PRIVACY POLICY
INTRODUCTION
Red Sea Consultancy Ltd (Red Sea Executive Search) ("we," "us," or "our"), is an executive search and leadership advisory firm. We are committed to protecting the privacy and security of personal information and processing it responsibly and transparently.
This Privacy Policy explains how we collect, use, store, disclose, and protect personal information relating to candidates, clients, business contacts, website visitors, and other individuals with whom we interact.
Where required by applicable law, including the UK General Data Protection Regulation (UK GDPR), the EU General Data Protection Regulation (EU GDPR), and related data protection legislation, Red Sea Consultancy Ltd (Red Sea Executive Search) is a data controller and a data processor in relation to personal information processed for executive search and business development activities.
Red Sea Consultancy Ltd (Red Sea Executive Search) is a company incorporated in England and Wales with registered number 06870630.
PERSONAL INFORMATION WE COLLECT
Candidate Information
We may collect and process:
- Name, title, and contact details
- Curriculum vitae (CV), résumé, biography, and career history
- Educational qualifications and professional certifications
- Employment history, board appointments, and leadership experience
- Compensation, benefits, and remuneration expectations
- Professional achievements and competencies
- References and referee details
- Assessment, interview, and evaluation information
- Diversity information where voluntarily and anonymously provided, and permitted by law
- Information contained in correspondence with us
Client and Business Contact Information
We may collect:
- Names, job titles, and professional contact details
- Information relating to recruitment assignments
- Communications and correspondence
- Contractual and billing information
Information Obtained from Third Parties and Public Sources
Executive search firms routinely identify potential candidates through research and professional networking activities.
As part of our executive search activities, we may identify and assess potential candidates who have not directly contacted us.
We may collect professional information from:
- Publicly available sources
- Professional networking platforms
- Company websites
- Industry publications
- Board and corporate filings
- Professional directories
- Referrals and recommendations
Where we collect information about individuals from publicly available professional sources, we do so for the purpose of evaluating leadership talent and considering individuals for current or future opportunities.
The information collected is limited to that relevant to assessing an individual's professional suitability for leadership opportunities.
If we contact an individual whom we have identified through executive search research, we will provide appropriate information regarding our identity, the source of the information where required, and the individual's privacy rights.
Website Information
When you visit our website, we may collect:
- IP address
- Device and browser information
- Website usage data
- Cookie and analytics information
SENSITIVE PERSONAL DATA
The UK GDPR defines special category (or sensitive personal) data as:
- personal data revealing racial or ethnic origin;
- personal data revealing political opinions;
- personal data revealing religious or philosophical beliefs;
- personal data revealing trade union membership;
- genetic data;
- biometric data (where used for identification purposes);
- data concerning health;
- data concerning a person’s sex life; and
- data concerning a person’s sexual orientation.
We do not seek to collect or process your sensitive personal (special category) data, except where:
- Required or permitted by applicable law
- Processing is necessary for the detection or prevention of a crime
- Processing is necessary for the establishment, exercise or defence of legal rights
- We have, in accordance with applicable law, obtained your explicit and prior consent before processing your sensitive personal data. This legal basis is only used in relation to processing that is entirely voluntary (i.e DEI monitoring)
HOW WE USE PERSONAL INFORMATION
We use personal information to:
- Conduct executive search and recruitment assignments
- Identify, assess, and approach potential candidates
- Evaluate candidate suitability for specific opportunities
- Present candidate profiles to clients
- Conduct due diligence and referencing activities on behalf of our clients
- Maintain candidate records for future opportunities
- Manage client relationships
- Communicate regarding our services
- Comply with legal and regulatory obligations
- Improve our website and business operations
LEGAL BASIS FOR PROCESSING
Where required under applicable data protection law, we rely on one or more of the following legal bases:
Legitimate Interests
Much of our executive search activity is based on our legitimate interests and those of our clients in identifying and recruiting qualified leaders.
Our legitimate interests include:
- Delivering executive search services
- Identifying and evaluating prospective candidates
- Maintaining professional networks
- Developing and maintaining client relationships
- Promoting leadership opportunities
When relying on legitimate interests, we ensure that our interests are balanced against the rights and freedoms of individuals.
Consent
We may rely on consent where required by law, particularly for certain communications, the processing of specific categories of personal information, and for contacting you with regards to future job opportunities.
Contract
Processing may be necessary to take steps prior to entering into a contract or for the performance of a contract.
Legal Obligation
We may process personal information where required to comply with legal or regulatory obligations.
SHARING PERSONAL INFORMATION
We may share personal information with:
- Clients conducting recruitment processes
- Assessment and background-check providers
- Technology and cloud service providers
- Professional advisers, including legal and accounting advisers
- Regulatory authorities where required by law
Candidate information is shared with clients only when relevant to a specific search assignment and subject to appropriate confidentiality safeguards.
International Transfers
Executive search assignments often involve international clients and candidates.
Where personal information is transferred outside the United Kingdom, European Economic Area, or other jurisdictions with applicable transfer restrictions, we implement appropriate safeguards, including:
- Standard Contractual Clauses approved by relevant authorities
- Adequacy decisions
- Other lawful transfer mechanisms as required by applicable law
DATA RETENTION
We retain personal information only for as long as necessary to fulfil the purposes described in this Privacy Policy.
Unless a shorter period is required by law, we generally retain candidate information for up to five years following our most recent meaningful interaction with the individual.
We may retain information for longer where necessary to:
- Comply with legal obligations
- Resolve disputes
- Defend legal claims
- Maintain historical records of search assignments
As executive search assignments frequently involve long-term career relationships, candidate information may, with your consent, be retained for the purposes of contacting you for future opportunities.
Personal information that is no longer required will be securely deleted or anonymised.
DATA SECURITY
We maintain appropriate technical and organisational measures designed to protect personal information from unauthorised access, misuse, loss, disclosure, alteration, or destruction.
These measures may include:
- Access controls
- Encryption where appropriate
- Secure storage systems
- Staff confidentiality obligations
- Regular security reviews
YOUR RIGHTS
Subject to applicable law, individuals may have the following rights:
- Right of access to personal information
- Right to rectify inaccurate information
- Right to erasure ("right to be forgotten")
- Right to restrict processing
- Right to object to processing based on legitimate interests
- Right to data portability
- Right to withdraw consent where applicable
- Right to lodge a complaint with a supervisory authority
RIGHT TO OBJECT
Individuals have the right to object at any time to processing based on our legitimate interests, including processing for executive search and business development activities.
Where a valid objection is received, we will assess the request and cease processing where required by law.
CONTACT INFORMATION
Questions regarding this Privacy Policy or requests relating to personal information should be directed to our named Privacy Contact:
Becky Snead, Director of Business Services
Email: [email protected]
COMPLAINTS
If you believe that your personal information has been processed in a manner inconsistent with applicable law, you may contact us directly via [email protected]
You also have the right to lodge a complaint with the relevant supervisory authority, including the Information Commissioner's Office in the United Kingdom.
Changes to This Privacy Policy
We may update this Privacy Policy periodically to reflect changes in our practices, legal requirements, or business operations. The latest version will always be available on our website:
Last updated: July 2026