Legal

Privacy policy

This policy explains what we collect when you ask for a case review, why we collect it, who we pass it to, and what you can ask us to do with it. It is written to be read, not to be scrolled past.

The short version

We collect what you type into the case review form, plus the technical details of the submission itself.
We pass it to one or more independent attorneys or law firms who may be able to help you. That is the entire point of the form, and it is what your consent covers.
Attorneys pay us for that. We never pass your details to unrelated advertisers, data brokers or list buyers, and you can tell us to stop at any time.
You can ask us to delete everything we hold about you at any time, by emailing contact@employmentguardians.com.

Who is responsible for your data

Employment Guardians is the controller of the personal data described here. Our publisher details, including the registered company behind the brand, are on the Publisher in our terms. You can reach us about anything in this policy at contact@employmentguardians.com.

The company behind Employment Guardians is established in France, so the EU General Data Protection Regulation applies to our processing wherever in the world the people concerned are located. If you are a United States resident, your state may give you additional rights, which are set out below.

What we collect

What you tell us

Your first and last name, phone number, email address and ZIP code, and your answers to the questions the form asks about the job: roughly when you were let go, what kind of employer it was and how many people work there, whether you were paid as an employee or a contractor, and how long you were there. We work out the state from your ZIP code.

The form has no free text box and does not ask you to describe what happened. That is deliberate: the account of it belongs in the conversation with an attorney rather than in our database.

Please do not send us medical records, social security numbers, bank details or copies of documents. The form does not ask for them and we do not need them. If an attorney needs documents they will ask you directly, through a channel they control.

What the submission tells us

The time you submitted, the page you submitted from, the referring website, any campaign parameters in the link you arrived by, your IP address and your browser’s user agent. The last two are kept as evidence of the consent you gave, because a record of consent that cannot be tied to a submission is not a record of anything.

The record of your consent, kept by someone other than us

The case review page runs a script from TrustedForm, a service operated by ActiveProspect, Inc. While you are filling the form in it records the page as it appeared on your screen, the exact consent wording you were shown, the technical details of your device and browser, and the timing of your interactions with the form.

It is configured to withhold the contents of the form by default. The only answers it is allowed to read are your first and last name, your phone number, your email address and your ZIP code, so that an attorney who receives your details can check they match the certificate. Everything you told us about your job and what happened there is withheld from it and stays in our own database.

From that it issues a certificate, held on ActiveProspect’s own servers, and gives us a link to it which we store alongside your submission. The reason it exists is that every other record of your consent on this page is written by us, and we are the party it would be protecting. A certificate written by an independent third party is the only way we, or an attorney who receives your details, can show later what you were actually shown and what you actually agreed to. Attorneys who buy case reviews increasingly require one.

If you block scripts, the certificate is simply not created. Your submission goes through exactly as it would otherwise.

Why we process it, and on what basis

To connect you with an attorney. Basis: your consent, given by ticking the box on the form.
To contact you about your submission, including to check a detail or to tell you nobody is able to take it on. Basis: your consent.
To keep a record of that consent, so we can show what you agreed to and when. This includes the independent certificate described above. Basis: our legal obligation and our legitimate interest in defending a claim.
To detect spam and abuse of the form. Basis: our legitimate interest in keeping the service working.
To measure which campaigns work. Basis: our legitimate interest in running the business. This uses the campaign parameters, not the content of your claim.
To meet our legal, accounting and tax obligations. Basis: legal obligation.

Who we share it with

Independent attorneys and law firms. This is the purpose of the form. Your details go to one or more attorneys or firms who practice employment law in the state you worked in and who handle the kind of claim you described. They are independent businesses and separate controllers of your data once they receive it: how they store it, how long they keep it and how they contact you is governed by their own privacy policy, not ours. We do not control whether any of them decides to contact you or take your case. They also receive the link to your consent certificate, which is the point of it: it is how they satisfy themselves that you asked to be contacted, before they call you.

Our service providers. The five companies below process your data on our instructions, under a written agreement, and are not permitted to use it for anything else.

Vercel Inc.: Website hosting and server logs. United States. 440 N Barranca Avenue #4133, Covina, CA 91723.
Supabase Inc.: Database storage for everything you enter on the form. United States. Data is stored in the AWS US East (North Virginia) region.
ActiveProspect, Inc.: TrustedForm, the independent record of your consent described above. United States, 7000 N MoPac Expressway, Austin, TX 78731. It receives the page as it appeared to you, the consent wording you were shown, your device and browser details and your name, phone number, email address and ZIP code. It does not receive what you told us about your job.
PostHog, Inc.: Website analytics and session recording, described under Cookies and tracking. United States. Data is stored in PostHog’s United States cloud region. It receives nothing you enter on the form and nothing about your job.
Telegram: An alert telling us a submission has arrived, so somebody can act on it quickly. Telegram FZ-LLC, Dubai, United Arab Emirates. The alert is a copy of the submission rather than a summary of it, because if our database is unreachable it is the only copy that exists and we have to be able to reconstruct the record from it. It therefore carries your name, phone number, email address and ZIP code, your answers about the job, the links to your consent certificate, the campaign your visit came from, and the IP address and browser recorded as consent evidence.

