Privacy Policy

FirsTax Consultants (“FirsTax,” “we,” “us,” or “our”) is committed to protecting the privacy and confidentiality of our clients. This Privacy Policy explains what information we collect, how we use it, and how we keep it safe. By using our website or services, you agree to the practices described here.

1. Information We Collect

We collect information necessary to provide our tax and business compliance services:

• Identity information: Full name, CNIC number, NTN, date of birth.
• Contact information: Phone number, WhatsApp number, email address, and postal address.
• Financial information: Salary details, bank account numbers (IBAN), income sources, asset and liability details for wealth statements, tax deduction certificates.
• Business information: Company name, SECP registration number, business NTN, turnover figures, partnership or shareholding details.
• Usage information: Pages visited on our website, browser type, IP address, and interaction data collected automatically via cookies.

2. How We Use Your Information

We use the information we collect solely for the following purposes:

• Filing your FBR income tax returns, NTN registration, SECP filings, STRN registration, and related services.
• Responding to FBR notices and audit queries on your behalf.
• Preparing wealth statements, bookkeeping records, and compliance documents.
• Communicating with you about your case via WhatsApp, phone, or email.
• Sending service reminders (e.g., upcoming tax deadlines, annual return due dates).
• Improving our website and understanding how visitors use it.

We do not use your information for unsolicited marketing, and we do not sell, rent, or trade your personal information to any third party.

3. Sharing of Information

We share your information only in the following limited circumstances:

• FBR (Federal Board of Revenue): Your tax information is submitted to FBR through the IRIS portal as required to complete your filings.
• SECP (Securities and Exchange Commission of Pakistan): Your company information is submitted to SECP’s eServices portal as required for company registrations and annual returns.
• Legal obligation: If required by law, court order, or government authority, we may disclose information as legally mandated.

We do not share your information with any other third parties without your explicit consent.

4. Data Security

We take the security of your personal and financial information seriously. Our practices include:

• Documents shared via WhatsApp are accessed only by the assigned consultant handling your case.
• Client records are stored securely and are not accessible by unauthorised personnel.
• FBR and SECP portal credentials belonging to clients are never stored in plain text.
• Our website uses HTTPS encryption to protect data transmitted between your browser and our server.

While we take all reasonable precautions, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security but are committed to protecting your data to the best of our ability.

5. Data Retention

We retain client records for as long as necessary to provide ongoing services and comply with legal and regulatory requirements. Under Pakistan tax law, records relevant to a tax return may need to be retained for up to 6 years. Once records are no longer needed, they are deleted or destroyed securely. You may request deletion of your data at any time (subject to legal retention obligations) by contacting us on WhatsApp or by phone.

6. Cookies

Our website uses cookies — small text files placed on your device — to understand how visitors use the site and to improve user experience. Cookies do not contain your personal financial information. You can disable cookies in your browser settings; however, some website features may not function correctly if cookies are disabled.

7. Your Rights

You have the right to:

• Access the personal information we hold about you.
• Correct any inaccurate or incomplete information.
• Request deletion of your data, subject to legal retention requirements.
• Withdraw consent for us to use your information, which will mean we are unable to continue providing services to you.

To exercise any of these rights, please contact us via WhatsApp at 0333 5123377 or call us during office hours (Mon–Sat, 9am–10pm).

8. Third-Party Links

Our website may contain links to external websites such as FBR IRIS, SECP eServices, and Google Maps. We are not responsible for the privacy practices of these third-party sites. We encourage you to review their privacy policies before submitting any personal information.

9. Children’s Privacy

Our services are intended for adults aged 18 and above. We do not knowingly collect personal information from minors. If you believe a minor has provided us with personal information, please contact us immediately so we can delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The updated policy will be posted on this page with a revised “Last updated” date. We encourage you to review this page periodically. Continued use of our services after any changes constitutes acceptance of the updated policy.

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your data, please reach out: