Big Head Consulting
Back to home

Privacy Policy

Big Head Consulting LLC
Effective Date: May 25, 2026
Last Updated: May 25, 2026

1. Introduction

Big Head Consulting LLC ("Big Head Consulting," "we," "us," or "our") respects your privacy. This Privacy Policy explains how we collect, use, share, and protect personal information when you visit bigheadconsulting.ai (the "Site") or interact with our services. It also explains your rights and how to contact us.

This policy applies to information we collect through the Site, including through our intake assessment tool. It does not cover information collected by third parties whose services we use (such as web hosting, analytics, and AI processing providers), each of which has its own privacy policy.

If you do not agree with this Privacy Policy, please do not use the Site.

2. Information We Collect

We collect information in two ways: information you provide directly, and information collected automatically through your use of the Site.

2.1 Information You Provide

When you use our intake assessment tool or contact us, you may provide:

  • Identity information — your name and the name of your business
  • Contact information — your email address and, optionally, your phone number
  • Business context — the type of business you operate (selected from a list), the operational issues you select from our prompts, and any free-text description you provide about your business challenges
  • Communications — any other information you choose to send us by email or other means

You are not required to provide this information, but if you do not, we may be unable to respond to your inquiry or assess fit for our services.

2.2 Information Collected Automatically

When you visit the Site, we automatically collect limited technical information, which may include:

  • Usage data — pages visited, time spent on pages, links clicked, referring URL, and similar metrics
  • Device and browser data — browser type and version, operating system, device type, screen size, and approximate geographic region (typically inferred from IP address)
  • Cookies and similar technologies — small data files stored in your browser. See our Cookie Policy for details on what cookies we use and how to control them.

We may receive this information through web analytics services provided by our hosting provider (Vercel) and through standard server logs.

2.3 Information We Do Not Collect

We do not knowingly collect:

  • Social Security numbers, government IDs, or driver's license numbers
  • Financial account numbers, credit card numbers, or banking information
  • Health information or other special categories of personal information under applicable law
  • Personal information from children under 16

If you submit such information to us by mistake, please contact us so we can delete it.

3. How We Use Your Information

We use the information we collect to:

  • Respond to your inquiries — review your intake submission, evaluate fit for our consulting services, and follow up with you
  • Deliver our services — communicate with you about engagements, send proposals, deliver work product, and process payments
  • Operate the Site — host and maintain the Site, monitor performance and security, and analyze how visitors use the Site to improve it
  • Comply with legal obligations — respond to lawful requests, enforce our agreements, and protect our rights and the rights of others
  • Send business communications — if you have engaged with us or explicitly opted in, we may send occasional updates about our services. You can unsubscribe at any time.

We do not use your personal information for automated decision-making that produces legal or similarly significant effects about you without human review.

4. AI Processing of Your Submissions

Our intake assessment tool uses artificial intelligence (specifically, Claude, an AI model developed by Anthropic, PBC) to analyze the business challenges you describe and generate a preliminary recommendation.

When you submit information through our intake tool:

  • The text you provide (business type, selected issues, and free-text description) is transmitted to Anthropic's API for processing
  • Anthropic processes the submission and returns a recommendation that we display to you and store for our review
  • Per Anthropic's published commercial terms applicable at the time of this policy's effective date, submissions made through Anthropic's API are not used to train Anthropic's models by default

We treat AI-generated output as a starting point for human review, not a final answer. A person at Big Head Consulting reviews intake submissions before substantive follow-up.

For more detail, see our separate AI Disclosure Notice.

5. How We Share Your Information

We do not sell your personal information. We share your information only in the following limited circumstances:

5.1 Service Providers

We use third-party service providers to operate our business. These providers process information on our behalf and are contractually obligated to protect it. As of the effective date of this policy, our primary service providers include:

  • Vercel Inc. — web hosting and content delivery
  • Supabase Inc. — database hosting for intake submissions and leads
  • Anthropic, PBC — AI processing of intake submission text (see Section 4)
  • Domain registrar and email provider — domain registration and business email
  • Payment processor (when applicable) — invoicing and payment collection for engaged clients

This list may change. We will update it when we change material providers.

5.2 Professional Advisors

We may share information with our attorneys, accountants, insurers, and other professional advisors when reasonably necessary to operate our business or protect our legal interests, subject to confidentiality obligations.

5.3 Legal Requirements

We may disclose information when we believe in good faith that disclosure is required by law, court order, subpoena, or other legal process; necessary to enforce our agreements; or necessary to protect the rights, property, or safety of Big Head Consulting, our clients, or others.

5.4 Business Transfers

If Big Head Consulting is involved in a merger, acquisition, financing, or sale of assets, your information may be transferred as part of that transaction, subject to standard confidentiality protections.

5.5 With Your Consent

We may share information for other purposes with your explicit consent.

