Private lives, trusted relationships, and consequential decisions deserve considered attention. Confidentiality is fundamental to how this practice works.
Much of my professional experience has taken place within private households and closely held working environments, where discretion is an expectation of the role. That responsibility remains at the forefront of HFR Private Consulting.
My work with high-profile and high-net-worth families and individuals has reinforced the importance of protecting both the circumstances brought to me and the confidence placed in the relationship.
Every client receives the same respect for their privacy, regardless of public profile, financial circumstances, or the scale of the engagement.
Many introductions arise through trusted friends, relatives, or professional relationships. A person may be comfortable seeking guidance through that private circle without wishing the wider public to know that an engagement exists. That distinction is respected.
A referral is not permission to share a client’s circumstances, confirm the details of an engagement, or report back to the person who made the introduction. Information is shared only within authorized arrangements, where necessary to deliver the work, or where disclosure is otherwise required or permitted by applicable law.
Client names, identifying case details, photographs, testimonials, or the existence of a client relationship are not used publicly without express permission. Commissioning an engagement does not create an obligation to provide a review or public endorsement.
Written confidentiality documentation can be provided, and client-proposed nondisclosure agreements may be considered. Please raise particular requirements before sharing sensitive materials so the terms and practical arrangements can be agreed.
No sale or exchange of client information. HFR does not sell, rent, trade, or provide client information or email lists to outside parties for marketing, advertising, or unrelated commercial use.
Discretion also requires clarity about who is participating, who is authorized to receive information, and which systems are used to conduct the engagement. Confidential handling does not mean that information never passes through a service provider, or that a staff assessment is anonymous to the principal who commissioned it. The details below explain these distinctions.
AI may assist with analytical work. Names and other identifying details are removed or generalized before confidential engagement information is submitted. Madria reviews the work and remains responsible for the findings delivered. Additional restrictions can be discussed before materials are shared.
This policy explains the information involved in visiting this website, contacting HFR, purchasing a resource, or participating in a consulting engagement. Select a section to read more, or expand the full policy.
HFR Private Consulting is operated by HFR Enterprises LLC. In this policy, “HFR,” “we,” “us,” and “our” refer to HFR Enterprises LLC in connection with this practice, its website, consulting engagements, and digital resources.
For privacy questions, requests, or written confidentiality arrangements, contact admin@hfrpc.com. This notice covers information about visitors, prospective clients, clients, representatives, and individuals whose information is provided during an engagement.
Depending on your interaction with HFR, we receive contact details, your role or relationship to an engagement, inquiry correspondence, service selections, intake responses, scheduling preferences, and information about your intended outcome.
Consulting materials may include descriptions of household or business arrangements, responsibilities, working relationships, staff assessments, relevant role documents, resources, constraints, and written findings. Information may concern you or other people involved in the area being examined.
Purchase records may include your name, email, billing details, product or service purchased, payment status, and transaction references. Payment details are entered through the designated checkout and handled by the payment processing or digital wallet services involved in your selected payment method. Do not send card numbers or banking credentials through an intake form or ordinary email.
Our website and the services embedded in it may also receive technical information, such as IP address, browser and device details, referral information, pages requested, and security or operational logs. The information collected depends on the services and features you use.
Information is provided directly through inquiries, email, intake forms, consulting conversations, purchases, and documents you choose to submit. It may also come from a representative arranging an engagement, the principal commissioning an assessment, participating staff, or another source identified as part of the agreed work.
A referral may introduce an individual or describe a proposed engagement. We use that information to consider or facilitate the introduction, rather than treating the referral as permission to disclose the prospective client’s private circumstances.
If you provide information about another person, share only what is relevant and what you are entitled to provide. Where required, inform them about the assessment and this notice. Please do not include unnecessary identifying details, account credentials, government identification numbers, or unrelated sensitive records.
We use relevant information to respond to inquiries, assess whether an engagement is appropriate, establish and administer an agreed scope, conduct assessments, prepare findings and guidance, communicate with participants, and deliver purchased digital resources.
We also use information as needed for payment administration, recordkeeping, customer support, security, preventing misuse, resolving disputes, and meeting applicable legal obligations.
