Privacy Policy

Effective Date: October 1, 2026
Last Updated: October 1, 2026

Hardy Heavy (“Hardy Heavy,” “we,” “us,” or “our”) operates the website hardyheavy.com (the “Site”) and provides people operations consulting, HR advisory services, and organizational decision-support tools (collectively, the “Services”).

We are committed to safeguarding the privacy and confidentiality of individuals who visit our Site, interact with our services, or engage us as clients. This Privacy Policy explains how we collect, use, disclose, and protect personal information, as well as the rights and choices available to you.

1. Information We Collect

We collect information directly from you, automatically through your use of our Site, and, in certain consulting engagements, on behalf of our business clients.

A. Information You Provide Voluntarily
  • Contact Information: Full name, business email address, phone number, company name, job title, and physical mailing address when you submit an inquiry, request an HR consultation, or subscribe to our communications.
  • Advisory & Intake Details: High-level workforce data, organizational structure notes, HR challenges, hiring goals, or project briefs submitted through consultation forms, surveys, or discovery questionnaires.
  • Account and Transaction Details: Billing contact information, invoice records, and payment confirmations if you purchase consulting packages or retainers (note that credit card processing is handled by third-party payment processors; we do not store full payment card numbers).
  • Communications: Records of correspondence, meeting notes, feedback, and support inquiries sent via email, phone, or messaging channels.
B. Information Collected Automatically
  • Device and Technical Information: IP address, browser type and version, operating system, device identifiers, language preferences, and referring URLs.
  • Usage Data: Pages viewed, links clicked, time spent on individual pages, scroll behavior, and general navigation patterns on the Site.
  • Cookies and Tracking Technologies: We use session and persistent cookies, web beacons, and basic analytics tags to remember user preferences, ensure site security, and analyze site performance. You can manage cookie preferences via your web browser settings.
C. Information Processed on Behalf of Clients (Client Personnel Data)

In our capacity as an HR advisory service, enterprise clients may provide us with employee, contractor, or candidate documentation (e.g., job descriptions, compensation benchmarks, performance review frameworks, or exit summaries). When handling such information:

  • The client acts as the data controller (or business), and Hardy Heavy acts as a data processor (or service provider).
  • We process such data strictly in accordance with our client agreements, statements of work, and applicable non-disclosure agreements (NDAs).

2. How We Use Your Information

We use the information collected for legitimate business purposes, including:

  • Delivering Advisory Services: Providing strategic HR advice, talent planning, organizational design assessments, and decision frameworks.
  • Responding to Inquiries: Scheduling discovery calls, answering questions, and providing quotes or service proposals.
  • Site Administration & Improvement: Monitoring site functionality, diagnosing server issues, maintaining technical security, and enhancing user experience.
  • Client Relationship Management: Managing client contracts, invoicing, service renewals, and ongoing communication.
  • Marketing & Educational Content: Sending occasional updates, white papers, newsletters, or invitations to webinars or events (you may opt out at any time).
  • Legal & Regulatory Compliance: Complying with applicable laws, preventing fraudulent activity, resolving disputes, and enforcing our terms and agreements.

We do not sell your personal information or share personal data with third parties for cross-context behavioral advertising.

3. How We Share and Disclose Information

We do not rent, sell, or trade personal data. We disclose information only under the following limited circumstances:

  • Trusted Service Providers: We share necessary data with third-party vendors who provide essential infrastructure, including cloud hosting providers, customer relationship management (CRM) systems, document signature tools, email delivery systems, and accounting platforms. These providers are bound by contractual confidentiality and data-protection obligations.
  • Professional Advisors: When strictly necessary, we may disclose information to legal counsel, accountants, auditors, and insurers for compliance, risk management, and governance purposes.
  • Business Transfers: If Hardy Heavy undergoes a merger, acquisition, restructuring, or asset sale, information may be transferred as a business asset subject to customary confidentiality assurances.
  • Legal Obligations & Safety: We may disclose personal data if required by law, subpoena, or valid legal process, or if we determine in good faith that disclosure is necessary to protect the rights, property, or safety of Hardy Heavy, our clients, or the public.

4. Data Retention

We retain personal information only for as long as necessary to fulfill the purposes for which it was collected, including satisfying legal, accounting, tax, or contractual obligations.

  • General Website Inquiries: Retained for up to 24 months from the last point of contact, unless ongoing discussions occur.
  • Client Engagement Files: Retained for the duration of the advisory contract plus a standard retention period (typically 5 to 7 years) to support regulatory compliance, tax records, and contract enforcement.
  • Client Personnel Data: Returned or securely destroyed upon termination of the client engagement, or retained in accordance with the specific terms agreed upon in the client contract.

5. Information Security

We implement commercially reasonable administrative, physical, and technical safeguards designed to protect personal data from unauthorized access, loss, misuse, alteration, or destruction. These measures include:

  • Transport Layer Security (TLS/SSL) encryption for data in transit.
  • Access controls restricting data to authorized personnel with a legitimate business need.
  • Confidentiality and non-disclosure obligations for all team members and subcontractors.

While we take rigorous precautions, no transmission over the internet or electronic storage system is 100% secure, and we cannot guarantee absolute security.

6. Your Rights and Choices

Depending on your jurisdiction, you may have certain rights regarding your personal data:

  • Access & Portability: Request a copy of the personal information we hold about you.
  • Correction & Rectification: Request corrections to inaccurate, incomplete, or outdated personal information.
  • Deletion: Request that we delete your personal information, subject to statutory retention requirements and legitimate business exceptions.
  • Opt-Out of Marketing: Unsubscribe from marketing or newsletter emails at any time by clicking the “Unsubscribe” link at the bottom of the email or contacting us directly.
  • Cookie Controls: Configure your internet browser to refuse cookies or alert you when cookies are placed.

To exercise any of these rights, please contact us using the information provided in Section 9 below. We will verify and respond to your request within the timeframes required by applicable law.

Note: If your personal data was provided to us by your employer in connection with an HR advisory engagement, please direct your data request directly to your employer, as they are the data controller.

7. Children’s Privacy

Our Site and Services are directed solely to business owners, professionals, and corporate organizations. We do not knowingly collect personal information from children under the age of 16. If we become aware that we have inadvertently collected information from a child under 16, we will take prompt steps to delete it.

8. Changes to This Privacy Policy

We may periodically update this Privacy Policy to reflect changes in our service offerings, industry practices, or applicable legal standards. Any revisions will be posted on this page with an updated “Last Updated” date. We encourage you to review this policy periodically to stay informed about our data practices.

9. Contact Us

If you have questions, comments, or concerns regarding this Privacy Policy or our data management practices, please contact us: