Privacy policy
TiffinHR LLC provides people and organizational consulting to founder-led teams. This page explains what personal information we collect, why, who we share it with, and what rights you have.
Questions about anything here: sophie@tiffinhr.com, or write to TiffinHR LLC, 169 Madison Avenue, Suite 36661, New York, NY 10016, United States.
Two different roles
Which of these applies to you changes your rights and who is responsible, so it is worth reading first.
Our own website and business
When you visit tiffinhr.com, email us, or become a client, TiffinHR decides what information is collected and why. In data protection terms we are the controller, and this page governs that information.
Work we do for clients
When a client engages us on recruitment or HR matters, we may handle personal information about their candidates, employees and contractors. The client decides what is collected and why, and we act on their instructions. We are a processor, and the client's own privacy notice governs that information.
If you applied for a role at an organization we support and want to know how your application is handled, contact that organization directly. If you contact us instead, we will pass your request to them.
What we collect
Information you give us
- Your name, email address and message content when you email us.
- Contact and billing details if you become a client, including what we need to raise invoices and receive payment.
Information collected when you visit
This site runs no analytics, sets no cookies of its own, and has no contact form or tracking scripts. Our hosting provider keeps standard server logs, which include IP addresses, for security and reliability.
If you book a call
Booking links on this site take you to Calendly. Anything you enter there is collected by Calendly under its own privacy policy, and shared with us so we can hold the meeting.
We do not ask for special category information, such as health, ethnicity, religion or political views. Please do not send it to us by email.
Why we use it, and our legal basis
For visitors in the UK and EU, data protection law requires a legal basis for each use. Ours are below.
| What we use it for | Legal basis |
|---|---|
| Responding to enquiries and scheduling calls | Legitimate interests, in running and responding to our business |
| Delivering consulting services under an agreement | Performance of a contract |
| Invoicing, payment and financial records | Legal obligation, and legitimate interests |
| Keeping the site secure and available | Legitimate interests |
| Records kept for tax, insurance and dispute purposes | Legal obligation, and legitimate interests |
Where we rely on consent, you can withdraw it at any time. Withdrawing consent does not affect anything done before you withdrew it.
Who we share it with
We do not sell personal information, and we do not share it for advertising.
We use a small number of providers who process information on our behalf:
- Stripe for invoicing and payment processing.
- Calendly for scheduling.
- Google Workspace for email, documents and file storage.
- Netlify, Inc. for hosting this site.
Each is bound by contract to handle information only as we instruct.
We may also disclose information where the law requires it, where it is necessary to establish or defend a legal claim, or to professional advisers such as our accountant or lawyer.
Information leaving your country
TiffinHR is based in the United States, and information you give us is stored and processed there.
If you are in the UK or EU, that means your information is transferred outside your country. We rely on the UK International Data Transfer Agreement or the European Commission's Standard Contractual Clauses, as applicable, along with our providers' own safeguards. Ask us and we will tell you which apply.
How long we keep it
- Enquiries that do not lead to work: [two years] from your last contact.
- Client records and correspondence: [seven years] from the end of the engagement, for tax and professional record-keeping.
- Invoicing and financial records: [seven years], as US tax rules require.
- Server logs: as set by our hosting provider.
Where we act as a processor for a client, we return or delete personal information at the end of the engagement on the client's instruction.
How we keep it safe
We use access controls, encrypted storage and reputable providers with their own security programs. Access to client and candidate information is limited to what an engagement requires, and we do not keep candidate materials longer than that engagement needs.
No system is completely secure. If a breach occurs that is likely to affect you, we will notify you and the relevant regulator within the timeframes the law requires.
Your rights
If you are in the UK or EU
- Ask what personal information we hold about you, and get a copy.
- Have inaccurate information corrected.
- Ask us to delete information, in some circumstances.
- Ask us to restrict how we use it, in some circumstances.
- Object to use based on legitimate interests.
- Receive information you gave us in a portable format.
- Withdraw consent where we rely on it.
If you are in California or another US state with a comprehensive privacy law
You have the right to know what we collect and how we use it, to request deletion or correction, and not to be treated differently for exercising those rights. We do not sell personal information or share it for cross-context behavioral advertising.
To exercise any of these, email sophie@tiffinhr.com. We will respond within one month, or sooner where your local law requires. We may ask you to confirm your identity first.
Complaints
If you are in the UK you can complain to the Information Commissioner's Office at ico.org.uk. If you are in the EU you can complain to your national supervisory authority. We would rather hear from you first so we can put it right.
Children
This site is not directed at children, and we do not knowingly collect information from anyone under 16. If you believe a child has given us information, contact us and we will delete it.
Changes
We update this page when our practices change. The date at the top shows when it was last revised.
Contact
TiffinHR LLC
169 Madison Avenue, Suite 36661
New York, NY 10016, United States
sophie@tiffinhr.com