Privacy Policy
What we collect, why we collect it, who it reaches, and how to get it removed. Written in plain English, because a privacy policy nobody can read protects nobody.
Last updated: 12 September 2026
The short version
We collect your name, email address and whatever you write in a form. We use it to reply to you and, if you asked for it, to send you our newsletter.
We do not run analytics or advertising trackers on this site, we do not sell your information, and we never will.
1. Who we are
This website, hharconsulting.com, is operated by HHAR Consulting LLC ("HHAR Consulting", "we", "us"), a limited liability company registered in the State of Illinois, United States. HHAR Consulting is the controller of the personal information described below.
The site also publishes content under the name The Amy Invest Edu Blog, which is a brand of HHAR Consulting LLC rather than a separate company.
2. What we collect, and why
We only collect information you choose to give us, plus the basic technical data any website receives in order to load a page.
| What | When | Why |
|---|---|---|
| Name and email address | When you submit the “Ask Amy Invest” form, subscribe to the newsletter, or use a contact form | To reply to you, and to send the newsletter if you asked for it |
| The question or message you write | When you submit a form | To understand what you are asking and write a useful answer |
| Technical data (IP address, browser type, pages requested, timestamps) | Automatically, on every page load | Security, fault diagnosis, and keeping the site online. Held in server logs by our hosting provider. |
| A subscriber identifier stored in your browser | If you interact with a newsletter form | So our email provider recognises a returning subscriber. See section 5. |
We do not collect payment details on this site, we do not ask for financial account numbers, and we do not build advertising profiles.
Please do not send us government identification numbers, account or card numbers, passwords, or health information through any form on this site. We do not need them to answer a question about money.
Our legal basis (if you are in the UK or EEA)
- Consent — for the newsletter. You can withdraw it at any time using the unsubscribe link in any email.
- Legitimate interests — for answering a question you sent us, and for keeping the site secure and working.
- Legal obligation — where we must keep records or respond to a lawful request.
3. Who we share it with
We do not sell, rent or trade your personal information, and we do not share it for anyone else's advertising. We do use a small number of service providers to run the site. Each one only receives what it needs.
| Provider | What it handles |
|---|---|
| Vercel | Website hosting. Holds server logs, including IP addresses. |
| Kit (formerly ConvertKit) | Newsletter and contact forms, and the emails we send to subscribers. Holds your name and email address. |
| n8n | The automation service that receives an “Ask Amy Invest” submission and routes it to us. |
| Gmail (sending and storing our replies), Google Sheets (our record of enquiries received), Google Fonts (page typography), and the Google Gemini API, which is used to help prepare a first draft of a reply before a person reviews and sends it. | |
| Cloudflare and Unsplash | Delivery of styling files and stock photography. These providers see your IP address when your browser requests those files. |
Every reply we send is read by a person before it goes out. Your question is not used to train anyone's AI models.
We may also disclose information if we are required to by law, or where it is necessary to establish or defend a legal claim.
Links and services that leave this site
Some links take you elsewhere — for example to Stan.store to book a call, or to Amazon to buy the book. Once you leave hharconsulting.com, the privacy policy of that provider applies, not this one. We do not receive your payment details from them.
4. Where your information is processed
We operate from the United States, and our providers process data in the United States and other countries. If you are in the UK or EEA, this means your information may be transferred outside your home country. Where that happens, we rely on our providers' standard contractual clauses and equivalent safeguards.
5. Cookies and browser storage
This site sets no cookies of its own, and we run no analytics and no advertising trackers. There is no Google Analytics, no advertising pixel, and no session-recording tool on this site.
If you interact with one of our newsletter forms, our email provider Kit stores a small identifier (ckid) in your browser's local storage so it can recognise you as an existing subscriber. You can clear it at any time by clearing site data in your browser settings.
6. How long we keep it
- Enquiries and our replies — kept for up to 24 months so we can refer back to a conversation, then deleted on request or during routine clear-outs.
- Newsletter subscribers — kept until you unsubscribe, and removed from our active list shortly afterwards.
- Server logs — kept by our hosting provider for a short retention period set by them, typically measured in weeks.
7. Your rights
Wherever you live, you may ask us to show you what we hold about you, correct it, or delete it. Email us and we will do it — we do not make this difficult.
If you are in the UK or EEA
Under the UK GDPR and EU GDPR you have the right to access, rectification, erasure, restriction of processing, data portability, and objection to processing. You also have the right to lodge a complaint with your local supervisory authority — in the UK, the Information Commissioner's Office.
If you are in California or another US state with a privacy law
You have the right to know what personal information we collect and why, to request deletion, to request correction, and to be free from discrimination for exercising those rights. We do not sell or share personal information as those terms are defined under the California Consumer Privacy Act, so there is nothing for you to opt out of.
8. Children
This site is intended for adults and is not directed at children. We do not knowingly collect personal information from anyone under 16. If you believe a child has sent us information, email us and we will delete it.
9. Security
The site is served over HTTPS, and access to the accounts holding enquiry data is protected by strong authentication. No system is perfectly secure, so please do not send us anything through this site that you would not want stored in an email inbox.
10. Changes to this policy
If we change how we handle personal information, we will update this page and change the date at the top. Material changes will be noted on the site.
Contact us
For anything on this page — including requests about your personal information — write to:
HHAR Consulting LLC
Email: hharconsulting@gmail.com
Registered in the State of Illinois, United States
We aim to respond within 30 days. If your request concerns your personal data, we may ask you to confirm your identity first so we do not disclose information to the wrong person.