Privacy Policy

Personal Information

We may collect personal information that you voluntarily provide when you:

• Fill out contact forms or request a consultation
• Subscribe to our newsletter or marketing communications
• Create an account in our client portal
• Communicate with us via email, phone, or other channels
• Engage our services for web design, software development, SEO, branding, or hosting

This information may include your name, email address, phone number, business name, mailing address, and payment information.

Automatically Collected Information

When you visit our website, we may automatically collect certain information about your device and usage, including:

• IP address and geographic location
• Browser type and version
• Operating system
• Pages visited and time spent on each page
• Referring website or source
• Device identifiers

We use the information we collect to:

• Provide, operate, and maintain our services
• Communicate with you about your projects and our services
• Process payments and send invoices
• Send you marketing and promotional communications (with your consent)
• Respond to your inquiries and provide customer support
• Improve our website, services, and user experience
• Analyze website usage and performance
• Protect against fraudulent or unauthorized activity
• Comply with legal obligations

We use cookies and similar tracking technologies to track activity on our website and store certain information. Cookies are small data files placed on your device that help us improve your experience.

We use:

• Essential cookies: Required for basic website functionality
• Analytics cookies: Help us understand how visitors interact with our website
• Marketing cookies: Used to deliver relevant advertisements

You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, some features of our website may not function properly without cookies.

When you visit or log in to our website, cookies and similar technologies may be used by our online data partners or vendors to associate these activities with other personal information they or others have about you, including by association with your email or postal address. We (or service providers on our behalf) may then send communications and marketing to these email or postal addresses. You may opt out of receiving this advertising by visiting https://app.retention.com/optout and https://client.leadpost.com/PrivacyRequest.

We maintain business profiles on social platforms including Facebook and Instagram, and we use website analytics to understand how visitors use our site (see “Third-Party Services” below).

We use visitor identification services (RB2B and LeadPost) that may associate your visit with contact information, such as your email or postal address, as described under “Cookies and Tracking Technologies” above, and that support our marketing outreach across channels such as email and direct mail. You may opt out at https://app.retention.com/optout (RB2B) and https://client.leadpost.com/PrivacyRequest (LeadPost).

We advertise on Meta platforms (Facebook and Instagram) and use the Meta Pixel on our website to measure conversions from those ads, optimize ad delivery, build advertising audiences, and remarket to people who have visited our website. The pixel tracks actions such as page views, lead form submissions, and consultation bookings, and Meta may use this data to show you targeted ads across its platforms; see Meta’s Privacy Policy for how Meta handles this data. You can opt out of personalized advertising by adjusting your Facebook ad preferences or via optout.aboutads.info.

We may use third-party services that collect, monitor, and analyze information. These services include:

• Google Analytics: For website analytics and performance monitoring
• RB2B: For identifying business visitors to our website and supporting our marketing outreach
• LeadPost: For identifying website visitors and supporting our retargeting outreach (including email and direct mail)
• Meta (Facebook & Instagram): The Meta Pixel measures the effectiveness of our advertising and tracks actions taken on our website, such as page views and form submissions
• Stripe: For secure payment processing
• Supabase: For authentication and data storage in our client portal
• Calendly: For scheduling consultations

These third parties have their own privacy policies addressing how they use such information. We encourage you to review their policies.

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

• With service providers who assist us in operating our business
• To comply with legal obligations or respond to legal requests
• To protect our rights, privacy, safety, or property
• In connection with a business transfer, merger, or acquisition
• With your explicit consent

Referral program: information submitted through the referral heads-up form (your contact details and the name of the business you are referring) is used to attribute the referral and pay you, including any tax reporting the payout requires. It is never sold and never used for marketing outreach; like any form submission it may be shared only under the circumstances listed above, and we do not cold-contact the business you name.

Heck Design Group LLC does not share mobile numbers, text messaging originator opt-in data, or consent with any third parties or affiliates for marketing or promotional purposes.

Mobile information may be shared only with subcontractors and service providers that support the delivery of SMS services, such as messaging platforms, telecommunications providers, or customer support vendors. This information is used solely to provide and operate the messaging service.

All other use case categories exclude text messaging originator opt-in data and consent. This information will not be shared with any third parties.

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• SSL/TLS encryption for data transmission
• Secure hosting infrastructure with regular security updates
• Access controls and authentication requirements
• Regular security assessments

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this privacy policy, unless a longer retention period is required or permitted by law. When we no longer need your information, we will securely delete or anonymize it.

Depending on your location, you may have certain rights regarding your personal information, including:

• The right to access and receive a copy of your personal information
• The right to correct inaccurate or incomplete information
• The right to request deletion of your personal information
• The right to opt-out of marketing communications
• The right to data portability

To exercise any of these rights, please contact us using the information provided below.

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal information, please contact us immediately, and we will take steps to delete such information.

We may update this privacy policy from time to time. We will notify you of any changes by posting the new privacy policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically for any changes.

If you have any questions about this Privacy Policy or our data practices, please contact us: