Privacy Policy

This policy applies to personal information Thalvern Advisory processes about visitors to this website, representatives of client and prospective client organizations, executives who contact us or are researched as part of a search, referees, and subscribers to the Thalvern Leadership Brief.

Executives being considered for, or approached in connection with, a leadership mandate should also read our Candidate Privacy Notice, which describes candidate information in greater detail.

We collect the following categories of personal information:

Information you provide directly — name, email address, telephone number, organization, job title, and the content of enquiry, consultation request, executive profile, and newsletter forms on this site, including any document you choose to upload.

Information gathered through search research — professional history, current and previous roles, employer, functional and sector experience, publicly stated achievements, board service, and professional contact details, sourced from public and professional sources such as company websites, regulatory filings, professional networks, published directories, industry press, and referrals.

Information generated during an engagement — interview and assessment notes, references obtained with your consent, compensation expectations you disclose, and correspondence.

Technical information — IP address, browser type, device type, pages visited, and referring page, collected when you use this website.

We use personal information to respond to enquiries; to define, research, and deliver executive search, talent intelligence, and leadership advisory engagements; to assess executives against an agreed mandate and present shortlists to clients with the individual’s permission; to prepare market, compensation, and benchmarking analysis for clients; to maintain our records of relationships and mandates; to send the Thalvern Leadership Brief where you have subscribed; and to meet legal, regulatory, and professional obligations.

We do not use personal information for automated decision-making that produces legal or similarly significant effects, and we do not sell personal information.

Where data protection law requires a legal basis, we rely on: our legitimate interests in operating an executive search and advisory practice, researching leadership markets, and contacting senior professionals about relevant opportunities, balanced against the individual’s rights; performance of a contract with a client organization or steps taken at its request; consent, which we obtain before presenting an executive to a client, before approaching referees, and before sending marketing communications; and compliance with legal obligations.

You may withdraw consent at any time without affecting processing already carried out.

Candidate information is never published or sold. Information about an executive is shared with a client organization only with that individual’s explicit permission.

We share information with a limited number of service providers who process it on our instructions under written agreements: email and communications providers, secure document and file storage providers, website hosting and analytics providers, and professional advisers such as legal and accounting counsel. We may also disclose information where required by law, court order, or a regulatory authority.

Thalvern Advisory researches leadership markets internationally, and our service providers may process information in countries other than your own. Where information is transferred out of the United Kingdom or the European Economic Area, we rely on an adequacy decision or on standard contractual clauses together with appropriate supplementary safeguards.

Enquiry and website correspondence is retained for up to 24 months from the last contact. Client engagement records are retained for seven years from completion of the engagement, to meet contractual, tax, and professional record-keeping obligations.

Executive profile and search research records are retained for up to five years from our most recent contact with the individual, after which they are reviewed and either confirmed as current or deleted. Newsletter subscriptions are retained until you unsubscribe.

Depending on where you live, you may have the right to request access to the personal information we hold about you; to have inaccurate information corrected; to request deletion; to object to or restrict processing, including processing based on legitimate interests; to request a portable copy of information you provided to us; and to withdraw consent.

To exercise any of these rights, contact us using the details below. We may need to verify your identity before acting on a request. If you are in the United Kingdom or the European Economic Area, you also have the right to complain to your national supervisory authority.

Personal information is held using access controls appropriate to its sensitivity. Records are stored in access-restricted, encrypted cloud services; access is limited to those who need it to deliver an engagement; devices are encrypted and protected by multi-factor authentication; and confidential documents are exchanged through secure channels rather than unprotected email attachments where the content is sensitive.

This website uses a small number of cookies and similar technologies. Our Cookie Policy explains what they do and how to control them.

We review this policy periodically and will update the effective date above when it changes. Material changes affecting how we use information about you will be communicated directly where we hold appropriate contact details.