective clients who contact us through our website contact form, email, phone, or messaging platforms;
Clients who engage us for any service, including through electronic signature platforms and client intake workflows;
Individuals who submit applications, upload identification or supporting documents, or make payments through our U.S. formation portal;
Beneficial owners, directors, shareholders, authorized signatories, and other individuals whose information is provided in connection with a client engagement; and
Third-party individuals whose information we process as part of our due diligence and compliance obligations.

3. Information We Collect

We collect personal information in the following categories, depending on the nature of your engagement with us:

Identity and Contact Information
Full legal name, date of birth, nationality, and country of residence; government-issued identification documents including passports, national identity cards, and driver's licenses; secondary identification documents; email address, phone number, and physical address; and tax identification numbers (TIN, ITIN, CUIT, or equivalent).

Financial and Source-of-Funds Information
Bank account statements and financial records; source of funds and source of wealth declarations; information about business activities and corporate structures relevant to the engagement; and escrow transaction details and payment records.

Compliance and Due Diligence Information
Politically Exposed Person (PEP) status and related disclosures; sanctions screening results; adverse media and open-source intelligence research findings; and beneficial ownership information for corporate entities.

Website and Communications Data
Name, email address, and message content submitted through our website contact form; IP address, browser type, device type, and page interaction data collected automatically when you visit our website; and contents of email or written communications with our team.

Application and Payment Information
Information entered in our online application, uploaded supporting files, application reference numbers, selected services, application status, requests for additional documents and related correspondence. Online payments are processed through a third-party payment provider, such as Stripe. We may receive payment status, transaction identifiers and limited billing information, but payment card details are entered and processed through the payment provider's checkout service.

Information Provided by Third Parties
In connection with client engagements, we may also receive personal information about individuals from clients, corporate registries, public databases, financial institutions, registered agents, and other authorized sources.

4. Purposes and Legal Bases for Processing

We process personal information for the following purposes:

Service delivery. To provide document preparation, entity formation, escrow, banking coordination, and compliance support services under our engagement agreement with you.
Client intake and onboarding. To verify identity, assess eligibility, and establish the scope of services.
KYC and AML compliance. To fulfill our obligations under applicable anti-money laundering, counter-terrorism financing, and sanctions laws.
Communications. To respond to inquiries, provide updates on engagements, and send service-related notices.
Legal obligations. To comply with applicable federal, state, and international laws, including reporting obligations to financial institutions, government agencies, and regulatory bodies.
Legitimate interests. To maintain the security and integrity of our operations, prevent fraud, conduct due diligence, and improve our services.
Website functionality. To operate and maintain our website and the services accessible through it.

We do not sell, rent, or trade your personal information to third parties for marketing purposes. We do not use personal information for automated decision-making that produces legal or similarly significant effects without human review.

5. KYC, AML, and Sanctions Compliance

As part of our standard client intake process, we conduct identity verification and risk-based due diligence on applicants and, where appropriate, beneficial owners and related parties. These checks support our internal compliance standards, the requirements of registered agents, banks and other providers, and any legal obligations applicable to the particular service. Depending on the circumstances, we may request identity documents, business information, PEP disclosures and source-of-funds information. The nature and extent of legally required AML checks vary by jurisdiction and service.

We conduct screening against sanctions lists maintained by the U.S. Office of Foreign Assets Control (OFAC), the United Nations, and other applicable authorities. We may also conduct adverse media searches using open-source intelligence (OSINT) methodologies and commercial databases. In some circumstances, we may be legally prohibited from disclosing to you that a particular screening or report has been made.

6. Use of Technology Providers and AI Tools

We use a range of technology and service providers to support our operations. These may include:

Communications and document repositories. We may use Proton Mail or Proton Drive for selected communications or files where those services are used. Documents uploaded through the U.S. formation application portal are currently stored on access-restricted hosting infrastructure, not automatically in Proton Drive.
Electronic signature and document workflows. Historical engagement records may have been completed using airSlate SignNow. New website inquiries are not automatically executed through SignNow. Where electronic signing is used in a specific engagement, the relevant provider may process the information necessary for that workflow.
Artificial intelligence and compliance tools. We may use artificial intelligence service providers to assist with document review, compliance research, open-source intelligence analysis, and administrative tasks. Any AI-assisted processing is conducted under human supervision; no consequential decision affecting a client is made solely on the basis of automated AI output.
Website and application hosting. Our website and U.S. formation application portal are currently hosted through Namecheap. Hosting-related processing includes application records, uploaded files in non-public storage, technical logs, and backups where maintained by the hosting provider. Access to uploaded files is restricted through administrative controls; they are not intended to be publicly accessible through ordinary website links.
KYC and compliance databases. We may access commercial KYC, sanctions, and adverse media databases to support our due diligence processes.

We maintain an internal list of approved technology providers and review it periodically. We require our service providers to implement appropriate data protection measures and to process personal information only as directed by us.

