Clear boundaries for information entrusted to us.

Who this notice covers

The People Works Advisory operates this website and determines why and how information submitted through it is used. In this notice, “we,” “us,” and “our” refer to The People Works Advisory. This notice covers website visitors, business contacts, prospective clients, candidates and other professionals, Practitioner Network applicants and participants, newsletter subscribers, privacy requesters, and authorized users of restricted administrative areas.

It does not govern the independent practices of prospective employers, clients, social-media platforms, or other websites reached through a link. Once information is provided to an employer at a candidate's direction, that employer may process it under its own privacy notice.

Information you provide

Company inquiries. We may collect a contact's name, business email, organization, role, headquarters location, U.S. entity and workforce information, states involved, service interests, timing, inquiry context, consent record, and later correspondence.

Candidate profiles. We may collect name, email, telephone number, location, LinkedIn URL, résumé, work and education history, skills, professional level, target roles and locations, work-arrangement preferences, work-authorization and sponsorship answers, availability, professional summary, consent records, and later correspondence.

Practitioner Network introductions. We may collect name, work email, telephone number, location, time zone, firm or practice name, current title, website and professional profile links, areas and years of expertise, geographic coverage, languages, typical client context, descriptions and non-confidential examples of relevant work, preferred participation types, provider affiliations or economic interests, professional-liability insurance status, referral source, acknowledgement and consent records, and later correspondence.

Newsletter and privacy requests. A newsletter record may include an email address, the source and version of the consent, subscription and unsubscribe timestamps, and current status. A privacy request may include the contact information, request details, verification correspondence, and our response record.

Visitor and device information

When a page or file is requested, the hosting and security layers may automatically process technical information needed to deliver and protect the website. This can include IP address, date and time, browser, operating system and device type, user agent, requested page, referring page, request or session identifiers, approximate region inferred from an IP address, and performance, error, or security logs.

OpenAI hosts and operates ChatGPT Sites on our behalf. The hosting layer may process some technical information even when we do not directly view or independently retain every item. We use this information only as needed to provide, troubleshoot, secure, and maintain the website. We do not use it to build an advertising profile.

Operational records we create

To manage an inquiry, candidate relationship, or Practitioner Network introduction, authorized administrators may create limited internal records such as workflow status, follow-up history, role-related notes, matching or network-review status, disclosed affiliations, consent and introduction history, internal review notes, and the outcome of a communication. Administrative actions may also create audit records containing the administrator's account identity, action, affected record, and timestamp.

These records support professional-services, recruiting, security, and accountability workflows. We do not use them for unrelated consumer profiling or cross-site advertising.

How we use information

We use information to respond to inquiries; evaluate and define potential HR advisory work; maintain the professional opportunity network; assess Practitioner Network introductions and potential project fit; review role-related qualifications and preferences; contact candidates about potentially relevant opportunities; document permissions; administer newsletter subscriptions; answer privacy requests; maintain business and compliance records; and protect the website and its users.

We do not currently use solely automated decision-making to determine a candidate's eligibility for an opportunity, accept or decline a Practitioner Network introduction, or make an employment decision. Matching, network, and introduction decisions involve human review. If we materially change these practices, we will update this notice and provide any additional choices required before the new practice begins.

Candidate matching and Practitioner Network boundaries

Joining the professional opportunity network allows us to store and review a candidate's information and contact the candidate about potentially relevant opportunities. It is not blanket authorization to send an identifiable résumé or profile to any employer.

Before an identifiable introduction, we contact the candidate about the specific opportunity and request authorization for that recipient. Permission for one introduction does not authorize future introductions. A candidate may withdraw from future matching at any time. Withdrawal does not ordinarily reverse a disclosure the candidate previously authorized, although we will assist with an appropriate request where practicable and legally required.

