How we handle your information.

What we collect

Through this website, only what you type into the consultation form: your name, business name, mobile number or email address, the service you're enquiring about, and anything you choose to write in the message box.

If you become a client, we will separately collect the records needed to do the work — your BIR Certificate of Registration, books of accounts, sales invoices and official receipts, bank statements, payroll records and employee details, and government registration numbers. Those are collected under a client engagement, not through this site.

Why we collect it

• To reply to your enquiry and arrange a consultation
• To prepare, file and support your tax returns and statutory filings
• To maintain your books of accounts and prepare financial statements
• To comply with our own obligations under Philippine tax, labour and anti-money-laundering law

We do not sell your information, and we do not use it for advertising or profiling.

Who sees it

Access is limited to the FiscalFlow personnel assigned to your account. Client information is not discussed outside the firm.

We disclose information to third parties only where you have instructed us to, or where the law requires it — for example, filings lodged with the Bureau of Internal Revenue, the Securities and Exchange Commission, the Department of Trade and Industry, your local government unit, SSS, PhilHealth and Pag-IBIG.

This website is hosted by Netlify, and consultation form submissions are processed and stored on Netlify's infrastructure. Web fonts are served by Google Fonts. Both may process limited technical data such as IP address as part of delivering the page.

How long we keep it

Enquiries that do not become engagements are retained for up to one year, then deleted.

Client accounting records are retained for the period required by the National Internal Revenue Code and BIR regulations, which is generally ten years from the deadline for filing or the date of filing of the relevant return, whichever is later. After that, records are securely disposed of.

How we protect it

We apply organisational, physical and technical measures proportionate to the sensitivity of accounting records: access limited to assigned personnel, encrypted transmission over HTTPS, access-controlled cloud storage, and locked physical storage for hard copies.

No system is perfectly secure. If a breach occurs that is likely to put your rights at serious risk, we will notify you and the National Privacy Commission as required by law.

Your rights

Under the Data Privacy Act you have the right to be informed, to object, to access your information, to correct it, to have it erased or blocked in the circumstances the law allows, to data portability, to damages for violations, and to lodge a complaint with the National Privacy Commission.

To exercise any of these, contact us using the details below. We will respond within a reasonable period. Note that some records must be retained for the statutory periods above even after an engagement ends.

Cookies

This website does not set cookies and does not run analytics or advertising trackers. Nothing about your visit is tracked beyond the standard server logs kept by our host.