This Privacy Policy explains how Horsfall Consulting LLC collects, uses, stores, shares and protects personal information in the course of running a field service dispatch consultancy. Horsfall Consulting is the developer and operator of this website and of the dispatch advisory practice described on it. The company trades as Horsfall Consulting LLC and is registered at 140 N 1000 W, Clearfield - 84015-9233, United States (US).
This policy applies to visitors of the website, to contractors and business customers who engage the consultancy, to vendors and subcontractors who support an engagement, and to any person who contacts the dispatch desk by email, telephone or the website form. It describes the categories of information we handle, the reasons for handling them, the choices available to individuals and the ways to reach the company with a question or concern.
The policy is written to be read by ordinary people rather than only by lawyers. Where a legal concept matters, we explain it in plain language and then state the position the company takes. Nothing in this policy limits any right that a person holds under applicable law, and nothing in it creates a right that does not already exist.
1. About this policy
This Privacy Policy describes the practices of Horsfall Consulting LLC for the website located at horsfallconsulting.lol and for the professional services offered through that website. The policy covers personal information that the company collects through digital channels, through direct correspondence and through the delivery of consultancy work for field service contractors.
The policy is organised in sections that follow the life cycle of personal information: what is collected, why it is collected, where it goes, how long it stays and what a person can do about it. Each section explains the practice in ordinary language and then states the operational rule that the company follows. The structure is intended to let a reader jump to the part that matters without reading the whole document, while still making the overall approach clear.
By visiting the website or by sending an enquiry to the dispatch desk, a person confirms that they have had the opportunity to read this policy. If the policy does not answer a question, the company invites the reader to make contact using the details in the final section. The company would rather answer a question early than resolve a misunderstanding later.
This policy does not govern the practices of clients, vendors or other organisations that may be reached from links on the website. Those organisations maintain their own privacy notices, and the company encourages a reader to review them before supplying personal information to a third party.
2. Who we are and who is responsible
Horsfall Consulting LLC is a limited liability company organised under the laws of the United States and operating from its dispatch desk at 140 N 1000 W, Clearfield - 84015-9233, United States (US). The company provides consultancy in computer integrated systems design for field service operations, with a particular focus on scheduling, routing, emergency coordination, fleet communication, job costing and workforce planning.
For the purposes of applicable privacy law, Horsfall Consulting LLC is the controller of the personal information described in this policy when the company decides why and how that information is processed. In some engagements the company acts as a processor on behalf of a client, for example when reviewing a client work order system that contains customer records. In those cases the client remains the controller and the company follows the written instructions in the engagement agreement.
The company does not maintain branch offices outside the United States. The operating address shown throughout this policy is the address for correspondence, legal notices and any request connected with privacy rights. The company does not accept service of process at any other address.
Where this policy refers to the company, the desk or the consultancy, each expression means Horsfall Consulting LLC acting in its professional capacity. Where the policy refers to a client, the expression means the business that has engaged the company for advisory services. Where the policy refers to a visitor, the expression means any person who uses the website without engaging the company for services.
3. Information we collect
The company collects information in three broad ways: information a person provides directly, information generated during a consultancy engagement and information gathered automatically when the website is used. The categories overlap, and the same item of information may be collected in more than one way. The company limits collection to what is reasonably necessary for the purpose at hand and reviews the categories each year.
Personal information for the purpose of this policy means any information that relates to an identified or identifiable individual. It includes names, contact details, employment details, correspondence and any other data that could be linked back to a person. It does not include information about a business in general, such as a company registration number, unless that information is connected to an individual.
The company does not seek to build advertising profiles of website visitors and does not purchase personal information from data brokers. The information held is overwhelmingly the information that a person chooses to send or that arises naturally from a professional relationship.
4. Information you provide directly
A person may provide information when completing the contact form, sending an email to the dispatch desk, calling the listed telephone number or corresponding about an engagement. The contact form requests a name, an email address, a subject line and a message. The company uses those fields only to understand the enquiry and to reply to it. A person may choose to include more detail in the message, and the company asks that no sensitive information be included in a first message.
During an engagement the company may receive business cards, role descriptions, crew lists and contact details for client staff. These records are kept in the engagement file and used only to deliver the service and to maintain a reliable record of decisions. Where a client supplies details of its own customers, the company treats that information as confidential client data and handles it under the client instructions and the engagement agreement.
