Privacy Policy

1. Who We Are

Bardzell Consulting LLC is a limited liability company registered in the United States and operating a program consulting practice for archery ranges, coaching curricula, equipment audits, youth programs, league scoring and coach preparation. The company is the controller of the personal information described in this policy. The principal consultant and developer of Bardzell Consulting works from the Willow Brook Way studio and is the person responsible for decisions about how client information is handled.

Our registered address is 2271 E Willow Brook Way, Sandy - 84092-5535, United States (US). Our contact email address is admin@bardzellconsulting.hair and our contact telephone number is +19432932836. Where this policy refers to the Company, it means Bardzell Consulting LLC. Where it refers to the studio, it means the consulting premises and working practice operated from the address above.

This policy is written in plain language so that a club director, a school administrator, a parks department officer or a coach can understand it without legal training. If any sentence below is unclear, we welcome a question by email and we will explain the point in more detail.

2. Scope of This Policy

This policy applies to information collected through this website, through email and telephone contact with the studio, and through professional engagements for range layout reviews, coaching curriculum builds, equipment audit weeks, youth program design, league scoring systems and coach certification preparation. It does not apply to third party websites that may be linked from our pages, and it does not govern information that a client organization collects and holds in its own systems.

Where a client organization shares information with us for an engagement, that organization remains responsible for its own privacy notices and consents. Our role is to handle the shared information only for the purpose of the engagement and in line with the instructions of the client. Where we act as a service provider rather than a controller, we follow the client instructions and return or delete project data when the engagement closes.

By using this website or by asking us to prepare a proposal, you acknowledge that you have read this policy. You do not need to consent to marketing to use the site, and we do not condition the delivery of consulting services on permission to send promotional email.

3. Information We Collect

The information we collect falls into a small number of practical categories. We collect it because a consulting engagement cannot be prepared, delivered or documented without it, and we try to collect no more than the work actually requires.

• Contact details such as name, role, organization name, postal address, email address and telephone number.
• Correspondence content, including messages sent through the contact form, email threads and notes taken during calls.
• Engagement details such as site size, staffing numbers, season calendars, equipment lists and program goals.
• Project materials supplied by the client, including drawings, score sheets, curriculum drafts and photographs of the range or store.
• Billing information needed to issue and settle an invoice, provided through the financial channel agreed with the client.
• Limited technical information generated by visiting this website, as described later in this policy.

We do not ask for payment card numbers through this website. Card details are handled by the payment provider used for the engagement, and we do not store full card numbers in our own records. We do not collect information about a person racial or ethnic origin, political opinions, religious beliefs, health or sexual orientation, and we ask clients not to include such information in the materials they send.

4. Contact Forms and Messages

The contact form on this website collects a name, an email address, a subject line and a message. The form does not transmit the content to a server operated by us. Instead, pressing the send button composes a message in the visitor own mail application, addressed to admin@bardzellconsulting.hair, so the visitor can review the message before it leaves their device.

Once a message reaches our mailbox, it is stored in the email account used for studio correspondence. We keep enquiry messages for as long as needed to answer the question and to follow up on any engagement that results. If no engagement follows, we normally remove the thread within twenty four months unless the enquiry relates to a live proposal, a dispute or a legal obligation.

Telephone messages are noted in the same correspondence record so that a conversation has a written trail. We ask callers not to leave sensitive personal information on voicemail beyond a name, a number and a short description of the range or program question.

5. Client Project Records

Each engagement produces a working file. That file may contain site measurements, photographs of the shooting line and backstop, staff lists, equipment registers, draft curricula, score sheets and the written report delivered at handover. The file exists so that a club can ask a question in a later season and receive an answer grounded in the original plan rather than in memory.

Project files are stored in a controlled folder structure on studio equipment and in a backup service used only by the practice. Access is limited to the principal consultant and to any named assistant engaged for a specific task, each of whom is bound by a written confidentiality undertaking. We do not place client files in public cloud sharing links, and we do not send full project files to personal email addresses.

Photographs supplied by a client are used only for the engagement. We do not publish range photographs, staff lists or program materials on this website or in marketing materials without a separate written permission from the client organization. Where a client agrees to a case note, the note is written in general terms and avoids identifying individuals.

6. Information About Young People

Youth program work calls for particular care. We design programs for young people but we do not collect enrollment records, medical details, guardian contact lists or attendance registers. Those records remain with the school, camp or club that runs the program. If a client sends a sample class list so that we can size a session, we ask that names be removed and that only the number of participants and age band be shared.

Where a coach preparation engagement involves young participants in a demonstration session, the club is responsible for obtaining guardian consent and for supervising the session. We attend as consultants and do not direct young people outside the presence of the club staff. Any photograph taken during a demonstration is taken only with the consent of the club and never shows a participant face without written permission.

If we discover that personal information about a young person has reached us without the safeguards described above, we delete it promptly and inform the client organization so that its own records and notices can be corrected.

7. Website and Technical Data

This website is a small static site. It does not run a visitor account system, it does not place advertising cookies and it does not use a marketing pixel. The web server that delivers the pages may record standard request information such as the page requested, the date and time, the browser type and the approximate network location, for the purpose of keeping the site available and secure.

