Website Privacy Policy

Sep 25, 2026

HeroicImprov, LLC doing business as Heroic Improv ("Heroic Improv," "we," "us," or "our") respects your privacy. This Privacy Policy explains how we collect, use, share, and protect personal data when you visit our website, contact us or request a call through our contact form, or take part in our virtual or in person workshops.

We are based in Washington, DC and serve clients across the United States, including Maryland residents. This policy is written to meet the Maryland Online Data Privacy Act (Maryland Commercial Law, Title 14, Subtitle 47) and the Maryland Personal Information Protection Act (Maryland Commercial Law, Title 14, Subtitle 35). We extend the rights described here to every visitor, wherever you live.

By using our website, you acknowledge the practices described in this policy. If you do not agree, please do not use the website.

Personal Data We Collect

We collect only the personal data that is reasonably necessary and proportionate to provide the services you request. We do not knowingly collect sensitive data through this website.

  • Identifiers and contact details: name, email address, phone number, organization, and job title. You provide these through our contact form (including Book A Call requests) or by email.

  • Communications: messages, questions, meeting preferences, and feedback you send us.

  • Workshop information: attendance and participation details for sessions you or your organization book. You or your employer provide this.

  • Device and usage data: IP address, browser type, device type, pages viewed, referring site, and general location based on IP (not precise location). This is collected automatically through Squarespace Analytics and essential cookies.

Sensitive data. Sensitive data under Maryland law includes information revealing racial or ethnic origin, religious beliefs, health status, sex life or sexual orientation, gender identity, national origin, citizenship or immigration status, genetic or biometric data, precise geolocation, and data of a child. We do not ask for sensitive data, and we ask that you not include it in forms or messages. If you do share it, we will use it only as strictly necessary to respond to you, and we will never sell it.

How We Use Personal Data

We use personal data only for the purposes listed below, and we will not use it for a new purpose that is unrelated to these without first asking for your consent.

  • To respond to you: answering inquiries and call requests submitted through our contact form or email.

  • To deliver services: arranging calls, planning and running virtual and in person workshops, and following up afterward.

  • To operate and improve the website: keeping the site secure, fixing problems, and understanding which pages are useful, using aggregated Squarespace Analytics.

  • To meet legal obligations: keeping records required by law, preventing fraud, and responding to lawful requests from authorities.

We do not use personal data for profiling in furtherance of decisions that produce legal or similarly significant effects about you.

How We Share Personal Data

We do not sell your personal data, and we do not use or share it for targeted advertising. We have never sold personal data and have no plans to do so. If this ever changes, we will update this policy, tell you clearly beforehand, and give you a simple way to opt out.

We share personal data only with the categories of third parties below, and only the data they need to perform their work for us. These service providers (called "processors" under Maryland law) are bound by contracts that require them to keep your data confidential and use it only on our instructions.

  • Website hosting and platform provider (Squarespace): receives contact form submissions and device and usage data, to host the website, store form submissions, and provide site analytics.

  • Email providers: receive names, email addresses, and message content, to send and receive email.

  • Video conferencing providers: receive names and email addresses, to host virtual workshops and calls.

  • Professional advisors: receive information relevant to the matter, for legal, accounting, and insurance support.

We may also disclose personal data when required by law, to protect our rights or the safety of others, or as part of a merger, sale, or transfer of our business. In a business transfer, this policy will continue to apply to your data unless you are notified otherwise and given a choice.

You may request a list of the specific third parties to which we have disclosed your personal data, as described in Your Maryland Privacy Rights below.

Cookies and Tracking Technologies

Our website runs on Squarespace, which places cookies and similar technologies on your device. We use them only for the purposes below.

  • Strictly necessary cookies: used for security, form submission, and remembering your cookie choices. These cannot be turned off because the site will not work properly without them.

  • Analytics cookies: used by Squarespace Analytics to produce aggregated statistics on visits, pages viewed, and traffic sources. You can turn these off through our cookie banner or your browser settings.

We do not use advertising cookies, tracking pixels, or cross context behavioral advertising.

Your choices. You can accept or decline analytics cookies through the cookie banner on our site, and you can block or delete cookies in your browser settings. Blocking strictly necessary cookies may affect how the site works.

