Privacy Policy

Effective Date: February 27, 2026

 

Information We Collect

We collect personal and financial information in the course of providing tax, accounting, and advisory services, including identifiers, taxpayer information, financial records, business and trust information, payroll data, identification documents, and client communications. We may also collect limited website or portal usage information. Information may be obtained directly from clients or authorized third parties.

 

How We Use Information

We use client information solely to provide professional services, prepare and file tax returns, administer engagements, process billing and payments, communicate with clients and authorized representatives, comply with legal and professional obligations, and maintain the security of our systems.

 

How We Disclose Information

We disclose personal and financial information only as permitted or required by law and professional standards, including to government authorities, authorized client representatives, and core service platforms used to deliver our services, such as TaxDome (client portal), Microsoft 365 (email and document systems), and CCH Axcess (tax software). We also use MicroMenders Inc. (managed IT services) and Stripe (payment processing). Other operational vendors may support accounting, document, or communication functions, subject to confidentiality and security obligations. We do not sell personal information.

 

Professional Confidentiality

We maintain client confidentiality in accordance with applicable professional standards and legal requirements and do not disclose or use tax return information except as permitted by law or with authorization.

 

Data Security

We maintain administrative, technical, and physical safeguards including secure client portal use, access controls, multi-factor authentication, encryption, vendor due diligence, and staff confidentiality commitments.

 

Data Retention

We retain client information as necessary to provide services and comply with legal and professional obligations, generally at least seven (7) years after completion of services unless longer retention is required.

 

California Privacy Rights

To the extent applicable under California law, individuals may request access to or correction of certain personal information. Some information may be exempt due to professional confidentiality or financial privacy rules. Requests may be submitted using the contact information below.

 

Incident Response

In the event of a data security incident involving personal information, we will investigate promptly and provide notice as required by law and professional obligations.

 

Contact

 

Ryan Layne, Privacy Officer

Legacy Advisory Services, LLC

1212 Broadway Plaza, Suite 2100
Walnut Creek, CA 94596

[email protected]

925-891-1407