Privacy Policy

1. Who we are

Expat Filings (expatfilings.com) is operated by:

Jonathan Lee
Entrepreneur individuel
SIRET: 83325067300039
1 rue Marguerin, 75014 Paris, France

Contact: contact@expatfilings.com

For the purposes of the GDPR (Regulation (EU) 2016/679), Jonathan Lee is the data controller for personal data collected through this website.

2. What this site does

Expat Filings publishes educational content on US–France cross-border tax compliance for American expatriates. The site also offers an introduction service: visitors who wish to be connected with a licensed tax professional suited to their situation may submit a referral intake form. Submission of that form is a voluntary, user-initiated request.

3. Regulatory disclaimer

Expat Filings is not registered as a financial investment adviser (Conseiller en Investissements Financiers) with the AMF (Autorité des marchés financiers), nor is it registered with any equivalent financial regulatory authority in any other jurisdiction, including the SEC, FINRA, or IRS in the United States.

The content published on this site is educational and informational only. It does not constitute financial, tax, legal, or investment advice. A referral to a tax professional through this site is not a regulated financial service.

Users are responsible for verifying the relevance of any information to their personal situation and for seeking qualified professional advice as appropriate.

4. What data we collect and why

We collect personal data through two separate flows, each with its own legal basis under Article 6 GDPR.

4.1 Email opt-in

Data collected: email address

Purpose: to send you the Expat Filings newsletter: US–France tax deadline reminders, summaries of relevant laws, rulings, and regulatory decisions, and related informational updates on cross-border tax topics. Issues may include links to professional services for subscribers who wish to take further steps.

Legal basis: Article 6(1)(a) GDPR — your freely given, specific, informed, and unambiguous consent, recorded at the time of sign-up. You may withdraw consent at any time (see Section 7).

Retention: your email address is kept on our list for as long as you remain subscribed. After unsubscribing, your data is deleted or anonymised within 30 days. If you have not interacted with our emails for an extended period (3 years), we will treat your subscription as inactive and delete your address.

4.2 Referral intake form

Data collected: first name, last name, email address, phone number (optional), and the details of your tax or cross-border situation that you choose to share in the form.

Purpose: to process your request to be introduced to a licensed tax professional who can assist with your situation.

Legal basis: Article 6(1)(b) GDPR — processing is necessary to take steps at your request prior to entering into a service relationship with the professional you are requesting to be connected with.

Retention: referral intake data is retained for 12 months from the date of submission, then deleted. If the referral results in an ongoing relationship with a professional partner, that partner retains your data under their own privacy policy (see Section 5).

5. Who receives your data

Email platform

Both email communications (newsletter) and referral intake submissions are processed via Brevo SAS (formerly Sendinblue), a French company acting as our data processor under a data processing agreement. Brevo stores contact data and submission details solely on our instructions.

Referral partners

When we identify a professional partner suited to your request, we communicate your submission details to that partner by email. At that point, the partner receives your data as an independent data controller and processes it under their own privacy obligations.

Hosting

This website is hosted by Vercel Inc., 340 Pine Street, Suite 701, San Francisco, CA 94104, United States. Vercel processes server logs and request data as part of hosting the site. Vercel does not publish a direct telephone number; privacy enquiries should be sent to: privacy@vercel.com. Vercel is located in the United States. Transfers are carried out under standard contractual clauses (Article 46 GDPR).

6. International data transfers

Our hosting provider, Vercel, is based in the United States. Personal data processed in connection with site hosting is therefore transferred outside the European Economic Area. This transfer is carried out on the basis of standard contractual clauses (Article 46 GDPR).

Our email platform, Brevo SAS, may also transfer personal data outside the EEA in connection with its sub-processing infrastructure. Such transfers are carried out under standard contractual clauses (Article 46 GDPR).

7. Your rights

Under the GDPR, you have the following rights in respect of your personal data:

• Right of access — to obtain a copy of the data we hold about you (Article 15 GDPR).
• Right to rectification — to have inaccurate data corrected (Article 16).
• Right to erasure — to request deletion of your data in the circumstances set out in Article 17 GDPR.
• Right to restriction — to request that we limit how we process your data in certain circumstances (Article 18).
• Right to data portability — where processing is based on consent or contract and carried out by automated means, to receive your data in a structured, commonly used, machine-readable format (Article 20 GDPR).
• Right to withdraw consent — where processing is based on consent, you may withdraw at any time without affecting the lawfulness of processing before withdrawal (Article 7(3) GDPR). To unsubscribe from our emails, use the unsubscribe link in any email we send.

To exercise any of these rights, contact us at: contact@expatfilings.com. We will respond within one month of receiving your request.

8. Right to lodge a complaint

If you believe that our processing of your personal data infringes the GDPR, you have the right to lodge a complaint with a supervisory authority, in particular in the EU Member State of your habitual residence, place of work, or place of the alleged infringement (Article 77 GDPR).

In France, the supervisory authority is:

CNIL — Commission nationale de l'informatique et des libertés
3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07
www.cnil.fr

9. Cookies and analytics

This site does not use tracking or advertising cookies and does not load third-party advertising scripts.

This site uses Vercel Analytics, a privacy-friendly analytics tool provided by our hosting provider, Vercel Inc. Vercel Analytics does not use cookies, does not track individual users across sessions or sites, and does not generate user-level profiles. Traffic data is aggregated and used solely to understand overall site usage (pages visited, referral sources, general geographic region).

10. Changes to this policy

If we make material changes to this policy, we will update the date at the top of this page. We encourage you to review this page periodically.