Terms & privacy

The short version: this website explains what Heegstra does. Most of this website is informational. Website subscriptions purchased on this site are governed by the Terms of Purchase below. If we work together, a separate written agreement will govern that work. Use the site lawfully and do not send confidential or sensitive information through its forms.

1. About these terms

These terms govern your use of heegstra.io and its forms. In these terms, "Heegstra," "we," "us," and "our" refer to Heegstra LLC, the U.S. business operating under the Heegstra name.

When you submit a form, you agree to these terms. If you do not agree, do not submit the form. Browsing the site or contacting us does not create a client, confidential, fiduciary, or advisory relationship.

2. Enquiries and client work

The site describes services we may provide. Its content is general information, not a binding offer, quote, guarantee, or promise to accept a project. Submitting a form or booking a call does not require you to hire us and does not require us to take on the work.

Paid work is governed by a separate written agreement. That agreement controls the scope, price, timing, confidentiality, intellectual property, warranties, and liability for the engagement. If it conflicts with these website terms, the written project agreement controls.

3. Using the site and sending information

Use the site only for lawful purposes. Do not interfere with its operation or security, attempt unauthorized access, introduce harmful code, impersonate someone, scrape it at a disruptive scale, or place an unreasonable load on it.

Information you submit must be accurate and yours to provide. If you provide information about someone else, you must be authorized to do so.

Do not send passwords, payment-card details, government identification numbers, health information, trade secrets, regulated data, or information covered by a confidentiality obligation through the site's forms or live chat. Formal confidentiality for project discussions or work must be agreed separately in writing. Our Privacy Notice explains how we handle personal information.

4. Website content

Unless stated otherwise, the site's text, design, branding, graphics, and code belong to us or are used with permission. You may browse the site, link to its public pages, and quote short portions with appropriate attribution. You may not reproduce, republish, sell, or commercially exploit substantial parts of it without written permission.

Ownership of work created during a paid engagement is determined by that engagement's written agreement.

5. Third-party services and links

The site may link to or display services operated by other organizations, including an appointment scheduler and a live-chat widget. Those services have their own terms and privacy practices. We do not control them and are not responsible for their content, availability, security, or handling of information. A link does not necessarily endorse everything on the linked site.

6. Disclaimers and liability

The website is provided "as is" and "as available." To the extent permitted by law, we do not promise that it will always be available, error-free, secure, or fully current. Site content should not be treated as advice for your particular situation or as a guarantee of any result.

To the extent permitted by law, we are not liable for indirect, incidental, special, consequential, or punitive loss arising from use of, or inability to use, this free website. Nothing here excludes liability or rights that applicable law does not allow to be excluded. Liability relating to paid work is governed by the written project agreement.

7. Governing law

These terms are governed by Wyoming law, without regard to conflict-of-law rules. This does not remove rights or protections that applicable law does not allow you to waive. Please contact us first if a problem arises so we can try to resolve it directly.

8. Changes and contact

We may update these terms as the site or business changes. The version and last-updated date show when the current terms took effect. Changes do not alter an existing signed project agreement.

Questions may be sent to jan@heegstra.io.

1. Who we are

These terms govern purchases of the website subscription service offered by Heegstra LLC, a Wyoming (USA) limited liability company, 30 N Gould St Ste N, Sheridan, WY 82801, operating at heegstra.io ("Heegstra," "we," "us"). By completing a purchase you confirm that you are at least 18 years old and legally able to enter into a contract, and you agree to these terms on behalf of the business you represent.

"Claiming" a website means completing payment for it at our checkout. Putting a package together, entering your details, or starting a checkout you do not finish does not create a contract and never costs you anything.

2. The service

We sell website subscriptions and related services for businesses. What you buy, and what it costs, is what's listed at checkout — your total recurring fee depends on the products and add-ons you select. The base website subscription includes: hosting and keeping the site online, the website built and operated for your business, basic support (keeping the site working and fixing defects), and a monthly summary report of visitors and activity, drawn from the analytics that visitors to your site consent to. You choose at checkout whether to be billed monthly or yearly (Section 4).

