Privacy Policy

Overview

HarrowQuest ("Company," "we," "us," or "our") operates as a U.S.-registered Business Process Outsourcing company. This Privacy Policy explains how we collect, use, disclose, and protect information when you visit our website at harrowquest.com, contact us, or engage our services.

By using our website or services, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use our website or services.

Information We Collect

Information you provide directly:

• Contact information — name, company name, email address, phone number
• Inquiry details — service interests, business needs, messages submitted through our contact form
• Business information — company size, industry, current operational challenges
• Communications — emails, call recordings (with consent), and written correspondence

Information collected automatically:

• Log data — IP address, browser type, pages visited, time spent, referring URLs
• Device information — device type, operating system, screen resolution
• Cookie data — see our Cookies section below

Information we do not collect: We do not collect payment card numbers, Social Security numbers, or other sensitive financial identifiers through our website. Service agreements and payment processing are handled through separate, secured channels.

How We Use Your Information

We use the information we collect to:

• Respond to your inquiries and schedule discovery calls
• Provide and manage our BPO services
• Send service-related communications — invoices, onboarding materials, updates
• Improve our website and service offerings
• Comply with legal obligations
• Protect against fraud and unauthorized use

We do not sell your personal information. We do not use your information for third-party advertising or marketing purposes without your explicit consent.

Sharing and Disclosure

We share your information only in the following circumstances:

• Service delivery: With our vetted African professionals on a need-to-know basis, limited to what is necessary to perform your contracted services. All professionals sign binding NDAs.
• Service providers: With trusted vendors who assist us in operating our business (email hosting, document management, time tracking). These vendors are contractually bound to protect your data.
• Legal requirements: When required by law, court order, or governmental authority.
• Business transfers: In connection with a merger, acquisition, or sale of assets, with appropriate notice to affected parties.
• With your consent: For any other purpose with your explicit consent.

Data Security

We implement appropriate technical and organizational measures to protect your information against unauthorized access, alteration, disclosure, or destruction. These include:

• Encryption of data in transit (SSL/TLS)
• Access controls — information is accessible only to personnel who need it
• Signed NDAs and data security agreements with all staff and contractors
• Cyber Liability insurance coverage
• Regular security reviews and staff training

No method of transmission over the internet is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security.

Cookies

Our website uses cookies and similar tracking technologies to enhance your browsing experience. Cookies are small text files stored on your device.

Types of cookies we use:

• Essential cookies: Required for the website to function properly. Cannot be disabled.
• Analytics cookies: Help us understand how visitors interact with our website (e.g., pages visited, time on site). This data is aggregated and anonymous.
• Preference cookies: Remember your settings and preferences for future visits.

You can control cookies through your browser settings. Disabling cookies may affect some functionality of our website. We do not use advertising or tracking cookies for third-party marketing purposes.

Your Rights

Depending on your location, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information, subject to legal retention obligations
• Portability: Receive your data in a structured, machine-readable format
• Objection: Object to certain types of processing
• Withdrawal of consent: Withdraw consent for processing activities based on consent

To exercise any of these rights, contact us at support@harrowquest.com. We will respond within 30 days.

HIPAA and Healthcare Data

For clients in the healthcare industry, HarrowQuest acts as a Business Associate under the Health Insurance Portability and Accountability Act (HIPAA). We execute a Business Associate Agreement (BAA) with all healthcare clients before handling any Protected Health Information (PHI).

Our HIPAA compliance measures include staff training, access controls, audit logs, breach notification procedures, and data security safeguards as required by the HIPAA Privacy and Security Rules. PHI is never used for any purpose other than performing the contracted healthcare services.

For HIPAA-related inquiries or to report a privacy concern, contact us immediately at support@harrowquest.com.

Children's Privacy

Our website and services are intended for business professionals and are not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have inadvertently collected such information, we will delete it promptly.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page with an updated effective date. For significant changes, we may also send notification via email to active clients. Your continued use of our website or services after changes are posted constitutes acceptance of the revised policy.

Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Email: support@harrowquest.com
• Website: harrowquest.com/contact
• Location: Salt Lake City, Utah, USA

We are committed to resolving privacy concerns promptly and fairly.