Submitting a Practitioner Network introduction allows us to store and review the information for potential network and project fit. It does not create employment, partnership, agency, membership, endorsement, or an engagement, and it does not make the applicant's information public or generally available to clients, candidates, or other practitioners. Before a specific project or public contribution, we address the relevant scope, permission, confidentiality, conflict, and data-handling terms separately.

Information we ask you not to send

At the profile or inquiry stage, do not submit Social Security numbers, government identification numbers, passport or immigration documents, financial or banking information, medical or disability information, dates of birth, photographs, genetic or biometric information, or information about protected characteristics. Candidates should remove this information from a résumé before uploading it.

Practitioner Network applicants should not identify clients or submit client-confidential or privileged communications, candidate or employee information, professional work product that cannot be shared, or documents containing sensitive information. The initial introduction does not request a résumé, license document, insurance certificate, or government record.

Work-authorization questions are limited to whether a candidate is currently authorized to work in the United States and whether employer sponsorship may be needed. We do not request proof of citizenship or immigration documents through the profile form.

Newsletter subscriptions

We use a subscriber's email address and recorded marketing consent to deliver Our Thinking and occasional firm updates. Newsletter consent is separate from submitting a company inquiry, candidate profile, or Practitioner Network introduction. We do not add an inquiry contact, candidate, or practitioner applicant to the newsletter without an affirmative subscription request. The network form's subscription choice is optional and unchecked by default.

A subscriber may unsubscribe at any time. We may retain a limited suppression record so that an address remains excluded from future marketing. Messages about a requested consultation, privacy request, or potential candidate opportunity are operational communications and are managed separately from newsletter preferences. The website does not currently deploy advertising pixels or collect newsletter-open activity through its pages.

Restricted administration and ChatGPT sign-in

Restricted administrative areas use Sign in with ChatGPT together with an administrator allowlist. After an authorized user approves sign-in, the site uses the ChatGPT user identifier, email address, and name, if available, to authenticate the user, apply access controls, display account information, and maintain security and audit records.

Sign in with ChatGPT does not by itself give this site access to a user's ChatGPT conversations, memory, files, tokens, billing information, or other account content. OpenAI separately processes information involved in the ChatGPT account and sign-in experience under the terms and notices applicable to its service.

Cookies and current tracking choices

The site currently uses only technologies needed for hosting, request delivery, security, and restricted administrator authentication. Our site code does not currently deploy analytics cookies, advertising pixels, or technologies for cross-site behavioral advertising. The hosting or sign-in layer may use strictly necessary session, security, or load-balancing technologies that we do not directly name or control.

If we later add optional analytics or marketing technology, we will update our disclosures and implement an appropriate choice mechanism before that technology runs. Our separate Cookie Noticeexplains the present categories and available controls.

When information is disclosed

Information may be processed by OpenAI and its subprocessors as needed to host, maintain, secure, and support ChatGPT Sites. We may also disclose limited information to service providers that support private file storage, communications, information technology, or professional advice, subject to appropriate purpose and confidentiality restrictions.

We disclose identifiable candidate materials to a prospective employer only after the candidate authorizes the specific introduction. Information may also be disclosed when reasonably necessary to comply with law, respond to a lawful request, protect rights or safety, investigate misuse, establish or defend a legal claim, or complete a legitimate business reorganization with appropriate safeguards.

Practitioner information is not published or made generally available to clients merely because an introduction was submitted. If a defined project, client introduction, or public contribution appears relevant, we limit any disclosure to that purpose and address the necessary permission, conflict, professional, confidentiality, and contractual requirements first.

We do not sell personal information for money and do not disclose it for cross-context behavioral advertising. A candidate-directed introduction to a prospective employer is a professional-services disclosure requested by the candidate, not an advertising disclosure.

International processing

The service is offered from the United States. Information may be processed in the United States and other locations where our service providers operate. We do not promise that hosting occurs in only one country. OpenAI's processing of information hosted through ChatGPT Sites is governed by the data-processing terms applicable to the site account, including transfer safeguards where required.