Meta, for advertising measurement. Meta is not a service provider of the kind above. Through the advertising pixel described under Cookies and tracking, Meta Platforms Ireland Limited (Merrion Road, Dublin 4, D04 X2K5, Ireland) decides for itself part of what happens to the data it receives, so we and Meta are jointly responsible for collecting it and passing it on, and Meta’s own terms govern what it does with the data afterwards. Meta never receives your answers or anything about your job.

Nobody else. We do not sell or rent your personal information to data brokers, list buyers or unrelated advertisers, and we do not use what you told us about your employment situation to target you with advertising for anything else.

Where required by law, including to respond to a lawful request from a court, a regulator or a law enforcement authority.

International transfers

We are established in France and the attorneys we work with are in the United States, so your data is transferred outside the European Economic Area. So are the services we use to run the site: what you submit is stored by Supabase in the United States, the site itself is hosted by Vercel in the United States, the record of your consent is held by ActiveProspect in the United States, analytics records and session recordings are held by PostHog in the United States, and the alert that tells us you have been in touch is delivered by Telegram in the United Arab Emirates. Data collected by the Meta pixel is received by Meta Platforms Ireland Limited and transferred by Meta to its parent in the United States under the EU-US Data Privacy Framework, to which Meta is certified. Your data therefore leaves the EEA from the moment you press the button, before any attorney has seen it. In ActiveProspect’s case it leaves before that, because the certificate is created while you are still filling the form in.

Where that transfer involves personal data protected by the GDPR, we rely on the European Commission’s standard contractual clauses or on your explicit consent to the transfer, given when you submit the form knowing it is going to a United States attorney, and we check what safeguards are in place before transferring. The United Arab Emirates has no adequacy decision from the European Commission, which is why the Telegram alert is kept to the contact details and the shape of your claim and never carries your description of what happened.

How long we keep it

Submissions: up to three years from the date you submitted, which is roughly the period during which an employment claim may still be live and an attorney may need to come back to it. Then deleted.
Consent records: five years, because that is longer than the period in which a claim about the contact you received could be brought against us. This includes the certificate held by ActiveProspect, which we retain for the same period. A certificate we do not retain is deleted by ActiveProspect, after 90 days where the form was submitted and after three days where it was not.
Suppression lists: indefinitely. If you ask us never to contact you again, we have to keep enough of your details to honour that. See our do not call policy below.
Analytics: records of how this site is used are kept for up to 12 months. Session recordings are deleted automatically after 30 days.

Your rights

Wherever you are, you can ask us to give you a copy of what we hold, correct it, delete it, or stop using it. Email contact@employmentguardians.com and we will respond within one month. We will not charge you and we will not treat you differently for asking.

If the GDPR applies to you, you also have the right to object to processing based on legitimate interests, the right to data portability, the right to withdraw consent at any time without affecting what we did before you withdrew it, and the right to complain to a supervisory authority. In France that is the CNIL.

If you are a United States resident, your state may give you the right to know what is collected, to delete it, to correct it, to opt out of sale or sharing and of targeted advertising, and not to be discriminated against for exercising any of them.

About “sale”. Attorneys pay us when we pass them a submission. California and several other states define a sale broadly enough that this may count as one, even though we are doing exactly what you asked us to do and only what the form said we would. We would rather say that plainly than rely on a technicality. You can opt out at any time. Before you submit, opting out means not submitting. Afterwards, email us and we will stop passing your details on and tell you who already has them. We never disclose your information for cross-context behavioral advertising, and we do not knowingly sell or share the personal information of anyone under 16.

Once an attorney has your details they are a separate controller, so a deletion request to us does not reach their copy. We will tell you who we passed it to so you can ask them directly.

How we protect it

Submissions are transmitted over TLS and stored in a database that is not reachable from the public internet with the keys the website uses. Access is limited to the people who need it to run the service. No system is perfect, and we will tell you and the relevant authority without undue delay if a breach affects your data.

Cookies and tracking

Meta advertising pixel

This site carries the Meta advertising pixel on every page. It places two cookies in your browser: _fbp, which identifies your browser to Meta, and, if you arrived from a Meta advertisement, _fbc, which identifies the advertisement you clicked. It reports to Meta which page of this site you viewed. Together these let us measure which of our advertising leads to case reviews.