Opt out preference signals. We honor the Global Privacy Control and similar browser based opt out preference signals. When we detect one, we treat it as a valid request to opt out of the sale of personal data and targeted advertising for that browser, with no further action needed from you.

Links and embedded content. Our site may link to or embed content from other sites, such as LinkedIn or video platforms. Those sites have their own privacy policies, and we are not responsible for their practices.

Your Maryland Privacy Rights

If you are a Maryland resident, the Maryland Online Data Privacy Act gives you the rights below. We honor these requests from all visitors.

  1. Access: confirm whether we process your personal data and get access to it.

  2. Correction: correct inaccurate personal data.

  3. Deletion: delete personal data you provided or that we obtained about you.

  4. Portability: get a copy of your personal data in a portable, readily usable format.

  5. Third party list: get a list of the categories of third parties, or the specific third parties, to which we have disclosed your personal data.

  6. Opt out: opt out of the sale of your personal data, targeted advertising, and profiling in furtherance of decisions with legal or similarly significant effects. We do not engage in these activities, but you may still submit an opt out request.

  7. Nondiscrimination: we will not deny services, charge different prices, or provide a different quality of service because you exercised your rights.

How to submit a request. Email us at [PRIVACY EMAIL ADDRESS] with the subject line "Privacy Request," or use the contact form on our website. You do not need to create an account. We will ask for enough information to verify your identity, such as your name and email address, and we will use that information only for verification.

Authorized agents. You may have an authorized agent submit a request for you. We may ask for written proof of the agent's authority and ask you to verify your identity directly with us.

Our response. We will respond within 45 days of receiving your request. If we need more time, we may extend this by another 45 days when reasonably necessary, and we will tell you why within the first 45 days. Requests are free up to once in any 12 month period. We may charge a reasonable fee or decline requests that are manifestly unfounded, excessive, or repetitive, and we will explain why.

Appeals. If we decline to act on your request, you may appeal by emailing [PRIVACY EMAIL ADDRESS] with the subject line "Privacy Appeal" within a reasonable time after our decision. We will respond in writing within 60 days, explaining any action taken or not taken and our reasons. If your appeal is denied, you may contact the Office of the Attorney General of Maryland, Consumer Protection Division, at oag.maryland.gov or 410 528 8662.

Children and Minors

Our website and services are intended for adults and organizations. We do not knowingly collect personal data from children under 13, consistent with the federal Children's Online Privacy Protection Act.

We never sell the personal data of anyone we know, or reasonably should know, is under 18, and we never use it for targeted advertising. If we provide workshops for schools or youth programs, we collect only the information the sponsoring organization provides and needs for the session.

If you believe a child has given us personal data, contact us at [PRIVACY EMAIL ADDRESS] and we will delete it promptly.

Data Security, Breach Notification, and Retention

Security. We use reasonable administrative, technical, and physical safeguards appropriate to the nature of the data, including encrypted (HTTPS) connections and access limited to those who need it. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Breach notification. If a security breach affects your personal information, we will notify you as required by the Maryland Personal Information Protection Act, as soon as reasonably practicable and no later than 45 days after we discover it, unless law enforcement asks us to delay. Where required, we will also notify the Office of the Attorney General of Maryland before notifying affected individuals.

Retention. We keep personal data only as long as needed for the purposes in this policy:

  • Inquiries and contact form messages: up to 2 years after our last communication.

  • Client and workshop records: the length of the engagement plus up to 3 years.

  • Invoice and tax records: up to 7 years, as required for tax and accounting.

  • Analytics data: aggregated and kept under Squarespace's standard settings.

When data is no longer needed, we delete it or make it anonymous.

Changes to This Policy

We may update this policy from time to time. We will post the new version on this page and change the "Last updated" date. If we make a material change, such as beginning to sell personal data or using it for a new purpose, we will notify you in advance by a notice on the website or by email, and we will ask for your consent where the law requires it.

Contact Us

Questions, requests, or concerns about this policy or your personal data:

Heroic Improv
HeroicImprov, LLC
Attn: Privacy
4 Thorne Road, Cabin John, MD 20818
Email: dr.marytysz@ymail.com
Phone: 240-277-3357