Heart Craft Media, LLC

1) Who We Are & Scope

Heart Craft Media provides end-to-end talent solutions: direct-hire recruiting, offshore/nearshore staffing, and practical AI/automation that removes busywork and increases efficiency. This Policy covers personal information (“Personal Data”) we process from:

• Clients & Prospects (company representatives and decision makers)
• Candidates (job applicants, contractors, and talent)
• Website Visitors (analytics/cookie data)
• Vendors/Partners (points of contact)

We are not a medical or legal services provider, and we do not run social/profiles/chat communities.

2) Eligibility / Children

Our Services are for adults. Individuals under 18 must not use the Services or provide Personal Data. We do not knowingly collect data from children.

3) What We Collect (Categories)

Depending on your relationship with us, we may collect:

• A. Identifiers & Contact Data: Name, business title, company, email, phone, mailing address, IP address, device identifiers.
• B. Candidate & Professional Data: CV/resume, employment history, education, skills, portfolio links, compensation expectations, availability, interview notes, references, work eligibility, location preferences.
• C. Verification Data (where permitted/required by law and by contract/consent): ID documents, background-check results (criminal/sex-offender registry checks, sanctions lists), right-to-work/immigration status, social presence review, and live video identity verification.
• D. Transaction & Billing Data: Payment method tokens, billing history, invoices, tax IDs (for vendors/contractors). We use third-party processors and do not store full card PANs on our servers.
• E. Usage & Device Data: Pages viewed, referring URLs, time on site, browser/OS, IP, approximate location, cookie IDs, pixels, and similar technologies (see Cookies & Tracking).
• F. Communications: Emails, calls, meeting notes, support tickets, and business correspondence.

We obtain this data directly from you, via your employer/agency, from references you provide, from public sources (e.g., LinkedIn), background-check providers (with authorization), and from analytics/service vendors.

4) Why We Use Your Data (Purposes)

• Provide and improve Services (recruiting, staffing, onboarding, managed services, AI automations).
• Source, evaluate, and place candidates at client companies.
• Screen and verify identities (ID, background checks, right-to-work) where lawful and appropriate.
• Operate our website and analytics, detect and prevent fraud/security incidents.
• Communicate about roles, proposals, contracts, invoices, support, and product updates.
• Comply with law, respond to lawful requests, enforce agreements, and resolve disputes.
• Market and promote Heart Craft Media to business contacts (you can opt out at any time).

5) Legal Bases (EEA/UK visitors)

Where GDPR/UK GDPR applies, our legal bases include: contract necessity, legitimate interests (e.g., B2B marketing to business emails, product improvement, security), consent (e.g., certain cookies/SMS), and legal obligations.

6) How We Share Information

We do not sell Personal Data. We may share as follows:

• Service Providers/Processors. Hosting, background checks, identity verification, ATS/CRM, communications, analytics, payment processing, security, and AI tooling vendors—only what’s necessary to perform their work under contract.
• Clients (for candidates). When you apply or we introduce you for a role, we share relevant candidate data with the client hiring team.
• Professional References. With your consent, we may contact and share minimally necessary details.
• Corporate Transactions. In a merger, acquisition, financing, or sale, data may transfer as part of the deal under this Policy.
• Legal/Compliance. If required by law or to protect rights, safety, and integrity of our Services and users.

We do not share mobile numbers with third parties for their own marketing.

7) Cookies & Tracking

We use cookies, pixels, and similar technologies for essential operations (site functions, security, session management), analytics (understand usage to improve Services), and B2B marketing (frequency capping, measuring campaign performance). You can manage cookies via your browser settings and, where implemented, our cookie banner/preferences. Blocking cookies may impair site functionality. Some browsers support Global Privacy Control (GPC) signals; where legally required, we will honor recognized signals for opt-out choices.

8) SMS/Calls & TCPA Consent

By providing a phone number and affirmatively opting in, you agree that Heart Craft Media may contact you via calls and/or SMS regarding roles, interviews, staffing updates, and service notices. Message/data rates may apply. Frequency varies. You can opt out at any time by replying STOP to an SMS or contacting Support@heartcraftmedia.com. We do not share SMS opt-in data with third parties for their independent marketing.

9) Your Choices & Rights

• Email marketing. Click “unsubscribe” in any marketing email or email Support@heartcraftmedia.com.
• SMS. Reply STOP or contact Support.
• Browser tracking. Adjust cookie settings in your browser/device; use GPC where available.

California/CPRA and Similar U.S. Rights (where applicable):
You may request to know/access, correct, delete, or opt-out of sharing for cross-context behavioral advertising. We do not “sell” Personal Data as defined by CPRA. Submit requests at Support@heartcraftmedia.com. We will verify requests as required by law and respond within statutory timelines.

EEA/UK Rights (where applicable):
You may request access, rectification, erasure, restriction, portability, or object to processing based on legitimate interests or direct marketing. You may also withdraw consent where processing is based on consent. You can lodge a complaint with your local supervisory authority.

Universal/Global Opt-Out Request (UOOM).
You may submit a universal opt-out request (including request to limit sharing not necessary to provide Services) by emailing Support@heartcraftmedia.com with subject line “Universal Opt-Out.” Note: if you opt out of essential sharing (e.g., payment processing, background checks), we may be unable to deliver Services.

10) Data Retention

We retain Personal Data only as long as necessary for the purposes in this Policy, to comply with legal/contractual obligations, and to resolve disputes. Backup copies may persist for a limited time per our disaster-recovery policies.

11) Security

We use administrative, technical, and physical safeguards (e.g., encryption in transit, firewalls, access controls, least-privilege practices). No method is 100% secure; transmission and storage entail risk. If we learn of a security incident impacting you, we will notify you consistent with applicable law.

12) International Transfers

We are U.S.-based and may process data in the United States and other countries. Where required, we use appropriate safeguards (e.g., Standard Contractual Clauses) for cross-border transfers.

13) Access, Corrections, and Deletion Requests

For access, correction, deletion, portability, or to update your contact preferences, email Support@heartcraftmedia.com. If you delete or restrict certain data, some Services may become unavailable. Backups or legal holds may delay or limit deletion in accordance with law.

14) Candidate-Specific Notices

• Introductions to Clients. When you’re submitted for a role, we will share relevant candidate information with that client.
• Background Checks/Verification. We conduct these only with authorization and in accordance with applicable law.
• Non-Circumvention. Where your engagement occurs through our Services, working directly with a client outside agreed terms may breach contractual obligations (governed by service agreements).

15) Changes to This Policy

We may update this Policy to reflect changes in law or our practices. Material changes will be announced by email or site notice at least 30 days before they take effect unless a change is required sooner by law. Continued use of the Services after the effective date constitutes acceptance.

16) Dispute Resolution

Any dispute relating to this Privacy Policy will be resolved by binding virtual arbitration under the CPR Non-Administered Arbitration Rules, conducted in English, governed by the laws of South Carolina, USA (without regard to conflicts rules). The arbitrator will be mutually selected; if the parties cannot agree, an arbitrator will be selected at random from https://www.nhmediators.org/. Each party bears its own fees unless the arbitrator rules otherwise under applicable law.

17) Contact Us

Questions, requests, or complaints:

• Email: Support@heartcraftmedia.com
• Phone: +1 (864) 442-9500