Last Updated: 13 June 2023
Crexia Ltd (“Crexia”) is committed to respecting and protecting your privacy. This Privacy Policy (“Policy”) explains who we are, how we collect, share, use and protect personal information, and how you can exercise your privacy rights.
This Policy covers personal information we collect in connection with our search work, whether identifying and recruiting candidates for a client, engaging with a source or referee in relation to one of our candidates, retaining vendors and in the course of our business i.e. marketing and events.
We may change this policy from time to time by updating this page. If we change our privacy policy, we will advise you of changes or updates through means of a notice on our website and we will update this privacy policy accordingly. Continued use of this website or our services after this time will constitute your acceptance of the new policy.
If you have any questions or concerns about our privacy commitment, please email us at contact@crexia.com.
1.0 Introduction
Definitions: Crexia is an executive search firm, based in the UK that works with private, public and not for profit organisations on executive and non‐executive searches. In this Policy, the following terms have the meanings as below:
“Client” means any of our clients and their employees who are looking to recruit or assess executives and to whom we provide the Services.
“Candidate” means any candidate, applicant, prospect, or Client employee who is considered, evaluated, or assessed by Crexia in connection with the Services.
“Referee” means any individual who provides employment or personal references for a particular Candidate.
“Source” means any individual who helps to identify and provide market intelligence about potential Candidates.
“Vendor” means any entity other than Crexia that provides products or services to Crexia pursuant to a contract with Crexia.
2.0 Relevant Legislation
Crexia and its website is designed to comply with the following national and international legislation concerning user privacy and data protection:
UK Data Protection Act 1988 (DPA)
EU Data Protection Directive 1995 (DPD)
EU General Data Protection Regulation 2018 (GDPR)
Crexia’s compliance with the above legislation, all of which are stringent in nature, means that this site is likely to be compliant with the data protection and user privacy legislation set out by many other countries and territories as well.
If you are unsure about whether this site is compliant with your own country of residences’ specific data protection and user privacy legislation, you should contact our data protection team (details of which can be found in section 8.1 at the end) for clarification.
3.0 Data Collection
This applies to information we collect and process on Candidates, Clients, Referees, Sources, and Vendors.
3.1 Candidate Information
We collect the information Candidates provide to us: Candidates, may provide personal information to us, e.g. emailing their CV to a Crexia employee, speaking with a Crexia employee or communicating with Crexia in any way. Additionally, we may obtain information about candidates from other sources.
You are not obliged to provide Crexia with any information or engage with Crexia. As such, we will consider any information we collect directly from you as having been provided voluntarily. If, however, you are unwilling to provide certain requested information, it may limit Crexia’s ability to consider you in connection with its search work. The information we may collect for all Candidates typically includes:
Contact details: such as name, e‐mail address, postal address, and telephone number.
CV information: such as your contact details, employment history, job titles, educational history, professional qualifications, demographic information, as well as languages and other skills and activities.
The information we collect for all Candidates may include:
Identification data: such as your civil/marital status, photograph, date of birth, gender, national origin e.g. national insurance number or equivalent in your country, driver’s license, or national ID/passport number.
Lifestyle preferences and personality profile: such as community involvement and memberships, hobbies, social activities, and/or individual preferences, intellectual capacity, personality, behaviour, executive competencies, and/or character traits. Diversity, health and criminal conviction information: where appropriate, and in accordance with local law, we may also collect information related to your health, diversity information (including racial or ethnic origin, religious or other similar beliefs, and physical and/or mental health, including disability‐related information), and/or details of any criminal convictions.
Financial information: to reimburse expenses incurred in connection with the Services e.g. travel, lodging and/or meal costs when attending an interview with a Client, we may collect certain financial information needed to document the expense and to reimburse you e.g. bank account number and/or credit card number.
Further details: such as your prior military service, compensation and benefit details (where permitted by local law), performance history, details of any dependents, immigration status, and, any other relevant information you may choose to share with us. We also keep a record of our contact history with you.
The information Crexia collects from third party sources about Candidates:
Crexia may collect any of the above personal information about a Candidate from publicly available sources, and third parties, including, under the following circumstances: (i) Sources and Referees may disclose personal information about Candidates; (ii) Crexia’s Clients may share personal information about Candidates; (iii) we may obtain information about Candidates from publicly available, third party sources (e.g. LinkedIn, newspapers, press releases); and (iv) Crexia may source personal information about Candidates from third party data providers. When we obtain information about you from third party providers or vendors, we take appropriate steps to ensure that such third parties are legally permitted or required to disclose such information to us.
