Effective date: 31 August 2026 · Last updated: 31 August 2026
Scope of this policy
This policy explains what sfHR Consulting (“we”, “us”) does with personal information collected through this website at sfhr.org. It covers visitors to the site and people who contact us through it.
It does not cover personal information about a client’s own employees, applicants, or contractors that we handle while performing a consulting engagement. In that work we act on the client’s instructions as a service provider, the client remains responsible for its own privacy notices to its people, and the handling of that information is governed by the engagement letter and by any data protection terms in it, not by this page.
What we collect
Information you give us
If you complete a form on this site, we collect the information you enter: your name, email address, and message, and, where you provide them, your telephone number, organization, approximate employee count, timing, and the subject you select. We also record that you ticked the consent box, the version of this policy in force at that moment, and the date and time.
Please do not send sensitive personal information through the form. It is not needed to begin a conversation, and the form is not the right channel for it. If your inquiry concerns someone’s health, immigration status, criminal history, or similar information, describe the situation in general terms and we will arrange a secure way to discuss the specifics.
Information collected automatically
When a form is submitted we record the internet protocol address the submission came from, as evidence of consent and as a defence against automated abuse. Our web host also keeps ordinary server logs of requests to the site, which typically include IP address, date and time, the page requested, and browser identification. These are kept by the host for its own security and diagnostic purposes.
Cookies and tracking
This site uses no analytics, no advertising technology, no social media pixels, no session recording, and no cross-site tracking of any kind. It sets no cookies on ordinary visitors. Cookies are set only for people who log in to administer the site, and only to keep them logged in.
The site also loads nothing from third-party servers. Fonts, styles, scripts, and images are all served from this domain, which means that visiting this site does not disclose your visit to anyone else. There is no consent banner because there is nothing to consent to.
Why we use it
- To read your inquiry and reply to it.
- To evaluate whether we can help you, and to prepare a proposal or engagement letter if we can.
- To keep a record that you consented to be contacted, and when.
- To check for conflicts of interest before taking on work.
- To keep the site secure and to identify and block automated abuse.
- To comply with legal, tax, and professional record-keeping obligations.
We do not use your information to build a marketing profile, and we do not use it to train machine learning models.
Marketing
Submitting a form does not subscribe you to anything. We do not operate a newsletter from this site, and we do not add inquirers to a mailing list. If that ever changes, it will be by separate opt-in, and this page will be updated first.
Who we share it with
We do not sell personal information, and we do not share it for cross-context behavioural advertising. We have never done so.
Your information is disclosed only to the service providers that operate the infrastructure this site runs on, and only to the extent their function requires:
- Our web host, which stores the site and its database and keeps server logs.
- Our email provider, which carries the notification of your inquiry and any reply.
We may also disclose information where we are legally required to, where it is necessary to establish or defend a legal claim, or to protect the rights and safety of any person. If our practice were ever transferred to another owner, records would transfer with it, and you would be told.
How long we keep it
Inquiries that do not lead to an engagement are kept for twenty-four months and then deleted, unless we are required to keep them longer. Where an inquiry becomes an engagement, the records are kept under the retention schedule in the engagement letter and under the professional and tax rules that apply to the work.
Security
The site is served over an encrypted connection. Form submissions are protected against forged requests and automated abuse, access to the site’s administration is restricted to named accounts, and stored inquiries are visible only to signed-in administrators. No system is perfectly secure, and we do not claim that ours is; we do claim to have taken the measures a practice of this kind should take.
Your rights
Whatever thresholds may or may not apply to a practice of this size, we will honour the following requests from anyone who has contacted us through this site:
- To know what personal information we hold about you and where it came from.
- To correct information that is inaccurate.
- To delete what we hold, unless we are required to keep it.
- To receive a copy of what you submitted, in a portable format.
- Not to be discriminated against for exercising any of these.
To make a request, use the contact form or telephone us on (925) 832-7732. We will verify that the request comes from you, usually by replying to the address the inquiry was sent from, and respond within forty-five days. An authorized agent may act for you if you give them written permission and we can verify it.
Because we do not sell or share personal information, and do not process it for targeted advertising, there is nothing to opt out of and no Global Privacy Control signal for this site to act on. We honour such signals in the only way available to a site that collects no tracking data: by not collecting it.
If you are dissatisfied with our response, you may complain to the California Privacy Protection Agency or to the Office of the California Attorney General.
Children
This site is directed to businesses and to the people who run them. It is not directed to children, and we do not knowingly collect personal information from anyone under sixteen. If you believe a child has sent us information, write to us and it will be deleted.
Visitors outside the United States
This site is operated from the United States and is intended for employers operating in California. If you contact us from elsewhere, your information will be transferred to and stored in the United States, where privacy law differs from your own.
Changes
If this policy changes, the new version is posted here with a new date, and the version in force when you submitted a form is recorded with your submission. Material changes affecting information already collected will be notified to the address you gave us.
Contact
sfHR Consulting
Contact form
(925) 832-7732
No email address is published on this site, as a defence against automated address collection. The contact form reaches the same place.