Scope
Verity provides fractional human resources, recruiting, and talent acquisition services. This policy covers the current consultation workflow and authorized administration of those requests. It does not describe client-controlled HR or recruiting systems, future marketing automation, payments, uploads, social publishing, or other features that are not active.
Information we collect
Consultation information
The consultation form collects a name, work email, optional phone number, company, role, company size, support need, situation, desired outcome, timing, optional open-role information, and optional additional context. It also records acceptance of the consultation-use statement, its wording and version, and a validated timestamp.
Technical and administrator information
Cloudflare may process network and request metadata needed to deliver and protect the service, including IP address, route, method, time, status, region, and security identifiers. The private Digital Home also processes authorized administrator account, authentication, access, and audit records.
How we use information
- Receive, validate, review, and respond to consultation requests.
- Assess fit, maintain consent and activity evidence, and manage the related inquiry.
- Prevent duplicate capture, misuse, and unauthorized access.
- Operate and secure the private Digital Home and maintain technical evidence of workflow completion or failure.
Verity does not currently sell personal information, share it for cross-context behavioral advertising, or use consultation information for automated prospect email, advertising, visitor profiling, automated scheduling, social publishing, or artificial-intelligence processing.
How information moves and who supports the service
The Cloudflare-hosted website sends a validated request through a private service connection to the backend. Supabase stores the consultation, consent evidence, lead, activity history, opportunity, and technical receipt in one database operation. After that commit, Cloudflare Email Service sends Wesley Jobes a generic alert that contains no requester identity, company, contact details, narrative, or lead identifier.
- Cloudflare
- Website and backend delivery, security, private service connection, operational logging, owner-alert delivery, and protected access.
- Supabase
- Managed database, authentication, backups, and database telemetry for consultation and administrator records.
- Google Workspace
- Wesley’s business mailbox for the generic owner alert and privacy-request correspondence.
The Supabase project and its physical database backups are hosted in the United States in AWS region us-west-2 in Oregon. Providers may use subprocessors under their terms and published lists.
Browser storage, tracking, and privacy signals
During a pending same-tab submission, the site uses session storage for a submission identifier, timestamp, and non-reversible request fingerprint. It does not store the form values in that browser record, and the value is cleared after a successful submission.
The current site has no application analytics cookies, advertising pixels, cross-site behavioral tracker, or targeted-advertising profile. Cloudflare may use mechanisms necessary to deliver, secure, and protect the service.
Because Verity does not currently sell or share personal information for targeted advertising or collect it across third-party sites over time, browser Do Not Track and Global Privacy Control signals do not change the current application behavior. Verity will reassess this disclosure before adding analytics, advertising, profiling, or materially different tracking.
Retention and deletion
Verity’s business preference is to delete a consultation and associated personal records when an accepted deletion request is completed, unless a documented legal, contractual, security, dispute, client-instruction, or other legitimate retention requirement applies. Verity keeps only the minimum restricted evidence needed to show how the request was handled.
- Non-client inquiries
- 24 months after the later of submission or last substantive contact, unless the record becomes a client record or a documented hold applies.
- Supabase backups
- A rolling seven-day physical-backup window under the currently verified plan. A restore may reintroduce deleted data, so completed requests remain on a restricted replay list until expiry.
- Cloudflare Workers logs
- Seven days under the currently verified plan. Verity’s application does not log consultation form content.
- Cloudflare Email Service events and preview
- Delivery events are retained for 31 days; message preview is retained for about seven days while enabled. The owner alert is generic and excludes requester details.
- Cloudflare access and audit records
- Access authentication logs are retained for about 24 hours; administrative and account audit records for about 18 months under the currently verified plans.
- Privacy-request register
- Reviewed for deletion 24 months after closure unless a documented law, contract, dispute, security need, or hold requires longer retention.
Live deletion does not rewrite an existing provider backup or historical provider log. Those copies expire under provider schedules. If a backup restores information after a completed request, Verity’s restricted restoration record is used to reapply the action.
Privacy requests
You may ask Verity to review, correct, or delete information connected to a direct consultation by emailing wesleyjobes@vpphr.com. Verity will verify the request proportionately, check the relevant systems and any documented hold, and respond through an appropriate route.
Verity uses 45 days as its operating response target unless applicable law requires a shorter period. This is an operating target, not a statement that one deadline applies to every request. Rights, exceptions, appeals, and complaint routes depend on the law that applies to the request.
The public form and ordinary email are not approved routes for confidential employee, candidate, medical, identity-document, or other sensitive information. When that material is needed, Verity will use the client’s authorized HR or applicant-tracking system or arrange another approved secure route.
Security, policy changes, and contact
Verity uses safeguards intended to reduce unauthorized access, alteration, disclosure, or loss, including a private service connection, authenticated administrator access, server-controlled roles, authenticator-based multi-factor authentication, and duplicate-submission controls. No safeguard eliminates all risk.
Verity will review and update this policy before materially changing how it handles personal information. The current effective and last-updated dates appear at the top. Material changes will be identified on this page and, when appropriate, communicated through the contact route available to affected people.
Questions and privacy requests may be sent to wesleyjobes@vpphr.com.
Verity provides HR consulting and recruiting support. Website information is general business information and is not legal advice. A consultation request does not create a client relationship; any engagement is defined in a separate written agreement.