Your Privacy Matters to Irish Tax Hub

At Irish Tax Hub, safeguarding your personal information is paramount. This Privacy Policy explains how we collect, use, share, and protect your data when you use our website. For users within the European Economic Area (EEA), your rights under the General Data Protection Regulation (GDPR) are also respected and outlined below. This Policy also applies to our optional “ITH Assistant” (our AI chat for Irish tax).

What Information We Collect

We collect the following types of personal data:

Identification Details: Your name, address, PPS number, date of birth, and similar identifying information.
Financial Details: Information about your income, expenses, deductions, and other financial data necessary for tax preparation.
Contact Details: Your email address and phone number, so we can communicate with you.
Usage Data: Information about how you interact with our website, collected through cookies and similar technologies (see Google Analytics section below).

ITH Assistant inputs (optional): If you use the ITH Assistant, any text you type (and files you choose to upload) will be transmitted to our AI providers, OpenAI and Anthropic, to generate a response. Irish Tax Hub does not store your ITH Assistant prompts or responses on our own systems beyond what is technically necessary to operate the session. The AI providers may process and log your inputs/outputs under their own terms and privacy policies, which we do not control. Please avoid entering unnecessary personal data and do not share special category or highly sensitive information.

How We Use Your Information (Lawful Basis for Processing under GDPR)

We use your personal information based on the following lawful grounds under the GDPR:

Contractual Necessity: To process your tax return accurately when you request this service.
Legitimate Interests: To communicate with you effectively regarding your tax matters, enhance and improve the services we offer, and for our internal administrative purposes, provided these interests do not override your rights.
Legal Obligations: To meet our legal and regulatory obligations.
Google Analytics & Website Improvement (with consent): If you provide your consent via our cookie banner, we use Google Analytics to collect information about how visitors use our website. This helps us understand user behaviour (e.g., which pages are popular, how long users stay on the site, general location of users) and improve the website’s functionality and user experience. The data collected by Google Analytics may include your IP address (which may be anonymised by Google), device type, browser type, and pages visited. This information is typically aggregated and used for statistical analysis. Google Analytics operates under its own privacy policy, which you can review on Google’s website. We only activate Google Analytics tracking if you explicitly “Accept” analytics cookies through our consent banner. You can manage your consent preferences at any time. Your consent is stored locally on your device and you can withdraw it at any time by clearing your browser cookies.
Controlling Google Analytics: In addition to our consent banner, you can also install the Google Analytics Opt-out Browser Add-on to prevent Google Analytics from collecting information about your visits to our website.
Consent: Where required for specific processing activities, we will obtain your explicit consent.

ITH Assistant lawful basis: When you choose to use the ITH Assistant, we process your inputs to generate a response under our legitimate interests (to provide a fast, searchable interface to public Irish tax materials) and/or your consent (where required) to transmit your query to OpenAI and Anthropic for processing.

Who We May Share Your Information With (International Data Transfers under GDPR)

We may share your information with:

Revenue and Other Government Bodies: As legally required for tax administration. These transfers are necessary for compliance with legal obligations.
Trusted Service Providers: Third-party companies that help us deliver our services, such as payment processors, data storage solutions, and analytics providers (like Google, if you consent to analytics). When using Google Analytics, data may be transferred to Google servers located globally, including potentially outside the EEA. We ensure these providers have adequate data protection measures in place, including where data may be transferred outside the EEA, in which case we rely on appropriate safeguards such as Standard Contractual Clauses or Google’s adherence to such frameworks.
Law Enforcement Agencies: If required by law or to protect our legal rights.

AI providers (OpenAI and Anthropic) and international transfers: If you use the ITH Assistant, your prompts and the tool’s outputs are sent to OpenAI and Anthropic for processing and may be processed outside the EEA. We rely on appropriate safeguards (e.g., Standard Contractual Clauses) used by our providers for international transfers. Irish Tax Hub is not responsible for the AI providers’ independent storage, retention, or security practices. Please review OpenAI’s and Anthropic’s own privacy policies before using the ITH Assistant.

Keeping Your Data Secure

We employ reasonable security measures to protect your personal information from unauthorized access, use, disclosure, alteration, or destruction. Please remember that no online transmission or electronic storage is entirely foolproof.

Because ITH Assistant prompts may be processed by third-party systems (OpenAI and Anthropic), do not include personal information; remove or mask directly identifying details (e.g., PPSN, account numbers, exact addresses).

Your Rights Regarding Your Data (Under GDPR)

If you are located in the EEA, you have the following rights under the GDPR:

Right to Access
Right to Rectification
Right to Erasure (“Right to be Forgotten”)
Right to Restriction of Processing
Right to Data Portability
Right to Object (including to processing based on legitimate interests or for direct marketing)
Right not to be subject to Automated Decision-Making
Right to Withdraw Consent (where processing is based on consent)

To exercise these rights, please contact us. You also have the right to lodge a complaint with a supervisory authority in your country of residence, place of work, or where an alleged infringement of the GDPR has occurred. The ITH Assistant provides informational responses only and does not make decisions with legal effect about you.

Important Notice about the ITH Assistant (Not Professional Advice & No Liability)

The ITH Assistant is an informational resource and is not a substitute for professional tax advice. Outputs may be incomplete, outdated, or inaccurate and do not take account of your full circumstances. No professional–client relationship is created by using the ITH Assistant. Irish Tax Hub provides ITH Assistant outputs “as is” without warranties (express or implied) as to accuracy or fitness for a particular purpose. Irish Tax Hub bears no responsibility or liability for actions taken or not taken based on ITH Assistant outputs. You should seek professional advice before making tax decisions.

Acceptable Use & Rate Limiting (ITH Assistant)

We reserve full discretion to protect the service. We may rate-limit, throttle, suspend, or block access to the ITH Assistant for behaviour that we consider abusive, harmful, unlawful, or disruptive (e.g., automated scraping, high-volume requests, attempts to reverse engineer or circumvent safeguards, or submission of prohibited content).

Updates to This Policy

We may update this Privacy Policy periodically. We will notify you of any significant changes.

Get in Touch

If you have any questions about this Privacy Policy or our data handling practices, please reach out to us at contact@irishtaxhub.ie.

By using our website, you agree to the collection and use of your personal information as described here. By using the ITH Assistant, you acknowledge that your inputs may be processed by OpenAI and Anthropic, may involve international transfers subject to appropriate safeguards, and that you should avoid sharing unnecessary or sensitive personal data.