Skip to main content
Privacy

Privacy notice

The formal version. The plain-language account, including the parts that are not flattering to us, is on the data principles page — read that one first if you only read one.

Last updated

Who this is

Heirloom Praxis operates this website. We are based in New Haven, Connecticut. For questions about anything here, write to privacy@heirloompraxis.com — no form and no account required.

What we collect and why

We collect only what a specific purpose requires, and we ask for it at the moment that purpose arises rather than in advance.

  • Email address — when you join the newsletter, a notification list or the Builders Circle waitlist, or ask us to email you a tool result. Used to send you that thing.
  • Name, email, organisation and message — when you use the contact or booking form. Used so a person can reply properly.
  • Sector, situation and access needs — when you request a Clarity Session, so the session is useful and accessible.
  • Tool answers — held in your browser while you use a tool. Not stored by us unless you explicitly ask for a copy by email.
  • Aggregate page counts — only where privacy-preserving analytics are enabled. No cookies, no identifiers, no cross-site tracking.

The legal basis

Consent, given by you at the point of collection, for anything you submit. You can withdraw it at any time, and withdrawing it is a one-click action rather than a conversation.

Where we retain a record of an enquiry after replying, that is our legitimate interest in maintaining a record of business correspondence, and you may object to it at any time.

How long we keep things

  • Mailing lists: until you unsubscribe or ask for deletion.
  • Contact and booking submissions: two years, then deleted — unless we are still working together.
  • Tool results sent by email: the record of the send, until you ask for its removal.
  • Server logs: short-lived operational logs, containing no full email addresses. Email addresses are redacted before anything is written to a log.

Who else sees it

Our hosting provider and our database provider process data on our behalf under their own terms. Where you use an AI-assisted tool, the text of your answers is sent to a model provider for that request only, without your name, email or any identifier attached.

We do not sell, rent, trade or share personal information for anyone else's purposes. There is no advertising network, no data broker and no partner list.

Your rights

To exercise any of these, write to privacy@heirloompraxis.com. You do not need to explain why.

  • Ask what we hold about you. We reply within thirty days.
  • Ask for a copy in a portable format.
  • Ask us to correct something that is wrong.
  • Ask us to delete it. We do, and we confirm when it is done.
  • Object to a use, or withdraw consent, at any time.
  • Complain to your data protection authority if we handle any of this badly.

Security

Traffic is encrypted in transit. Access to submissions is restricted and administrative actions are logged. Secrets are held as server-side environment variables and are never included in anything sent to your browser.

We would rather state the limits than imply perfection: this is a small institution running on commercial infrastructure, and no operation of this size can promise that a determined attacker will never succeed. What we can promise is that we collect little, keep it briefly, and will tell you promptly if something goes wrong.

Children

This site is not directed at children under 13 and we do not knowingly collect their information. If you believe a child has submitted something, write to us and we will remove it.

Changes

If this notice changes in a way that affects how your information is handled, we will update the date at the top and, where the change is material and we hold your email address, tell you directly rather than relying on you re-reading this page.