01Who we are
Enticeable Search is a trading name of Enticeable Consulting Ltd, registered in England and Wales under company number 16173621, with its registered office at Hosehill Farm, Sulhamstead, Reading, England, RG7 4BB.
For the purposes of UK data protection law we are the data controller for the personal data described in this policy. That means we decide what is collected and why, and we are accountable for it.
[PH] ICO registration number. Required, and it belongs here.
Questions about this policy, or about data we hold on you, go to hello@enticeablesearch.com.
02The short version
We are a small executive search firm. We hold three kinds of personal data: details of people at client companies, details of candidates, and basic analytics about people who visit this website.
- We do not sell personal data to anyone, ever.
- We do not add people to marketing lists because they made an enquiry.
- [PH] We do not send a candidate's details to a client until the candidate has agreed - confirm this is true before publishing it.
- You can ask us what we hold, and ask us to delete it.
The rest of this page is the detail behind those statements.
03What we collect
If you are a client or enquirer
Name, job title, employer, work email address, phone number, and whatever you tell us about the role you are hiring for. If you send a brief, that document and its contents.
If you are a candidate
Name, contact details, current and previous employers, job titles, responsibilities, career history, remuneration expectations, notice period, location and mobility, and any CV or supporting material you send us. Where you give them, referee names and contact details.
We may also record notes from our conversations with you - our assessment against a mandate, what you told us you are looking for, and what you asked us not to pass on.
If you visit this website
Information your browser sends - IP address, device and browser type, pages viewed, and how you arrived. This is used in aggregate to understand whether the site is working, not to identify you.
04Where candidate data comes from
This is the part most people want to understand, so it is worth being direct about it.
Executive search works by approaching people who are not applying for anything. That means we frequently hold data on candidates who did not give it to us. We build it from professional sources - LinkedIn and comparable professional networks, company websites, published announcements, industry press, and referrals from people in our network.
Where we obtain your data this way rather than from you directly, we will tell you what we hold and why at the point we first contact you, and in any event within one month of collecting it. If you would rather we held nothing, say so and we will delete it.
05Why we use it, and our lawful basis
| What for | Lawful basis |
|---|
| Responding to an enquiry about a search | Legitimate interests, and steps prior to a contract |
| Running a search and assessing candidates against a mandate | Legitimate interests |
| Approaching candidates about a specific role | Legitimate interests |
| Sending a candidate's details to a client | Consent |
| Keeping records of placements and fees | Legal obligation, and contract |
| Website analytics | Consent, via the cookie banner |
Where we rely on legitimate interests, the interest is running a search business and matching senior people to roles. We have weighed that against your rights, and we think a professional approach about a relevant senior role is something most people in these markets expect. If you disagree in your case, you can object - see section 08.
06Who we share it with
Clients. Candidate details are shared with the client running the search. [PH confirm] We do this only once you have agreed to be put forward for that specific role.
Suppliers who process data on our behalf. Systems we use to run the business - email, CRM, file storage, website hosting and analytics. They act on our instructions and cannot use your data for their own purposes.
[PH] List the actual processors here by name and function. Vague wording is not compliant, and clients running vendor due diligence will ask for the list anyway.
Professional advisers and authorities. Accountants, insurers, and lawyers where necessary, or anyone we are legally required to disclose to.
We do not sell personal data, and we do not share it for anyone else's marketing.
[PH] Confirm whether any of the above stores data outside the UK or EEA. If so, that needs stating here with the safeguard relied on.
07How long we keep it
We keep personal data for as long as there is a reason to, and no longer.
[PH] Confirm each of these, then delete this note:
- Candidate records, where no placement was made
- Candidate records, following a placement
- Client and enquiry records
- Records needed for tax and accounting (normally six years)
- Enquiries that went nowhere
Whatever the periods are, they need to be real. A retention schedule you do not follow is a worse position than one you never wrote down.
08Your rights
Under UK data protection law you can ask us to:
- Tell you what we hold and give you a copy of it
- Correct it if it is wrong or out of date
- Delete it, where we have no overriding reason to keep it
- Stop or limit how we use it, including objecting to our legitimate interests
- Withdraw consent where consent is what we relied on
- Receive it in a portable format, where that applies
Email hello@enticeablesearch.com and we will respond within one month. There is no charge. We may ask you to confirm who you are first, which is a protection for you rather than an obstacle.
09Cookies and analytics
This site uses cookies that are necessary for it to function, and - if you agree via the banner - analytics cookies that tell us which pages are read and how people arrive.
You can decline analytics cookies and the site will work exactly the same. You can also change your mind at any time through the cookie settings.
[PH] Name the analytics and tracking tools actually running on this domain, and confirm one consent manager is installed rather than two. Two consent tools running simultaneously will break the consent signal and leave analytics collecting data it has no basis for.
10Security
We take reasonable measures to protect personal data against loss, misuse and unauthorised access - access controls on the systems we use, encryption in transit, and limiting who can see candidate material to those who need to.
No system is completely secure. If a breach occurs that is likely to risk your rights, we will tell you and the Information Commissioner's Office as the law requires.
11Complaints
If you are unhappy with how we have handled your data, tell us first at hello@enticeablesearch.com - most things are quicker to fix directly.
You also have the right to complain to the Information Commissioner's Office, the UK supervisory authority, at ico.org.uk or on 0303 123 1113.
12Changes to this policy
We update this policy when what we do changes. Where a change materially affects how we use data we already hold, we will tell the people affected rather than relying on them to re-read the page.