Server records of this kind are retained by the hosting provider for a short operational period and are used in aggregate. We do not attempt to identify individual visitors from these records and we do not combine them with contact records. If a security incident requires an investigation, the records may be reviewed for that purpose alone.

The site loads its own stylesheet and script files and does not embed third party fonts, video players or social media widgets. Embedded content of that kind would disclose visitor information to another company, so we keep the pages free of it.

8. Legal Bases for Processing

Where privacy law requires a legal basis, we rely on one of the following. We process information to take steps at the request of a prospective client before entering a contract, and to perform the contract once an engagement is agreed. We process information for our legitimate interests in running a professional practice, keeping accurate records, protecting the studio and answering enquiries, and we balance those interests against the rights of the people concerned.

We rely on legal obligation where records must be kept for tax, accounting or other statutory purposes. Where a client asks us to handle information on its behalf, the client is responsible for identifying its own legal basis and for giving any notices that apply to participants, staff or guardians.

We do not rely on consent for the ordinary delivery of consulting services. Where consent is the appropriate basis, for example for an optional case note, we ask for it in writing and record the date. Consent can be withdrawn at any time by email to admin@bardzellconsulting.hair, and withdrawal does not affect work already completed lawfully.

9. How We Use Information

Information is used to answer enquiries, prepare proposals, deliver engagements, issue invoices, keep the project file accurate and provide follow up support after handover. We also use it to plan travel for site visits, to confirm scheduling with club staff and to maintain the safety record that a professional consulting practice is expected to keep.

Occasionally we use aggregated, non identifying observations from engagements to improve our own templates, for example by refining a risk register format after several reviews reveal the same gap. Aggregated observations never include client names, staff names, addresses or identifiable site details.

We do not use client information for automated profiling, we do not sell it and we do not trade it for advertising audiences. We do not send promotional email to a person who has not asked for it, and any occasional studio update includes a clear way to stop receiving it.

10. When We Share Information

We share information only where the engagement or the law requires it. The categories are limited. Service providers who host the website, store files, run the email account or prepare invoices receive only the information needed to perform that function and are bound to use it for that purpose alone. Professional advisers such as an accountant may see billing records for statutory reporting.

Where an engagement is delivered with a named assistant, that person receives the portion of the project file needed for the task and signs a confidentiality undertaking before access is granted. Where a client organization asks us to coordinate with a supplier, an insurer or a municipal officer, we share only the documents the client has approved for release.

We may disclose information if required by a lawful request from a public authority, a court order or a subpoena, and we will notify the affected client where the law allows. We may also disclose information to protect the safety of participants or staff in an emergency, limited to what is necessary in the circumstances. We never share information with advertisers or data brokers.

11. How Long We Keep Information

Different records have different lives. Enquiry correspondence without an engagement is normally removed within twenty four months. Proposal documents are kept for the current season and one further season so that a club can return to a conversation without starting over. Active project files are kept for the duration of the engagement and for four years after handover, which covers the typical inquiry about a design decision or a curriculum progression.

Billing and tax records are kept for the period required by accounting rules, currently seven years for the financial records of the company. Safety incident records connected to a range review are kept for the longer of seven years or the period recommended by the client own insurer, because these records may need to be produced if a claim is made.

When a retention period ends, records are deleted in the ordinary course of file maintenance. If a client asks for earlier deletion and no legal or contractual duty prevents it, we delete the project file and confirm the deletion in writing. Backup copies are overwritten in the normal backup cycle, which runs for a limited number of weeks.

12. How We Protect Information

Studio devices use full disk encryption, screen locks and current security updates. The studio network uses a strong passphrase and a separate guest network for visitors. Project folders are restricted to the principal consultant and to a named assistant with a specific task, and file access is reviewed at the close of each engagement.

Email attachments carry client material only where a secure channel is not available, and large files travel through a link that expires. Backup copies are encrypted and stored with a provider that offers access logging. Paper notes taken on site are kept in a locked drawer in the studio and are scanned or securely destroyed at the close of the engagement.

No method of storage or transmission is entirely risk free. We take the measures described here because they are proportionate to the scale of a small consulting practice, and we review them at least once a year. If you become aware of a security concern connected to our work, please contact admin@bardzellconsulting.hair immediately so that we can investigate.

13. Cookies and Similar Technologies

This website does not set advertising or analytics cookies. The script that runs the mobile menu and the scroll reveal styling works in the browser and does not store a tracking identifier. The legal pages and the main pages do not include a cookie banner because no promotional tracking cookie is placed.

If the hosting provider uses a strictly necessary cookie for security or load balancing, that cookie is set by the provider and is used only to deliver the requested page. Such a cookie does not identify a person for marketing purposes and cannot be used by us to build a profile.

Should the practice ever add a measurement tool, this policy will be updated before the tool is enabled, and any optional measurement will be switched off until a visitor chooses to allow it. We do not use fingerprinting techniques to recognise a returning visitor.