HFR does not sell, rent, trade, or provide client information, confidential consulting records, or email lists to outside parties for marketing, advertising, or unrelated commercial use. We do not disclose private engagement materials to advertisers for behavioral advertising. Any public testimonial or case example requires separate express permission; it is not assumed from commissioning an engagement.
A staff assessment is conducted to inform the engagement commissioned by the principal. Information supplied by participating staff may be reviewed alongside the principal’s intake, relevant documents, and other agreed materials.
Findings delivered to the commissioning principal may include relevant observations, statements, role-specific information, or information attributable to a participant where necessary to explain the assessment. Staff submissions should not be assumed to be anonymous or withheld from the commissioning principal.
Confidentiality toward the public is different from confidentiality between participants in the same engagement. Any particular reporting restrictions or expectations should be agreed before submissions are collected. The engagement scope should identify the intended recipients of findings.
AI tools may assist with organizing information, examining patterns, developing questions, or preparing analytical work. Before confidential engagement information is submitted to an AI tool, names and other identifying details are removed or generalized. This includes consideration of details that could identify someone indirectly, such as distinctive locations, employers, public roles, or unusual combinations of circumstances.
Removing identifiers reduces exposure but does not necessarily make information irreversibly anonymous. AI services remain external technology providers, and their processing, retention, and account settings must be considered when deciding what information is appropriate to submit. This policy does not promise that every provider offers zero retention or excludes every submission from model improvement.
Madria reviews the work and remains responsible for the consulting findings and guidance delivered. AI assistance does not replace that professional review.
If an engagement requires restrictions on AI use, specified technology providers, or additional confidentiality conditions, contact admin@hfrpc.com before submitting materials so those conditions can be considered and documented. This notice is not a blanket authorization to use information in a way that applicable law or an agreed confidentiality obligation prohibits.
We use external services to operate the practice. Current website, checkout, and digital-resource functions use Systeme.io; inquiry and assessment forms may use Tally. Payment processing, email, document storage, conferencing, and AI-assisted work also involve providers appropriate to the functions being used.
Payments are handled through external payment processing services and, where available, digital wallet providers. The providers involved depend on the payment method offered and selected at checkout. They may receive payment, contact, billing, device, and transaction information for processing the purchase, authenticating the payment, preventing fraud, handling refunds or disputes, and meeting their legal obligations. Their privacy notices govern their handling of that information. HFR receives information needed to confirm and administer the transaction. Payment processing is separate from disclosure of private consulting submissions or distribution of an email list for outside marketing.
Providers may process information needed to supply their services. This can include hosting or storing submissions, transmitting communications, maintaining transaction records, or supporting security. Their own privacy notices and contractual terms explain their separate processing activities. We do not represent that third-party systems are inaccessible to their authorized personnel or entirely free of risk.
We may disclose relevant information to recipients authorized within an engagement, professional advisers assisting with a necessary business or legal matter, or authorities where disclosure is required by law or valid legal process. Limited disclosure may also be necessary and permitted by law to address fraud, security incidents, disputes, or a serious risk to rights or safety.
If ownership or operation of the practice changes, any proposed transfer of personal information must be considered in light of applicable law, relevant confidentiality agreements, and the purposes for which information was collected. Appropriate notice will be provided where required.
Provider notices: Systeme.io privacy policy ↗ and Tally privacy notice ↗.
The website, checkout, and embedded services may use cookies or similar technologies for functions such as maintaining sessions, remembering preferences, processing purchases, securing forms, and measuring service operation. An embedded video, social platform, or external store may apply its own technologies when you interact with it.
You can manage cookies through your browser and any controls provided by the relevant platform. Blocking some technologies may affect forms, purchases, or other functionality. Where optional technologies require consent under applicable law, that consent must be obtained separately; reading this policy does not supply it.
This policy does not mean that HFR has installed every available advertising or analytics tool. If additional tracking is introduced, the relevant disclosures and consent arrangements must reflect what is actually used. External websites and platforms have their own privacy practices.
We use contact information to communicate about inquiries, submissions, appointments, orders, and engagements. These operational messages are distinct from promotional subscriptions.
Where marketing messages are sent, you may unsubscribe using the instructions provided or contact admin@hfrpc.com. Opting out of promotions does not prevent necessary communications about an existing purchase or engagement.
Tell us if correspondence requires a particular recipient, restricted subject line, approved communication channel, or other discretion. We will consider the request and confirm arrangements that can be supported.
