Privacy Policy

Our Privacy Policy provides in-depth information about how HEEM Consulting collects, uses, discloses, and secures personal information. We encourage you to read this policy in full to understand our data practices.

By using our website or services, you acknowledge that you have read and agree to this Privacy Policy, which is incorporated into our Terms & Conditions. Below is an overview of key points in our Privacy Policy:

1. Information We Collect
We may collect personal information from you in a variety of ways, both online and offline, in the course of our business:

• Information You Provide Directly: When you interact with us or use our website, you may provide personal details such as your name, contact information (email, phone number, address), job title, organization, or any other information you choose to give us. For example, we collect personal information when you fill out a contact form, subscribe to newsletters, register for events/webinars, download reports, or communicate with us by email or phone. If you apply for a job with HEEM Consulting, you may provide information like your resume/CV, employment history, and references as part of the application process. We will only use this information for its intended purpose and in accordance with this Privacy Policy.

• Information Collected Automatically: When you visit our website, we automatically collect certain data about your visit through cookies and similar tracking technologies. This includes technical information such as your IP address, browser type, device identifiers, operating system, referring website, and pages you viewed on our site, as well as the dates/times of access. We use common web technologies (like cookies, web beacons, and analytics scripts) to gather this information. Cookies are small text files placed on your browser to remember your preferences and enhance your experience. For instance, cookies can enable certain site features and personalize content based on your prior interactions. For more details, please see our Cookies Policy below. You can control cookies through your browser settings or our cookie consent tool.

• Information from Third Parties: We may receive personal information about you from third-party sources in the course of our business. For example, if a colleague or friend refers you to our services, they might provide your name and contact information. We might also obtain professional contact details from public websites, networking platforms (like LinkedIn), or industry directories as part of our marketing and outreach efforts. Additionally, if we partner with an event organizer, university, or business partner, they may share attendee or participant information with us (in accordance with applicable laws). We treat any such third-party provided data in line with this Privacy Policy and any additional restrictions imposed by the source.

• Client Data: In providing consulting services, we may handle personal information on behalf of our clients (for example, information about our clients’ employees, students, or customers, if relevant to a project). Such information is processed under the terms of our contracts with those clients and is subject to confidentiality obligations. We use client-provided data only for the purposes of delivering services to that client and as instructed by the client. We do not use or disclose client-provided personal data for our own purposes, except as required by law or with the client’s permission.

• Sensitive Information: We do not actively seek to collect sensitive personal information (such as Social Security numbers, financial account passwords, health information, or information about racial or ethnic origin, etc.) through our general website. We ask that you not provide any sensitive personal data unless it is necessary for a specific purpose and you have provided consent. If such information is provided to us (for instance, as part of a consulting engagement or a legal requirement), we will secure and handle it with extra care and only use it for the limited purpose for which it was provided.

Note: Our website and services are intended for use by adults. We do not knowingly collect personal information from children under the age of 13. If you are a minor or under 13, please do not submit any personal information to us. If we learn that we have inadvertently collected information from a child under 13, we will take steps to delete it. Parents or guardians who believe we might have collected data from their child should contact us so we can remove it.

2. How We Use Your Information
We use the personal information we collect for the following business purposes (and similar related purposes):

• To Provide and Improve Services: We process your information to operate our consulting business and deliver services that you request. This includes using personal data to communicate with you, plan and execute consulting engagements, provide advice/reports, and ensure we meet our contractual obligations to you. For example, if you engage us for a consulting project, we will use your contact information to keep in touch and use any relevant data you provide to formulate our recommendations or deliverables. We also use collected information to personalize and improve your experience with our firm, such as remembering your preferences on our website or tailoring content to your interests. Internally, we may analyze client feedback and interactions to improve our offerings and customer service.

• To Communicate with You: We may use your contact information (email, phone, mailing address) to send you important notices or updates about our services. This can include responding to inquiries you send us, sending confirmations or informational materials you requested, and notifying you of changes to our policies or terms. With your consent or as otherwise permitted by law, we may also send you marketing communications to inform you about our services, industry insights, newsletters, events, or resources that we believe could be of interest. You have control over marketing emails – see Your Privacy Choices below on how to opt out of or customize these communications at any time.