The subscription covers a website: pages that present your business — home, services, prices, photos, contact, and the like. It does not include web applications — interactive software such as a CRM, a custom scheduling system, a client portal, or other custom functionality — which are a separate product with separate pricing. You can start with a website and later add a web app or grow the site into one, but that is always a separate agreement: this subscription never covers the cost of a web app. To learn more about web apps, visit heegstra.io/services/#software. (Optional add-ons listed at checkout are included when you select them.)

A one-time design fee for the initial build applies at the amount shown at checkout unless it is shown as waived (for example, under a founding-client offer); the subscription then covers operating and maintaining the site. Promotional offers and counters shown on our sites are marketing offers; we may modify or end them at any time for future purchases — never retroactively for a purchase you already made.

3. Previews and claiming

We sometimes prepare preview websites for businesses using publicly available information and images (for example, from a public Instagram or Google Maps profile). A preview is an offer, not a contract — no charge exists until someone claims it.

By claiming a website you confirm that: (a) you are authorized to act for the business shown on the site, and (b) after purchase you will review the content and tell us anything to correct. We build previews in good faith from public sources; we correct or remove content promptly on request. Previews are prepared for the business shown and are not part of any live client service. If you'd rather not have a preview of your business online at all, tell us at info@heegstra.io or through heegstra.io/contact, and we aim to process the removal within 48 hours of receiving the request.

4. Fees, billing, and taxes

Your billing period. At checkout you choose monthly or yearly, and your subscription is billed in advance for that period through our payment processor (Stripe), starting on the day your first payment is taken. Paying yearly is cheaper: a full year costs about two months less than paying month by month for the same twelve months, charged once a year instead of every month. The exact yearly amount in your currency is shown at checkout. Add-ons follow the same period as the subscription they sit on.

Automatic renewal. Your subscription renews automatically at the end of every period, monthly or yearly, and Stripe charges the payment method on file at the price you were charged at signup. It keeps renewing until you cancel. You can cancel it yourself, online, at any time, and Section 6 explains exactly how and what happens. Before every yearly renewal we email you a reminder at the address on file, stating the renewal date, the amount, and how to cancel, so a yearly charge never arrives unannounced. Domains work differently and are never charged automatically — see Domains below.

Prices may be shown and charged in USD or in the local currency displayed at checkout. This site can display prices in US dollars (USD), Mexican pesos (MXN) and euros (EUR); the non-USD amounts are fixed prices we set and review from time to time, not live exchange-rate conversions, and we may update them for new purchases. Because of currency-conversion fluctuations, prices displayed on some pages may lose accuracy; the amount shown on the Stripe payment page is the single source of truth for what you will be charged, in the currency shown there. That is not permission to charge you more than we showed you. If the Stripe page is ever higher than the price we quoted, do not complete the purchase: tell us, and we will either honour the price you were shown or cancel the order. If a payment fails and remains unpaid after we notify you, we may suspend the site until payment resumes.

Your free address. Every website comes with a free address at yourbusiness.heegstra.io, included for as long as you subscribe. That address stays ours and does not transfer to you when the subscription ends.

Domains. A custom domain is always optional — you can stay on your free address forever. Domains are registered through third-party registrars, and what a name costs in the wider market is set by those registrars rather than by us. We benchmark against market registrar pricing (Cloudflare and GoDaddy, for example), with Cloudflare Registrar as our official benchmark for deciding whether a name is standard or premium.

Standard domains (.com and similar) with a benchmark price of 15 US dollars (USD 15) per year or less are offered at a flat USD 15 (EUR 15 or MX$269 in those currencies). If you pick one at checkout, that amount is charged once alongside your subscription and it covers the first registration year only. Each later year is invoiced separately at our standard-domain rate current at that time, which we quote to you at least 30 days before the renewal date. Availability shown to you was checked when we prepared your options and is confirmed only at the moment we register the name. In the rare case that the name is gone by then, we tell you, help you pick another standard name at the same price, and refund that amount in full if you would rather keep your free address.