When you submit the case review form, we also send a record of that submission to Meta from our own server. That record carries the two identifiers above, your network address and browser description, and an irreversibly hashed copy of your name, email address, telephone number, ZIP code and state. Meta uses the hashes to recognise a submission it has already shown an advertisement to. The contact details themselves are not sent in a readable form.

Nothing about your job goes to Meta. Not your answers, not your employer, and not how or why you lost your job. We do not build advertising audiences out of it.

Our lawful basis for the pixel is our legitimate interest in measuring and improving our own advertising. You can object at any time by writing to us, and you can stop it yourself by blocking third party cookies or scripts in your browser, or through the advertising controls in your Meta account.

Analytics and session recording

Every page carries PostHog, which we use to see how people move through this site and where they give up on it. It stores one cookie in your browser, with a name beginning ph_ and ending _posthog, holding randomly generated identifiers for your browser and your current visit. The same values are kept in your browser’s local storage so that they survive between visits.

PostHog records which pages you open and in what order, the clicks you make outside the case review form, the page you arrived from and any campaign parameters in the link you followed, and your browser, operating system and screen size. Your network address is used to derive an approximate location, no more precise than a city. We do not attach your name or any other contact detail to what PostHog records, and we do not keep a profile of you there.

We also record sessions: a replay of this site as it appeared on your screen, rebuilt from the page and from your mouse movement, taps and scrolling.

The case review form is left out of both. In a recording the form, and the message you see when it ends, appear as a blank box. Clicks inside it are not recorded, and anything typed anywhere on the site is masked before it leaves your browser. What PostHog learns about the form is which question you reached and, if you send it, that it was sent. It never learns your answers or how the form ended for you.

The requests PostHog makes go through this site’s own domain rather than PostHog’s, so an extension that blocks analytics by hostname will not recognise them. Blocking third party scripts or cookies in your browser still stops them. Our lawful basis is our legitimate interest in understanding and improving how this site works, and you can object at any time by writing to us.

Everything else

We do not run Google Analytics or any analytics besides PostHog. Fonts are served from the site’s own domain.

Where a campaign link carries parameters such as utm_source or a click identifier, we read them from the URL and store them with your submission so we know which campaign it came from.

Besides the Meta pixel and PostHog, one third party script runs on this site, and only on the case review page: the TrustedForm script described above. It is there to document your consent, not to profile you. It records the session whether or not you go on to submit the form, but if you do not submit, nothing about that session ever reaches us and ActiveProspect deletes it after three days. If you have scripts blocked it does not run at all.

Do not call policy

Employment Guardians maintains an internal do not call list. If you ask us to stop contacting you, we add you to it and we keep you on it permanently. You do not have to give a reason and you do not have to have submitted a form to ask.

How to stop hearing from us

Text messages: reply STOP to any message. That stops messages to that number immediately.
Email: use the unsubscribe link in any email, or write to contact@employmentguardians.com.
Calls: tell the caller you want to be put on the do not call list, or email contact@employmentguardians.com with the phone number you want suppressed.
Everything at once: email us and say so. Include the phone number and email address you want removed, so we can match them to your record.

A request takes effect as soon as we process it and within 10 business days at the latest. You do not have to give a reason and you do not have to have submitted a form to ask.

What we keep, and why

Honouring a do not call request means being able to recognize you next time, so we keep your phone number and email address on a suppression list indefinitely. That record exists only to stop contact. It is not used for anything else and it is not shared for marketing.

If you also want the rest of your submission deleted, ask for that separately and we will do both.

Attorneys who already have your details

If you submitted the case review form, your details went to one or more independent attorneys or law firms, as the form said they would. They are separate businesses with their own contact practices and their own do not call obligations. Our suppression list does not reach them. Ask the attorney directly, and if you tell us who contacted you we will pass the request on and tell you who we sent it to.

How we call in the first place

We contact people who asked us to, by ticking the consent box on the form, and people who have an existing enquiry with us. We do not buy calling lists. We identify ourselves and the purpose of the call at the start, we call between 8am and 9pm in your local time, and we honour a request made to anyone on our side.

The national registry

You can also register your number with the United States National Do Not Call Registry at donotcall.gov or by calling 1-888-382-1222 from the number you want registered. Note that consent you have given to a specific company overrides that registry for that company, which is why asking us directly is the faster route.

If we get it wrong

Tell us. Email contact@employmentguardians.com with the number, the date and roughly the time, and we will trace it, stop it, and tell you what happened.

Children and changes to this policy

The service is for adults. We do not knowingly collect personal data from anyone under 16; if you believe a child has submitted the form, email us and we will delete it.

If we change this policy we will update the date below. Material changes to how we share your data will not be applied retroactively to submissions made under an earlier version.

Last updated: 25 October 2026