GLBA Privacy Notice

Why You Received This

Book More Jobs, LLC d/b/a Trade Bookkeeping Pro ("Trade Bookkeeping Pro," "we," "us," or "our") is a bookkeeping services firm. Under the Gramm-Leach-Bliley Act (GLBA) and the Federal Trade Commission Safeguards Rule (16 C.F.R. Part 314), a firm that handles nonpublic personal financial information is a "financial institution." The law requires us to give you this notice when our relationship begins, and to keep it available to you.

This notice explains how we handle your nonpublic personal information (NPI). It works alongside our Privacy Policy. Where this notice and the Privacy Policy address the same topic, this notice controls for NPI covered by GLBA.

GLBA Facts at a Glance

Why? Financial companies choose how they share your personal information. Federal law gives consumers the right to limit some, but not all, sharing. Federal law also requires us to tell you how we collect, share, and protect your information.

What? The types of personal information we collect depend on the service you request. They can include your business bank account records, income and expense data, QuickBooks Online financial data, subcontractor payment records, and accounts receivable and payable information.

How? All financial companies need to share customers' personal information to run their everyday business. We share only as needed to perform your bookkeeping and to operate our firm, as described below. We do not sell your information.

Information We Collect

Nonpublic personal information (NPI) is personally identifiable financial information that you give us to obtain bookkeeping services, or that we obtain while providing them. Depending on your engagement, this can include:

• Identifying details: legal name, business name, address, and contact information
• QuickBooks Online financial data: transactions, chart of accounts, bank and credit-card feeds, reconciliation history
• Income records: invoices, payment receipts, and revenue summaries
• Expense records: receipts, vendor invoices, subcontractor payments, and payroll data you submit
• Accounts receivable and payable balances
• Bank account details connected via bank feed (read-only access)

You provide most of this information directly. We collect it only through secure, authorized QuickBooks accountant access and our client hub, never by email attachment or unencrypted file transfer.

How and Why We Share

We share your NPI only as permitted by law and only as needed to provide the service you requested. Specifically:

• To perform your bookkeeping: with our white-label fulfillment partner, who performs reconciliation, categorization, job costing, 1099 subcontractor tracking, and CPA-reviewed monthly close work inside your QuickBooks Online file under a written data processing agreement (DPA)
• To run our everyday business: with service providers who help us operate, such as our payment processor and our customer-relationship and scheduling platform, each of which is contractually bound to protect your data and use it only for us
• As required by law: in response to a subpoena, court order, or regulatory request

We do not share NPI for marketing. We do not sell, rent, or trade your information, and we do not share it with anyone for their own independent marketing. Because we limit sharing to what the law and your service require, there is no marketing-sharing option for you to opt out of.

How We Protect Your Data

We maintain a Written Information Security Program (WISP) as required by the FTC Safeguards Rule. A designated Qualified Individual is responsible for it. Our safeguards include:

• Risk assessments that identify and address threats to your information
• Access controls that limit NPI to personnel who need it for their work
• Encryption of NPI in transit and at rest where technically feasible
• Multi-factor authentication on systems that hold NPI
• Vendor oversight, so service providers maintain comparable safeguards, including DPA requirements for our fulfillment partner
• Required security controls for bookkeeping personnel, including device encryption, current patching, and a prohibition on storing or processing your data outside the United States
• An incident response plan, with periodic testing and training

If a Breach Occurs

If we determine that a breach of your information has occurred, we follow the notification timelines required by federal and Texas law:

• We notify affected individuals without unreasonable delay, and within 60 days of determining a breach occurred
• If a breach affects 250 or more Texas residents, we notify the Texas Attorney General within 30 days
• If a breach affects 500 or more consumers, we notify the FTC as required by the Safeguards Rule
• Our fulfillment partner must report any suspected incident to us within 24 hours under the terms of our DPA

Your Rights

Under the Texas Data Privacy and Security Act (TDPSA), Texas residents may ask us to access, correct, delete, or provide a portable copy of their personal information. We respond to verifiable requests within 45 days, and you may appeal a decision within 60 days. To exercise a right, use the contact details below.

We retain completed bookkeeping records and supporting documentation for a minimum of three years and up to seven years, consistent with standard professional practice and our engagement terms. We cannot delete information that we are legally required to keep.

Contact Us

For questions about this notice or to exercise a privacy right, contact our Qualified Individual: