Privacy Policy

Effective date: September 23, 2026  |  Last updated: September 23, 2026

Who we are and scope

GHM Consulting Services LLC, doing business as GHM Consulting (“GHM,” “we,” “us,” or “our”), respects the privacy of visitors to our website. This Privacy Policy explains how we collect, use, disclose, retain, and protect information through the Site and business inquiries. It does not automatically govern information processed under a separate client engagement, which may be subject to additional contractual or legal requirements.

Information you choose to provide

When you submit an inquiry, we may collect information you enter, such as your name, organization, professional title, business email address, telephone number if provided, area of interest, and the contents of your message. If you contact us by email or telephone, we may receive the information you include in those communications. Do not include patient records, medical histories, diagnoses, protected health information, passwords, or other sensitive personal information in the general website contact form.

Information collected automatically

The website’s hosting and security services may process standard technical information needed to deliver and protect the Site, such as an IP address, browser or device type, pages requested, referral information, timestamps, and diagnostic or security logs. FormSubmit processes information needed to transmit inquiries, and its Google reCAPTCHA service may process device and interaction information to prevent abuse. The Site also requests fonts from Google Fonts, so a visitor’s browser may connect to Google when loading them.

How we use information

We use inquiry and related information to respond to requests, evaluate whether our services may be relevant, communicate about a potential or existing business relationship, operate and secure the Site, maintain appropriate business records, and comply with applicable legal obligations. GHM does not currently use the Site for newsletters, targeted advertising, or an analytics integration configured by GHM.

When information may be shared

We may disclose information to vendors that perform services for us, such as website hosting, secure form processing, email delivery, technical support, and security, only as needed for those services and under appropriate arrangements. Current Site services include the Site hosting platform, FormSubmit for inquiry delivery, and Google services used for reCAPTCHA and web fonts. We may also disclose information where required by law, to protect lawful rights or security, or in connection with a legitimate business transfer subject to applicable legal requirements.

Cookies and similar technologies

GHM does not currently configure analytics or advertising cookies on the Site. The hosting, security, form-delivery, reCAPTCHA, and font services used by the Site may use necessary storage or process technical information to deliver their functions, prevent abuse, and maintain security. Browser controls may allow visitors to limit cookies, although doing so may affect form security or other Site functions.

Retention

We retain inquiry information only for as long as reasonably needed to respond to an inquiry, maintain an appropriate business record, support an ongoing business relationship, satisfy legal or recordkeeping obligations, or resolve disputes, and then delete or de-identify it as appropriate. Service providers may retain associated technical or delivery records under their own retention practices.

Security

We use reasonable administrative, technical, and organizational safeguards appropriate to the information and our operations. No internet transmission or electronic storage method can be guaranteed to be completely secure.

Protected health information and patient data

The website inquiry form is intended for organization-level business inquiries and is not a patient portal or secure channel for protected health information (“PHI”). Please do not submit PHI through the Site. Whether any separate consulting engagement involves PHI, HIPAA obligations, or a business associate agreement will be evaluated based on the services, parties, and actual data involved; use of the Site alone does not establish that GHM is a HIPAA-covered entity or business associate.

Your privacy choices and rights

You may contact us to request access to, correction of, or deletion of information you provided, subject to identity verification, applicable law, contractual obligations, and permissible exceptions. If applicable law provides additional rights, we will honor those rights as required.

Children

The Site is directed to organizational decision-makers and is not intended for children. We do not knowingly solicit personal information from children through the Site. If you believe a child has submitted personal information, contact us so we can review the request and take appropriate action.

Updates and privacy contact

We may update this Privacy Policy when our practices or legal obligations change. The updated version will be posted with a revised date and additional notice where required. Privacy questions and requests may be sent to hendersong5@sbcglobal.net or made by telephone at 928-420-0135.