A person who telephones the desk may have their call notes recorded in a written contact log. The log records the date, the subject and the agreed next step. The company does not record telephone conversations as audio unless a person is told in advance and agrees. A person may ask for the log entry to be corrected if it contains an error.
Information supplied in a public review, a social media message or a public forum is not covered by the confidentiality described in this section, because it is already public. The company may still respond to such messages and may refer to public feedback when improving the service, but it does not treat public information as part of the private engagement file.
5. Information from consultancy engagements
Dispatch consultancy involves observing how a client organisation works. During a diagnostic the company may review run lists, job tickets, routing records, invoice summaries, radio logs and workforce schedules. These records often contain names of technicians, dispatchers and customers, together with addresses and contact details. The company treats all of it as confidential client data and accesses it only to the extent needed for the agreed scope.
Where possible, the company works from aggregated or pseudonymised extracts. For example, a routing analysis may use ticket identifiers and postal codes rather than customer names. Where names are needed to understand a workflow, the company limits the review to the minimum sample necessary and stores the working copy in a restricted engagement folder. The engagement report uses role descriptions such as senior technician or desk lead rather than personal names.
Engagement files also contain the companys own professional notes, including observations, interviews and recommendations. These notes are the professional record of the consultancy and are retained for the period described later in this policy. A client may request a copy of the notes that concern its engagement, subject to the confidentiality owed to third parties and to any legal restriction.
6. Information collected automatically
The website is a set of static pages served over a secure connection. It does not run advertising networks, behavioural tracking scripts or cross site profiling. When a browser requests a page, the hosting infrastructure may receive the internet protocol address of the visitor, the requested page, the referring page, the browser type and the time of the request. These technical records are used to keep the service available, to diagnose faults and to protect against abuse.
The company does not use the technical records to identify individual visitors. Log entries are retained only for the short period needed for security and operational analysis and are then discarded or aggregated. The company does not combine technical records with contact form submissions to build a profile of a person.
Some information is stored locally in a browser. The website does not set advertising cookies and does not require a cookie banner to function. Any local storage used by the site is limited to interface preferences and is not transmitted to the company. A person who clears browser storage will simply return the interface to its default state.
If the company later introduces a measurement service, this policy will be updated before the service is enabled, and the update will describe the data collected, the provider involved and the choice available to visitors. Any optional measurement will be configured so that a visitor can decline without losing access to the site.
7. Information received from other sources
The company may receive information about a person from a client, a colleague, a trade association or a professional referral. For example, a contractor may introduce a colleague at another firm and pass along a business email address. In those cases the company records the source of the introduction so that the origin of the contact is clear.
The company may also receive information from public professional sources, such as a company website, a trade directory or a public licensing register. Such information is used only to verify professional details and to prepare for a conversation. The company does not scrape social media profiles or assemble personal dossiers from unrelated public sources.
Where information arrives from a client, the company asks the client to confirm that the individuals concerned expect to be contacted. If a person later asks not to be contacted, the company records that preference and honours it across all subsequent activity.
8. How we use personal information
The company uses personal information to reply to enquiries, to arrange and deliver consultancy work, to prepare reports and recommendations, to issue and collect invoices, to keep professional records and to meet legal and accounting obligations. Each use is connected to a purpose that a reasonable person would expect when contacting a professional firm.
Information is also used to operate the dispatch desk itself. Contact details allow the desk to confirm an appointment, to send a document and to follow up on an agreed action. Correspondence history allows the company to avoid asking the same question twice and to give consistent answers when more than one consultant is involved.
The company may use aggregated, non personal information to improve its own methods. For example, a summary of how many routing reviews were completed in a year may inform the training material for new consultants. Aggregated information does not identify any individual and is not combined with personal information to re-identify a person.
The company does not use personal information to make automated decisions that produce legal or similarly significant effects. Recommendations about crew structure and routing are prepared by consultants and discussed with the client, and a client remains free to adopt, modify or reject them.
The company does not sell personal information, does not rent mailing lists and does not share personal information with advertisers. Any future proposal to introduce a commercial use of personal information would require an update to this policy and, where required, a separate choice from the individuals concerned.
