Privacy Policy

 

1. Who are we?

We are Princedale Partners Ltd, a UK-based executive search firm providing retained recruitment and advisory services for permanent, interim, and non-executive leadership roles.
Our registered office is  5 Beauchamp Ct, Victors Way, London EN5 5TZ.
You can contact us regarding this policy at letsspeak@princedale.co

2. Purpose of This Policy

This Privacy Policy explains how we collect, use, and protect personal data in the course of our recruitment and client services.
It covers:

• Visitors to our website
• Candidates and potential candidates
• Clients and potential clients
• Referees, suppliers, and business contacts

It also describes your rights under the UK General Data Protection Regulation (GDPR) and the Data Protection Act 2018.

3. What Personal Data We Collect and Why

Individual	Personal Data	Purpose & Source	Lawful Basis
Candidates	CVs, identification documents, educational and employment history, references, and any correspondence. Rarely, we may process special category data (e.g. ethnicity, health, or trade union data) if you voluntarily share it.	We collect this directly from you or from third parties (referrers, LinkedIn, or public websites). Used to assess suitability for roles, maintain contact about opportunities, and provide career advice.	Legitimate Interest (recruitment and placement activity). Consent only where special category data is shared.
Referees	Name, contact details, and reference information.	Provided by candidates or directly by you to verify employment history. Collected from you directly, from recommendations, or public sources.	Legitimate Interest (recruitment process).
Clients & Potential Clients	Name, contact details, job title, business name, and correspondence.	Used to provide recruitment services, maintain business relationships, and send relevant industry updates.	Legitimate Interest (client relationship management). Contractual necessity where applicable.
Suppliers & Contractors	Name, contact details, correspondence, and contractual information.	Provided directly by you or through public records.	Contractual Necessity and Legitimate Interest.
Website Visitors	P address, cookie identifiers, and browsing behaviour (see our Cookie Notice).	Collected automatically via cookies and analytics tools.	Consent for non-essential cookies; Legitimate Interest for essential site operation.
General Enquiries	Name, contact details, and correspondence.	Provided directly via our website or email.	Legitimate Interest (responding to queries)

We do not use automated decision-making or profiling.

4. Lawful Basis: Legitimate Interest

We rely on legitimate interest for most of our processing activities, particularly where data relates to professional information publicly available or voluntarily shared for recruitment and business purposes.
We conduct Legitimate Interest Assessments (LIAs) to ensure our processing does not override your fundamental rights. These assessments are available upon request.

5. Marketing & Insights

We may occasionally send industry insights, case studies, and invitations to events relevant to your professional interests.
You may opt out at any time by emailing letsspeak@princedale.co or clicking the unsubscribe link in our communications.

6. Data Retention

We keep personal data only as long as necessary for the purpose collected.
Typical retention periods:

• Candidate and client data: up to 3 years from last meaningful contact (reviewed annually).
• Contractual data: 6.5 years post-contract (for legal purposes).
• Suppression/“Do not contact” lists: retained indefinitely to ensure we respect opt-out requests.

We periodically review and securely delete data no longer needed.

7. Data Sharing

We share data only as necessary:

• With clients to discuss or assess a candidate’s suitability for a role.
• With referees and professional advisors (e.g. background check providers).
• With trusted suppliers (e.g. Ezekia our database) under GDPR-compliant contracts.
• In the event of a company sale, merger, or reorganisation.

We do not sell personal data to third parties.

8. International Data Transfers

If we transfer your data outside the UK or EEA, we ensure appropriate safeguards are in place — such as the EU Standard Contractual Clauses and UK Addendum approved by the Information Commissioner’s Office (ICO).

Details of these safeguards are available on request.

9. Your Rights

You have the following rights regarding your personal data:

1. Right to be informed – to understand how your data is used.
2. Right of access – to request a copy of your data.
3. Right to rectification – to correct inaccurate data.
4. Right to erasure (“right to be forgotten”) – to request deletion when no longer needed.
5. Right to restrict processing – to limit how your data is used.
6. Right to data portability – to move your data to another provider.
7. Right to object – to stop processing, especially for direct marketing or legitimate interest.
8. Right to lodge a complaint – with the ICO (www.ico.org.uk).
9. Right to withdraw consent – at any time, if consent was the lawful basis.

We aim to respond to all requests within one month.

10. Security

We implement technical and organisational measures to protect personal data from unauthorised access, alteration, or loss. Access is restricted to authorised personnel only.

11. Contact Us

For questions, data access, or to exercise your rights, please contact:
Email: letsspeak@princedale.co    
Address:  5 Beauchamp Ct, Victors Way, London EN5 5TZ.

If you are dissatisfied, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at www.ico.org.uk.

12. Updates to This Policy

We may update this policy periodically to reflect changes in law or practice.
The latest version will always be available on our website.