PrivacyPolicy

Effective date: [EFFECTIVE DATE — set at publish]

1. Introduction

This Privacy Policy explains how The Heady Collective, LLC, a Delaware limited liability company doing business as Heady (“Heady,” “we,” “us,” or “our”), collects, uses, and shares information when you visit useheady.com (the “Site”). By using the Site, you agree to the practices described here.

2. Information we collect

Information you provide. When you fill out a form on the Site — such as our contact form — we collect the information you submit. This may include your first and last name, email address, phone number, company website, the ecommerce and CRM platforms you use, and any message or details you choose to provide.

Information collected automatically. When you visit the Site, we and our analytics providers automatically collect certain technical information, which may include your IP address, browser type, device information, pages viewed, referring URLs, and how you interact with the Site. We collect this through cookies and similar technologies (see Section 5).

Information for bot protection. We use Cloudflare Turnstile to protect our forms from automated abuse. Turnstile may collect technical signals from your browser to verify you are not a bot.

3. How we use your information

We use information to:

• respond to your inquiries and provide the information or services you request;
• operate, maintain, and improve the Site;
• understand how visitors use the Site through analytics;
• protect the Site and our forms against fraud, abuse, and security threats;
• comply with legal obligations.

We do not sell your personal information for money. See Section 7 for how California law treats analytics-related “sharing.”

4. How we share information

We share information only as described here:

• Service providers. We use third-party providers to operate the Site and process form submissions, including Supabase (database and authentication), Resend (email delivery), Vercel (hosting), Cloudflare (DNS and bot protection), and Google (analytics and tag management). These providers process information on our behalf.
• Legal and safety. We may disclose information if required by law, or to protect the rights, property, or safety of Heady, our users, or others.
• Business transfers. If Heady is involved in a merger, acquisition, or sale of assets, information may be transferred as part of that transaction.

We do not sell your personal information.

5. Cookies and analytics

The Site uses cookies and similar technologies. These include:

• Essential cookies needed for the Site to function, including the session cookie used for our admin area.
• Analytics cookiesset through Google Analytics 4 (GA4) and Google Tag Manager, which help us understand how visitors use the Site. These may collect your IP address and usage data and share it with Google. You can learn about Google's practices at policies.google.com/privacy.

You can control cookies through your browser settings and can opt out of Google Analytics using Google's opt-out tools. Disabling cookies may affect how the Site functions.

6. Data retention and security

We retain form submissions and related information for as long as needed to respond to your inquiry, operate our business, and meet legal obligations, after which we delete or anonymize it. We use reasonable technical and organizational measures to protect information, but no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

7. Your privacy rights

California residents (CCPA/CPRA).If you are a California resident, you have the right to know what personal information we collect, to request access to or deletion of it, to correct it, and to opt out of its “sale” or “sharing.” We do not sell personal information for money; however, the use of analytics and advertising technologies such as GA4 and Google Tag Manager may be considered “sharing” under California law. You may opt out of this sharing by disabling analytics cookies through your browser or Google's opt-out tools, or by contacting us at legal@useheady.com. We will not discriminate against you for exercising these rights.

Other jurisdictions. Depending on where you live, you may have similar rights to access, correct, or delete your personal information. To exercise any right, contact us at legal@useheady.com.

8. Children's privacy

The Site is intended for business and professional audiences and is not directed to children under 18. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact legal@useheady.com and we will delete it.

9. Third-party links

The Site may link to third-party sites we do not control. This Policy does not apply to those sites; review their privacy policies separately.

10. Changes to this Policy

We may update this Policy from time to time. Changes are effective when posted here with an updated effective date.

11. Contact

Questions or privacy requests: legal@useheady.com, or The Heady Collective, LLC, 4833 Front Street, Ste B, Castle Rock, CO 80104.