If a candidate authorizes an introduction to an employer or affiliate in another country, that recipient may process the authorized information there. We identify the intended employer before sending identifiable candidate materials.

How long we keep information

As a general working rule, a company inquiry that does not become an engagement, a candidate profile, and a Practitioner Network introduction that does not become an active relationship are retained for up to 24 months after the last meaningful interaction. We may invite a candidate or practitioner to update a record before that period expires. Records connected to an active network or client relationship, engagement, authorized introduction, legal obligation, dispute, fraud investigation, or documented legal hold may be kept longer where reasonably necessary.

An active newsletter record is kept until the subscriber unsubscribes or the address is no longer usable; a limited suppression record may remain so we honor the opt-out. Privacy-request and response records may be retained for 24 months where applicable. Technical and audit logs are kept according to documented operational, security, and hosting requirements and are not retained for advertising.

When information is no longer needed, we delete, de-identify, or securely dispose of it subject to operational deletion cycles, backup handling, and applicable law.

Security

We use administrative, technical, and organizational measures designed for the nature of the information and the risks involved. Current measures include encrypted transmission, private résumé storage, restricted administrator access, exact-email allowlisting, authentication, audit records, purpose limitation, and collection controls.

No internet transmission or storage system can promise absolute security. Please do not send the sensitive documents or information listed above. If you believe information has been submitted to us improperly or an account has been accessed without authorization, use the privacy request path promptly.

Your choices and privacy requests

Depending on applicable law, you may have rights to access, obtain a copy of, correct, or delete personal information; withdraw consent; object to or restrict certain processing; opt out of direct marketing; use an authorized agent; or appeal a response. Candidates may also ask to leave future opportunity matching. Practitioner applicants may ask us to stop future network consideration. We offer reasonable access, correction, and deletion requests regardless of location, subject to verification and lawful exceptions.

Submit a request through the privacy request form. We may verify a request using information already held, such as control of the submitted email address. Do not send identity documents, Social Security numbers, financial information, medical information, or immigration documents through the form. We do not retaliate against a candidate, contact, Practitioner Network applicant or participant, or subscriber for exercising an applicable privacy right.

California online privacy disclosures

We do not currently track visitors over time and across unrelated websites for targeted advertising, and we do not permit optional analytics or advertising scripts to do so through this site. Because we do not engage in that activity, a legacy browser “Do Not Track” signal does not change our current site practices. Other parties may process information when a visitor intentionally follows an external link or uses ChatGPT's separate sign-in service, subject to that party's notices.

We do not sell or share personal information for cross-context behavioral advertising. If a legally recognized opt-out preference signal, such as Global Privacy Control, applies to a future practice, we will process it as required. California residents may use the same privacy request form to ask about information, request access, correction, or deletion, and use an authorized agent where applicable. Additional statutory rights depend on whether the relevant law applies to the organization and processing at issue.

Children

This site and our services are intended for business contacts and working-age professionals. They are not directed to children, and we do not knowingly collect personal information from children under 13 or under a higher age of digital consent where applicable. If you believe a child has submitted information, make a privacy request so we can review and delete it as appropriate.

External links and social sharing

Articles and other pages may link to LinkedIn, X, Facebook, or another service. Viewing our page does not give us access to a visitor's social-media account. If a visitor chooses an external or sharing link, the receiving service may receive the destination URL, IP address, browser information, and other data under its own privacy notice. We do not load advertising pixels merely because a visitor views a social-sharing link.

Changes and how to contact us

We may update this notice when our services, vendors, legal requirements, or information practices change. The current version will show a new “Last updated” date. If a change materially expands how previously collected information will be used, we will provide additional notice and obtain consent where required rather than relying only on a silent update.

For a privacy question, concern, request, or complaint, use our privacy request form. Please select “Privacy / data request” and provide only the information needed for us to locate and respond to the relevant record.