Privacy Policy

Last updated: 29 October 2026

This policy explains how Material Girl US LLC, trading as TaxRefund.gg (“TaxRefund.gg”), 8383 Wilshire Blvd, Suite 800, Beverly Hills, CA 90211, USA, handles clients’ personal information. TaxRefund.gg is a U.S. business and follows U.S. federal law, in particular the Gramm-Leach-Bliley Act and the Federal Trade Commission’s Safeguards Rule (16 CFR Part 314), sections 6713 and 7216 of the Internal Revenue Code and the laws of the State of California. For clients in the European Economic Area, the General Data Protection Regulation (GDPR) also applies under its Article 3(2), and for clients in the United Kingdom, the UK GDPR and the Data Protection Act 2018. TaxRefund.gg is the controller of the personal data described here.

1. Data collected

• Identification: full name, date and place of birth, nationality, passport and other identity document details, photograph for identity verification.
• Contact: email, phone and address.
• Tax data: SSN or ITIN, country of tax residence, Forms 1042-S, income and tax withheld in the United States, the part of the income earned at U.S. events, returns, IRS letters and transcripts.
• Payment data: records of fee payments. Card details are handled directly by the payment processor and are not stored by TaxRefund.gg.
• Technical data: IP address and access logs, used for security and fraud prevention.

2. Purposes and legal bases

• Applying for the ITIN and preparing, filing and following up the returns with the IRS: performance of the contract (GDPR Article 6(1)(b)).
• Keeping copies of returns and records required by U.S. law, such as section 6107 of the Internal Revenue Code: legal obligation (Article 6(1)(c)) and, for obligations under U.S. law, legitimate interests (Article 6(1)(f)).
• Verifying the client’s identity and preventing fraud and tax identity theft: legitimate interests (Article 6(1)(f)).
• Calculating and collecting fees and issuing statements: performance of the contract.
• Communicating about the order: performance of the contract.

3. Tax return information

Information provided for the preparation of returns is protected by section 7216 of the Internal Revenue Code. It is used only to prepare, file and follow up the client’s returns and is not disclosed to third parties for any other purpose without the client’s consent, unless permitted by law. Where consent is needed, including for disclosure to a preparer located outside the United States, it is requested in a separate document before the disclosure, and the service is never conditional on it.

Complaints about the misuse or improper disclosure of tax return information can be made to the Treasury Inspector General for Tax Administration (TIGTA) on 1-800-366-4484 or at complaints@tigta.treas.gov.

4. Sharing

Data is shared only with:

• the IRS and, when needed, the Taxpayer Advocate Service;
• providers that operate the service and are contractually bound to protect the data: identity verification, payment processing, cloud storage, website hosting and tax preparation software;
• authorities, where required by law.

Data is not sold or shared with third parties for advertising or marketing.

5. International transfers

By its nature, the service involves processing the data in the United States, where TaxRefund.gg, the IRS and the main providers are located. For clients in the EEA and the United Kingdom, the transfer is necessary for the performance of the contract requested by the client (GDPR and UK GDPR Article 49(1)(b)) and, for providers, is made under the safeguards those providers offer, such as standard contractual clauses or the EU–U.S. Data Privacy Framework.

6. Security

TaxRefund.gg maintains a written information security programme under the Safeguards Rule. Documents and tax data are stored with access restricted to the team handling the order. The full SSN or ITIN is never sent by email. In the event of a security incident affecting personal data, the clients affected and the competent authorities are notified within the time limits required by law.

7. Retention

Data is kept while an order is being followed up with the IRS. Copies of returns are kept for at least three years after the end of the filing period, as required by section 6107 of the Internal Revenue Code. Other data is kept for the time needed to meet legal obligations and to establish or defend legal claims, and is then deleted.

8. Client rights

Clients may ask for access to their data, correction, deletion and information about how it is shared. Clients in the EEA and the United Kingdom also have the rights to restriction of processing, data portability and to object to processing based on legitimate interests, and the right to lodge a complaint with the data protection authority of their country (in the United Kingdom, the Information Commissioner’s Office). Data needed to meet legal obligations or to follow up orders still open with the IRS may be kept for the required period.

9. Contact

Requests about personal data: hello@taxrefund.gg. Person responsible for data protection: Steve Noble.

10. Changes

This policy may be updated. The version in force is the one published on this page, with the date of the last update.