• For Business Development and Marketing: In accordance with applicable law, we might use contact details and preferences to identify prospective clients and decision-makers in our industry verticals (such as higher education, if that’s a sector we serve) and to promote our consulting solutions. We could combine information you provide with data from public sources to better understand your organization’s needs. Any outreach will respect your marketing choices. We do not engage in invasive profiling or automated decision-making that would have legal effects on you without your knowledge. Any analyses we perform on user or client data for internal research or service improvement are typically done on aggregated or de-identified data whenever possible, so that individuals are not identified.

• For Legal Compliance and Security: We may use or disclose personal information as necessary to comply with applicable laws, regulations, and legal processes. This includes using data to respond to lawful requests by public authorities, to meet national security or law enforcement requirements, or to fulfill reporting obligations (e.g. tax or financial record-keeping laws). We also use personal information to protect our rights and the rights of others. For instance, we may use data to investigate and prevent fraud, spam, abuse, security incidents, and other harmful or illegal activities. If you use our website, we monitor for and may block unauthorized login attempts or violations of our Terms & Conditions. We reserve the right to use personal information to protect the safety, rights, or property of HEEM Consulting, our clients, our employees, or the public as required or permitted by law.

• Other Purposes: If we intend to use your personal information for a purpose that is not outlined in this Privacy Policy, we will provide you with specific notice at the time of collection and obtain your consent if required. We will not use your data in ways that are incompatible with the purposes for which it was collected, without updating you and obtaining consent when necessary.

3. Cookies and Tracking Technologies
As noted above, our website uses cookies and similar tracking technologies to provide a smooth user experience and to gather analytics about site usage. For detailed information, please review our Cookies Policy below. In summary:

• Cookies help us recognize you when you return to our site, remember your preferences (such as language or region), and understand which content on our site is most useful to visitors. Some cookies are strictly necessary for the site to function (for example, to enable navigation or remember your privacy preferences). Others are optional and help us improve the site (like analytics cookies that collect aggregate usage data, or functionality cookies that remember your settings). We may also use cookies related to social media plugins or embedded content.

• We may partner with third-party analytics providers (such as Google Analytics) to understand how visitors use our site on an anonymized, aggregated basis. These third parties may set their own cookies or use similar technologies to collect usage information and report site trends to us. We use this information to compile statistics and to make our website content more relevant and user-friendly. Information about how Google uses data from our site can be found in Google’s own privacy policy (see Cookies Policy for reference).

• Your Choices: On your first visit to our site, you will be presented with a cookie consent notice (banner) where you can agree to our use of certain cookies. You can modify or withdraw your consent at any time by using the Change Cookie Consent link or tool on our site (see below). Additionally, most web browsers allow you to control cookies through settings that can block or delete cookies. Important: Please note that if you disable cookies entirely, some features of our site may not function properly or your experience may be degraded. For example, blocking cookies might prevent videos from playing, logins from persisting, or preferences from being saved. We recommend allowing at least “necessary” cookies for the best experience.
For more information, please read our Cookies Policy section, which provides further details on types of cookies and how to manage them.

4. How We Share Your Information
HEEM Consulting respects the confidentiality of your personal information. We do not sell or rent your personal data to third parties for their own marketing or profit. However, in the normal course of business, we may share certain personal information with others in the following circumstances:

• Service Providers: We use trusted third-party companies and individuals to help us operate our business and provide services on our behalf (e.g. IT hosting and maintenance providers, cloud storage services, email service providers, analytics and marketing tool providers, event management partners, etc.). These service providers will have access to personal information only as needed to perform tasks for us and are contractually required to protect it and use it solely for the purposes we specify. For example, if we use a third-party email platform to send our newsletter, that provider will process your email address but cannot use it for any other purpose.

• Business Partners and Affiliates: In some cases, we may partner with other organizations or consultants to jointly offer services or host events. If you register for such a co-hosted event or offering, we might share attendee information (like name, organization, and email) with the partner as needed to coordinate the event. We will let you know at the time of collection if a partner needs your information (for instance, in an event signup form). Any such partners are expected to use your data in accordance with applicable privacy laws and only for the joint activity, unless you have an independent relationship with them. Additionally, if HEEM Consulting has any affiliated entities or subsidiaries in the future, we may share information within our corporate family as allowed by law, so that they can assist in providing services or support to you.