9. Legal bases for processing
Where a legal framework requires a lawful basis for processing, the company relies on one or more of the following grounds. The first is performance of a contract or steps taken at the request of a person before a contract is formed, which covers most engagement activity. The second is compliance with a legal obligation, such as tax and record keeping duties. The third is the legitimate interests of the company in running a professional practice, provided those interests are not overridden by the rights of the individual. The fourth is consent, which the company seeks where no other basis applies or where the law requires a specific agreement.
Legitimate interests are used for purposes such as replying to a business enquiry, protecting the website from abuse, maintaining professional records and improving the quality of the service. The company evaluates each use to confirm that it is proportionate and that a person would not be surprised by it. A person may object to processing based on legitimate interests, and the company will respect the objection unless there are compelling grounds that override it.
Where consent is the basis, a person may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing that took place before the withdrawal, and it does not affect processing that relies on another basis. A simple email to the dispatch desk is enough to withdraw consent for a particular use.
12. Service providers and processors
The company uses a small number of service providers for hosting, email, file storage and accounting. Each provider is selected for reliability and security, and each is bound by a written agreement that limits its use of information to the service it provides to the company. Providers are not permitted to use company information for their own marketing.
The hosting provider serves the static pages of the website. The email provider carries correspondence with clients and enquiries. The file storage provider holds engagement documents in restricted folders with access limited to the consultants assigned to the engagement. The accounting provider handles invoicing and bookkeeping records required by law.
The company reviews its providers periodically and considers the location of their operations, their security certifications and their record of incidents. If a provider is replaced, the company retrieves or securely deletes the information held by the outgoing provider where the contract allows.
13. International data transfers
The company operates from the United States, and most information is processed there. Some service providers may store data in other countries. Where information is transferred across a border, the company takes steps to ensure that the transfer is lawful and that the information receives a comparable level of protection.
Those steps may include relying on an adequacy decision, using standard contractual clauses approved by a competent authority or applying another lawful transfer mechanism. The company keeps a record of the mechanism used for each provider that processes information outside the United States.
A client or individual may ask for more information about a specific transfer by writing to the dispatch desk. The company will explain the mechanism in plain language and, where appropriate, provide a copy of the relevant clauses, subject to confidentiality and commercial sensitivity.
14. How long we keep information
The company keeps personal information only as long as needed for the purpose for which it was collected, or as long as the law requires. Retention periods are set by category so that records are not kept by accident. The company reviews its records each year and removes information that is no longer needed.
Enquiries that do not lead to an engagement are kept for twelve months so that a follow-up conversation is possible, then deleted. Correspondence connected to an engagement is kept for seven years after the engagement ends, in line with accounting and professional record practice. Engagement reports and the related working notes are kept for the same period.
Technical logs from the website are kept for a short period, typically no more than ninety days, unless a security incident requires a longer record. Anonymised summaries may be kept indefinitely because they do not identify a person. Information held in a backup is deleted on the normal backup rotation after the primary copy is removed.
Where a legal hold applies, information that would otherwise be deleted is preserved until the matter is resolved. The company limits the scope of the hold to the information that is genuinely relevant.
15. How we protect information
The company protects personal information with administrative, technical and physical measures. Access to engagement files is limited to the consultants who need it, and access is reviewed when a person joins or leaves the practice. Passwords are unique to each service and multi factor authentication is required for email and file storage accounts.
Devices used for work are encrypted and kept up to date with security patches. Documents that leave the office are shared through restricted links rather than open attachments wherever possible. Printed material, such as a run list used during a site visit, is collected at the end of the visit and destroyed when it is no longer needed.
Staff and associates receive guidance on handling confidential information and are required to report any suspected incident immediately. If an incident affects personal information, the company investigates, contains the problem and notifies affected persons and authorities where the law requires. The company does not wait for a legal deadline before telling a client about a problem that affects that client.
No system is completely secure. The company therefore focuses on reducing the amount of information it holds, limiting access and responding quickly when something goes wrong. A person who suspects that their information has been compromised may contact the dispatch desk at once.
16. Your privacy rights
Depending on where a person lives, privacy law may grant a set of rights over personal information. The company supports those rights and applies a consistent approach to requests regardless of the jurisdiction. The rights described in this section are the ones the company recognises in its own practice.