Information Clients provide to Crexia:
Crexia’s Clients may provide personal information about certain Candidates in connection with its Services (for example, they may provide a list of Candidates they would like Crexia to assess). Crexia typically processes this personal information as a processor on its Client’s behalf. We use that information to provide the Services to our Client and as instructed by our Client. Under these circumstances, it is our Client, as the controller, that controls what personal information about you we collect and how we use it. If you have privacy‐related questions or concerns about a Client’s privacy practices or the choices a Client has made to share your information with us or any other third party, you should reach out to the Client or review their privacy policies. We are not responsible for the privacy or security practices of our Clients, which may differ from those set forth in this Policy.
3.2 Client Information
Information Clients provide to Crexia:
Crexia may need to collect and use information about Clients or individuals at Client organisations in the course of providing its Services to Clients. Crexia typically only has contact details or the details of individual contact(s) at the organisation (such as name, telephone number, email address, and job title). Crexia also holds information relating to a Client’s engagement with Candidates and will keep a record of its contact with Clients. Crexia may also hold extra information about Clients that someone in the Client organisation has chosen to tell us.
Information we collect from third party sources about Clients:
Where appropriate and in accordance with local laws and requirements, we may seek more information from other sources generally by way of due diligence or other market intelligence including: (i) from third party market research and by analysing online and offline media (which we may do ourselves or employ other organisations to do for us); (ii) from attendee lists at relevant events; and/or (iii) from other limited sources and third parties.
3.3 Source Information
Crexia may process a Source’s contact details (such as name, email address, and telephone number), professional details (such as job title, occupation, academic and professional qualifications, and employment history) and information about the Source’s connection to a Candidate (such as the Source’s relationship to, experience with, and opinions about the relevant Candidate). Crexia may collect this information directly from the Source and/or from publicly available sources (such as LinkedIn). In some cases, Crexia may collect the information from its Candidates.
3.4 Vendor Information
Crexia may need a small amount of information from its Vendors. Crexia may need contact details of relevant individuals at the organisation so it can communicate with the Vendor. It may also need other information such as a Vendor’s bank details so that it can pay for the services provided if necessary.
4.0 How Crexia Use Personal Information
4.1 Candidate data: Crexia typically uses Candidate data for the following purposes:
Search: to provide its Clients with the Services, including assessing a Candidate’s suitability for executive roles with a Client; contacting a Candidate about board and executive search or assessment assignments conducted for Clients; sending Candidate information to its Clients; and/or verifying the details a Candidate has provided (such as through psychometric evaluations or by requesting information from third parties e.g., Referees). Crexia may also use a Candidate’s personal information for other business purposes such as data analysis, identifying usage trends, creating anonymised data sets for research, statistics and analytics purposes, creating knowledge pieces (such as white papers), determining the effectiveness of our Services, and/or to enhance, customise, and improve Crexia’s features, products and services.
Marketing: to send Candidates information (such as reports, promotions, research, white papers, events and general information about, for example, relevant industry sectors) that we think you may find interesting.
Equal Opportunity Monitoring: ensures that our recruitment processes are aligned with our commitment to ensuring equal opportunities. Some of the data Crexia may collect about Candidates (in appropriate circumstances and in accordance with applicable local law) falls under the umbrella of “diversity information”. This could be information about a Candidate’s ethnic background, gender, disability, age, sexual orientation, religion or other similar beliefs, and/or social‐ economic background.
Where appropriate and in accordance with local laws and requirements, Crexia will use this information to provide Clients with diverse pools of qualified Candidates. It may also disclose this data (suitably anonymised where appropriate) to Clients where this is contractually required or if the Client specifically requests such information to enable them to comply with their own employment processes or legal requirements.
Crexia may also collect other sensitive personal information about Candidates including health‐ related information, religious affiliation, or details of any criminal convictions if this is appropriate in accordance with local law and is required for a role for which we are recruiting. We will never do this without a Candidate’s explicit consent.
4.2 Client data: Crexia typically uses Client data for the following purposes:
Search: to provide the Services to a Client organisation; to manage its relationship and account with a Client and a Client’s organisation; and/or for our other business purposes such as data analysis, identifying usage trends, creating anonymised data sets for research, statistics and analytics purposes, creating knowledge pieces (like white papers), determining the effectiveness of its Services, and/or to enhance, customise, and improve its features, products, and services.
