1. Purpose
Higher Information Group (“the Organization”) is dedicated to maintaining the privacy and confidentiality of personal and sensitive data in compliance with applicable U.S. federal laws and Pennsylvania state laws, including, where applicable, the Health Insurance Portability and Accountability Act (HIPAA), the Pennsylvania Breach of Personal Information Notification Act, and other applicable privacy and data protection laws.
This policy also governs the Organization’s collection and use of data obtained through digital marketing tools, website analytics, advertising platforms, and customer communications — including text messaging — in a manner that is transparent, lawful, and consistent with applicable regulations.]
This policy applies to all employees, contractors, volunteers, clients, and partners who interact with personal data and confidential information, whether in paper or digital form. It also applies to all digital touchpoints operated by Higher Information Group, including its website (www.HigherInfoGroup.com), marketing platforms, advertising campaigns, and communication tools.
2. Scope
This policy applies to all employees, contractors, volunteers, clients, and partners who interact with personal data and confidential information, whether in paper or digital form. It also applies to all digital touchpoints operated by Higher Information Group, including its website (www.HigherInfoGroup.com), marketing platforms, advertising campaigns, and communication tools.
3. Data Collection
3.1 Types of Data Collected
Higher Information Group may collect the following categories of personal and behavioral data:
- Contact information: name, email address, phone number, mailing address
- Account and registration data provided directly by users
- Website behavioral data: pages visited, time on site, click paths, referral sources
- Device and technical data: IP address, browser type, operating system, device identifiers
- Cookie and tracking data collected via website cookies, pixels, and similar technologies
- Advertising engagement data: ad impressions, clicks, conversions, and audience segments
- Form submissions, inquiry data, and communication history
- Email and text message engagement data: open rates, click-throughs, opt-in/opt-out status
- CRM and sales pipeline data collected through customer relationship management tools
3.2 How Data is Collected
Data is collected through the following methods and channels:
- Directly from users via forms, registrations, inquiries, and communications on www.HigherInfoGroup.com
- Website analytics and traffic monitoring tools
- Digital advertising and audience targeting platforms
- Email marketing and marketing automation platforms
- Customer relationship management (CRM) and sales automation tools
- AI-assisted sales outreach and prospecting tools
- Cookies, tracking pixels, and similar technologies embedded on the Organization’s website and in marketing communications
- Third-party data enrichment and marketing technology tools used in support of the Organization’s business and marketing activities
Our website uses a cookie consent tool that allows you to manage your tracking preferences. Non-essential cookies and tracking technologies — including those used for analytics and advertising purposes — are deployed only based on your selections through our cookie consent tool. You may accept, reject, or modify your preferences at any time through the cookie settings on our website. Your consent choices control how these technologies are used.
4. Data Use
4.1 Authorized Uses of Collected Data
Higher Information Group collects and uses personal and behavioral data for a broad range of legitimate business purposes, including but not limited to:
- Delivering, operating, and improving our website and services
- Personalizing the user experience and tailoring content to individual interests and behaviors
- Running and optimizing marketing and advertising campaigns across digital platforms
- Conducting email and SMS marketing communications, including promotional offers, product updates, and service announcements
- Analyzing website traffic, user behavior, and campaign performance to improve marketing effectiveness
- Building and managing audience segments for targeted advertising and retargeting campaigns
- Tracking and following up on sales leads and prospect engagement through CRM and sales automation tools
- Communicating with clients and prospects, including responding to inquiries and providing customer support
- Complying with legal and regulatory obligations
- Protecting the security and integrity of our systems and data
4.2 Marketing & Website Data — Specific Disclosure
When you visit www.HigherInfoGroup.com, Higher Information Group and its authorized marketing technology partners may automatically collect data about your visit, including your browsing behavior, device information, and interaction with our content. This data is used to:
- Understand how visitors use our website and improve user experience
- Measure the performance of our marketing and advertising campaigns
- Serve relevant advertisements to you on third-party platforms
- Retarget website visitors with relevant content and offers across digital channels
- Build aggregated audience insights to guide business and marketing decisions
Data collection through cookies and tracking technologies on our website is controlled by your consent preferences as described in Section 3.2. You may update your preferences at any time through our website’s cookie consent tool.
