Privacy Policy

Headroom Consulting LLC Effective Date: April 30, 2026 Last Updated: April 30, 2026

Headroom Consulting LLC ("Headroom Consulting," "we," "us," or "our") operates the website headroomconsulting.co (the "Site"). This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you visit our Site, book a consultation, download resources, or otherwise interact with us.

By using our Site, you agree to the practices described in this Privacy Policy. If you do not agree, please do not use our Site.

1. Information We Collect

Information You Provide Directly

We collect personal information that you voluntarily provide when you interact with our Site, including:

Consultation Bookings (via Calendly): Name, email address, phone number, company name, and job title.
Lead Magnet Downloads (via Typeform): Name, email address, company name, and job title.
Contact Forms or Email Inquiries: Name, email address, and any information you include in your message.
Blog Comments: Name, email address, and comment content (if applicable).

Information Collected Automatically

When you visit our Site, certain information is collected automatically through cookies and similar technologies:

Usage Data: Pages visited, time spent on pages, referring URLs, click patterns, and navigation paths.
Device Information: Browser type and version, operating system, screen resolution, and device type (desktop, mobile, tablet).
Network Information: IP address and approximate geographic location (city/country level).

This information is collected through the following technologies:

Google Analytics: Collects aggregated usage and traffic data to help us understand how visitors interact with our Site. Google Analytics uses cookies to identify unique visitors without personally identifying them. Google's Privacy Policy
Meta (Facebook) Pixel: Tracks conversions from Meta ads, builds targeted audiences, and enables remarketing. Meta's Privacy Policy
Google Ads Remarketing: Enables us to show targeted advertisements to visitors who have previously interacted with our Site. Google Ads Privacy Policy
Vercel (Hosting): Our hosting provider may collect server logs including IP addresses and request metadata. Vercel's Privacy Policy

2. How We Use Your Information

We use the personal information we collect for the following purposes:

To provide our services: Scheduling and conducting consultations, delivering requested resources (such as the AI Capacity Scorecard), and responding to inquiries.
To communicate with you: Sending appointment confirmations, follow-up emails, and information related to services you have expressed interest in.
To improve our Site: Analyzing usage patterns to enhance content, user experience, and Site performance.
To run advertising and remarketing: Displaying relevant advertisements on third-party platforms (Meta, Google) to visitors who have previously interacted with our Site.
To comply with legal obligations: Fulfilling any applicable legal, regulatory, or contractual requirements.

We do not use your personal information for automated decision-making or profiling that produces legal or similarly significant effects.

3. How We Share Your Information

We do not sell, rent, or trade your personal information to third parties for their own marketing purposes.

We may share your information with the following categories of service providers who assist us in operating our business:

Scheduling: Calendly (appointment booking and management)
Form Collection: Typeform (lead magnet delivery and data collection)
Analytics: Google Analytics (website traffic analysis)
Advertising: Meta Platforms, Inc. and Google LLC (advertising and remarketing)
Hosting: Vercel Inc. (website hosting and delivery)
Email / CRM: We may use a third-party email marketing or CRM platform to manage communications. This policy will be updated when a provider is selected.

These service providers are authorized to use your personal information only as necessary to provide their services to us and are contractually obligated to protect your data.

We may also disclose your information if required by law, in response to a valid legal process (such as a subpoena or court order), or to protect the rights, safety, or property of Headroom Consulting, our clients, or the public.

4. Cookies and Tracking Technologies

Our Site uses cookies and similar tracking technologies. A cookie is a small text file stored on your device that helps us recognize your browser and capture certain information.

Types of Cookies We Use

Type	Purpose	Examples
Essential	Required for the Site to function properly (e.g., security, basic functionality)	Session cookies, CSRF protection
Analytics	Help us understand how visitors use our Site	Google Analytics (_ga, _gid)
Advertising	Enable targeted advertising and remarketing on third-party platforms	Meta Pixel (_fbp, _fbc), Google Ads (IDE, NID)

Managing Cookies

You can control cookies through your browser settings. Most browsers allow you to block or delete cookies. However, if you disable cookies, some features of our Site may not function properly.

