Legal

Privacy Policy

Last updated: August 14, 2026

Hearth & Firewall is a solo, residential computer security service run by Ben Phelps. Protecting your information is the whole point of the work, so it would be strange to be careless with it here. This page explains, in plain language, what information I collect, how I use it, who I rely on to run the business, and how long I keep it. If anything here is unclear, email me at [email protected] and I'll answer directly.

What I collect

Only what I need to answer you and do the work you ask for.

When you contact me: the name, email address, phone number, message, and service you choose on the website contact form, or whatever you include when you email, call, or text me.
When I service your device: details needed to do the job, such as the device and operating system, account names on the machine, installed programs, browser extensions, and network or router settings. During a cleanup or tune-up, other information may be visible on your screen (for example, files, emails, or a login page). I only look at what's relevant to the work, and I don't copy it off your machine.
Session recordings: with your consent, I record the remote support session (your screen and our audio). This is disclosed in the written service agreement and again out loud at the start of the session. See "Session recordings" below.

I don't run ads or analytics trackers on this website, and I don't use it to build a profile of you.

How I use it

To reply to your question and schedule a session.
To perform the service you asked for.
To keep a basic record of the work (what was found, fixed, and recommended) so I can follow up if you need help later.
To handle payment, and to resolve a dispute or insurance claim if one ever comes up.

I do not sell your information, rent it, or share it for advertising. Ever.

Who I work with

Running the business relies on a few outside services. Your information only reaches them for the purpose listed, and each is a well-known provider with its own security and privacy practices.

Website and email: the site is hosted on Cloudflare, and email sent to my business address is routed through Cloudflare to my inbox.
Contact form: the form on this site is processed by Formspree, which delivers your message to me.
Phone, video call, and reviews: calls and texts run through Google Voice, the on-camera video call runs through Google Meet, and if you choose to leave a review it goes on my Google Business Profile.
Remote support: the session runs through the remote support software I use to connect to your computer, with your permission, only for the length of the session.

I may also disclose information if the law genuinely requires it (for example, a valid legal request), or to protect someone's safety.

Session recordings

Recordings exist to protect both of us: a clear record of what actually happened during a session, in case there's ever a question or a dispute. Because that footage can include sensitive things on your screen, I handle it carefully:

Each recording is moved to an encrypted drive that stays disconnected except when I'm transferring a file to it.
Recordings are kept for 90 days after the session, then deleted, unless a dispute or insurance claim is open on that job, in which case the recording is held until it's resolved.
I don't share recordings with anyone except where the law requires it, or with my insurer if you or I file a claim about that specific job.

How I protect your information

On-demand access only. I never keep standing or unattended access to your computer. The connection exists only for the session and ends when the session ends.
No kept credentials. I don't retain your passwords, admin account, or password manager after the job. You own and hold the only copy. If you need help again later, that's a new session.
Encrypted, offline storage for any session recordings, as described above.

No method of storage is perfectly secure, but I keep the amount of information I hold small on purpose, which is the best protection of all.

How long I keep it

Session recordings: 90 days, then deleted (see above).
Contact messages and service records: kept while they're useful for supporting you and for normal business, tax, and legal reasons, then deleted.

You can ask me to delete your information sooner. If there's a legal reason I have to keep something for a set period, I'll tell you.

Your choices

You can ask me for a copy of the information I hold about you, ask me to correct it, or ask me to delete it. Just email [email protected] and I'll take care of it.

Children

This service is for adults and is not directed to children under 13. I don't knowingly collect information from children.

Changes to this policy

If I change how I handle information, I'll update this page and change the "last updated" date at the top. Meaningful changes will be reflected here before they take effect.

Contact

Questions about privacy, or a request about your information? Email [email protected] or call (401) 310-0765.