The right of access allows a person to ask what information the company holds about them and to receive a copy. The right of correction allows a person to ask for inaccurate information to be fixed. The right of deletion allows a person to ask for information to be removed where there is no continuing legal or operational reason to keep it. The right to restrict processing allows a person to ask the company to pause a particular use while a question is resolved.
The right to object allows a person to challenge processing based on legitimate interests or to ask that their information not be used for direct marketing. The right to portability allows a person to receive information they provided in a structured, commonly used format. The right to withdraw consent allows a person to end a use that was based on consent, without affecting past lawful processing.
The company will not discriminate against a person for exercising a privacy right. A request will not change the price of a service, will not reduce the quality of a service and will not lead to a refusal to work with the person unless the law allows a specific exception.
17. How to exercise your rights
A request may be sent by email to dispatch@horsfallconsulting.lol or by post to Horsfall Consulting LLC, 140 N 1000 W, Clearfield - 84015-9233, United States (US). The request should identify the right being exercised and give enough information for the company to locate the relevant records. A person does not need to use a special form.
The company will acknowledge a request within a reasonable period and will aim to respond within thirty days. If a request is complex or involves a large volume of records, the company may extend the period and will explain the reason for the extension. Where the law sets a different deadline, the company follows that deadline.
To protect privacy, the company may ask for evidence that the person making the request is the individual concerned or an authorised representative. The company will not ask for more evidence than is reasonably necessary. If a request is unclear, the company will ask a clarifying question rather than refuse the request.
If the company cannot comply with part of a request, it will explain why and will identify any lawful exception that applies. A person who is not satisfied with the response may make a complaint using the procedure in the final section of this policy.
18. Marketing and communication choices
The company does not run a bulk marketing program directed at the general public. Occasional professional updates, such as a note about a new service line or a seasonal planning reminder, may be sent to clients and contacts who have a working relationship with the company. A person may opt out of those updates at any time by replying to the message or by writing to the dispatch desk.
Opting out of updates does not affect messages that are necessary to deliver a service, such as a confirmation, a scheduling change or an invoice. The company keeps a suppression list so that a person who has opted out is not added again by accident when a colleague provides a contact detail.
The company does not send marketing messages to an address obtained only from a public directory without a prior relationship. It does not use purchased lists and does not permit a partner to send messages on its behalf without written approval.
19. Privacy for Children
The services of Horsfall Consulting LLC are intended for businesses and their professional staff. The website is not directed at children and the company does not knowingly collect personal information from anyone under the age of sixteen. A contact form submission from a child is not expected and would be removed if discovered.
If a parent or guardian believes that a child has provided personal information to the company, they should write to the dispatch desk with enough detail to locate the record. The company will delete the information promptly and confirm the deletion, unless a legal obligation requires a short period of retention.
The company does not target advertising at children, does not operate features designed to appeal to children and does not knowingly allow a child to participate in an engagement. Where a client organisation employs a young apprentice, the company expects the client to manage that relationship under its own employment rules and does not collect the apprentice personal information beyond what is needed for the specific task.
20. Sensitive and operational information
Some information is more sensitive than a name and a business email address. It includes health information, financial account details, government identifiers, precise home addresses and information about a persons family. The company does not ask for this kind of information through the website and asks that it not be included in a first message to the desk.
During an engagement, operational information about a client may be commercially sensitive. That includes pricing structures, crew rosters, customer lists and supplier terms. The company treats commercial information with the same discretion as personal information and does not disclose it outside the engagement team.
Where a client provides information about a vulnerable customer, for example a person receiving care at home, the company expects the client to share only the minimum needed for the dispatch review and to remove details that are not relevant. The company will not use such information for any purpose beyond the agreed scope.
If sensitive information is received by accident, the company will contact the sender, agree how to handle it and delete it where no lawful reason to keep it exists. The company will not add accidental information to its ordinary records.
21. Third party websites and links
The website may contain links to external websites, such as a trade association, a software vendor or a professional body. Those websites are operated by other organisations and are not controlled by the company. A link does not mean that the company endorses the privacy practices of the destination.
A person who follows an external link should review the privacy notice of that website before providing personal information. The company is not responsible for the content, security or practices of an external site, and it does not receive information about a visit to an external site from the operator of that site.
