At Heirmark, we take your privacy seriously. This Privacy Policy explains how Heirmark Holding Inc. (“Heirmark”, “we”, “us”) treats personal data when you use heirmark.digital and related public surfaces, including marketing pages, verification tools, Digital Product Passports, demo experiences, intake forms and programme communications (collectively, the “Services”).

By using the Services, you acknowledge the practices described here. Your use is also subject to our Website Terms. Capitalised terms used but not defined here have the meaning given in those Terms.

Scope

This Policy covers Personal Data we process as a controller when you interact with Heirmark directly. Brand-controlled passport surfaces may also display information governed by the relevant brand’s policies. Where Heirmark processes data on behalf of a brand under a programme agreement, that brand’s instructions and contract terms apply.

Personal Data we collect

Depending on how you use the Services, we may collect:

• Contact and account data, name, email, company, role, phone and message content when you contact us, subscribe, or start a programme with Heirmark.
• Programme and workspace data, identifiers, configuration and intake information tied to brand workspaces and identity rollouts.
• Product identity interaction data, verification lookups, scan or resolution events, passport views and related technical logs. Product identifiers are not always Personal Data on their own.
• Holder and registration data, where a brand enables registration, information you choose to provide to link yourself to a product identity (handled per programme rules and privacy controls).
• Device and usage data, IP address, browser type, device identifiers, pages viewed, referring URLs, timestamps and similar analytics.
• Cookie and tracker data, as described in our Cookie Policy.

How we use Personal Data

We use Personal Data to:

• operate, secure and improve the Services;
• respond to enquiries and provide requested information;
• deliver verification, passport and demo experiences;
• administer programmes, workspaces and intake;
• send service-related communications and, where permitted, marketing you can opt out of;
• comply with law, enforce terms and protect rights, safety and integrity.

Legal bases (where applicable)

Where GDPR or similar laws apply, we rely on one or more of: contract performance, legitimate interests (such as security and product improvement), consent (where required for cookies or marketing), and legal obligation.

How we share Personal Data

We may share Personal Data with:

• Service providers, hosting, analytics, email, security and support vendors under appropriate contracts.
• Brand partners, when you interact with a brand’s Heirmark-powered experience, as needed to deliver that experience.
• Professional advisers and authorities, where required by law or to protect legal rights.
• Business transfers, in connection with a merger, acquisition or asset sale, subject to this Policy.

We do not sell Personal Data.

International transfers

Personal Data may be processed in countries other than where you live. Where required, we use appropriate safeguards such as standard contractual clauses.

Retention

We retain Personal Data for as long as needed for the purposes above, including security, dispute resolution, legal compliance and operational requirements. Retention periods vary by data type and programme.

Security

We apply administrative, technical and organisational measures designed to protect Personal Data. No method of transmission or storage is completely secure. See our Trust & Security page for more.

Children

The Services are not directed to children under 16. We do not knowingly collect Personal Data from children. Contact us if you believe a child has provided data.

Your rights and choices

Depending on your location, you may have rights to access, correct, delete, restrict or object to certain processing, or to data portability. You may also withdraw consent where processing is consent-based. To exercise rights, email hello@heirmark.digital. You can unsubscribe from marketing using the link in those messages.

Changes

We may update this Policy. The effective date above will change when we do. Continued use after an update means you accept the revised Policy.

Contact

Heirmark Holding Inc.
Email: hello@heirmark.digital
Also see Contact.