Privacy Policy

Side Growth Partners ("we," "our," "us") is a Massachusetts-based CPA practice. This Privacy Policy explains what information we collect through our website, intake forms, scheduling tools, secure document portal, and text-message program, how we use it, who we entrust to help us deliver the services you engage us for, and the choices you have. It applies to information collected in the United States.

1. Information we collect

• Identifiers & contact details: name, email address, phone number, mailing address, and — when required to prepare a return — Social Security Number, Individual Taxpayer Identification Number, and government-issued IDs.
• Tax & financial documents: W-2s, 1099s, K-1s, brokerage statements, prior-year returns, business books and records, and other documents you provide so we can prepare, review, or advise on your filings.
• Communications: emails, form submissions, secure-portal messages, and call notes.
• Mobile number & SMS opt-in metadata: if you opt in to text messages, we record your opt-in selections (transactional and/or promotional), the exact consent wording version, timestamp, IP address, and user agent, as consent evidence required by mobile carriers and The Campaign Registry.
• Basic usage & device data: IP address, browser type, pages viewed, and referring URL, collected through server logs to keep the site secure and functional.

2. How we use information

We use your information only to:

• Deliver the tax, accounting, and advisory services you engage us for.
• Communicate with you about your engagement, appointments, document requests, and filing status.
• Meet legal, regulatory, and professional obligations — including IRS e-file requirements, state board of accountancy rules, the AICPA Code of Professional Conduct, and record-retention laws.
• Detect and prevent fraud, misuse, and unauthorized access.
• Improve the security and functionality of our website and portal.

3. How we share information

We do not sell your personal information, and we do not disclose it for anyone else's marketing purposes. We disclose information only in these narrow situations:

• Service subcontractors we use to deliver our services: IRS and state e-file systems (to transmit your return), Intuit Link (secure document exchange), GoHighLevel / LeadConnector (scheduling, intake, and SMS delivery), our email host, and our cloud storage provider. Each is bound by confidentiality obligations and processes information only on our instructions.
• With your written consent: for example, when you ask us to send documents to a lender, immigration attorney, or wealth advisor such as Kuttin Wealth Management.
• When required by law: to respond to a valid subpoena, court order, or regulatory request.

No mobile information will be shared with third parties/affiliates for marketing/promotional purposes. Information sharing to subcontractors in support services, such as customer service, is permitted. All other use case categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

4. IRC §7216 — taxpayer consent to use or disclose return information

Federal law (Internal Revenue Code §7216 and the corresponding Treasury Regulations) restricts what tax return preparers may do with taxpayer return information. We will not use or disclose your tax return information for any purpose other than preparing, assisting in preparing, or filing your return without your prior signed consent that meets §7216 requirements.

5. Confidentiality — AICPA §1.700

As CPAs we are bound by the AICPA Code of Professional Conduct, including §1.700 (Confidential Client Information Rule). We will not disclose confidential client information without your specific consent, except as permitted or required by professional standards or applicable law.

6. Security

We maintain a Written Information Security Plan aligned with the Gramm-Leach-Bliley Act, the FTC Safeguards Rule (as revised in 2023), IRS Publication 4557, and Massachusetts 201 CMR 17.00. Practical safeguards include TLS encryption for data in transit, an encrypted document portal for sensitive files, multi-factor authentication on administrative systems, access on a least-privilege basis, and ongoing staff training. No system can be guaranteed perfectly secure; please use the secure portal rather than email for sensitive documents.

7. Cookies & analytics

This website uses essential first-party cookies and server logs required to operate the site and remember basic preferences. We do not run third-party advertising cookies, ad-tech pixels, or third-party analytics trackers at this time. If that changes, we will update this policy and provide notice.

8. Data retention

• Client tax records and workpapers: retained for at least seven (7) years after the return is filed, matching IRS guidance and the Massachusetts statute of limitations for tax matters.
• Prospect intake that does not become an engagement: retained for three (3) years, then deleted or de-identified.
• SMS opt-in evidence: retained for the life of the consent plus four (4) years, as required by mobile-carrier and TCR compliance standards.

9. Your privacy rights

You may request access to, correction of, portability of, or deletion of your personal information, and you may opt out of any "sale" or "sharing" (we do neither). Residents of the following states have additional statutory rights, which we honor regardless of residence:

• California — CCPA / CPRA rights of access, correction, deletion, portability, and opt-out of sale/sharing.
• Virginia, Colorado, Connecticut, Utah — comparable rights under the VCDPA, CPA, CTDPA, and UCPA.
• Massachusetts — rights under M.G.L. c. 93H and 201 CMR 17.00 regarding notification of a security breach affecting your personal information.

To exercise a right, email andy@sidegrowthpartners.com. We will verify your request in a manner proportionate to the sensitivity of the information and respond within the timeframe required by applicable law.

10. Children

Our services are not directed to individuals under 18, and we do not knowingly collect personal information from children. If you believe a child has provided us information, please contact us and we will delete it.

11. International visitors

Side Growth Partners is a US practice and this website is directed to US residents. It is not intended for individuals located in the European Union, United Kingdom, or other jurisdictions with data-transfer restrictions.

12. Changes to this policy

We may update this policy from time to time. For material changes we will update the effective date above and, where practical, provide at least 30 days' notice before the change takes effect for existing clients.

13. Contact

Privacy questions, rights requests, or suspected security incidents: andy@sidegrowthpartners.com · (617) 800-9079.

For details on our text-message program, see the "Mobile messaging (SMS)" section of our Terms of Service.