Premium domains are never charged at checkout. Premium endings (such as .io) and premium-priced names are quoted by hand: you pay nothing for one on the day you claim, we send you the price right after, and nothing is registered until you accept it. The price we quote is our own price for that name — it covers what the registrar charges us plus our handling, so it can be higher than a price you see quoted elsewhere. You are free to decline: if you do, nothing is registered and nothing is owed, and you keep your free address. Each later year is quoted to you again at least 30 days before the renewal date, and that quote can differ from the year before. If you want a name we did not show you, ask and we will check it for free.

How your domain is held. We register the name in our own registrar account and we are its registrant and account holder, so that we can point it at your site and keep it working. You are not the registrant while we hold it, and that is what lets us run it for you. You can ask us at any time to transfer the name into a registrar account of your own, and we will — you need an account at a registrar able to receive it, and registrar transfer rules, including any lock period that applies after a name is first registered or transferred, can affect when a transfer can go through. Once a transfer completes, the name is registered to you and everything after that is between you and your registrar.

Renewing a domain is a separate decision every year. Your domain is not part of your subscription and is never charged automatically. Ahead of each renewal date we send you a separate invoice for the coming year; paying it renews the name for another year. If you would prefer it to be charged automatically, tell us and we will set that up in writing with you first — we will never start charging you automatically for a domain on our own initiative. We keep sending you these invoices for as long as we hold a name for you, including after a subscription has ended.

If a domain invoice goes unpaid. We do not pay for a customer's domain out of our own pocket. If a renewal invoice is still unpaid when the registration expires, we do not renew the name: it expires, your website returns to your free yourbusiness.heegstra.io address, and the rest of your subscription carries on unaffected. After expiry most registrars run a redemption period during which only the existing registrant can recover the name and only for a fee well above the ordinary price; if you ask us to try, we pass that cost through at cost, and recovery is not always possible. Only after that period does a name return to general availability for anyone to register. Paying the invoice, or simply telling us you would rather let the name go, avoids all of this.

Taxes. Our prices are tax inclusive: between the price shown on the Stripe payment page and the amount Stripe charges, we add no tax, no service fee, and no other charge. That is a promise about what we charge, not tax advice about your side of it. Depending on where your business is, you may still owe tax on this purchase yourself, and it is your responsibility to handle that. Heegstra LLC is a United States company: you will receive a receipt or invoice from a US entity, which may not meet the requirements for country-specific tax documents (such as local fiscal invoices). If you need tax documentation specific to your country, check with your accountant before purchasing.

Payments already made are non-refundable, except where these terms expressly say otherwise in this Section 4 and in Section 6. Cancelling stops future charges (see Section 6).

5. Add-ons and waitlists

Add-ons (such as priority support or web chat) are optional, priced at checkout, and billed with your subscription on the same period you chose for it, monthly with monthly and yearly with yearly. A domain is not an add-on: it is a separate yearly purchase governed only by Section 4, and the price lock in Section 13 does not apply to it. Some listed products are not yet available and appear with an "interested" or waitlist button. Joining a waitlist costs nothing, charges nothing, and commits neither of us — it only tells us you want the product. If it launches, we will contact you and you decide then.

6. Term and cancellation

You can cancel at any time, by yourself, online. Nothing stops you cancelling and there is no cancellation fee. What differs between the two billing periods is when the cancellation takes effect and what happens to money already paid.

Monthly. Cancelling takes effect at the end of the month you have already paid for. Your site stays online until then, and nothing further is charged.

Yearly. A yearly subscription is paid in advance for the whole year. Cancelling takes effect at the end of the year you have already paid for: your site stays online for the rest of that year, nothing further is charged, and the remaining months are not refunded. A yearly subscription costs about two months less than paying month by month, and that discount is exactly why it is paid up front and not refunded part way through. If you would rather not commit for a year, choose monthly — the monthly price is always available.

Switching between monthly and yearly. Tell us and we will move you at the end of the period you have already paid for. At signup we lock both the monthly and the yearly price of your package, so a switch moves you to your own locked price for the new period — never to a higher list price, and never with a fee. Because the yearly plan is discounted, moving from yearly to monthly does mean paying more over a full year; the monthly figure itself is the one locked for you at signup.