Marketing: to send information (such as reports, promotions, research, white papers, and event invitations) that Crexia thinks Clients may find interesting.
Referee data: Crexia uses Referee Data to obtain objective opinions regarding Candidates in the course of providing the Services to its Clients. In addition, Crexia may use a Referee’s details to contact a Referee in relation to any of its Services that it thinks may be of interest to a potential Client or Candidate.
4.3 Source data: Crexia uses Source Data to identify and gather information on potential Candidates in the course of providing the Services to its Clients. In addition, Crexia may use a Source’s details to contact a Source in relation to any of its Services that Crexia thinks may be of interest to a Source as a potential Client or Candidate.
4.4 Vendor data: Crexia typically uses Vendor Data: to store (and update when necessary) a Vendor’s details in its database, so that Crexia can contact the Vendor in relation to its agreements; to obtain support and services from the Vendor; to perform certain legal obligations; to help Crexia target appropriate marketing campaigns; and to help Crexia establish, exercise, or defend legal claims.
5.0 Data Collected by our Website
This Section applies to personal information that Crexia collects and processes through its Website in the usual course of its business, such as in connection with its events and marketing activities.
What Personal Information Does Crexia Collect?
Crexia may ask for personal information voluntarily, for example, it may ask for contact details (i.e. name, email address, and phone number) to complete surveys, subscribe to marketing communications (like newsletters), submit inquiries, and/or otherwise communicate or interact with Crexia.
Crexia may also collect personal information offline, such as when someone attends an event. There is no obligation to provide Crexia with any information or participate in any of the Services it offers. As such, Crexia will consider any information it collects directly as having been provided voluntarily. If, however, anyone is unwilling to provide certain requested information, it may limit the ability to participate in its Services.
Links to Other Websites
Crexia’s website may certain links to other websites of interest. However, once you have used these links to leave our site, you should note that we do not have any control over that website. Therefore, we cannot be responsible for the protection and privacy of information which you provide whilst visiting such sites and such sites are not governed by this Policy. You should exercise caution and look at the privacy statement applicable to the website in question.
6.0 How Crexia Shares Information
Crexia may share personal information with the following types of third parties for the purposes described in this Policy:
Crexia freely shares information with its employees. The information is maintained on Crexia’s database, which is secure and accessible only to Crexia employees. Crexia may share information with any competent law enforcement body, regulatory or government agency, court or other third party where it believes disclosure is necessary as a matter of applicable law or regulation; to exercise, establish, or defend our legal rights; or to protect your vital interests or those of any other person. In the case of Candidates, Referees, and Sources, Crexia may share information with Clients who may need to process the information for the purposes described in this Policy.
Similarly, for Candidates, Crexia may share information with Sources and Referees with whom it liaises in connection with providing the Services to its Clients.
For Sources and Referees, Crexia endeavours to keep information confidential from the Candidates they discuss with us, but under limited circumstances, the information may be disclosed to them.
Crexia may share information with third party service providers (our Vendors) who perform functions on our behalf (including external consultants, business associates and professional advisers, such as lawyers, auditors, accountants, technical support providers, and third party travel agencies, outsourced IT and document storage providers).
Crexia may share information with a potential buyer (and its agents and advisers) in connection with any proposed purchase, merger, or acquisition of any part of our business, provided that we inform the buyer it must use your personal information only for the purposes disclosed in this Policy.
Crexia may share information with its marketing partners to send emails on its behalf. Crexia may share information with any other person with the individual’s consent. Crexia does not sell information to third parties or use the information for purposes that are incompatible with those set forth in this Privacy Policy.
The Legal Basis For Processing Personal Information (for residents in the EEA)
For residents in the European Economic Area, Crexia’s legal basis for collecting and using the personal information described above will depend on the personal information concerned and the specific context in which it is collected.
Crexia will normally collect personal information where the processing is in its legitimate interests and not overridden by data protection interests or fundamental rights and freedoms. In connection with Crexia’s Services, it typically relies on legitimate interests to process personal information for its Search work and some marketing activities.
7.0 Data Protection Rights
7.1 Individuals have the following data protection rights:
If an individual wishes to access, correct, update, or request deletion of personal information, an individual can do so at any time by contacting Crexia via email to contact@crexia.com. When asked to remove a record from its database, Crexia will retain minimal personal information in order to prevent future contact, to keep a record of the information disclosed to its Clients and Candidates, and to preserve Crexia’s interests in accordance with any applicable legal requirements.
