Privacy Policy
This Privacy Policy explains how we collect, use, share, and protect personal information when you visit touchstone.business, book a consultation, email us, or otherwise interact with our services.
1. Who we are
Touchstone provides HR outsourcing and related support for multi-unit restaurant operators. Our public website and booking experience are operated for Touchstone Workforce Solutions. Business contact: [email protected].
2. Information we collect
Information you provide
- Name, email address, phone number, company/restaurant group, number of locations
- Preferred meeting times, meeting type (phone or video), and notes you include when booking
- Messages you send to [email protected], [email protected], or other Touchstone addresses
- Job application materials (resume, cover note) if you apply
Information collected automatically
- Device and browser type, IP address, approximate location, pages viewed, referring URL, and timestamps
- Basic security and performance logs from our hosting/CDN provider
Calendar and communications metadata
- When you book, we create a calendar hold on our operations calendar and store booking details needed to confirm and hold the meeting
We do not intentionally collect sensitive categories of data (e.g., SSN, health data, payment card numbers) through the public website. Please don’t send sensitive employee records through the public booking form.
3. How we use information
- Respond to inquiries and schedule consultations
- Provide, operate, and improve our HR outsourcing services
- Evaluate career applications
- Maintain security, prevent abuse, diagnose issues, and understand aggregate site usage
- Comply with law and enforce our terms
We do not use your information to train public AI models for unrelated third parties.
4. How we share information
We do not sell personal information. We may share information with:
- Service providers that help us operate (website hosting/CDN, email delivery, calendar infrastructure, domain/DNS). These providers process data on our behalf under contractual or policy obligations.
- Professional advisors (legal, accounting) when needed
- Authorities when required by law, court order, or to protect rights and safety
- Business transfers if we merge, sell, or reorganize (your information may transfer as part of that transaction)
Current infrastructure typically includes Cloudflare (hosting/CDN/security) and Fastmail (email/calendar). Providers may change as we improve our stack.
5. Cookies and similar technologies
Our site is primarily static marketing content. We and our hosting provider may use essential cookies or similar technologies for security, load balancing, and basic operation. We do not run third-party advertising trackers on the public site at this time. If that changes, we will update this policy.
6. Data retention
We keep personal information only as long as needed for the purposes above—typically for the life of an inquiry or client relationship and a reasonable period afterward for records, legal, and security needs—then delete or de-identify it when no longer required, unless law requires longer retention.
7. Security
We use reasonable administrative, technical, and organizational measures appropriate to our size and the nature of data we handle (including HTTPS and access-limited systems). No method of transmission or storage is 100% secure.
8. Your choices and rights
Depending on where you live, you may have rights to access, correct, delete, or obtain a copy of personal information, or to object to certain processing. To exercise a request, email [email protected] with the subject “Privacy Request.” We may need to verify your identity. You may also unsubscribe from non-essential marketing emails using the link in those messages (service/transactional messages may still be sent).
9. Children’s privacy
Our site and services are directed to business operators and adults. We do not knowingly collect personal information from children under 13 (or under 16 where applicable). If you believe a child provided information, contact us and we will delete it.
10. International visitors
We primarily serve U.S. restaurant operators. If you access the site from outside the United States, you understand information may be processed in the U.S. and other countries where our providers operate.
11. Client workplace data
If you become a client, employee or applicant data you entrust to us under a services agreement is handled under that agreement and applicable employment/privacy laws. This website Privacy Policy covers the public site and pre-engagement communications; client agreements control operational HR data processing.
12. Changes
We may update this policy from time to time. The “Last updated” date will change when we do. Continued use of the site after updates means you acknowledge the revised policy.
13. Contact
Questions about privacy:
Email: [email protected]
Web: https://touchstone.business