Where the company embeds a document from another provider, for example a form hosted by a service, the identity of the provider is shown next to the link. The company chooses providers that meet its security expectations but does not control the day to day operation of their systems.
22. Business changes and successor entities
The practice may change over time. It may be reorganised, merge with another consultancy or transfer an engagement to an associate. If such a change involves the transfer of personal information, the company will ensure that the receiving entity is bound by protections at least as strong as those described in this policy.
In the event of a sale of the business or a substantial part of its assets, customer records and engagement files may be transferred to the buyer. The company will give notice of the transfer where the law requires and will give a person the opportunity to object where that right exists. A transfer does not change the purpose for which the information is used.
If the company ceases to operate and no successor takes over the records, it will delete personal information in line with this policy and with any legal retention requirement. A person may ask about the status of their records by writing to the address in the final section.
23. Additional notice for California residents
Residents of California may have additional rights under state privacy law. The company describes the categories of information it collects in the earlier sections of this policy: identifiers and contact details, professional and employment information, correspondence, engagement records and technical log data. The sources are the individual, the clients and the service providers described in this policy.
The company collects those categories to reply to enquiries, to deliver consultancy work, to keep business records and to protect its systems. It does not sell personal information and does not share it for cross context behavioural advertising. It discloses information only to the service providers and professional advisers described earlier, and only for business purposes.
California residents may ask for the categories of information collected, the categories of sources, the business purpose for collection, the categories of third parties receiving information and the specific pieces of information held. They may also ask for deletion, correction or restriction as described in the section on privacy rights. The company will verify a request before acting on it.
An authorised agent may submit a request on behalf of a California resident. The company will ask for written authorisation and will verify the identity of the resident directly unless a lawful exception applies. The company will respond within the period required by state law.
24. Additional notice for other United States residents
Several other states have enacted consumer privacy laws with rights similar to those described above. The company applies the same request process to residents of those states, even where a specific provision differs in detail. A resident may ask for access, correction, deletion, portability and an opt out of certain uses.
Where a state law provides a right to appeal a refusal, a person may submit an appeal by replying to the decision letter or by writing to the dispatch desk. The company will review the appeal independently and will explain the outcome in writing. If the appeal is refused, the person may contact the relevant state authority.
The company does not discriminate against a resident for exercising a right under state law. It does not charge a fee for a reasonable request and does not require a person to create an account in order to make a request.
Residents of states with narrower laws may still contact the company with a privacy question. The company will explain what it can do under the applicable law and will help where it can, even if a statutory right does not apply.
25. Changes to this policy
The company reviews this policy at least once a year and whenever a material change occurs in its operations. A change may be needed because of a new service, a new provider, a change in the law or an improvement in the way information is handled. The revised policy replaces the earlier version on the date shown at the top of the page.
For a material change that affects how personal information is used, the company will provide advance notice by email to active clients and will post a notice on the website. A person who continues to use the website or the services after the effective date confirms the revised policy. Where the law requires consent for a new use, the company will ask for it separately.
The company keeps previous versions of the policy in its records for reference. A person may ask for a copy of an earlier version by writing to the dispatch desk. The archive helps to show how the practice has evolved and supports an informed conversation about any concern.
26. Questions and complaints
Questions about this policy, requests to exercise a right and complaints about the handling of personal information may be sent to the company by email at dispatch@horsfallconsulting.lol or by post to Horsfall Consulting LLC, 140 N 1000 W, Clearfield - 84015-9233, United States (US). The telephone number for the dispatch desk is +19803963393.
The company takes a complaint seriously and will acknowledge it promptly. An initial response will explain what has been understood, what information is needed and when a fuller answer can be expected. The company aims to resolve most complaints within thirty days and will keep the person informed if more time is needed.
If a complaint cannot be resolved directly, the company will explain the options that exist under the applicable law, including any right to approach a supervisory authority or a consumer protection body. The company will cooperate fully with a legitimate investigation and will provide the records that are relevant to the complaint.
Nothing in this policy prevents a person from contacting a regulator at any time. The company would prefer the opportunity to resolve the matter first, and it will not treat a complaint as a reason to withdraw ordinary service or to change the terms of an existing engagement.
Company details
Horsfall Consulting LLC
140 N 1000 W, Clearfield - 84015-9233, United States (US)
Email: dispatch@horsfallconsulting.lol
Telephone: +19803963393