Privacy & Data Security

HRG works with information that can be important to a supplier's financial performance, relationships with retailers, and day-to-day operations.

That responsibility matters.

We take a deliberate approach to protecting the information entrusted to us—using appropriate technology, access controls, internal practices, and trusted service providers to help safeguard client and business data.

Our goal is straightforward: protect the information we use, limit access to those who need it, and handle data responsibly throughout our relationship with you.

Security Is Built Into How We Work

Security is not simply a technology issue. It is part of how HRG manages information, systems, people, and processes.
 

Our approach focuses on several core principles:

Access With Purpose

Access to client information should be limited to individuals who need that information to perform their responsibilities.

HRG works to apply appropriate access controls and permissions based on business need, role, and responsibility.

Responsible Data Handling

We seek to collect and use only the information reasonably necessary to provide our services, support our clients, operate our technology, and improve business performance.
 

Client information is handled in accordance with applicable agreements, internal practices, and legal requirements.

Secure Technology

HRG uses business and technology platforms selected with security, reliability, and operational integrity in mind.
 

Where appropriate, these platforms provide security capabilities designed to help protect information during storage, transmission, processing, and access.

Trusted Service Providers

Like most modern businesses, HRG works with third-party technology and service providers to support areas such as cloud infrastructure, communications, analytics, scheduling, customer relationship management, and business operations.

We consider the role those providers play in handling information and seek to work with vendors that maintain appropriate security and privacy practices.

Protecting Client Information

HRG's work may involve information related to:

• Retail deductions and claims

• Accounts receivable activity

• Retailer transactions

• Sales and operational performance

• Shortages and compliance activity

• Pricing and allowance issues

• Recovery activity

• Supporting documentation

• Retail account performance

• Client contacts and business information

We recognize that this information may be commercially sensitive.

HRG seeks to protect client information through a combination of administrative, technical, and operational safeguards appropriate to the nature of the information and the services being provided.

Data Access and Authorization

Not everyone needs access to everything.

 

HRG provides access based on business requirements and job responsibilities.

Depending on the systems involved, safeguards may include:

• User authentication

• Role-based or permission-based access

• Account management controls

• Restricted access to client information

• Administrative oversight

• Secure collaboration tools

• Procedures for granting or removing access

We continually evaluate access practices as our organization, technology, and services evolve.

Our approach emphasizes:

 

Controlled Access

Information is made available in accordance with authorized access and business requirements.

Data Separation and Governance
We seek to maintain appropriate controls around how client information is organized, accessed, and used.

Secure Technology Infrastructure
HRG utilizes enterprise technology infrastructure designed to support modern data management, analytics, and security requirements.

Purposeful Use of Data
Client information is used to provide contracted services, generate authorized insights, support the platform, and fulfill other legitimate business purposes consistent with our agreements and privacy practices.

Privacy Matters Too

Security and privacy are related, but they are not the same thing.

 

1. Security focuses on protecting information from unauthorized access, misuse, alteration, loss, or disclosure.

2. Privacy focuses on how personal information is collected, used, shared, retained, and managed.

HRG considers both.
 

Our website visitors and other individuals may have choices regarding cookies, analytics, marketing technologies, and certain uses of personal information.
 

You can learn more through:

• Privacy Policy

• Cookie Policy

• Your Privacy Choices
   

Data Retention

HRG seeks to retain information only for as long as reasonably necessary for legitimate business purposes, contractual obligations, legal requirements, dispute resolution, security, recordkeeping, or the provision of services.

Retention periods may vary depending on the type of information, the nature of the client relationship, contractual requirements, and applicable law.
 

When information is no longer required, HRG seeks to handle its deletion or disposition appropriately.

Employee Responsibility

Technology alone cannot protect information.
 

Our team members are expected to handle client and company information responsibly and follow applicable HRG policies, procedures, access requirements, and confidentiality obligations.

Where appropriate, security awareness, access management, and confidentiality expectations are incorporated into our operating practices.

Confidentiality

HRG understands that client relationships frequently involve commercially sensitive information.

Confidential information provided in connection with an HRG engagement is handled in accordance with the applicable client agreement, confidentiality requirements, internal controls, and legal obligations.

Specific confidentiality, security, data-handling, or information-governance requirements may also be addressed within individual client agreements.

Security Is an Ongoing Process

Cybersecurity threats, technology, regulations, and business requirements continually change.

For that reason, security cannot be treated as a one-time project.

HRG continually evaluates its technology, business processes, vendors, and security practices as our organization and solutions evolve.
 

Our objective is to maintain an approach that is appropriate to the information we handle and the needs of the clients we serve.

Questions About Security or Data Privacy?

We understand that clients may have specific security, privacy, data-governance, or technology requirements.

If your organization has security questionnaires, vendor-management requirements, data-processing questions, or other information-security requirements as part of your evaluation of HRG, our team is available to help.

Talk with HRG about your security or data requirements.

For questions regarding personal information or privacy rights, please review our Privacy Policy or Your Privacy Choices page.

Security Starts With Trust

HRG helps suppliers understand where revenue is being lost, recover what is owed, and identify the patterns behind recurring deductions.

That requires trust.

We work to earn that trust by treating client information with the care, discipline, and responsibility it deserves.