LEGAL & PRIVACY
Privacy Policy
Last Updated: September 2026
This Privacy Policy explains how Springleaf Search (“we”, “us”, “our”) collects, uses, stores, and protects personal data when you use our website or interact with our executive search, talent advisory, and lateral recruitment services. We are committed to respecting your privacy and handling all personal information in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 (DPA 2018), and the Privacy and Electronic Communications Regulations (PECR).
1. Data Controller Information
For the purposes of applicable data protection law, the data controller responsible for your personal data is Springleaf Search Limited. Company Registration Number: 7327547. Registered Office: Unit 209b, Lansbury Estate, 102 Lower Guildford Road, Knaphill, Woking, GU21 2EP. Registered with the UK Information Commissioner’s Office (ICO), reference ZA840950. Data Privacy Contact: info@springleafsearch.com. Direct Telephone: +44 203 475 4480.
2. The Categories of Personal Data We Collect
For prospective and active candidates and lawyers, we may process identity and contact details, professional and career history, CVs and résumés, qualifications, practice area specialisms, search and placement details, and agreed third-party references. For law firm clients, corporate contacts, and suppliers, we may process contact details, firm names, mandate criteria, billing information, communications, and contract records. For website visitors, we may process IP addresses, browser types, operating systems, and anonymous usage statistics collected via functional cookies.
3. How We Collect Personal Data
We collect personal information directly from you when you submit an enquiry, email us, message us through professional platforms, or speak with our consultants; through publicly accessible professional sources such as law firm partner directories, Chambers and Partners, Legal 500, LinkedIn, published articles, and speaking panels; and through professional referrals and recommendations.
4. Lawful Bases for Processing Under UK GDPR
We process personal data under Article 6 of the UK GDPR. Market mapping and identifying potential candidates are based on our legitimate interests. Candidate representation and the submission of identifiable profiles to hiring firms are based on explicit informed consent. Client relationships and search mandates are processed for contractual necessity and legitimate interests. Regulatory, tax, and corporate record-keeping is processed to meet legal obligations.
5. Confidentiality and Sharing of Personal Data
Discretion is central to our business. We do not sell or rent personal information to third parties. We will never disclose an active candidate’s identifiable résumé, profile, or identity to a prospective hiring firm without first discussing the opportunity with the candidate and receiving clear consent. Data may be disclosed to trusted service providers operating under strict data processing agreements, or to legal and regulatory authorities where required by law.
6. International Data Transfers
We represent clients and candidates across international legal jurisdictions. Transfers between the UK and Andorra are protected under UK and European Commission Adequacy Decisions. For transfers outside the UK or EEA without an adequacy decision, we ensure equivalent safeguards are in place using UK International Data Transfer Agreements or standard contractual clauses.
7. Data Retention
Executive candidate profile records are typically retained for up to five years from the date of last meaningful contact, unless you request erasure earlier. Client and financial records, including statutory invoices, placement contracts, and accounting documentation, are retained for six years following the end of the financial year in accordance with UK statutory accounting and tax regulations.
8. Your Data Protection Rights Under UK Law
You have the right to be informed, to access your personal data, to correct inaccurate or incomplete details, to request erasure, to restrict processing, to object to processing including direct marketing, and to withdraw consent where processing is consent-based. To exercise your rights, please contact info@springleafsearch.com. We respond to verified requests within one calendar month free of charge.
9. Right to Lodge a Complaint with the ICO
If you have concerns about how we handle your personal data, we encourage you to contact us first. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO): ico.org.uk, helpline +44 303 123 1113, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, United Kingdom.
10. Updates to This Policy
We may update this Privacy Policy from time to time to reflect changes in our operational practices or legal requirements. The updated version will be indicated by the “Last Updated” date at the top of this page.