In addition, residents of the European Economic Area can object to processing of their personal information, ask Crexia to restrict processing of personal information, or request portability of their personal information.
Individuals have the right to opt‐out of marketing communications sent at any time by clicking on the “unsubscribe” link in the marketing e‐mails Crexia sends. If Crexia has collected and processed personal information with an individual’s consent, that consent can be withdrawn at any time.
Withdrawing consent will not affect the lawfulness of any processing Crexia conducted prior to the withdrawal, nor will it affect processing of personal information conducted in reliance on lawful processing grounds other than consent. If consent is withdrawn, it will not be possible to be part of a Crexia search or to be invited to any of Crexia’s events or receive research or market insights.
Individuals have the right to complain to a data protection authority about Crexia’s collection and use of personal information. Crexia responds to all requests it receive from individuals wishing to exercise their data protection rights in accordance with applicable data protection laws.
If you feel that there is a problem with the way we are handling your data, and you cannot resolve this issue with us directly, then you have a right to contact and complain to the Information Commissioner’s Office (ICO) at ico.org.uk.
7.2 How Long Is Personal Information Kept?
Crexia will retain information it collects where it has an ongoing legitimate business need to do so (e.g. to provide its Services or to comply with applicable legal, tax, or accounting requirements). For any questions about how long Crexia retains personal information, you may contact Crexia via email to contact@crexia.com.
7.3 How Does Crexia Keep Personal Information Secure?
Crexia is committed to ensuring that personal information is kept secure and follows strict security procedures as to how personal information is stored, used and who sees it, in order to help stop any unauthorised person getting access to it and it is located behind a firewall. Unfortunately, transmission of data via the internet is not completely secure or error‐free. We strive to ensure the protection of personal data, but cannot guarantee the security of the data so we cannot accept any liability for the loss, theft or misuse of personal information.
Crexia takes appropriate technical and organisational measures to protect personal information from loss, misuse, unauthorised access, disclosure, alteration, and destruction. The measures used are designed to provide a level of security appropriate to the risk of processing the personal information and to help ensure that data is safe, secure, and only available to the individual and those with authorised access. For any questions about the security of personal information, you may contact Crexia via email to contact@crexia.com.
7.4 How we use cookies
We use a number of different cookies on our site. If you do not know what cookies are, or how to control or delete them, then we recommend you visit www.aboutcookies.org for detailed guidance.
The list below describes the cookies we use on this site and what we use them for. Currently we operate an ‘explicit consent’ policy which means that you have the option to consent to cookie usage when you first visit our site, by ticking an ‘opt in’ box. If you are not happy, then you should either not use this site, or you should delete the cookies having visited the site, or you should browse the site using your browser’s anonymous usage setting (called “Incognito” in Chrome, “InPrivate” for Internet Explorer, “Private Browsing” in Firefox and Safari.)
All modern browsers allow you to change your cookie settings. These settings will typically be found in the ‘options’ or ‘preferences’ menu of your browser. In order to understand these settings, the following links may be helpful, otherwise you should use the ‘Help’ option in your browser for more details.
Cookie settings in Internet Explorer
Cookie settings in Firefox
Cookie settings in Chrome
Cookie settings in Safari
7.5 First Party Cookies
These are cookies that are set by this website directly.
Google Analytics: We use Google Analytics to collect information about visitor behaviour on our website. Google Analytics stores information about what pages you visit whilst on our website, how long you are on the site, how you got here and what you click on. This Analytics data is collected via a JavaScript tag in the pages of our site and is not tied to personally identifiable information. We therefore do not collect or store your personal information (e.g. your name or address) so this information cannot be used to identify who you are.
You can find out more about Google’s position on privacy with regards to its analytics service at http://www.google.co.uk/intl/en/analytics/privacyoverview.html
Google are based in the USA and are EU-U.S Privacy Shield compliant.
8.0 Equal opportunities
We are a company committed to diversity. As such, all candidates and members of staff will receive equal treatment and we will not discriminate on grounds of gender, race, ethnic origin, colour, marital status, nationality, national origin, disability, sexual orientation, religion or age.
We may occasionally use information provided by you for the purposes of diversity monitoring as part of our commitment to equal opportunities. This information will be used on an entirely anonymous basis.