How to cancel: do it yourself, online. Every subscription comes with a billing portal, hosted by Stripe, where you can cancel on your own without talking to anyone. Go to heegstra.io/billing at any time. The same portal is linked from your receipt and from every billing email we send you, so you can get there even if you no longer have this page. You can also see your invoices and update your payment method there. Cancelling in the portal is recorded straight away and takes effect as described above.

Or just tell us. If you would rather not use the portal, one message does it: email info@heegstra.io, tell us in the chat on our site, or use heegstra.io/contact (choose the help & billing option). Any of these routes is equally valid and we treat them the same. Whichever you use, we do not put a retention call, a phone tree, or a form maze in front of it, and we confirm your cancellation in writing.

We may also terminate with 30 days' notice, or for unlawful use immediately. For non-payment we follow the route in Section 4 — we notify you, and may suspend the site while it stays unpaid — and may terminate if it remains unpaid 14 days after that notice. If we terminate without cause mid-period, we refund the unused portion of that period.

What happens when the subscription ends: the website goes offline and our license to you ends (Section 8). Your free yourbusiness.heegstra.io address stops working and returns to us. Your own materials remain yours and, on request within 30 days, we will send you a copy of the content you provided (text and images) — that window applies to this site-content copy only and does not limit any rights you have under our Privacy Notice. If we registered a domain for you, its registration is paid up to the end of the year you paid for; on request we will transfer it into a registrar account of your own, on the terms in Section 4, and we keep invoicing you for it each year until you tell us to stop or the transfer completes. If you neither pay nor transfer, the name is not renewed and expires as described in Section 4.

7. Your content and responsibilities

You keep all rights to the materials you provide or approve (your name, logo, photos, text) and you confirm you have the right to use them. This does not extend to material we sourced ourselves when building a preview before you were involved — if anything we gathered from a public profile should not be there, tell us and we will remove it. You are responsible for the accuracy of business information on the site (prices, hours, address); tell us and we will correct it under basic support at any tier. Discretionary changes — new photos, redesigns, rewriting content — are what priority support covers (Section 9). You agree not to use the site for anything unlawful or deceptive.

Compliance. In practice, we take care of the technical side of this: sites are built with current best practices — accessibility and privacy included — because we work with this every day. But we are not lawyers, and we cannot guarantee legal compliance; the site is published for your business, and responsibility for its compliance with the laws that apply to your business rests with you. You agree that Heegstra is not liable for third-party claims about your site's compliance (an accessibility or privacy complaint, for example). If anyone raises such a concern, tell us — we will gladly look at it and, where needed, help resolve it on your behalf.

8. Licensing and ownership

The website's design, code, and underlying setup are Heegstra's property. While subscribed, you have a license to have the site operated for your business. The subscription is a service, not a sale of the website's code: if you cancel, the site comes down and the code is not handed over. (Your content remains yours per Section 7; domain arrangements are described in Sections 4 and 6.)

9. Support scope

Basic support (included) keeps the site online, fixes things that break, and corrects factual business information such as prices, hours, address and phone. Priority support (add-on) covers discretionary changes — new photos, new copy, layout tweaks — within reasonable monthly use. Bigger work — like a full redesign, a new site, or web-app functionality (see Section 2) — isn't included in any support plan, but you're welcome to request it, and we can agree on it separately, case by case. Feedback is always welcome.

Support requests go through heegstra.io/contact (choose the help & billing option), by email to info@heegstra.io, through the chat on our site, or any other channel we've agreed with you. We aim to start processing requests within 24 hours on business days — an aim, not a guarantee. Priority-support requests are handled ahead of others. We work hard to keep sites online but, at this price point, no formal uptime guarantee (SLA) is included.

10. Third parties

We rely on reputable third parties to deliver the service: payment processing (Stripe), hosting infrastructure, domain registrars, and — for certain add-ons — tools such as chat and scheduling providers. Their availability affects ours; we are not liable for outages caused by third parties, though we will always work to restore service quickly.

11. Guarantees

A website improves your presence; it does not guarantee outcomes. We make no promises about search rankings, traffic, leads, bookings, or revenue. The service is provided "as available," and except as expressly stated here, without warranties of any kind.

