Privacy Policy

Last updated: 14 April 2026

This Privacy Policy explains what personal data Tax Montenegro collects, why we process it, how long we keep it, and how you can exercise your rights. We apply the data protection rules in force in Montenegro, and we apply the GDPR where it is actually relevant, especially if we offer services to people in the EU or monitor the behaviour of users located in the EU.

1. Who we are

Tax Montenegro is a brand of [insert full legal entity name], with its registered office at [insert full address], Podgorica, Montenegro. For the purposes of personal data protection law, the data controller is [insert full legal entity name].

For any privacy or data processing questions, you can contact us at:
Email: info@taxmontenegro.com
Address: [insert full address]
Phone: [optional]

Tax Montenegro provides advisory services in the areas of strategic analysis, fiscal risk, structural design, and crisis management. This policy applies to website enquiries, email communication, business proposals, and contractual relationships connected to those services.

2. What data we collect

We collect only the data we need for communication, proposal preparation, service delivery, and the secure operation of the website.

This may include your full name, company name, job title, email address, phone number, message content, information shared in business communication, and technical data such as IP address, device type, browser, access time, log records, and cookie settings.

If we begin a business relationship, we may also process data needed for contracts, invoicing, accounting, and evidence of delivered services. Please do not send us sensitive personal data unless we have expressly asked for it and there is a clear legal basis for doing so.

3. Why we process your data

We process your data to respond to enquiries, schedule consultations, prepare proposals, enter into and perform contracts, manage business communication, and comply with legal obligations.

We may also use data to protect the website, prevent misuse, maintain basic security records, and, where required and where you have given consent, for website analytics or the sending of professional updates.

The legal basis for processing may be your consent, steps taken at your request before entering into a contract, performance of a contract, compliance with a legal obligation, or our legitimate interest where that basis is allowed and does not override your rights and freedoms.

4. Who we share data with

We do not sell your data and we do not disclose it to third parties for their own marketing purposes.

We may share data only where this is necessary for website and business operations, for example with a hosting provider, email provider, IT support, accountants, legal advisers, or other processors who handle data only under our instructions and under confidentiality obligations.

We may also disclose data to competent authorities where required by law, court order, regulator request, or another binding legal basis.

5. Transfers outside Montenegro

If we use hosting, email, analytics, or other tools provided by service providers whose servers are located outside Montenegro, we transfer your data only where there is an appropriate legal basis and adequate safeguards.

Under Montenegrin law, transfers of personal data outside Montenegro are subject to specific rules, including cases involving EU and EEA member states or countries that ensure an adequate level of protection. Where the GDPR applies, we assess territorial scope and international transfers in line with that regulation and related guidance.

6. Cookies and similar technologies

The website may use necessary cookies that support core functionality, security, and the proper display of pages. These cookies may be set without your consent where they are genuinely required for the website to work.

We use analytics, statistical, or other non-essential cookies only after your choice, where such consent is required. You may change your choice through the cookie banner, if available, or through your browser settings.

If we do not currently use marketing cookies, we will not activate them without prior consent. If we introduce them later, we will update this policy and the cookie banner.

7. Security and retention periods

We apply technical and organisational measures appropriate to the level of risk. This includes restricted access to data, protection of administrator accounts, access control for systems, regular maintenance, and internal procedures that reduce the risk of unauthorised access, loss, or misuse of data.

We do not keep personal data longer than necessary for the purpose for which it was collected, unless the law requires a longer period or longer retention is needed to protect legal claims.

In practice, this means the following:

Contact form submissions and email enquiries are kept until the communication is complete, and for no longer than 12 months from the last contact, unless there is a reason to keep them longer because of a contract, dispute, or legal obligation.

Data contained in proposals, contracts, invoices, and accounting records is kept for as long as required by tax, accounting, and other applicable laws.

Cookie consent records and basic security logs are kept for as long as needed to prove user choices, protect the website, and respond to possible misuse.

Analytics data from web tools is kept for no longer than 14 months, if that setting is active in the tool used. If we use a different retention period, we will update this policy to reflect the actual setting.

8. Your rights

You have the right to request confirmation of whether we process your personal data, access to that data, correction of inaccurate or incomplete data, and deletion where the processing is unlawful or no longer necessary.

Where the GDPR applies, you may also have the right to restrict processing, object to processing, request data portability, and withdraw consent at any time where processing is based on consent. The right to object is especially relevant for direct marketing.

Under the applicable Law on Personal Data Protection of Montenegro, written requests for information about processing, correction, or deletion are generally answered within 15 days, and requests for protection of rights before the competent supervisory authority are generally decided within 60 days.

9. How to exercise your rights

You may send your request to info@taxmontenegro.com with a clear description of what you are asking for. To protect privacy, we may request additional proof of identity before we respond.

If you believe we have not handled your data properly, you have the right to lodge a complaint with the competent authority in Montenegro: Agency for Personal Data Protection and Free Access to Information, Bulevar revolucije 11, Podgorica, email: azlp@azlp.me.

10. Changes to this policy

We may update this Privacy Policy from time to time because of changes in law, technical solutions, services, or data processing practices. Each new version will be published on this page with the date of the latest update.

We recommend that you review this page periodically, especially before sending an enquiry or submitting data through the website.