Privacy policy

What we collect, why, and what you can ask us to do with it.

Hazel & Helm is a small, founder-led firm based in Maine. We collect as little as we can, and this page explains what that is in plain language. Last updated .

Who we are

This website, hazelhelm.com, is run by Hazel & Helm, an AI operations consulting and implementation practice based in Maine, USA. If you have any question about this policy or about information we hold, email [email protected].

What we collect and why

When you use the Workflow Finder. While you work through it, your task list and answers are saved only in your own browser so you can pick up where you left off. To see your results, you enter your first name and email, and your company if you like. We then receive those details along with your task list and answers. We use them to show you your results, email you a copy, add you to our email list (you can unsubscribe at any time), and prepare for a conversation if you book one. The form uses the same Cloudflare Turnstile spam check as the contact form.

When you send a note through the contact form. We receive what you type: your name, work email, company if you add it, and your description of what you would like to make easier. We use it to reply, to judge whether we can help, and to prepare for an introductory conversation if we have one. The form uses Cloudflare Turnstile to filter out spam, which checks that you are a person without asking you to solve a puzzle. Please don’t include passwords, private customer records, or regulated information in the form. If we work together we’ll agree on a safer way to share those.

When you book a call. Booking goes through Calendly, which collects your name, email, and anything you add to the booking form so it can schedule the meeting and send reminders. Calendly handles that information under its own privacy policy.

When you join our email list. We keep your name and email address so we can send you occasional articles and updates about Hazel & Helm. Every email includes an unsubscribe link, and leaving the list is immediate.

When you simply visit. Like most websites, our host records basic technical information such as your IP address, browser type, the pages you viewed, and the time of your visit. This is used to keep the site running and secure. If you accept cookies, we also use the analytics tools described below.

We do not sell your information, and we do not share it with anyone for their own marketing.

Cookies and analytics

When you first visit, a banner asks whether you accept cookies. Nothing below loads unless you choose Accept. If you choose Decline, the site works exactly the same. You can change your mind at any time with the Cookie settings link at the bottom of every page. Your choice is saved in your own browser so we don’t ask on every page.

Google Analytics. We use Google Analytics 4 to see how people find and use this site: which pages are read, roughly where visitors are located, and how they arrived. It sets cookies to tell returning visitors from new ones. We do not use Google’s advertising features. Google processes this data on our behalf under its own terms; you can read how at policies.google.com/technologies/partner-sites.

Apollo. We use Apollo’s website visitor tool to understand which organizations visit the site. It uses your IP address and cookies to match a visit to a company, and may show us the company’s name along with publicly available business details. We use this to understand interest in our services and, sometimes, to follow up with businesses that seem to be a good fit. If you accepted cookies, our contact form also uses Apollo to fill in publicly available company details from the email address you enter, and what you submit through the form is shared with Apollo so we can keep track of the conversation. We do not use it to identify you personally as a private individual, and we do not sell this information. Apollo’s privacy policy is at apollo.io/privacy-policy.

The site has no advertising trackers or social media pixels. Beyond the tools above, the only other third-party code is Cloudflare Turnstile on the contact page, which protects the form from spam.

Who handles your information for us

A few services help us run the site, and each only sees what it needs:

Cloudflare hosts the site, keeps standard server logs, and runs the spam check on our contact form. Resend delivers contact form submissions to our inbox and sends Workflow Finder results. Brevo stores our email list and sends our newsletter and follow-up emails. Calendly schedules introductory calls. Google Analytics provides site statistics and Apollo identifies visiting organizations, both only if you accept cookies. Google Workspace stores the email messages you send us. These providers may store data on servers in the United States or elsewhere. We choose providers with published privacy and security commitments, and we don’t hand them any more than the job requires.

How long we keep it

Contact form messages and email conversations are kept for as long as we might reasonably follow up, and then removed during periodic clean-ups. If we work together, the details of our engagement are kept for our business and tax records. Email list details are kept until you unsubscribe or ask us to delete them. Google Analytics data is retained for 14 months and then deleted automatically. Company visit information in Apollo is kept while it is useful for understanding interest in our services, and removed on request.

Your choices and rights

You can ask us at any time to tell you what information we hold about you, correct it, or delete it. You can unsubscribe from our emails using the link in any message, and you can withdraw cookie consent at any time using the Cookie settings link. Depending on where you live, you may have additional rights under laws such as the GDPR or state privacy laws; we will honor reasonable requests regardless of where you are. Email [email protected] and we will respond within 30 days.

Security

The site is served over HTTPS. Access to our inbox, email list, analytics, and visitor data is limited to the people who run Hazel & Helm, protected by strong passwords and two-factor authentication. No method of storage or transmission is completely secure, so please use the contact form for a description of your situation, not for sensitive records.

Children

This site is for businesses and is not directed at children under 16. We do not knowingly collect information from them.

Links to other sites

Our articles sometimes link to other websites. Their privacy practices are their own, and this policy does not cover them.

Changes to this policy

If we change how we collect or use information, we will update this page and the date at the top. Significant changes will be noted on this page for a period after they take effect.

Questions

Write to [email protected]. Sara reads every message.