Data Processing Agreement

1. Purpose and Scope

This agreement applies when Quick1099 processes personal or tax information to provide filing services. Processing is limited to documented customer instructions, service delivery, security, and legal obligations.

2. Definitions

• Personal Data: Information that identifies a person or business, including names, addresses, SSNs, EINs, and contact details.
• Tax Data: Financial or tax-related information used to prepare or file information returns.
• Controller: The customer that determines why and how data is processed.
• Processor: Quick1099 when processing data for the customer.

3. Data Processing Obligations

• Process data only to provide the agreed services.
• Limit access to authorized personnel under confidentiality obligations.
• Use encryption, role-based access control, multi-factor authentication, monitoring, and audit logging.
• Provide reasonable assistance with applicable access, correction, and deletion requests.

4. Subprocessing

Quick1099 may use service providers for hosting, payments, communications, and related operations. Subprocessors are expected to accept data-protection obligations appropriate to the services they perform.

5. Data Breach Notification

Quick1099 will notify the customer without undue delay after confirming a covered data breach and will provide available information about scope, impact, mitigation, and required cooperation.

6. Data Retention and Deletion

Personal and tax data is retained only as long as needed for service, tax, legal, security, and contractual requirements. At termination or upon a valid request, data is deleted or anonymized unless retention is required by law.

7. Audits and Compliance Verification

Security and compliance documentation may be made available upon reasonable request. Any audit must protect other customers, confidential information, and service availability.

8. Data Location and Transfers

The current Quick1099 policy states that customer data is processed and stored in the United States unless another arrangement is approved in writing.

9. Liability and Indemnification

Each party is responsible for breaches caused by its own actions, instructions, or failure to meet applicable obligations, subject to the controlling services agreement and law.

10. Term and Termination

This agreement remains effective while Quick1099 processes covered customer data. After termination, data is handled according to the retention and deletion provisions.

11. Contact Information

Data Protection Contact
Quick1099, Inc.
Chicago, IL USA
privacy@quick1099.com