Privacy Policy.

Last updated · October 2026

1. Scope of this Policy

This Privacy Policy applies to personal information collected through our website at www.hreho.shop (the "Site"), through email, telephone and other communications with our company, and in the course of performing holding-company and administrative-office functions (the "Functions"). It does not govern third-party websites or services linked from the Site, which are subject to their own privacy policies.

By using the Site or communicating with us, you acknowledge that you have read and understood this Policy. If you do not agree with it, please do not use the Site or submit personal information to us.

2. Information We Collect

2.1 Information you provide to us

• Inquiry data. When you contact the office by email, form or phone, we collect your name, organization, email address, telephone number and the contents of your inquiry, including entity references where applicable.
• Corporate record data. In performing our Functions we maintain registers of officers, members and related parties of entities we administer, along with correspondence, consents and administrative records required by our role.
• Correspondence records. We retain emails, letters, call notes and logged requests relating to corporate matters and record requests.

2.2 Information collected automatically

• Technical log data. When you visit the Site, our hosting provider may automatically record standard technical information such as IP address, browser and device type, referring page, pages viewed and access timestamps.
• Cookies. The Site is a static website and does not set tracking or advertising cookies. Our hosting provider (Firebase Hosting, operated by Google) processes technical data as described in Section 5.

2.3 Information we do not seek

We do not knowingly collect sensitive personal information through the Site and we do not engage in behavioral advertising or cross-site tracking. Personal data in corporate registers is limited to what the law requires of the role.

3. How We Use Information

We use collected information to:

• Respond to inquiries and maintain the office correspondence log;
• Maintain entity registers, officer records and corporate documentation as required by our Functions;
• Administer governance calendars, filings and group reporting;
• Produce records to members, counsel, auditors and entitled counterparties;
• Issue and receive business correspondence and maintain records;
• Operate, maintain and secure the Site;
• Meet legal, tax, corporate and regulatory obligations;
• Establish, exercise or defend legal claims.

We do not use personal information for automated decision-making or profiling, and we never sell personal information.

4. Legal Bases for Processing

Where applicable law requires a stated legal basis, we process personal information on the following grounds:

• Contract. Processing needed to perform administrative functions under engagement or organizational documents.
• Legitimate interests. Maintaining corporate registers, documenting decisions and securing our systems, where not overridden by your rights.
• Legal obligation. Recordkeeping and disclosure required under corporate, tax and other applicable law.
• Consent. Where processing relies on consent, you may withdraw it at any time by contacting us.

5. How We Share Information

We do not sell, rent or trade personal information. Disclosure occurs only in these limited cases:

• Service providers. The Site is hosted on Firebase Hosting (Google LLC); email and business systems are handled by providers acting on our behalf under their own terms and safeguards.
• Entity stakeholders. Members, officers, counsel, auditors and registered agents of administered entities receive information relevant to their role, subject to applicable agreements and law.
• Professional advisers. Attorneys, accountants and registered agents receive information where necessary for services provided to us or to administered entities.
• Legal requirements. We may disclose information where required by law, regulation, legal process or governmental request, or to protect the rights, property or safety of HREHOLDING1, LLC, our entities or others.
• Business transfers. In a merger, acquisition or asset sale, information may transfer as part of the transaction, subject to this Policy.

6. Data Retention

Personal information is kept only as long as needed for the purposes in this Policy. Inquiries are generally retained for up to twenty-four months. Corporate registers, consents, minutes and administrative records are retained as required by corporate law and document-retention standards — often for the life of the entity plus statutory periods. Information no longer needed is deleted or anonymized.

7. Data Security

We maintain reasonable administrative, technical and physical safeguards, including encrypted transport (HTTPS) on the Site, access controls on registers and corporate records, and limiting file access to officers who need it. No transmission or storage method is fully secure; if we become aware of a breach affecting your personal information, we will notify you and regulators as required by law.

8. Your Rights and Choices

Depending on your state of residence, you may have some or all of the following rights:

• Access. Request a copy of the personal information we hold about you.
• Correction. Request correction of inaccurate or incomplete data.
• Deletion. Request deletion, subject to legal and record-retention requirements.
• Restriction & objection. Request limits on, or object to, certain processing.
• Portability. Receive your data in a structured, commonly used format.
• Non-discrimination. Exercise your rights without discriminatory treatment.

Residents of states with comprehensive privacy laws — including Utah, California, Virginia, Colorado and Connecticut — may exercise these rights by writing to emma.foster@hreho.shop. We do not sell personal information or share it for cross-context behavioral advertising, so there is no sale or sharing to opt out of. We verify requests and respond within the legally required period.

9. Children's Privacy

The Site and our Functions are intended for businesses and adults. We do not knowingly collect personal information from children under 13. If you believe a child has provided us information, contact us and we will delete it.

10. International Visitors

We are located in the United States and process information in the United States. If you access the Site or contact us from abroad, you understand your information will be transferred to and processed in the United States, whose data protection laws may differ from yours.

11. Third-Party Links

The Site may link to third-party websites. We are not responsible for their privacy practices and encourage you to review their policies.

12. Changes to this Policy

We may update this Policy to reflect changes in our practices, the Site or applicable law. The "Last updated" date above shows the current version. Material changes are posted here; continued use of the Site after a change constitutes acceptance.

13. Contact Us

Questions, requests or complaints about this Policy or our data handling may be directed to:

HREHOLDING1, LLC
3051 W Maple Loop Dr Ste 325
Lehi, UT 84043, United States
Email: emma.foster@hreho.shop
Telephone: +1 845 980 4892