14. Your Rights and Choices

Depending on where you live, you may have the right to know whether we hold personal information about you, to receive a copy of it, to ask for corrections, to ask for deletion, to restrict or object to certain processing, and to ask for a portable copy in a common format. You may also have the right to withdraw consent where consent is the basis for processing.

To exercise a right, write to admin@bardzellconsulting.hair with enough detail for us to locate the relevant records. We may ask for proof of identity before releasing information, because releasing it to the wrong person would itself be a privacy failure. We answer requests within the period required by applicable law and we do not charge a fee unless a request is clearly excessive or repetitive.

If a request concerns information held by a client organization rather than by us, we will explain that the client is the right point of contact and, where appropriate, pass the request on with a note. You also have the right to complain to a data protection authority in your jurisdiction, though we would appreciate the chance to resolve the matter directly first.

15. Access, Correction and Deletion

An access request is handled in four steps. We confirm receipt, we locate the records that match the request, we prepare a copy or a summary depending on what has been asked, and we send it through a secure channel. Where a record contains information about another person, we redact that part before release.

A correction request is reviewed against the original source document. If the source shows the record is wrong, we correct it and note the change. If the source shows the record is accurate, we explain why and record that the correction was requested. A deletion request is honoured where no legal, contractual or safety duty requires retention, and we explain any exception in writing.

Requests connected to a completed engagement may require us to retrieve a project file from backup. Restoration takes a short time and we confirm when the work is done. We keep a minimal log of access and deletion requests so that we can demonstrate compliance with this policy.

16. Privacy for Children

This website is intended for adults who run programs, not for children. We do not knowingly collect personal information from a child through this site, and the contact form is not designed for use by a young person. If a parent or guardian believes that a child has sent information through the site, please contact us and we will remove it promptly.

In youth program work, records about participants stay with the school, camp or club that enrolls them. We advise on program structure and do not keep enrollment lists, medical notes or guardian contacts. Where a demonstration session involves young people, the club handles consent and supervision, and we attend as consultants.

If a client sends participant information without removing names, we return the file and ask for an anonymised version. We would rather delay a small piece of work than hold records that the engagement does not need.

17. Visitors Outside the United States

The practice is based in the United States and most engagements take place within the country. Where a client or visitor is located elsewhere, information may be transferred to and stored in the United States, where privacy law may differ from the law of the person home country. We take steps to ensure that any transfer is lawful and that the information receives the protections described in this policy.

Where a written data transfer arrangement is required, we will sign the standard terms offered by the client organization, provided they do not conflict with our professional duties or with the law that applies to the company. Cross border site visits are scheduled only after the practical arrangements, including any visa or insurance requirement, have been confirmed.

Nothing in this section limits the rights described earlier. A visitor outside the United States can use the same contact address to ask questions about transfer or to exercise a privacy right.

18. Third Party Services

The studio relies on a small set of service providers for hosting, email, file storage, backup and accounting. Each provider is chosen for reliability and for a clear privacy position, and each is used only for the function it performs. We review the list once a year and remove any provider that no longer meets the standard we expect.

Provider access to client information is limited by contract to the service function. We do not permit a provider to use client information for its own marketing or product development. Where a provider processes data outside the United States, we confirm that the provider offers an appropriate transfer mechanism before the engagement begins.

Links to other websites may appear in a report or an email. Those sites are governed by their own privacy notices, and we are not responsible for their practices. We encourage clients to read the notice of any site before submitting information to it.

19. Notice of Security Incidents

If we become aware of a security incident that affects personal information in our care, we act quickly. The first step is to contain the incident, which may mean disabling an account, changing a credential or isolating a device. The second step is to assess what information was involved and who may be affected. The third step is to notify affected clients and, where the law requires it, the relevant authority.

Notification is sent without undue delay and includes what happened, what information was involved, what we have done and what the client can do to reduce risk. We do not wait for a complete forensic picture before sending an initial notice, because a timely warning is more useful than a perfect report that arrives late.

After the incident is closed, we review the cause and change the practice where needed. A short internal note records the lesson so that the same gap is not repeated in a later engagement.

20. Changes to This Policy

This policy is reviewed at least once a year and whenever the practice changes a service provider, adds a website feature or takes on a type of engagement that involves new information. The date at the top of the page records the most recent revision, and a material change is described in a short note at the end of this section so that a returning visitor can see what moved.

If a change affects an active engagement in a way that alters how client information is handled, we notify the client directly before the change takes effect. We do not apply a new practice retrospectively to records that were collected under an earlier version without telling the affected client.

Current revision note: the policy was rewritten in full to describe the static website, the contact form that opens a local mail application, the youth data practice and the retention schedule for project files. Earlier wording that described a general marketing database has been removed because the practice does not operate one.

21. How to Contact Us

Questions about this policy, requests to exercise a privacy right and reports of a security concern are all welcome. Please use email where possible, because a written trail helps us answer accurately. Include the organization name and the engagement season so that we can locate the right file quickly.

We aim to acknowledge a privacy request within two business days and to complete it within the period required by applicable law. If a request is complex, we explain the reason for any extension and stay in contact until the matter is resolved.