Legal
Privacy policy
What we collect through this website, why we collect it, who else sees it, and how to have it removed.
Last updated
The short version
- The only personal information we ask for is what you type into the contact form: your name, email address, organization if you give one, and your message.
- We also record the IP address a submission came from, to help us deal with spam and abuse of the form.
- We use it to reply to you, and for nothing else. We do not sell it, rent it, or use it for advertising.
- There are no analytics, advertising, or tracking cookies on this site. Apart from the anti-bot check on the contact page, pages load nothing from third-party servers — so reading this site tells nobody but us that you were here.
- You can ask us at any time what we hold about you, and ask us to correct or delete it: hello@workadvised.com.
Who this policy is from, and what it covers
This policy is published by Workadvised, operating as Work, Advised. ("we", "us", "our"), a fractional and on-demand HR consultancy. It explains how we handle personal information collected through the workadvised.com website, including the contact form.
We are based in Canada, and we handle personal information in line with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy law. We serve clients in Canada and the United States, and we apply this policy to everyone who contacts us, wherever you are.
Personal information we receive in the course of a client engagement — for example, employee information shared with us during HR consulting work — is governed by the confidentiality and privacy terms of that engagement, not by this policy. This policy is about the website.
What we collect
Information you give us
When you submit the contact form, we receive:
- Your name and email address — both required, so we can reply.
- Your organization — optional.
- Your message — whatever you choose to tell us.
Please do not include sensitive details in the form — health information, a named employee's file, allegations about an identifiable individual. If your enquiry involves that kind of material, say so in general terms and we will arrange a more suitable way to discuss it.
If you email us directly instead, we receive whatever your email contains, including your address and any attachments.
Information collected automatically
- Your IP address, recorded with each contact form submission. We use it to investigate spam and abuse of the form, and it is included in the notification email we receive.
- Standard server logs kept by our hosting provider — IP address, the page requested, timestamp, browser user agent. These are generated for every website visit and are used for security and diagnosing faults.
We do not run analytics software, advertising trackers, or social media pixels on this site, and we do not build visitor profiles. Everything a page needs — fonts included — is served from workadvised.com rather than from someone else's CDN, so loading a page does not tell any third party that you visited. The contact page is the one exception: it loads the bot challenge described below, from Cloudflare.
Why we collect it, and your consent
We use the information above only to:
- read and reply to your enquiry, and follow up about working together;
- keep a record of enquiries we have received and how we responded;
- keep the website and the form secure, and block spam and abuse;
- meet our legal and professional record-keeping obligations.
Submitting the form is your consent to us using the information for those purposes. We will not use it for anything materially different without asking you first, and we will never sell it, rent it, or trade it. We do not send marketing email or newsletters from information collected through this form.
Who else handles your information
We do not share your information with anyone for their own purposes. It does pass through a small number of service providers who operate this website and deliver our email on our behalf, under contracts that limit them to providing that service:
| Provider | What it does | What it handles |
|---|---|---|
| Cloudflare | Hosts and serves this website, and runs the bot challenge on the contact form. | IP address, request details, browser and device signals from the challenge, contact form submission in transit |
| Resend | Delivers the notification email that a contact form submission generates. | Name, email address, organization, message, IP address |
| Microsoft 365 | Hosts the mailbox that contact form notifications and direct emails arrive in. | Everything in your message, and anything you email us directly |
Each provider's own privacy policy is linked above. We may also disclose personal information where the law requires it — for example, in response to a valid court order or a lawful request from a government authority.
Where your information is processed
Our service providers are United States companies and operate global infrastructure. Your information may therefore be stored or processed outside Canada, including in the United States. While it is in another country, it is subject to that country's laws, and may be accessible to that country's courts and law enforcement or national security authorities under those laws. We remain accountable for it, and use providers that commit to comparable protection.
Cookies and the bot challenge
This site sets no analytics or advertising cookies, and nothing on it follows you to other websites.
The contact form is protected by Cloudflare Turnstile, which checks that a submission comes from a person rather than a script. To do that it runs in your browser and examines signals about the browser and device itself — things like how it renders a page and how it responds to standard browser interfaces. It may store a short-lived token or cookie to record that you passed the check, so you are not asked again on the same visit. Cloudflare states that Turnstile does not use this to track individuals across websites and does not use the data for advertising. What it sees is covered by Cloudflare's privacy policy, linked in the table above.
The challenge is required in order to submit the form. If you would rather not run it, email us directly instead — the address is at the bottom of this page.
How long we keep it
- Enquiries that do not lead to work together: kept in our mailbox for up to 24 months, then deleted.
- Enquiries that become a client engagement: kept for the life of the engagement and afterwards for as long as our professional and legal record-keeping obligations require, then deleted.
- Server logs: retained by our hosting provider for a short period — typically a few days — and then discarded automatically.
You can ask us to delete your enquiry sooner. See below.
How we protect it
The whole site is served over HTTPS, so what you type into the form is encrypted in transit. Submissions are validated and length-limited, protected by a hidden anti-spam field and the Turnstile bot challenge, and delivered to a mailbox with access limited to the people who need it. Access to our hosting and email accounts is protected by strong, unique credentials and multi-factor authentication.
No method of transmission or storage is perfectly secure, and we cannot guarantee absolute security. This is why we ask you not to send sensitive details through the form.
Your choices and your rights
You can, at any time:
- Ask what we hold about you and how it has been used and disclosed.
- Ask us to correct anything inaccurate or incomplete.
- Ask us to delete your enquiry, subject to any records we are legally required to keep.
- Withdraw your consent to our use of the information, on reasonable notice. If you withdraw it, we may no longer be able to respond to your enquiry.
Email hello@workadvised.com and we will respond within 30 days. We may need to confirm your identity first, so that we do not disclose someone else's information to the wrong person. There is no charge for a reasonable request.
If you are not satisfied with how we have handled your information or your request, you can complain to the Office of the Privacy Commissioner of Canada at priv.gc.ca or 1-800-282-1376.
Children
This is a business-to-business website and is not directed at children. We do not knowingly collect personal information from anyone under 16. If you believe a child has sent us information through this site, contact us and we will delete it.
Changes to this policy
We may update this policy as the site or our practices change. The revised version takes effect when posted here, and the "last updated" date at the top will change. Material changes affecting information we already hold will be brought to your attention directly where we can reasonably do so.
Contact us
Daniel LeBlanc is accountable for personal information at Work, Advised. For any privacy question, request, or complaint: