Privacy Notice

Who are we?

In this notice, “We” or “Us” means Cripps Leadership Advisors Ltd. We provide executive search and advisory services to clients recruiting personnel for their businesses. Our services include executive coaching, hiring assessment using psychometric profiling, senior team facilitation, leadership development, succession planning, investment due diligence, board effectiveness appraisal, talent mapping and remuneration surveys.

What does this Privacy Notice cover?

This Privacy Notice explains our use of personal data processed through the website, if you choose to contact us, and our use of business contact details. It also explains how we use candidate personal data and the personal data of our clients. This Privacy Notice also describes the types of information we may collect from you when you visit or use our site or any components of our site, and when we communicate with you electronically, such as through our site, email, text message and other electronic messages between you and us.
This Privacy Notice is governed by our Terms and Conditions, which is found at https://www.cripps.global/terms-and-conditions/, incorporated herein by reference.

Who does this Privacy Notice apply to?

This Privacy Notice is addressed to individuals outside our organisation with whom we interact, including (but not limited to) Candidates, Participants, Suppliers and Visitors to our websites (together, “you”). This Privacy Notice also describes the choices you have regarding the information we collect, including how you can manage, update, or request to delete information.

For the avoidance of doubt, this Privacy Notice applies to all visitors to the website, including from the UK, the US, and the EU.

What personal data do we collect and why do we use it?

This document explains whose personal data we collect, what that personal data is and the purpose we process it for.

The last column sets out the ‘lawful basis’ we rely on for processing that personal data, which is a requirement of data protection rules. Essentially, companies may only process personal data if they can identify a lawful basis from a list set out in the legislation.

Where we have indicated in the table above that we rely on legitimate interests for processing of personal data, we often carry out a ‘balancing’ test to ensure that our processing is necessary and that your fundamental rights of privacy are not outweighed by our legitimate interests, before we go ahead with such processing.

Where we collect candidate information through publicly available sources as set out above, we may do this with the aid of software programs such as LinkedIn and Boardex. These programs are given parameters on the requirements of a role and search through publicly available sources to find such candidates. These programs are designed to only output information on candidates that meet the search criteria. The parameters of these programs are restricted to only searching for candidate information from public sites where there is a reasonable expectation that such information may be collected and further processed by job recruiters for the purpose of sourcing candidates for different job roles.

How long do we keep your personal data for?

We keep your information only for as long as is necessary for the relevant purpose. For example, if we have a contract with you, this will be for 6.5 years after expiry in order to assist us with any contractual claims. We use a number of criteria for determining the retention period including obligations under law, our need to defend or bring contractual claims within the statutory limitation period and consideration of the original purpose we collected it for.

Who do we share your personal data with?

Data may be shared in the following circumstances:

Where you are a candidate:

  • we share your personal data with the client who has a position to fill in order to determine with the client whether you are a good fit for an available position; most of our clients are organisations across the industrial, technology and digital sectors globally.
  • we may share your information with third party service providers, such as Hogan assessors, where you are engaged in a process that requires this.
  • we may also conduct checks in order to verify information you have provided and where we do this we share your information with Sterling/ADP Back Check or similar background checking companies. You will be asked to sign a consent form prior to the commencement of any background checking process.
    • With professional advisors;
    • In the event of a sale of the company or its assets;
    • With suppliers but only subject to robust contractual protections;
    • Other companies in our group;

What happens if you do not provide us with the information we request or ask that we stop processing your information?

If you do not provide the personal data necessary, we may not be able to respond to your query or consider your application or request or match you with available role opportunities or to provide the relevant services to you.

Do we make automated decisions concerning you?

We do not carry out this type of processing activity.

Do we transfer your data outside the UK and Europe?

We may sometimes transfer your personal data to countries outside the UK and European Economic Area, for example to our US entity for roles that are active with that entity, as well as if we are either using a supplier or working with a client based elsewhere. You can find the list of European member states by clicking on the following link: https://europa.eu/european-union/about-eu/countries/member-countries_en. The privacy laws in countries outside the UK and European Economic Area may be different from those in your home country.

What rights do you have in relation to the data we hold on you?

By law, you have a number of rights when it comes to your personal data. Further information and advice about your rights can be obtained from the data protection regulator in your country. In the UK this is the Information Commissioner.
We usually act on requests and provide information free of charge, but may charge a reasonable fee to cover our administrative costs of providing the information for:

  • baseless or excessive/repeated requests, or
  • further copies of the same information.

Alternatively, we may be entitled to refuse to act on the request in some circumstances.

Please consider your request responsibly before submitting it. We’ll respond as soon as we can. Generally, this will be within one month from when we receive your request but, if the request is going to take longer to deal with, we’ll come back to you and let you know.

Rights

1. The right to be informed

You have the right to be provided with clear, transparent and easily understandable information about how we use your information and your rights. This is why we’re providing you with the information in this Privacy Notice. If you have any additional questions, for example regarding transfers and locations of data or our legitimate interests basis, do please get in touch.

2. The right of access

You have the right to obtain access to your information (if we are processing it), and certain other information (similar to that provided in this Privacy Notice).
This is so you’re aware and can check that we’re using your information in accordance with data protection law.

3. The right to rectification

You are entitled to have your information corrected if its inaccurate or incomplete.

4. The right to erasure

This is also known as the right to be forgotten’ and, in simple terms, enables you to request the deletion or removal of your information where there is no compelling reason for us to keep using it. This is not a general right, there are exceptions.

5. The right to restrict processing 

You have rights to ‘block’ or suppress further use of your information. When processing is restricted, we can still store your information, but may not use it further. We keep lists of people who have asked for further use of their information to be ‘blocked’ to make sure the restriction is respected in future.

6. The right to data portability

You have rights to obtain and reuse your personal data for your own purposes across different services. This is not a normal scenario for companies of our nature but if you have any questions you can contact us.

7. The right to object to processing

You have the right to object to certain types of processing, including processing for direct marketing or where we are relying on our legitimate interests for processing (e.g. if you no longer want to be contacted with potential role opportunities.

8. The right to lodge a complaint

You have the right to lodge a complaint about the way we handle or process your personal data with your national data protection regulator.

9. The right to withdraw consent

If you have given your consent to anything we do with your personal data, you have the right to withdraw your consent at any time (although if you do so, it does not mean that anything we have done with your personal data with your consent up to that point is unlawful). This includes your right to withdraw consent to us using your personal data for marketing purposes.

Updating this Privacy Notice

This Privacy Notice may be updated periodically to reflect changes in personal data protection legislation and best practices. When we make changes to this Privacy Notice, we will change the “last updated” date above and will notify you of any significant changes to this Privacy Notice.

How can you contact us?

If you are unhappy with how we’ve handled your information or have further questions on the processing of your personal data, please contact us by email at [email protected] or by post at Cripps Leadership Advisors Ltd, 7 Cavendish Place, London, W1G 0QB, UK.