✅ GDPR Compliant
🇪🇺 GDPR Compliance Statement
GaelTax is fully compliant with the General Data Protection Regulation (GDPR) and committed to protecting your personal data and privacy rights.
Our GDPR Compliance Framework
🔒 Data Protection
All personal data is encrypted at rest and in transit using industry-standard AES-256 encryption.
🇪🇺 EU Data Residency
Your data is stored exclusively in EU data centers (Ireland) and never transferred outside the EU.
⚖️ Legal Basis
We process data based on legitimate interest for VAT compliance and contractual necessity.
🎯 Data Minimization
We only collect and process data necessary for VAT compliance and service delivery.
Your GDPR Rights
- Right to Access: Request a copy of your personal data
- Right to Rectification: Correct inaccurate personal data
- Right to Erasure: Request deletion of your personal data
- Right to Portability: Export your data in a machine-readable format
- Right to Object: Object to processing of your personal data
- Right to Restrict: Limit how we process your data
Data We Collect
- Business information (name, VAT number, address)
- Contact details (email, phone)
- Financial transaction data for VAT compliance
- Usage analytics (anonymized)
Data Retention
We retain your data for the minimum period necessary:
- VAT Records: 6 years (Irish Revenue requirement)
- Account Data: Until account deletion + 30 days
- Analytics: 24 months (anonymized)
Security Measures
- AWS enterprise-grade infrastructure
- End-to-end encryption (TLS 1.3)
- Regular security audits and penetration testing
- Multi-factor authentication
- Role-based access controls
- Automated backup and disaster recovery
Last Updated: January 2026
This compliance statement is reviewed quarterly and updated as needed to reflect current practices and regulations.