• Legal Requirements and Protection: We may disclose personal information when required to do so by law or in response to valid legal process (such as a subpoena, court order, or discovery request). We may also disclose information if we believe, in good faith, that it is necessary to (i) comply with a legal obligation, (ii) protect and defend the rights, property, or safety of HEEM Consulting, our clients, or others, (iii) investigate or assist in preventing any violation of law or our policies (such as suspected fraud or security issues), or (iv) respond to an emergency that poses an imminent threat to health or safety. For example, if our records indicate someone may be engaging in unlawful activities that could harm others, we might alert law enforcement consistent with applicable law.

• Business Transfers: As a boutique consulting firm, we do not anticipate major corporate changes. However, in the unlikely event that HEEM Consulting undergoes a business transition such as a merger, acquisition by another company, reorganization, or sale of all or part of its assets, personal information in our possession may be part of the transferred assets. We would only do this as part of a lawful transaction and with appropriate protections in place. If such a transfer affects your personal information, we will endeavor to notify you (for example, via a notice on our website or other communication) and ensure the successor organization honors the material terms of this Privacy Policy or provides you an opportunity to opt out of the transfer.

• With Your Consent: In any situation not covered by the standard purposes above, we will ask for your consent before sharing your personal information. You have the right to decline such sharing if it ever arises.

No Unauthorized Third-Party Marketing: We do not share personal information with unaffiliated third parties for their independent marketing or advertising purposes. For instance, we will not sell your email address to outside companies looking to market to you. If we ever offer newsletters or content in collaboration with a partner that wants to market to you, we will do so on an opt-in basis or give you clear notice and choice.

5. Data Security
HEEM Consulting takes the security of your personal information seriously. We have implemented commercially reasonable administrative, technical, and physical safeguards designed to protect the personal information we collect against unauthorized access, disclosure, alteration, or destruction. These security measures include, for example, access controls to data (so that only those with a need-to-know can access your information), network security measures (like firewalls and encryption in transit for sensitive data), and secure data storage practices. We also train our staff on privacy and security best practices to ensure that your information is handled with care and confidentiality.

Despite our efforts, please understand that no method of transmission over the Internet or method of electronic storage is 100% secure. We cannot guarantee absolute security of information, and you transmit data to us at your own risk. However, we utilize industry-standard security protocols and continually update our practices to mitigate risks. If we become aware of a data breach that compromises your personal information, we will notify you and the appropriate authorities as required by law.

To help maintain security, we also encourage you to use caution when transmitting personal information to us via email or web forms (for example, avoid sending highly sensitive information through unsecured channels). If you have an online account with us (in the event we offer client portals or similar in the future), protect your login credentials and log out after use. If you suspect any unauthorized access to your personal information or have questions about our data security, please contact us immediately.

6. Data Retention
We will retain your personal information for as long as necessary to fulfill the purposes for which it was collected, as outlined in this policy, unless a longer retention period is required or permitted by law. For example, if you are a client, we will retain your data for the duration of our business relationship and thereafter as needed for legitimate business purposes (such as maintaining records of services provided, for accounting or legal reasons). We also periodically review the data we hold, and when personal information is no longer needed, we will securely dispose of it or anonymize it.

Specific retention periods can vary depending on the type of data and applicable laws. Financial transaction records may be kept to comply with tax or audit obligations, while general inquiries might be deleted after a shorter period if no longer needed. We strive not to keep personal data in identifiable form for longer than necessary.

7. Your Privacy Rights
We respect your rights to control your personal information. Various privacy laws (in the United States and globally) provide individuals with certain rights regarding their personal data. We discuss these rights in detail in the section “Your Privacy Rights” below. In summary, subject to the scope of applicable law and certain legal exceptions, you have the right to request that we:

• Provide access to and/or a copy of the personal information we have about you (right of access/know).

• Correct or update any inaccurate or incomplete personal information we hold about you (right to rectification).

