1. Who we are
TaxRoots Limited ("TaxRoots", "we", "us") is a private company limited by shares, registered in Ireland with the Companies Registration Office under number 828654. We are the data controller for the personal data described in this notice.
- Registered office: Dublin, Ireland [CONFIRM full registered address]
- Email: hello@taxrootsirl.com
- Phone: +353 1 000 0000
- Data protection contact: [CONFIRM name or role, e.g. a director]
We are an independent company. We are not part of, or endorsed by, the Revenue Commissioners.
2. What we collect
We only ask for what we need to check your tax and make a claim for you.
- Contact details: your name, email address and (if you give it) phone number.
- Enquiry details: the service you are interested in and anything you tell us in a message or form.
- Tax details (once you engage us): your PPS number (Personal Public Service Number), employment and pension history, tax credits, reliefs claimed and Revenue documents such as your Statement of Liability.
- Supporting documents: for example rent receipts, medical receipts, college fee receipts or marriage details, depending on what you claim.
- Special category data: some claims (such as medical expenses or the Incapacitated Child Tax Credit) can reveal health information. We only use it for that claim and only with your explicit consent.
- Technical data: basic server logs (such as IP address and browser type) kept for security. See our cookie policy.
We never ask for your myAccount or ROS password. Revenue advises you not to share it, and we do not need it. You approve our agent link inside your own myAccount.
3. Why we use it
- To reply to your enquiry and tell you whether we can help.
- To review your tax record for the open years and prepare and file claims with Revenue on your behalf.
- To keep you updated on your claim and to invoice our agreed fee after Revenue pays you.
- To keep the records the law requires (Revenue expects agents to keep supporting documents for six years).
- To protect our website and systems from misuse.
We do not sell your data and we do not use it for automated decision-making or profiling. We will only send marketing emails if you opt in separately [CONFIRM whether marketing emails will be used].
4. Our legal basis
| Purpose | Legal basis (GDPR Article 6) |
|---|---|
| Answering your enquiry | Steps at your request before entering a contract (6(1)(b)), and our legitimate interest in replying (6(1)(f)) |
| Reviewing your tax and making claims | Performance of our contract with you (6(1)(b)) |
| Keeping claim records for six years | Legal obligation (6(1)(c)) |
| Health information for a medical or incapacity claim | Your explicit consent (Article 9(2)(a)) |
| Website security logs | Legitimate interest (6(1)(f)) |
| Marketing emails (if any) | Your consent (6(1)(a)), which you can withdraw at any time |
5. Who we share it with
- The Revenue Commissioners, to make your claim. This is the main reason we hold your data.
- Service providers who help us run the business, such as website hosting, email and secure document storage. They act on our instructions under a written data processing agreement. [CONFIRM list of processors]
- Professional advisers (such as our solicitor, accountant or insurer) where needed.
- Others where the law requires it, for example a court order.
6. Where your data is stored
This website does not store anything you type into its forms: they simply open a WhatsApp chat (or email) with your details filled in, and nothing is sent until you press send. Messages you send us on WhatsApp are processed by WhatsApp (Meta) and kept in our business account so we can handle your claim. We aim to keep data within the European Economic Area (EEA). If a provider stores data outside the EEA, we make sure suitable safeguards are in place, such as the European Commission's Standard Contractual Clauses. [CONFIRM storage location and providers]
7. How long we keep it
- Enquiries that do not go ahead: up to [CONFIRM, e.g. 12 months] after our last contact, then deleted.
- Client claim records and supporting documents: six years from the end of the tax year concerned, as Revenue expects of agents.
- Invoices and accounting records: six years, as required by Irish company and tax law.
8. Your rights
Under the General Data Protection Regulation (GDPR) and the Data Protection Act 2018 you have the right to:
- ask for a copy of the personal data we hold about you;
- have inaccurate data corrected;
- have your data deleted, where we no longer need to keep it by law;
- restrict or object to how we use it;
- receive your data in a portable format;
- withdraw consent at any time, where we rely on consent.
Email hello@taxrootsirl.com to use any of these rights. We will reply within one month. It is free of charge.
Separately, you can remove TaxRoots as your agent in your own myAccount at any time.
9. Security
We use access controls, encrypted connections (HTTPS) and secure storage to protect your data, and only people who need it to handle your claim can see it. If a data breach is likely to put you at risk, we will tell you and the Data Protection Commission as the law requires.
10. Complaints to the Data Protection Commission
If you are unhappy with how we handle your data, please tell us first so we can put it right. You also have the right to complain to Ireland's supervisory authority, the Data Protection Commission, at dataprotection.ie.
11. Changes to this notice
We will update this notice if the way we use your data changes. The "last updated" date on this page shows when it last changed.