GLBA Privacy Notice

Why You Received This

Book More Jobs, LLC d/b/a Trade Tax Pro ("Trade Tax Pro," "we," "us," or "our") is a tax preparation firm. Under the Gramm-Leach-Bliley Act (GLBA) and the Federal Trade Commission Safeguards Rule (16 C.F.R. Part 314), a firm that prepares tax returns is a "financial institution." The law requires us to give you this notice when our relationship begins, and to keep it available to you.

This notice explains how we handle your nonpublic personal information (NPI). It works alongside our Privacy Policy. Where this notice and the Privacy Policy address the same topic, this notice controls for NPI covered by GLBA.

GLBA Facts at a Glance

Why? Financial companies choose how they share your personal information. Federal law gives consumers the right to limit some, but not all, sharing. Federal law also requires us to tell you how we collect, share, and protect your information.

What? The types of personal information we collect depend on the service you request. They can include your Social Security number and income, your tax return information, and your bank account information.

How? All financial companies need to share customers' personal information to run their everyday business. We share only as needed to prepare and file your return and to operate our firm, as described below. We do not sell your information.

Information We Collect

Nonpublic personal information (NPI) is personally identifiable financial information that you give us to obtain tax services, or that we obtain while providing them. Depending on your engagement, this can include:

• Identifying details: legal name, Social Security number, date of birth, address, and contact information
• Income information: forms such as 1099-NEC, 1099-K, 1099-MISC, W-2, and K-1, plus business bank statements
• Expense and deduction records you submit for your return
• Prior-year tax returns and estimated payment history
• Bank account details used for refunds or payments

You provide most of this information directly. We collect it only through our secure client portal, never by email, text message, or shared drive.

How and Why We Share

We share your NPI only as permitted by law and only as needed to provide the service you requested. Specifically:

• To prepare and file your return: with the licensed CPA assigned to your return, and with tax filing systems and authorities such as the IRS and state tax agencies
• To run our everyday business: with service providers who help us operate, such as our payment processor and our customer-relationship and scheduling platform, each of which is contractually bound to protect your data and use it only for us
• As required by law: in response to a subpoena, court order, or regulatory request

We do not share NPI for marketing. We do not sell, rent, or trade your information, and we do not share it with anyone for their own independent marketing. Because we limit sharing to what the law and your service require, there is no marketing-sharing option for you to opt out of.

How We Protect Your Data

We maintain a Written Information Security Program (WISP) as required by the FTC Safeguards Rule. A designated Qualified Individual is responsible for it. Our safeguards include:

• Risk assessments that identify and address threats to your information
• Access controls that limit NPI to personnel who need it for their work
• Encryption of NPI in transit and at rest where technically feasible
• Multi-factor authentication on systems that hold NPI
• Vendor oversight, so service providers maintain comparable safeguards
• Required security controls for the contractors who prepare returns, including device encryption, current patching, and a prohibition on storing or processing your data outside the United States
• An incident response plan, with periodic testing and training

If a Breach Occurs

If we determine that a breach of your information has occurred, we follow the notification timelines required by federal and Texas law:

• We notify affected individuals without unreasonable delay, and within 60 days of determining a breach occurred
• If a breach affects 250 or more Texas residents, we notify the Texas Attorney General within 30 days
• If a breach affects 500 or more consumers, we notify the FTC as required by the Safeguards Rule
• The contractors who handle your data must report any suspected incident to us within 24 hours

Your Rights

Under the Texas Data Privacy and Security Act (TDPSA), Texas residents may ask us to access, correct, delete, or provide a portable copy of their personal information. We respond to verifiable requests within 45 days, and you may appeal a decision within 60 days. To exercise a right, use the contact details below.

We retain completed tax returns and supporting documentation for a minimum of three years and up to seven years, consistent with IRS guidance and our engagement terms. We cannot delete information that we are legally required to keep.

Contact Us

For questions about this notice or to exercise a privacy right, contact our Qualified Individual: