Protecting taxpayer data requires operational safeguards—not merely a website statement. This page outlines STAWILL's intended security posture and key rights; it does not certify that controls are already fully deployed.
Protect sensitive information
Do not send Social Security numbers, dates of birth, bank details, tax returns, driver license images, passwords or IRS account credentials through site chat or ordinary email. A vetted secure document exchange process must be established before sensitive intake begins.
Safeguards and incident handling
Before handling taxpayer records, STAWILL should implement and maintain a written information security plan (WISP), role-based access, multifactor authentication, encryption where appropriate, vendor oversight, training, backup/recovery, retention and secure disposal procedures, and an incident response process as applicable under the FTC Safeguards Rule and federal/state law.
Taxpayer information rules
Federal law restricts return preparers' disclosure and use of tax return information for non-return-preparation purposes, subject to defined exceptions or proper, separate taxpayer consent. No generic checkbox on this website is a substitute for the required consent format.
Official resources
IRS Publication 4557 — Safeguarding Taxpayer Data ↗
IRS Protect Your Clients; Protect Yourself ↗
FTC Gramm-Leach-Bliley Act guidance ↗
Report a concern
For a potential STAWILL security or privacy concern, email stawilltax@yahoo.com without including sensitive credentials or taxpayer identifiers.