Privacy Policy

This Privacy Policy applies to the website (the “Site”, which is owned and operated personally by Rebecca Henderson, McArthur University Professor at the Harvard Business School and author of the forthcoming book Reimagining Capitalism.  This Site is not affiliated with or sponsored by Harvard University.)

Prof. Henderson has created this privacy policy to explain how she uses information that you may provide while visiting this Site and to demonstrate her firm commitment to Internet privacy.   Prof. Henderson may modify this policy from time to time and encourages you to check this page when revisiting this Site.  By using this Site, you agree to the terms of this Privacy Policy.

Scope and Responsibility

This Privacy Policy applies to all users of the Site and those who have provided or will provide personal data to Prof. Henderson through the Site, through other social media sites maintained by Prof. Henderson, through email solicitations, through communications with purchasers of her books, or through communications directly with her or one of her assistants.

Prof. Henderson’s content strategist Theresa Diederich is responsible for ensuring that this  Privacy Policy is made available to data subjects prior to LNC collecting their personal data.  Prof. Henderson and her employees and assistants who interact with data subjects are responsible for ensuring that this Privacy Policy is drawn to the data subject’s attention and their consent to the collection of their data is secured.

Ms. Diederich serves as Prof. Henderson’s data protection officer and can be contacted at

How Your Information Will Be Used

The personal data that Prof. Henderson maintains may include your name, email address, company or organization, gender, industry type and age or age bracket.   This personal data will be stored by Prof. Henderson for a period of 20 years.

Prof. Henderson will use your personal data solely for the purpose of communicating with you with respect to her book, Reimagining Capitalism; to inform you about and invite you to attend or participate in speaking engagements of, online courses taught by, and other events and programs  involving, Prof. Henderson; to send you articles, postings and other content by Prof. Henderson that she believes may be of interest to you; and to ask you to connect on other social media platforms.

Prof. Henderson will not use your personal data for any other purpose. Without your express prior written consent, Prof. Henderson will not share your personal data with any other entity or organization, or with any person other than employees of and contractors to Prof. Henderson with a need to view and use such personal data for the purposes set out above.

Your Rights as a Data Subject

At any point while Prof. Henderson is in possession of your personal data, you, the data subject, have the following rights:

  • Right of access – you have the right to request a copy of the information that she holds about you.
  • Right of rectification – you have a right to correct data that she holds about you that is inaccurate or incomplete.
  • Right to be forgotten – you can always ask for the data maintained about you to be erased from Prof. Henderson’s records.
  • Right to restriction of processing – where certain conditions apply, you have a have a right to restrict the processing of your personal data.
  • Right of portability – you have the right to have the data held about you transferred to another organisation.
  • Right to object – you have the right to object to certain types of processing such as direct marketing.
  • Right to object to automated processing, including profiling – you also have the right to prohibit your data from being subject to automated processing or profiling.
  • Right to judicial review: you have the right to complain as outlined below.

Prof. Henderson, at your request, will confirm what information we hold about you and how it is processed. If Prof. Henderson does hold personal data about you, you can request the following information:

  • Identity and the contact details of the person or organisation that has determined how and why to process your data.
  • Contact details of the data protection officer, where applicable.
  • The purpose of the processing as well as the legal basis for processing.
  • If the processing is based on the legitimate interests of Prof. Henderson or a third party, information about those interests.
  • The categories of personal data collected, stored and processed.
  • Recipient(s) or categories of recipients that the data is/will be disclosed to.
  • If Prof. Henderson intends to transfer your personal data to a third country or international organization, you will be provided with information about how that transfer will be securely accomplished. The EU has approved sending personal data to some countries because they meet a minimum standard of data protection. In other cases, there are specific measures in place to secure your information.
  • How long the data will be stored.
  • Details of your rights to correct, erase, restrict or object to such processing.
  • Information about your right to withdraw consent at any time.
  • How to lodge a complaint with the supervisory authority.
  • Whether the provision of personal data is a statutory or contractual requirement, or a requirement necessary to enter into a contract, as well as whether you are obliged to provide the personal data and the possible consequences of failing to provide such data.
  • The source of personal data if it wasn’t collected directly from you.
  • Any details and information of automated decision making, such as profiling, and any meaningful information about the logic involved, as well as the significance and expected consequences of such processing.

Prof. Henderson accepts the following forms of ID when information on your personal data is requested:   passport or driver’s license or other government-issued id.


In the event that you wish to make a complaint about how your personal data is being stored or used by Prof. Henderson, or how your complaint has been handled, you have the right to lodge a complaint directly with the supervisory authority and Prof. Henderson’s data protection representative whose contact information is provided above.


Prof. Henderson complies with the Children’s Online Privacy Protection Act and the provisions of the GDPR relating to children.  Prof. Henderson does not solicit and does not accept personally identifying information from any person under 16 years of age.

Visitors to this Site who are under 16 years of age should not use this Site except under the supervision and with the assistance of their parent or legal guardian, and should never submit any personally identifying information to the Site.  For example, visitors under 16 years of age should not register, purchase or use services or take any actions on or through this Site.

Protection of Personal Data

Prof. Henderson uses industry standard security measures to protect against the loss, misuse or alteration of all of the personally identifiable information that you provide to her.  The server is located in a locked, secure environment.

Permission to access your personal data is granted only to you and Prof. Henderson’s employees or contractors who need to know that information to provide services to you and who are required to keep the information confidential.  Although all of those make a good faith efforts to store information collected by this Site in a secure operating environment, complete security cannot be guaranteed.

Links to Other Sites

The privacy policies and practices contained in this Privacy Policy do not apply to ANY external links. This Privacy Policy only applies to this Site or any future Sites that Pro. Henderson may personally develop or maintain. It does not cover Sites that are linked to by this Site or Sites for which Prof. Henderson is not responsible (“linked-Sites”). These linked-Sites will have their own policies and practices that may be different.  You are encouraged to familiarize yourself with the policies and practices of the linked-Sites, especially if you provide personal information to them.

California Online Privacy Protection Act Compliance

Prof. Henderson complies with the California Online Privacy Protection Act.  As part of that Act, all registered users of the Site may make any changes to their information by sending an email to the Data Protection Officer whose contact information appears above.