• Delete the personal information we have about you (right to deletion), although this is subject to exceptions (for example, we may retain data as required for legal obligations or ongoing legitimate business needs).

• Not sell your personal information or share it for targeted advertising purposes, and to opt out of any such “sale” or “sharing” if those were to occur (right to opt-out).

• In certain cases, provide you with a copy of your personal data in a portable format, or transmit it to another entity at your request (right to data portability).

• Limit the use and disclosure of your sensitive personal information, if we ever were to collect sensitive data about you beyond what’s necessary (right to limit use of sensitive info).

• Withdraw any consent you have given us for processing (to the extent we rely on consent), such as unsubscribing from marketing emails or turning off non-essential cookies (right to withdraw consent).

We are committed to honoring these rights for all individuals, to the extent applicable, even if specific laws (like the California Consumer Privacy Act, Connecticut Data Privacy Act, etc.) may formally apply to certain residents. This means we will do our best to fulfill your requests regarding personal data regardless of where you reside, within reasonable and legal limits.

To exercise any of your rights, please contact us using the methods described in Your Privacy Rights section or via the contact information in this Privacy Policy. Typically, you can reach us by emailing us at info@heemconsulting.com or by mailing a request to our business address provided below.

HEEM Consulting
430 New Park Avenue, Suite 102 #2078
West Hartford, CT 06110
United States

Please be specific in your request so we can better assist you (for instance, state that you want a copy of your data, or you want us to delete certain information). We may need to verify your identity before processing a request, to ensure that we do not release or delete someone else’s information by mistake. Verification may involve confirming information we have on file (such as sending a reply to your email on record or asking for identification for sensitive requests). We will respond to your request within the timeframe required by law (generally within 30-45 days, depending on the jurisdiction and type of request). If we need more time, we will let you know the reason and extension period in writing.

In some cases, we might decline a request if we have a lawful reason to do so. For example, we might refuse a deletion request if we are required by law to keep the information (such as transaction records), or if the data is needed for fraud prevention or because it is essential to the service you requested. If we decline your request, we will explain our reasoning to you (unless prohibited by law). We will not discriminate against you for exercising your privacy rights. This means we will not deny you services, charge you different prices, or provide a different quality of service because you made a privacy request (except where a request inherently means we can no longer provide a certain service feature).

If you have any concerns about how we handled a request or your privacy rights, please contact us so we can address them. For residents of certain states (such as California, Colorado, Connecticut, and Virginia), if you are unsatisfied with our response to a privacy request, you may have the right to appeal our decision by contacting us again and indicating that you are lodging an appeal. We will promptly review and respond to such appeals. If after an appeal you still have concerns, you may contact your state’s Attorney General or privacy regulator to lodge a complaint. We welcome the opportunity to resolve any issues directly and value your privacy greatly.

8. International Data Considerations
HEEM Consulting is based in the United States (in Connecticut), and our website is intended for a U.S. audience. If you are visiting our site or providing information from outside the U.S., please be aware that your information will be transferred to and processed in the United States (or other jurisdictions where our service providers are located). The data protection laws in these jurisdictions may differ from those in your country of residence. By using our services or providing your information, you acknowledge this transfer and processing. We will protect your information in accordance with this Privacy Policy wherever it is processed. If we ever need to transfer personal data from the European Union or other regions with cross-border data rules, we will do so via approved legal mechanisms (such as standard contractual clauses) and with adequate safeguards.

9. Updates to this Privacy Policy
We may update or revise this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or other factors. When we make changes, we will revise the “Last Updated” date at the top of the policy. If the changes are significant, we will provide a more prominent notice, such as a banner on our website or direct notification via email, prior to the changes taking effect. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information[18]. Your continued use of our website or services after any updates constitute your acceptance of the revised Privacy Policy.

10. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data handling practices, please contact us at:

HEEM Consulting
430 New Park Avenue, Suite 102 #2078
West Hartford, CT 06110
United States

Email: info@heemconsulting.com
Phone: +1 (860)854-4440.

We will be happy to assist you and will respond as promptly as possible. Your privacy is extremely important to us, and we appreciate you entrusting HEEM Consulting with your personal information.