12. Limitation of liability

To the maximum extent the law allows, Heegstra's total liability for any claim connected to the service is limited to the greater of (a) the amounts you paid us in the twelve (12) months before the claim arose, or (b) USD 100, and neither party is liable for indirect or consequential damages (such as lost profits). Nothing here limits liability that cannot legally be limited.

13. Changes

We may update these terms from time to time. Minor changes — clarifications, new features, anything that doesn't meaningfully affect your rights or what you pay — take effect when posted. Material changes take effect 7 days after we notify you by email at the address on file (and by WhatsApp as well, if you have opted in to service messages from us on WhatsApp); changes that affect what you pay always get 30 days' notice. The same notice applies to material changes to our Privacy Notice. If you don't agree with a change, cancel before it takes effect — that's the deal working as intended.

We send service and transactional messages — receipts, billing notices, renewal reminders, domain invoices, and notices of changes like these — to the contact details you provide at checkout. These are part of the service and continue for as long as you have a subscription with us, and domain invoices continue for as long as we hold a domain for you even after a subscription has ended.

Marketing email is separate and entirely optional. At checkout there is a checkbox for it, unticked by default, and you receive marketing email from us only if you tick it. Ticking it or leaving it alone changes nothing about your price, your package, or the service you get. Every marketing email has a one-click unsubscribe, and you can also ask us to stop at any time at info@heegstra.io. The checkbox covers email only: it is not consent to marketing texts or WhatsApp messages, which need their own separate opt-in. All of this is described in our Privacy Notice (heegstra.io/legal/#privacy).

Listed prices may change at any time for new purchases — but once you subscribe, the recurring price of your subscription and add-ons will not increase for as long as your subscription remains continuously active, in the currency you were charged at signup. Domain fees are outside this lock and are re-quoted each year as described in Section 4.

14. Governing law and disputes

These terms are governed by the laws of Wyoming, USA, without displacing consumer or local-law protections that mandatorily apply to you where you are. If something goes wrong, talk to us first — by email or through heegstra.io/contact — and we will try to fix it directly before anything formal.

15. Contact

Heegstra LLC · 30 N Gould St Ste N, Sheridan, WY 82801, USA · heegstra.io · info@heegstra.io · +1 (307) 381-9373 · heegstra.io/contact

The short version: we collect information you send and limited data needed to operate and secure the site, including cookieless page-speed and page-view measurement from Cloudflare outside the EU. Our contact and claim forms both require a phone number. We do not sell personal information or use it for cross-site advertising. Live chat is part of the site and sets no cookies until you accept a choice or start a chat. Google Analytics loads only if you accept analytics, and pages that offer call scheduling load Cal.com's scheduler when you open them. When you buy, Stripe takes the payment on its own pages and we never see your card number. Marketing email is a separate, unticked checkbox. If you sign up for our email newsletter, we send a confirmation email first and add you only when you click the link in it, and every newsletter has a one-click unsubscribe.

1. About this notice

This notice explains what personal information may be collected when you visit heegstra.io, submit a form, book a call, or communicate with us, how it may be used or shared, and the choices available to you. In this notice, "Heegstra," "we," "us," and "our" refer to Heegstra LLC, a Wyoming (USA) limited liability company at 30 N Gould St Ste N, Sheridan, WY 82801, which operates this site. A client project may also be governed by a separate written agreement.

2. What we collect

Depending on how you interact with us, we may collect:

