Legal
Last updated October 21, 2026
Urban Human Resources ("we", "us") is an HR consulting practice based in Oakland, California. This policy explains what personal information we collect through urbanhumanresources.com, why we collect it, how long we keep it, and the choices you have.
We do not sell personal information, and we do not share it for cross-context behavioral advertising.
Information you give us. When you book a consult, request a quote, subscribe to the newsletter, buy something, or apply for a role, we collect what you submit: name, email address, phone number, employer or company name, and the substance of what you tell us about your situation.
Job application material. If you apply for a position, we collect your resume, cover letter, work history, and any documents you attach.
Client engagement material. In the course of an engagement we may receive employee records, payroll data, policies, personnel files and similar material from a client company. That information belongs to the client. We handle it under our engagement agreement, use it only to perform the work, and do not use it for any other purpose.
Payment information. Card payments are processed by Stripe, on Stripe's own secure checkout pages. We do not receive or store card numbers. We do receive the transaction record: what was purchased, the amount, the date, and the billing name and email.
Technical information. Our host records standard request data such as IP address, browser type, referring page and pages visited. We also use Google Analytics 4, a web analytics service from Google, to see how the site is used. It collects page views, session activity, device and browser type, referral source and approximate location, plus three custom events that record only that an action happened: a contact link click, a form submission and the use of a site tool. Those events carry the event name and never what you type into a form. Google states that Google Analytics 4 does not log or store individual IP addresses and uses them briefly to derive approximate location. Google Analytics sets two first-party cookies, _ga and _ga_ followed by an identifier for our property, which Google documents as lasting up to two years and which distinguish one browser from another. The resulting reports are aggregated or pseudonymous, and we do not use them to identify you. We also link Google Search Console, which adds the search queries that led people to the site and does not add visitor tracking. The site offers no cookie banner, and you can block Google Analytics with your browser settings, a browser extension, or Google's opt-out browser add-on. The Español link on pages without a Spanish version opens the page through Google Translate, a Google service on a translate.goog address. Google receives your request for that page and applies its own privacy policy, and the Google Analytics rules above do not govern that view. The site also loads the Google tag (GT-5NGRC4XS, delivered through Google Site Kit) that carries that Google Analytics property, and Jetpack Stats from Automattic (stats.wp.com), which reports page views, referrers and approximate location under Automattic's own privacy policy. Some pages embed third-party services, which receive your request and set their own cookies when they load: Instagram and LinkedIn feeds through SociableKIT, and Calendly for booking, which applies its own privacy policy when you open the scheduler or follow a booking link. Free live sessions are registered on Eventbrite's own site under its own terms and privacy policy, and Eventbrite receives what you enter there. Cloudflare serves the site and sits between your browser and our host, so it processes request data such as your IP address. When you arrive through a tagged link, for example a LinkedIn post or a directory listing, your browser keeps a short note of that source and includes it when you send a form or book a consult, so we know which channels bring people here. The note stays in your browser, expires after 90 days, and is never shared with advertisers.
To respond to inquiries and schedule consults; to perform engagements and deliver purchases; to process payments and manage subscriptions; to evaluate job applications; to send the newsletter to people who asked for it; to keep records required for tax, accounting and legal purposes; and to operate and secure the site.
We do not use client employee data, applicant material, or consult conversations for marketing.
We share personal information only with service providers who need it to run the practice, and only for that purpose: our website host, Cloudflare for delivery and security, Google for Google Analytics (described in Section 1), Automattic for Jetpack Stats, email and form provider, Stripe for payments, newsletter platform, Calendly for scheduling, Eventbrite for free session registration, file storage, and our accountant. Each of the others is bound to use the information only on our instructions. Google processes Analytics data under Google's own terms, and we have not reviewed or changed Google's optional advertising and data-sharing settings, so we do not make a promise about how Google uses that data beyond what Google publishes.
We will also disclose information where required by law, subpoena or court order, or where necessary to establish or defend a legal claim.
We do not sell, rent, trade or license personal information to anyone, for money or for anything else of value. That covers the newsletter list, consult and quote requests, customer and purchase records, job applications, survey responses, and anything a client company shares with us during an engagement.
We do not share personal information for cross-context behavioral advertising, and we do not give it to any third party for that party's own marketing. Our own site code contains no Meta, LinkedIn or advertising-network pixels, and we use analytics only to see how the site performs. The Instagram and LinkedIn feed embeds described above are the exception: they load from those services. California residents may ask whether we have disclosed personal information to third parties for their direct marketing purposes (Civil Code section 1798.83). The answer is no.
Sponsors and referral partners buy space or pay a referral fee. They receive no subscriber, customer, applicant or survey respondent information. Research we publish reports aggregated results that do not identify any person or organization.
Because nothing is sold or shared, there is nothing to opt out of. If your browser sends a Global Privacy Control or Do Not Track signal, we treat it as a standing opt-out request. In practice, when your browser sends either signal, the site does not load Google Analytics, so no analytics data is collected from that browser. This is how we respond to Do Not Track signals under the California Online Privacy Protection Act. Google, as the operator of Google Analytics and Google Translate, and the providers of embedded feeds on some pages, may collect information about visitors through the site as described in this policy, and we do not control their collection.
If Urban Human Resources is ever merged or sold, personal information would move only as part of the business itself, and the new owner would be bound by this policy for everything collected under it. If this practice ever changed, notice would be posted here first, and the change would never apply to information collected before it without your express consent.
Consult conversations and engagement material are treated as confidential. We do not disclose that a person or company is a client, or the substance of the work, without permission. Any case example used in our writing is either published with consent or altered so that the organization and individuals cannot be identified.
We use AI tools to support research, drafting, and operations. When client or applicant information passes through those tools, it stays under the same confidentiality: we use accounts configured so your information is not used to train public models, and we never sell it. Every recommendation and every final deliverable is reviewed and decided by a person.
Inquiries that do not become engagements are deleted within twelve months. Job application material is kept for four years from the date of application, as California law requires, and then deleted, unless you are hired and it becomes part of your personnel file. Client engagement records are kept for the period set in the engagement agreement, and in any event for as long as required by law. Transaction records are kept for seven years for tax purposes. Newsletter subscriptions are kept until you unsubscribe. Google Analytics event and user data is kept for 14 months and then deleted automatically.
Newsletter emails include an unsubscribe link in every message. Unsubscribing removes you from the list and does not affect any engagement.
If you are a California resident, you have the right to know what personal information we have collected about you, to request a copy of it, to request that we delete or correct it, and to be free from discrimination for exercising those rights. We do not sell personal information or share it for cross-context behavioral advertising, so there is no opt-out to exercise.
To make a request, email hello@urbanhumanresources.com with "Privacy request" in the subject line. We will verify your identity before acting, and respond within the time the law allows. You may use an authorized agent, in which case we will ask for proof of authorization.
Where we hold employee information on behalf of a client company, that company is responsible for responding to its own employees' requests. Send those requests to your employer, and we will assist them.
We use reasonable administrative and technical safeguards, including encrypted transmission and access controls on stored files. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
The site is not directed to children under 16 and we do not knowingly collect their information.
If we change this policy we will update the date above. Material changes will be noted on this page.