Legal · under review
Privacy, in plain sentences.
Version: July 2026 · under legal review before launch.
What forms collect
When you fill in a form on this site, we receive what you type: your name, email, company, and your answers if you ask us to send the marked paper from the mock audit. Nothing more.
The mock audit
Your answers are marked in your browser and stay there. They leave your browser only when you choose to send yourself the marked paper, at which point the answers travel with that request.
Analytics
We use GA4 and HubSpot for basic site analytics, and they load only when configured on our end. Where these tools allow it, we honour browser privacy signals such as Do Not Track or Global Privacy Control.
What we don't do
We never sell your data, and we don't run drip email campaigns. If you book a chat or ask a question, a person replies. That's it.
Your rights
Under Singapore's Personal Data Protection Act, you can ask to see or delete what we hold on you. Write to hello@heartwoodcyber.com and we will action it.
Who to contact
Questions about this policy, or about your data, go to hello@heartwoodcyber.com.