Legal
Privacy policy
Last updated: 1 August 2026. We handle personal data carefully, especially candidate and client information entrusted to an executive search business.
Who we are
Thornton Pierce Executive Search (“Thornton Pierce”, “we”, “us”) is a specialist executive search firm. For the purposes of UK data protection law, we are the controller of personal data described in this policy. Contact: samyan@thornton-pierce.co.uk.
What data we collect
Depending on how you interact with us, we may process:
- Candidates: identity and contact details, CV and career history, preferences, interview notes, right-to-work information where relevant, and communications with us.
- Clients / hiring contacts: name, role, work contact details, organisation, hiring requirements and communications.
- Website visitors: technical data such as IP address, browser type and pages visited (via essential cookies and, with consent, analytics).
How we use your data
- To provide executive search services and match candidates with roles
- To communicate about opportunities, briefs and applications
- To improve our website and services
- To meet legal and regulatory obligations
We rely on one or more lawful bases under UK GDPR, typically: performance of a contract or steps prior to a contract; legitimate interests (operating an executive search business in a fair and proportionate way); consent (for example optional marketing or non-essential cookies); and legal obligation where applicable.
Sharing your data
We never share candidate details with a client without the candidate's consent for that introduction. We may use trusted processors (for example email, hosting or CRM providers) under appropriate contracts. We do not sell personal data.
How long we keep data
We retain personal data only as long as needed for the purposes above, including reasonable periods for ongoing search relationships and legal claims. You can ask us to delete or restrict processing where the law allows.
Your rights
You may have rights to access, rectify, erase, restrict, object to processing, and data portability. You may also complain to the Information Commissioner's Office (ICO). To exercise rights, email samyan@thornton-pierce.co.uk.
Security
We apply appropriate technical and organisational measures to protect personal data against unauthorised access, loss or misuse. No method of transmission over the internet is completely secure; we work to minimise risk.
International transfers
If we transfer personal data outside the UK, we ensure appropriate safeguards are in place as required by UK data protection law.
Updates
We may update this policy from time to time. The “last updated” date at the top will change when we do. Material changes will be highlighted on the site where appropriate.
This page is a practical launch template and should be reviewed by your legal adviser before go-live, then tailored to your entity details, processors and retention schedules.