Privacy Policy
Effective November 8, 2026
This policy explains how Bos Group, LLC, doing business as Bos Advisory ("Bos Advisory," "we," "us"), collects, uses and protects information we receive through our website, email communications, engagement activities and other business interactions.
Information we collect
- Website. Our hosting provider automatically records standard request information such as IP address, browser type and pages visited. We do not use cookies, analytics or advertising trackers, and the site has no forms or user accounts.
- Email communications. When you email us, we receive your name, email address, and the contents of your message and any attachments.
- Engagement activities. When we perform work for a client, we receive information needed to deliver that work. This can include names, job titles and contact details of client personnel, and documents, system access, policies, control evidence and other materials the client provides.
- Other business interactions. Through meetings, calls, proposals, contracting, invoicing, vendor setup, networking and professional events, we may receive names, business contact details, company information, and billing and payment details.
How we use information
- To respond to inquiries and communicate with you
- To scope, perform and deliver the services we are engaged for
- To manage contracts, invoicing, payments and business records
- To operate and secure our website and systems
- To meet legal, tax and regulatory obligations
We do not sell, rent or trade personal information, and we do not use client information for any purpose other than the engagement it was provided for.
Client information
Information received during an engagement is treated as confidential. We use it only to perform the agreed services, limit access to the people doing the work, and handle it according to the confidentiality terms of the client's engagement letter. Where those terms differ from this policy, the engagement letter controls. At the end of an engagement, we return or securely delete client materials as the engagement letter provides, except for copies we must keep for legal or professional records.
How we share information
We share information only when needed:
- Service providers that support our business, such as Cloudflare (website hosting), Google Fonts (website fonts, which receives your IP address when the page loads), Google Workspace (email and file storage), and our bank and accounting providers. They handle data under their own privacy and security terms.
- Professional advisors such as our attorney, accountant or insurer, under duties of confidentiality.
- Legal requirements, when required by law, regulation, subpoena or court order, or to protect our rights.
- Business transfers, if our business is reorganized, merged or sold, subject to the same protections described here.
We share client information with third parties only with the client's permission or as required by law.
How we protect information
We use reasonable administrative, technical and physical safeguards, including access controls, multi-factor authentication, encrypted storage and transmission where available, and secure deletion. No method of storage or transmission is perfectly secure, but we apply the same control discipline we help our clients build.
Retention
We keep information only as long as needed for the purpose it was collected, to maintain business and tax records, or to meet legal and contractual obligations. Engagement materials are kept or deleted according to the client's engagement letter.
Your choices
You can ask us what personal information we hold about you, or ask us to correct or delete it, by emailing us. We will respond within a reasonable time, subject to any records we are required to keep.
Changes
If we update this policy, we will post the new version here and change the effective date above.
Contact
Bos Group, LLC d/b/a Bos Advisory
Kaysville, Utah
troy@bosgrp.com