Privacy policy.

Information we collect

We collect information you provide directly: your name, company, email address, telephone number and anything you choose to tell us in an inquiry or during an engagement. For clients, this extends to the financial records, tax documents and identifying information necessary to perform the services you have engaged us for.

This website does not use advertising cookies or third-party analytics trackers. Web fonts are loaded from Google Fonts, which receives your IP address as part of that request. No other third party receives information about your visit.

How we use information

Client information is used solely to perform the services described in your engagement letter, to meet our professional and legal obligations, and to communicate with you about your engagement.

• Preparing and filing returns, statements and reports on your behalf
• Communicating about deadlines, deliverables and questions arising from the work
• Meeting record-retention and professional standards requirements
• Responding to inquiries submitted through this website

How we share information

We do not sell client information and we do not share it for marketing purposes by anyone. We disclose information only in these circumstances:

• With your written authorization, for example to a lender, attorney or another advisor you have asked us to speak with
• To taxing authorities as part of a filing or a representation engagement you have authorized
• To service providers who host or process data on our behalf under written confidentiality obligations
• Where compelled by subpoena, court order or applicable law, or as part of the AICPA peer review program

Peer reviewers and any other party granted access under professional standards are themselves bound by confidentiality requirements.

Confidentiality and security

Client information is protected under the confidentiality rules of the AICPA Code of Professional Conduct and Massachusetts law. We maintain administrative, technical and physical safeguards including access controls, encryption in transit and at rest, and a written information security program as required by 201 CMR 17.00.

Please do not send Social Security numbers, account numbers or other sensitive information by ordinary email. Clients should use the secure portal for document exchange; we will provide access at the start of any engagement.

Retention

We retain engagement records for the period required by professional standards, the applicable statute of limitations and our record retention policy, generally seven years from the date a return is filed or an engagement is completed, and longer where a specific requirement applies.

Inquiries submitted through this website that do not become engagements are retained for up to two years and then deleted.

Your rights

You may request a copy of the information we hold about you, ask us to correct anything inaccurate, or withdraw consent to a specific disclosure. Some requests are limited by our obligation to retain records under professional standards.

Write to us at hello@obriencpas.com or 100 Franklin Street, Suite 500, Boston, MA 02110. We respond to requests within thirty days.

Changes to this policy

We update this policy when our practices change. The date at the left reflects the most recent revision. Material changes affecting existing clients are communicated directly rather than only posted here.