GDPR Privacy Notice — EEA/UK Users

1. Scope

This notice applies to users located in the European Union (EU), European Economic Area (EEA), and the United Kingdom (UK) who access https://legitzone.law/ or use LegitZone's document management, filing, and compliance technology services.

2. GDPR Principles We Follow

1. Lawfulness, fairness, and transparency
2. Purpose limitation
3. Data minimization
4. Accuracy
5. Storage limitation
6. Integrity and confidentiality
7. Accountability

3. Data Processing

We may process personal data to provide and improve our platform, including:

1. Account creation and user authentication
2. Legal document creation, management, and secure storage
3. Tax extension filing workflows
4. Compliance workflows and automation features
5. Security monitoring and fraud prevention
6. Customer support and service communications

4. Lawful Basis for Processing (Article 6 GDPR)

Where applicable, we process personal data under one or more of the following lawful bases:

• Contract: To deliver document management, expert-matching, and extension filing services you request.
• Consent: For non-essential cookies, analytics, and marketing communications.
• Legal Obligation: To satisfy tax, accounting, statutory retention, and law-enforcement requirements.
• Legitimate Interests: For platform security, debugging, fraud prevention, and service quality improvements.

5. International Data Transfers

If personal data is transferred outside the EU/EEA/UK (including to the United States), we implement appropriate safeguards, such as:

1. Standard Contractual Clauses (SCCs) approved by the European Commission
2. UK International Data Transfer Addendum where applicable
3. Encryption in transit and at rest
4. Strict role-based access controls and confidentiality agreements

6. Rights of Data Subjects

EU, EEA, and UK users have the right to:

1. Access their personal data
2. Request correction of inaccurate data
3. Request erasure (“Right to be Forgotten”), where applicable
4. Object to processing based on legitimate interests
5. Restrict data processing
6. Data portability
7. Withdraw consent at any time
8. Not be subject to decisions based solely on automated processing that significantly affect you
9. Lodge a complaint with your local data protection supervisory authority

Requests can be submitted via: support@legitzone.law. We respond within 30 days.

7. Data Protection Contact

We have not appointed a Data Protection Officer. For GDPR questions, inquiries, or data rights requests, please contact our privacy team at support@legitzone.law. We will review and respond to your inquiry within 30 days.