4.3 Third-Party Data Sharing for Marketing Purposes
In the course of operating our marketing programs, Higher Information Group may share certain data with authorized third-party service providers. These providers include categories such as:
- Website analytics providers
- Digital advertising platforms and networks
- Customer relationship management (CRM) systems
- Email marketing and automation platforms
- Data enrichment and prospecting tools
These providers process data solely on our behalf and under contractual obligations to protect it. Higher Information Group will NOT sell personal data to unaffiliated third parties for their independent marketing use.
5. Data Security
Higher Information Group implements administrative, technical, and physical safeguards designed to protect personal information, including access controls, encryption where appropriate, and secure data storage practices. These measures include:
- Access granted only to authorized personnel on a least-privilege basis
- Multi-Factor Authentication (MFA) and secure cloud storage for digital records
- Locked storage for paper records
- Periodic review of marketing platform integrations to ensure data security standards are maintained
6. Data Retention and Disposal
Data is retained for as long as necessary to fulfill the purposes described in this policy, including:
- The duration of customer or prospect relationships
- Ongoing business or operational needs
- Legal, tax, or regulatory requirements
Marketing and analytics data retained in third-party platforms is subject to those platforms’ data retention policies. When data is no longer needed, secure shredding or certified digital deletion is used for disposal. Individuals may request deletion of their personal data, subject to applicable legal retention requirements (see Section 8).
​7. Breach of Confidentiality
Confidentiality may be broken if there is:
- A legal obligation to disclose,
- A risk of harm to any individual,
- Or credible suspicion of illegal activity.
Incidents will be escalated to the Compliance Officer, who will coordinate with the President and any required authorities. A full written report and audit trail will be maintained. Data breach notifications affecting Pennsylvania residents will be issued in accordance with the Pennsylvania Breach of Personal Information Notification Act and any other applicable law.
8. Training & Accountability
- All personnel are trained on privacy protocols at onboarding and annually.
- Employees who use marketing platforms or handle customer data receive role-specific training on responsible data use.
- Breaches of this policy will result in disciplinary action, up to and including termination.
9. Individual Rights
In accordance with applicable federal and Pennsylvania state law, individuals may have the following rights with respect to their personal data:
- Right to Know — the categories of personal data collected and how it is used
- Right to Access — a copy of the personal data we hold about you
- Right to Delete — request deletion of your personal data, subject to legal exceptions
- Right to Opt-Out — opt out of the use of your data for targeted advertising purposes
- Right to Non-Discrimination — you will not be discriminated against for exercising your privacy rights
To exercise any of these rights, please contact us at info@higherinfogroup.com or 800.564.7002. We will verify your identity before processing requests as required by law. We will respond to verifiable requests within a reasonable timeframe consistent with applicable law. If additional time is required, we will notify you accordingly.
9.1 Do Not Sell or Share — Opt-Out of Tracking
Depending on your location, you may have the right to opt out of the “sale” or “sharing” of your personal information as defined under applicable law. While Higher Information Group does not sell personal information for monetary compensation, certain uses of cookies and tracking technologies for advertising and analytics purposes may be considered “sharing” under applicable law.
You may opt out of such tracking by:
- Adjusting your cookie preferences through our website’s cookie consent tool, or
- Contacting us directly at info@higherinfogroup.com
We will honor all applicable opt-out requests in accordance with relevant laws.
10. Client Services & Operational Data
This policy governs the collection and use of data through HIG’s website, marketing activities, and general business communications. It does not govern data processed by HIG on behalf of clients in the course of delivering IT services, document management, secure shredding, or other contracted services.
Data processed in connection with client service delivery — including any data subject to HIPAA or other regulatory requirements — is governed exclusively by the specific service agreements, Business Associate Agreements (BAAs), and applicable contracts in place between HIG and each client. Those agreements take precedence over this policy with respect to client operational data.
Clients with questions about how their operational data is handled should refer to their applicable service agreement or contact us directly at info@higherinfogroup.com.
11. Review & Updates
This policy is reviewed annually and updated to comply with evolving legal, technological, and business standards. The most current version of this policy will always be available at www.HigherInfoGroup.com.