6. How Long We Keep Your Information

We keep your personal information only as long as reasonably necessary for the purposes described in this policy, after which we delete or de-identify it.

Approximate retention periods:

  • Intake submissions where no engagement follows — up to 24 months from submission, then deleted
  • Engaged client records — for the duration of the engagement and for seven years thereafter, to satisfy tax, legal, and business record requirements
  • Website analytics and server logs — typically 90 days
  • Email correspondence — generally retained while reasonably useful for business purposes, then archived or deleted

You can request earlier deletion of your information by contacting us (see Section 11).

7. How We Protect Your Information

We use reasonable administrative, technical, and physical safeguards to protect personal information against unauthorized access, alteration, disclosure, or destruction. These include encryption in transit (HTTPS), access controls on our database, and limiting access to personal information to people who need it to do their work.

No method of transmission over the internet or method of electronic storage is completely secure. We cannot guarantee absolute security.

8. Your Privacy Rights

Depending on where you live, you may have certain rights regarding your personal information.

8.1 Rights Available to Most Users

Regardless of where you live, you may:

  • Access — request a copy of the personal information we hold about you
  • Correct — request that we correct information you believe is inaccurate
  • Delete — request that we delete your personal information, subject to legal exceptions (such as records we are required to retain)
  • Withdraw consent — withdraw any consent you previously provided, where consent was the basis for processing

8.2 California Residents (CCPA / CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act, including:

  • The right to know what categories of personal information we collect, the sources, the purposes, and the categories of third parties with whom we share it
  • The right to delete personal information we have collected, subject to exceptions
  • The right to correct inaccurate personal information
  • The right to opt out of the "sale" or "sharing" of personal information (we do not sell or share for cross-context behavioral advertising)
  • The right to limit the use of sensitive personal information (we do not knowingly collect sensitive personal information as defined by California law)
  • The right to non-discrimination for exercising your rights

To exercise these rights, contact us using the information in Section 11.

8.3 European Economic Area, United Kingdom, and Switzerland (GDPR / UK GDPR)

If you are in the EEA, UK, or Switzerland, you have additional rights under the General Data Protection Regulation and analogous laws, including the rights to access, rectify, erase, restrict processing, object to processing, and data portability. The legal bases on which we process your personal information are typically:

  • Consent — when you have given clear consent (you can withdraw at any time)
  • Contract — when processing is necessary to perform a contract with you or take steps at your request before entering a contract
  • Legitimate interests — when we have a legitimate business interest that is not overridden by your rights (such as operating and improving the Site)
  • Legal obligation — when we are required to process the information by law

You also have the right to lodge a complaint with your local data protection authority.

We do not currently have an EU representative or UK representative, as we do not regularly offer services to individuals in those regions. If our operations expand to do so, we will update this policy.

8.4 Other Jurisdictions

Other states and countries have privacy laws that may apply to you. We aim to honor reasonable requests regardless of jurisdiction. Contact us to make a request.

8.5 How to Exercise Your Rights

To exercise any of these rights, send a written request to the contact in Section 11. We may need to verify your identity before fulfilling certain requests, and we will respond within the timeframes required by applicable law (generally 30–45 days).

9. Financial Services / Mortgage-Industry Clients

Big Head Consulting provides consulting services to clients in the mortgage and financial services industries. When engaged by a financial institution client, we may handle non-public personal information of that client's customers, including information subject to the Gramm-Leach-Bliley Act ("GLBA") and its implementing regulations.

When that occurs:

  • We handle such information solely on behalf of the client and per the client's written policies and our written agreements
  • We do not use that information for our own marketing, AI training, or any other purpose unrelated to the engagement
  • We apply contractual confidentiality protections and technical safeguards appropriate to the regulated nature of the information

This Privacy Policy does not govern our handling of a client's customer data. That handling is governed by the agreement between Big Head Consulting and the client.

10. Children's Privacy

The Site is not directed to children under 16, and we do not knowingly collect personal information from children under 16. If we learn we have collected personal information from a child under 16, we will delete it. If you believe we may have inadvertently collected such information, please contact us.

11. Contact Us

To exercise your privacy rights, ask questions about this policy, or report a concern:

Email: robert@bigheadconsulting.ai Mail: Big Head Consulting LLC, 924 W. 75th Street, Suite 120-148, Naperville, IL 60565

We aim to respond to all requests within 30 days, or sooner if required by applicable law.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last Updated" date at the top of this policy. If we make material changes, we will notify you by posting a prominent notice on the Site or, where appropriate, by email.

Your continued use of the Site after the effective date of any updated policy constitutes your acceptance of the updated terms.

13. Important Disclaimer

This Privacy Policy is provided in good faith and reflects our current practices. It is not a substitute for legal advice. If you have questions about how privacy laws apply to you, please consult an attorney.

Big Head Consulting LLC is a limited liability company organized under the laws of the State of Illinois.