Retention depends on the purpose and sensitivity of the information, whether an inquiry or engagement remains active, any agreed follow-up, applicable accounting or legal requirements, and the need to resolve disputes or establish what work was provided. Different records may therefore be retained for different periods.
Information should be deleted or appropriately de-identified when it is no longer needed for those purposes, subject to applicable requirements and agreed arrangements. Deletion from active records may not immediately remove information from routine backups, provider records, or systems subject to separate lawful retention requirements.
You may ask about the retention applicable to your engagement before providing materials. A request for deletion is assessed against the purposes and obligations that still apply; this policy does not promise immediate deletion of every record.
Our approach is to limit the information collected and shared to what the work requires, restrict access according to a legitimate need, and use reasonable administrative, technical, and organizational safeguards appropriate to the information handled.
The safeguards and communication arrangements for a particularly sensitive engagement should be considered before materials are exchanged. Do not assume that an ordinary email, a publicly accessible form link, or a QR code creates a dedicated encrypted client portal.
No internet transmission, storage service, or security measure can be guaranteed completely secure. If you believe information has been sent to the wrong recipient, exposed, or accessed without authorization, contact admin@hfrpc.com promptly. We will assess the issue and provide notifications required by applicable law.
HFR works remotely, and service providers may operate in more than one country. Information may therefore be stored, accessed, or processed outside the country where you live, including through remote consulting work and provider infrastructure. Privacy laws and government-access rules may differ between countries.
Where applicable law requires a particular transfer mechanism or safeguard, the relevant processing must be assessed and an appropriate lawful arrangement established. This notice does not itself create a transfer agreement or certify participation in a data-transfer framework.
If your engagement requires data to remain in a specified country or to be accessed only by specified people, raise that requirement before submitting information so we can determine whether it can be accommodated.
Where the law requires a legal basis, the basis depends on the specific activity: taking steps at your request or performing an agreed engagement; legitimate interests in operating and securing the practice, subject to your rights; meeting legal obligations; or consent where it is required. Sensitive information may require additional conditions under applicable law.
Depending on your location and the laws that apply, you may have rights to request access to your personal information, correction, deletion, a copy in a portable format, restriction of certain uses, or objection to certain processing. You may also be entitled to withdraw consent where processing relies on consent, or to appeal a decision on a privacy request.
Your right to object: where applicable, you may object to processing based on legitimate interests and to use of your information for direct marketing. Contact admin@hfrpc.com to exercise an applicable right.
We may need reasonable information to verify your identity or authority before responding. Requests will be handled within applicable legal timeframes and may be limited where necessary to protect another person’s rights, preserve legally protected material, or meet a legal obligation. Withdrawing consent does not undo processing that was lawful before withdrawal.
You may also complain to the privacy regulator responsible for your jurisdiction. Nothing in this policy removes rights or remedies available under applicable law. Contact us if you need assistance identifying the appropriate route for a privacy concern.
The website, digital store, and consulting intake processes are intended for adults. Children should not submit inquiries, make purchases, or complete assessments directly.
Parents or authorized adults may provide information relevant to a child’s care or household arrangements where necessary for the agreed work. Minimize names and other identifying or sensitive details unless specifically needed and appropriately provided.
If you believe a child has submitted information directly without appropriate authorization, contact admin@hfrpc.com so we can assess and address it.
An engagement agreement or accepted confidentiality agreement may establish additional, specific obligations, reporting arrangements, or handling requirements. Those terms apply alongside this policy, subject to applicable law. An NDA must be agreed; a request alone does not establish its terms.
We may update this policy to reflect changes in services, providers, practices, or legal requirements. The revision date will identify the current version. Material changes will be brought to affected individuals’ attention where required. A revised notice does not retroactively supply consent for a use that requires it.
This notice explains confidentiality and personal-information handling. It does not itself create legal professional privilege, an engagement, or a guarantee against every possible disclosure.
HFR Enterprises LLC
HFR Private Consulting
admin@hfrpc.com
For an NDA, written confidentiality documentation, a privacy request, or a concern about information handling, email the address above. In your initial message, describe the request without attaching unnecessary confidential records.
If additional handling requirements are essential to your engagement, please establish them with us before completing an intake or sending materials.