• Forms: your name, email, required phone number, business or project details, selected topics, message, links, and notes.
• Communications: information in emails, calls, and support requests.
• Live chat: the content of chat conversations with us, contact details you choose to share in chat, and delivery metadata.
• Booking: if you book a call through the scheduler on our booking page or another page that embeds it, the contact details, selected time, and answers you enter there.
• Starting a claim: the business and preview address you are claiming, the package you put together, and the email address and phone number you enter before you continue to payment. We store this and open a support ticket from it in Zoho Desk at the moment you continue, so that we can follow up. That happens whether or not you finish paying. If you do not finish paying, we may send you a single message asking whether you ran into a problem, and we keep the record for up to 12 months.
• Email newsletter: if you sign up on one of our newsletter or free-download pages, the email address you enter, which of those pages you signed up from, and the date. That is all we ask for: there is no name field, and no other information is required to subscribe.
• Purchases: confirmation that you paid and limited transaction details we receive back from Stripe, such as the amount, currency, date, what you subscribed to, your billing contact details, and the brand and last four digits of the card. We never receive your full card number.
• Public sources, when we build a preview: before we contact a business we may collect its name, address, opening hours, photographs and logo from its public profiles, such as Instagram or Google Maps, in order to build a preview website for it. If you would rather we did not, tell us and we will remove it.
• Analytics, if you accept: a pseudonymous browser identifier, pages viewed, referring page or source, timestamps, approximate location, browser or device information.
• Technical and security data: IP address, browser or device type, requested page, timestamps, and security signals used to deliver and protect the site.
• Site speed and page counts: how quickly pages load for real visitors and which pages are viewed, measured by Cloudflare without cookies. Not collected for visitors in the European Union.

Our forms use bot protection and send submissions to Zoho Desk, which helps us manage enquiries. Do not submit passwords, payment details, government identifiers, health information, or other sensitive or regulated data through the site. Paying for a subscription works differently: card details are entered on Stripe's own checkout pages, never in a form on this site.

3. How we use information

We use personal information to:

• evaluate, respond to, and follow up on enquiries and support requests;
• contact you by email or phone about your request;
• schedule calls, prepare requested information, and manage business relationships;
• take payment, issue receipts and invoices, run and renew subscriptions, invoice domain renewals, and keep the billing and accounting records we are required to keep;
• understand aggregate site use and improve the site, if you accept analytics, and — where you are visiting a website we host for one of our customers — produce a monthly summary of site activity for that customer;
• keep the site fast and count page views, without cookies and whether or not you accept analytics, as described in section 5;
• prevent spam, fraud, misuse, and security incidents;
• maintain appropriate records, comply with law, and protect legal rights.

Providing your phone number, submitting a form, accepting the Terms, or buying a subscription is not consent to marketing texts or WhatsApp messages.

Marketing email: at checkout there is a separate checkbox for marketing email. It is not ticked for you, and nothing else on the page ticks it. If you tick it, we may email you occasional news about our products, offers, and tips. Leaving it alone changes nothing about what you buy, what you pay, or the service you get. Every marketing email has a one-click unsubscribe, and you can also ask us to stop at jan@heegstra.io. Once you unsubscribe we keep your address on a suppression list so that it is not used for marketing again. This checkbox covers email only. Service and transactional email about a subscription you hold, such as receipts, billing notices, renewal reminders, domain invoices, and changes to the service, is part of the service itself and continues either way.

Email newsletter. You can also subscribe directly, on our newsletter page or on a page offering a free download. Signing up there is a request for that newsletter and nothing more: we use your address to send it, to send the free download you asked for, and to send occasional news about our products, offers, and tips. We confirm the address first. You receive one email asking you to confirm, and you are added to the list only if you click the link in it, so an address entered by somebody else is never subscribed. Every newsletter carries a one-click unsubscribe, and you can also ask us to stop at jan@heegstra.io. Once you unsubscribe, your address goes on the same suppression list described above so that it is not used for marketing again. We do not sell, rent, or share the list.

Where the GDPR or UK GDPR applies, our legal basis for sending the newsletter is your consent. You can withdraw it at any time, and withdrawing it does not affect the lawfulness of anything we sent before you did.

WhatsApp messaging: if you contact us through WhatsApp, we may use your phone number and message content to respond to that request. We will send proactive WhatsApp messages only after you specifically opt in to receive WhatsApp messages from Heegstra. The opt-in will identify whether it covers service updates, marketing messages, or both. Consent to email, SMS, or another messaging channel does not count as WhatsApp consent. You may withdraw WhatsApp consent at any time, including by replying "STOP," asking us on WhatsApp, or using the contact details below. We honor requests to stop WhatsApp communications.