You can also opt out of specific tracking:

Google Analytics: Install the Google Analytics Opt-Out Browser Add-On
Meta Pixel: Adjust your Meta Ad Preferences
Google Ads: Manage your Google Ad Settings

5. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, unless you request its deletion.

Contact and booking information (name, email, phone, company, job title) is retained indefinitely until you request its removal.
Automatically collected data (analytics, usage logs) is retained according to the default retention settings of the respective third-party service (e.g., Google Analytics retains data for 14 months by default).

To request deletion of your data, see Section 7 below.

6. Data Security

We take reasonable administrative, technical, and organizational measures to protect your personal information from unauthorized access, loss, misuse, or alteration. These measures include using secure, encrypted connections (HTTPS), limiting access to personal data to authorized personnel, and selecting reputable third-party service providers.

However, no method of electronic transmission or storage is 100% secure. While we strive to protect your personal information, we cannot guarantee its absolute security.

7. Your Privacy Rights

Depending on your location, you may have certain rights regarding your personal information:

For All Users

You may at any time:

Request access to the personal information we hold about you.
Request correction of inaccurate or incomplete information.
Request deletion of your personal information.
Opt out of marketing emails by clicking the "unsubscribe" link in any marketing email or by contacting us directly.

For California Residents (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):

Right to Know: You may request that we disclose the categories and specific pieces of personal information we have collected about you, the sources of collection, the business purposes for collection, and the categories of third parties with whom we share it.
Right to Delete: You may request that we delete your personal information, subject to certain exceptions.
Right to Opt Out of Sale/Sharing: We do not sell your personal information. We do not share your personal information for cross-context behavioral advertising purposes except through the use of cookies and tracking technologies described in Section 4, which you can control through cookie settings.
Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.

To exercise any of these rights, contact us at privacy@headroomconsulting.co. We will respond to verifiable requests within 45 days.

For Users in the European Economic Area, United Kingdom, or Switzerland (GDPR)

If you are located in the EEA, UK, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR):

Legal Basis for Processing: We process your personal information based on: (a) your consent (e.g., when you submit a form or accept cookies); (b) the performance of a contract or pre-contractual steps (e.g., scheduling a consultation); or (c) our legitimate interests (e.g., improving our Site, marketing our services), provided these interests do not override your fundamental rights.
Right to Access: You may request a copy of the personal information we hold about you.
Right to Rectification: You may request correction of inaccurate data.
Right to Erasure ("Right to Be Forgotten"): You may request deletion of your data under certain circumstances.
Right to Restriction: You may request that we restrict the processing of your data.
Right to Data Portability: You may request your data in a structured, commonly used, machine-readable format.
Right to Object: You may object to the processing of your data for direct marketing purposes at any time.
Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time.
Right to Lodge a Complaint: You have the right to file a complaint with your local data protection authority.

To exercise any of these rights, contact us at privacy@headroomconsulting.co. We will respond within 30 days.

International Data Transfers: Your data may be transferred to and processed in the United States, where our company is based. By using our Site, you acknowledge that your data may be transferred to a country that may not offer the same level of data protection as your country of residence. We rely on standard contractual clauses and other appropriate safeguards for such transfers where required.

8. Third-Party Links

Our Site may contain links to third-party websites, services, or platforms that are not operated by us. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party sites you visit.

9. Children's Privacy

Our Site and services are intended for business professionals and are not directed at individuals under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal information from a child under 16, we will take steps to delete that information promptly. If you believe a child has provided us with personal information, please contact us at privacy@headroomconsulting.co.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make material changes, we will update the "Last Updated" date at the top of this page. We encourage you to review this Privacy Policy periodically.

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Headroom Consulting LLC Email: privacy@headroomconsulting.co Website: headroomconsulting.co

This Privacy Policy is provided for informational purposes and does not constitute legal advice. Headroom Consulting LLC recommends consulting with a qualified attorney to ensure full compliance with applicable privacy laws.