7. International Transfers

Legal Tax Services operates internationally and serves clients across multiple jurisdictions. Personal information may be accessed, transferred, stored or processed outside your country of residence, including in the countries where our hosting, communications, payment, registered-agent and other service providers operate. Use of a provider associated with a particular country does not mean all information is stored exclusively in that country. We take reasonable steps to apply safeguards required by applicable data protection law for relevant cross-border processing.

8. Disclosure to Third Parties

We disclose personal information to third parties only in the following circumstances:

Service delivery. To registered agents, corporate service providers, financial institutions, correspondent banks, and other parties necessary to complete your requested services.
Technology providers. To service providers who assist in our operations as described in Section 6, acting as data processors under our instruction.
Legal and regulatory obligations. To government agencies, regulators, law enforcement authorities, or courts when required by applicable law, subpoena, court order, or binding regulatory demand. In some cases we may be legally prohibited from notifying you of such disclosures.
Professional advisors. To attorneys, accountants, and auditors under appropriate confidentiality obligations.
With your consent. To any other party with your prior written consent.

We do not sell personal information to data brokers or third parties for commercial or marketing purposes.

9. Data Retention

We retain personal information for the period reasonably necessary to evaluate applications, provide services, administer the client relationship, maintain appropriate records, resolve disputes and comply with applicable legal, tax, contractual or regulatory requirements. Retention periods depend on the record category and the law applicable to the particular service; we do not apply a single statutory AML retention period to every client file. An unsuccessful or withdrawn application may still require limited record retention for payment, security, compliance or dispute-resolution purposes. When information is no longer required, we delete or anonymize it where reasonably practicable, subject to applicable retention obligations, backups and legal holds.

10. Security

We implement technical and organizational measures designed to protect personal information against unauthorized access, disclosure, alteration and destruction. These include access restrictions for administrative functions and non-public uploaded files, encrypted connections where supported, account controls and appropriate review of service providers. Different communication and storage services provide different forms of protection; files submitted through our hosting-based portal should not be assumed to have Proton Drive end-to-end encryption. No method of electronic transmission or storage is completely secure. In the event of a data breach, we will provide notifications when required by applicable law.

11. Your Rights

Depending on your country of residence and applicable law, you may have the following rights regarding your personal information:

Right of access. To request a copy of the personal information we hold about you.
Right of rectification. To request correction of inaccurate or incomplete information.
Right of erasure. To request deletion of your personal information, subject to legal retention obligations.
Right to restriction. To request that we limit the processing of your personal information in certain circumstances.
Right to data portability. To receive your personal information in a structured, machine-readable format, where applicable.
Rights under CCPA / CPRA (California residents). California residents have the right to know, delete, and opt out of the sale or sharing of personal information. We do not sell personal information as defined under California law.
Rights under LGPD (Brazilian data subjects). Brazilian residents have corresponding rights under Lei Geral de Proteção de Dados (Law No. 13,709/2018), including the right to access, correction, deletion, portability, and information about sharing.

Please note that certain rights may be limited where processing is required to comply with a legal obligation, including AML and KYC requirements. To exercise any of your rights, please contact us at the address in Section 15. We may request proof of identity before processing your request.

12. Website, Cookies, and Contact Form

Our website at legaltax.services collects limited data automatically when you visit, including your IP address, browser type, referring URL, and pages viewed. This information is used to operate and maintain the website and to diagnose technical issues.

Our website uses the following third-party analytics and measurement tools:

Google Analytics 4 (Google LLC). We use Google Analytics 4 (measurement ID: G-KZYRSYCEZN) to understand website traffic and usage, including pages viewed, referral sources, general geographic and technical information, and interactions with the website. Google Analytics may use cookies or similar identifiers in connection with this measurement. Google's privacy policy is available at policies.google.com/privacy.

Google Ads / Google Tag Manager (Google LLC). We use Google's tag management and conversion tracking service (tag ID: AW-16530919094) to measure the effectiveness of our advertising and understand how visitors interact with our website. Google may set cookies and collect usage data in connection with this service. Google's privacy policy is available at policies.google.com/privacy.

These tools may place cookies or similar tracking technologies on your device. By continuing to use our website, you acknowledge the use of these tools. We do not use third-party advertising retargeting cookies or sell data collected through these tools to third parties.

The contact form on our website collects your name, email address, and message, and is used solely to respond to your inquiry.

13. Children

Our services are directed to adults only. We do not knowingly collect personal information from individuals under the age of 18. If you believe we have inadvertently collected information from a minor, please contact us immediately and we will take steps to delete such information.

14. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, applicable law, or service offerings. When we make material changes, we will update the Effective Date at the top of this page and, where appropriate, notify active clients by email. Continued use of our website or services after any update constitutes your acknowledgment of the revised Policy.

15. Contact

For questions, requests, or complaints regarding this Privacy Policy or our data practices, please contact us at info@legaltax.services or by mail at Legal Tax Services PLLC, 418 Broadway, Suite R, Albany, New York 12207, USA.