Your Privacy Rights

As an individual interacting with HEEM Consulting (for example, as a website user, client, or other contact), you have certain rights regarding your personal information. We believe in enabling you to understand and exercise these rights easily. This section explains your privacy rights and how you can take action. These rights are provided under various privacy laws and as part of our commitment to transparency and fairness.

1. Right to Know / Access: You have the right to know what personal information we collect about you, why we collect it, how we use it, and who we share it with. More formally, you can request that we provide a copy of the personal data we have about you, along with details about the sources of that data, the purposes for which we process it, and the third parties (if any) with whom it is shared. Upon request, we will provide you with this information, subject to verification of your identity and any legal limitations (for instance, we will not disclose specific pieces of data if doing so would create a security risk or violate someone else’s rights).

2. Right to Correct / Rectify: If you believe that any personal information we maintain about you is inaccurate or incomplete, you have the right to request that we correct or update it. For example, if you change your name or find that we have an incorrect email address for you, you can ask us to fix it. We will take reasonable steps to verify the accuracy of the new information you provide and to make the correction in our systems.

3. Right to Delete: You have the right to request deletion of your personal information that we have collected and retained. Upon receiving a verified deletion request, we will delete (and direct our service providers to delete) your personal information from our records, except for information that we are allowed or required to retain. Common exceptions that may prevent complete deletion include, for example: information needed to complete a transaction or provide you with a service you requested, information used for detecting security incidents or fraud, data required for exercising free speech or another legal obligation, or data we must retain for legal compliance (such as tax records) or internal purposes consistent with the context in which you provided it. If an exception applies, we will let you know what we cannot delete and why. Otherwise, we will confirm once we have deleted your data as requested.

4. Right to Opt-Out of Sale or Sharing: You have the right to direct us not to sell your personal information to third parties. “Sell” in this context is defined broadly by some laws to include sharing personal data for monetary or other valuable consideration, and it may cover certain types of targeted advertising as well. HEEM Consulting does not sell personal information in the traditional sense (we do not exchange data for money), and we also do not share your personal information for cross-context behavioral advertising (targeted advertising) without your consent. Nonetheless, we honor and facilitate opt-out requests. If you want to ensure that your information is not sold or shared, you can submit a request through our “Do Not Sell or Share My Personal Information” link on our website (see that section below for details). Once we process your opt-out request, we will refrain from selling or sharing your data going forward, unless you later give permission. We also recognize certain browser-based opt-out signals (such as the Global Privacy Control); if we detect such a signal from your browser, we will treat it as a valid opt-out of sale/sharing request to the extent required by applicable law.

5. Right to Limit Use of Sensitive Personal Information: If we collect any sensitive personal information from you (for instance, government-issued IDs, precise geolocation, or others as defined by law) for purposes beyond what is necessary to provide services, you have the right to limit our use or disclosure of that sensitive data. HEEM Consulting does not currently collect or process sensitive personal information for purposes that would trigger this right (we only handle such data minimally and for necessary purposes). However, should that ever change, you can request that we restrict the use of your sensitive information to only those purposes authorized by law (such as providing you a service or as otherwise strictly necessary) and not use it for secondary purposes like targeted advertising. We will honor such requests in accordance with applicable regulations.

6. Right to Data Portability: You have the right to request that we provide you (or a third party that you designate) with a copy of your personal information in a portable and, to the extent feasible, readily usable format. This typically applies to digital information you have provided to us. Upon request, and once we verify it, we will compile your data (that we maintain in our systems) and provide it to you either electronically or via other appropriate means. If technically feasible, and if requested, we will transmit this information directly to another entity you specify (for example, another service provider), though in most cases we will provide it to you to handle. This is intended to give you more control over your personal data.

7. Right to Withdraw Consent: Where we rely on your consent to process personal information (for example, for sending marketing emails or for placing non-essential cookies), you have the right to withdraw that consent at any time. Withdrawing consent will not affect the lawfulness of processing that occurred before the withdrawal, but it will mean we stop the specific activity going forward. For instance, if you consented to receive our newsletter, you can opt out using the “unsubscribe” link in any email (or by contacting us), and we will cease sending you the newsletter. If you consented to cookies, you can change your preferences via our cookie settings tool or your browser, and we will honor the new choice.

8. Right to Non-Discrimination: As noted in our Privacy Policy, we will not discriminate against you for exercising any of the above rights. This means we will not deny you goods or services, charge you different prices, or provide a different level of quality simply because you exercised your privacy rights. Your experience with HEEM Consulting will remain the same before and after you make a request, to the extent possible. (In some cases, if you ask us to delete or stop using certain information, that might inherently affect our ability to offer a service, for example, if you withdraw consent for us to use your email, we can’t send you our email newsletter, but we will never punish or retaliate against you for making a privacy request.)

How to Exercise Your Rights: You can exercise any of the rights above free of charge, up to the extent allowed by law. To make a request, please contact us via one of the following methods:

• Our Opt-Out Web Form: We would provide a secure form link here for submitting privacy requests.

• Email: Send an email to info@heemconsulting.com with the specifics of your request (e.g., "I want to access my data" or "Please delete my info").

• Postal Mail: You may mail your request to HEEM Consulting: 430 New Park Avenue, Suite 102 #2078, West Hartford, CT 06110, United States. Please include your name, contact information, and a description of your request.

• Phone: You may call our office at +1 (860) 854-4440 and indicate that you have a privacy request. We may ask you to follow up in writing for verification purposes.

For security, we will take steps to verify your identity when you make a request. This is to ensure that we do not disclose or delete personal information to the wrong person. The verification steps may vary depending on your relationship with us and the sensitivity of the data, for example, we might ask you to confirm some information that we have on file (like your last interaction with us, or send the response to the email address we have on record for you). If you have an authorized agent making a request on your behalf (such as an attorney or someone with power of attorney), we will take steps to verify the agent’s authority and possibly still confirm with you directly, as required by law.

We will respond to your request within the timeframe required by law (generally within 30 days, with a possible extension of an additional 30–60 days depending on the jurisdiction and complexity of the request). If we need more time, we will inform you of the reason for the delay. Our response will typically be provided in writing, either through email or via a secure portal.

Right to Appeal: If for any reason we do not take action on your request, or you are dissatisfied with our response, certain laws provide you the right to appeal. To appeal our decision, you may contact us (within a reasonable time) and provide details about why you believe further action is warranted. We will have a designated individual (typically a more senior member of our compliance team) review your appeal and respond within the legally required time frame (often 30 days). If after the appeal you still have concerns, you may have the right to contact your state Attorney General or data protection authority to lodge a complaint. We will provide you with information on how to do so if applicable.

We are committed to ensuring your privacy rights are respected. Please do not hesitate to reach out if you have any questions or need assistance with exercising your rights. Empowering you with control over your personal information is a fundamental aspect of our privacy values.