How we handle your information.

Last updated 3 October 2026

What this covers

This policy applies to orchestralhr.ca — what happens when you visit the site or get in touch through it.

It does not cover personal information we handle on behalf of a client organisation under a services agreement, such as employee records or candidate information. That is governed by the agreement with the client concerned and the data handling terms within it.

What we collect

When you use the contact form

Your name, company, job title and email address, plus an optional description of what you would like help with. All of it is information you choose to give us.

When you email us directly

Whatever you choose to include in your message.

Automatically

This site is hosted on GitHub Pages, which records standard server information such as IP address and browser type in the course of serving pages. We have no access to those logs and do not use them.

We do not use analytics. We do not set cookies. We do not load fonts, scripts or embeds from third-party networks — everything this site needs is served from the site itself. There is no tracking here, and nothing follows you after you leave.

Why we collect it

Solely to respond to your enquiry and, if it leads somewhere, to continue that conversation. We do not sell it, rent it, trade it, or add it to a marketing list.

Where it goes

The contact form is processed by Formspree, a third-party service that receives your submission and forwards it to us by email. This means the information you enter is processed through servers in the United States, where it may be accessible to US courts and authorities under the laws of that country.

If you would rather your enquiry did not pass through a service outside Canada, emailinfo@orchestralhr.ca directly instead.

Our email is hosted on Google Workspace. We do not share your information with anyone else unless you ask us to, or unless we are required to by law.

How long we keep it

Enquiries that do not lead to an engagement are deleted within 24 months. Where a conversation becomes a client relationship, records are retained under the terms of the agreement with that client.

How we protect it

Access is limited to the people who need it. Accounts require multi-factor authentication, and our email is authenticated with SPF, DKIM and DMARC so that messages claiming to come from us can be verified as genuine.

Your rights

You can ask what personal information we hold about you, ask us to correct it, or ask us to delete it. Write toprivacy@orchestralhr.ca and we will respond within 30 days, as the Personal Information Protection and Electronic Documents Act requires.

If you are not satisfied with our response, you may complain to the Office of the Privacy Commissioner of Canada atpriv.gc.ca.

Unsolicited commercial email

The email addresses published on this site are here so that clients and prospective clients can reach us. Publishing them is not consent to receive commercial electronic messages, and they may not be collected or used for that purpose.

Changes to this policy

If this policy changes, we will update the date at the top of this page.

Who is accountable

Valerie Khan, Privacy Officer
privacy@orchestralhr.ca
Orchestral HR Consulting · Ontario, Canada