4. Service providers and disclosure

We use service providers for hosting, security, communications, live chat, scheduling, enquiry management, payment processing, domain registration, and normal business operations. They may process information as needed to provide those services, subject to their contracts and law. Cloudflare, Inc. hosts and secures the site and provides the cookieless speed and page-count measurement described in section 5. Zoho Corporation provides SalesIQ live chat and, only if you accept it, SalesIQ visitor analytics, and Zoho Desk, which holds the support tickets created from our forms and from website claims; Kit.com, Inc. (Kit, formerly ConvertKit) holds our email newsletter list and sends the newsletter, the confirmation email, and the free downloads, and receives the email address you enter on a signup page; Google provides Google Analytics 4 after analytics consent; Cal.com, Inc. provides the appointment scheduler on our booking page and other pages that offer call scheduling. Where you buy a custom domain, the registrar we use for it receives the registration details required to register and maintain the name.

Payments (Stripe). Stripe, Inc. is our payment processor. Checkout runs on Stripe's own hosted pages, so your card or bank details go straight to Stripe and never reach our systems or our storage. We receive back only confirmation of payment and limited transaction data, such as the amount, currency, date, what you subscribed to, your billing contact details, and the brand and last four digits of the card, which we use for receipts, support, and accounting. The billing portal, where you can see your invoices, update your payment method, and cancel, is hosted by Stripe as well. Stripe is a PCI-DSS Level 1 certified processor and handles the information you give it as a controller in its own right, under its privacy policy.

We may disclose information when legally required or to protect rights, safety, systems, or the site. We and our providers may process data in the United States and other countries, which means information about visitors in the European Economic Area, the United Kingdom, and Switzerland is transferred outside those regions. Where law requires additional safeguards for that transfer, we rely on the mechanisms our providers make available: Kit, which holds the newsletter list, is certified under the EU-U.S. Data Privacy Framework and its UK and Swiss extensions, and its data processing addendum also incorporates the European Commission's Standard Contractual Clauses.

5. Cookies, analytics, and external content

Necessary technology: hosting, security, and bot-protection services may use technical storage or strictly necessary cookies to deliver the site, prevent abuse, or verify legitimate requests. The live-chat widget (Zoho SalesIQ) is part of the site so you can reach us at any time; it sets no cookies until you accept a choice below or start a chat, and starting a chat sets only the cookies or storage needed to run your conversation. Chat works without optional visitor profiling. The site also stores your consent choices in a strictly necessary cookie, set for heegstra.io and its subdomains, so it can remember them. We do not use these technologies for advertising.

Site speed and page counts (Cloudflare): Cloudflare, which hosts and secures this site, also measures how quickly pages load for real visitors and counts page views. It sets no cookies, and Cloudflare states that it uses no fingerprinting and does not track visitors across websites; the reports we receive are aggregate. It does not run for visitors in the European Union. We use it to keep the site fast and to see which pages are read, never for advertising. It is not one of the cookie choices below.

Optional visitor analytics (Zoho SalesIQ): if you select "Visitor analytics," SalesIQ recognizes your browser across visits to show us how the site is used. If you reject it, chat still works and Zoho sets no analytics cookies.

Optional site analytics (Google): if you accept site analytics, we load Google Tag Manager, which in turn loads Google Analytics for us. Tag Manager is the tool we use to manage that measurement; it is not a separate purpose, and we use it only for the analytics described here. It measures visits, pages, referring sources, approximate location, and browser or device information so we can understand and improve the site. Google Analytics uses first-party cookies such as _ga and related _ga_... cookies to distinguish browsers and sessions. We configure these cookies to expire no later than 13 months after they are first set, and retain event-level Analytics data for 2 months and user-level Analytics data for 14 months. We do not reset that user-level period when a browser returns. Aggregated reports may remain available for longer.

We keep enhanced measurement, Google advertising features, Google Signals, user-provided data, ads personalization, and Google Ads linking off. Email redaction and redaction for common identifier query parameters are enabled as additional safeguards. We do not intentionally send names, email addresses, phone numbers, form contents, or other direct identifiers to Analytics. Google explains how it processes information from sites using its services on its partner sites page.

If you reject site analytics, the Google tag and Google Analytics do not load. Each optional purpose is a separate choice, none is pre-selected, and "Accept" and "Reject" are equally easy. Rejecting keeps the whole ordinary site — including chat — available. You can accept, reject, or later change your choices through "Cookie settings" in the footer. We remember the choice for up to 13 months, unless a material change requires us to ask sooner. Your choice applies to heegstra.io and all of its subdomains, so you are only asked once.

Booking (Cal.com): our booking page and the pages that offer call scheduling embed the Cal.com scheduler, which loads from cal.com when you open those pages — offering a call is what they are for. Cal.com may use cookies or similar storage needed to provide scheduling, and handles information you enter there under its privacy policy. If you prefer not to use it, you can email us instead.

Preview websites. We host preview websites for businesses on subdomains of heegstra.io (for example barberia-ejemplo.heegstra.io). These pages are part of this website and this notice applies to them in full.

We do not use advertising cookies. If we add another technology that uses nonessential cookies or similar storage, we will update this notice before activation and apply consent controls where required.

6. Retention

Retention depends on the purpose, our relationship with you, legal obligations, possible disputes, and provider backup or security schedules. Chat transcripts and related visitor records are kept for 12 months, unless a dispute, legal obligation, or business record requires longer; they are covered by the same rights and deletion process as everything else in this notice. Newsletter subscriptions are kept while you are subscribed; when you unsubscribe we remove you from the list and keep your address on the suppression list, which exists so that it is not used for marketing again. Billing and transaction records are kept for as long as tax and accounting law requires us to keep them, which is longer than the rest and is not something we can shorten on request. We delete or anonymize information when it is no longer reasonably needed, subject to lawful exceptions.

7. Your choices and rights

Depending on where you live, you may have rights to access, correct, delete, restrict, or obtain a copy of your information, object to certain uses, or withdraw consent.

If you are in the European Economic Area or the United Kingdom, those rights are specific: access to your information and a copy of it, correction of anything inaccurate, erasure, restriction of processing, objection to processing, and portability of information you gave us. Where we rely on your consent — the newsletter is the main case — you can withdraw it at any time, and doing so does not affect the lawfulness of anything done before you did.

To make a request or limit use or disclosure, email jan@heegstra.io. Using the subject "Privacy request" helps us route it faster, but we will act on any request we recognise, however it reaches us. It helps to include your name, preferred contact method, request, and enough detail to identify the information. We may reasonably verify your identity or an agent's authority. We handle requests within the time required by applicable law.

Rights may be limited by legal exceptions, including records we must keep or need for legal claims. You may complain to an appropriate privacy authority. In the European Economic Area that is the supervisory authority of the country where you live, work, or where you believe the problem happened; in the United Kingdom it is the Information Commissioner's Office.

8. Sale, advertising, and browser signals

We do not sell personal information or share it for cross-context behavioral advertising. Because there is no uniform Do Not Track standard, the site does not respond differently to Do Not Track signals. We will honor legally recognized browser signals if our practices make them applicable.

We do not knowingly allow other parties to collect your activity on this site over time and across unrelated websites for advertising. Because the chat widget is delivered from Zoho's servers, Zoho receives the technical data needed to show it (such as IP address, browser information, and the requested page); Zoho also processes chat conversations you start and, only after you accept visitor analytics, the cross-visit site-use information described above. Google may process the limited site-use information described above after you accept site analytics. Cloudflare, which delivers and secures the site, receives the request data needed to do that and the cookieless speed and page-count measurement described above; it does not follow you to other websites. Cal.com receives the technical data needed to show the scheduler on our scheduling pages (such as IP address, browser information, and the requested page) and the booking details you enter, under its own policy.

9. Children and security

This business-to-business site is not directed at children, and we do not knowingly collect the personal information of anyone under 18. Contact us if you believe a child has submitted information so we can review it.

We use reasonable administrative and technical safeguards appropriate to the information we handle. No website, transmission method, or storage system is completely secure.

10. Changes and contact

This version is effective August 13, 2026. If our practices change, we will post the updated notice here and change the version and effective date. We will not materially expand how we use previously collected information without additional notice or consent where required.

Privacy questions and requests may be sent to jan@heegstra.io or by mail to Heegstra LLC, 30 N Gould St Ste N, Sheridan, WY 82801, USA.