Privacy Policy
Last updated: 04/09/2022
Welcome to our global website (our “Site”). Hedley May (“we”, “us” and “our”) is a unique global search firm, delivering exceptional talent and leadership, with offices in London and New York. Details of our offices are set out below.
London
Sun Court, 66-67 Cornhill,
London,
EC3V 3NB
+44 (0) 20 7858 9444
New York
52 Vanderbilt Avenue,
9th Floor,
New York, NY 10017
+1 646 666 9390
By focusing on the critical roles that underpin high-performing executive and non-executive teams, we can apply a level of intensity and experience that increases the quality of candidates we access and the long-term success of our appointments. This is the outcome we care most about.
Our commitment to diversity and inclusion, a transparent process and our collaborative culture sets us apart, ensuring every client gets the best of Hedley May’s collective energy wherever they are in the world.
As the sole owner of all information collected offline or through this site, we are committed to protecting your privacy and personal data and this privacy policy (“Policy”) sets out the terms on which any personal data that we collect, or you provide to us, will be stored, and processed by us.
This Policy deals with the protection of your rights under applicable data protection legislation (“Data Protection Legislation”), including without limitation the Data Protection Act 1998 and UK General Data Protection Regulation (‘UK GDPR’) (as applicable) and including, where applicable, the guidance and codes of practice issued by the Information Commissioner’s Office or any other relevant regulator.
Please read the following carefully to understand our policies and practices regarding your personal data and how we will treat it. We have set out what we do in enough detail to help you find the information you need at a glance, with the option of expanding on the links below if you want to find out more. If you still can’t find the information you need, you can email us at privacy@hedleymay.com or write to us at the above addresses.
Please click on the links below for further information on our privacy practices.
What is personal data and processing – definitions
Personal data we may collect from you
Where we store your personal data
What do we do to keep your personal data secure?
Accessing your personal data and other rights you have
What is personal data and processing – definitions
“Personal Data” consists of any information that relates to you and/or information from which you can be identified, directly or indirectly. For example, information which identifies you may consist of your name, address, telephone number, employment history, salary information, education history, professional experience and resumé or an online identifier (e.g., cookie identifiers and your IP address). When we combine other information (e.g., information that does not, on its own, identify you) with Personal Data, we treat the combined information as Personal Data.
“Processing” means any operation or set of operations performed upon Personal Data or sets of Personal Data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure, or destruction. This Policy applies to Personal Data collected by us in connection with our services, whether offline or through our site, and will apply whether you access our site using a computer, mobile phone, tablet, TV, or other device.
“Profiling” means any form of automated processing of personal information to evaluate certain personal aspects relating to a natural person and in particular to analyze or predict aspects concerning that natural person’s performance at work, economic situation, health, personal preferences, interests, reliability, behaviour, location, or movements.
“Sale” means renting, releasing, disclosing, disseminating, making available, transferring, or otherwise communicating orally, in writing, or by electronic or other means, a consumer’s personal information by the business to a third party for monetary or other valuable consideration.
“Sensitive Personal Data” includes data relating to race or ethnic origin, political opinions, religious or similar beliefs, trade union membership, physical or mental health, sexual life, or criminal record.
“Site” means https://www.hedleymay.com/ and all web pages hosted at that domain.
Personal data we may collect from you
Hedley May is an executive search firm providing search, due diligence, and advisory services (our “Services”). We collect Personal Data from candidates for senior executive and non-executive positions (as a “Candidate”) for the purposes of carrying out such services on behalf of our clients world-wide, where we have a legitimate interest or other legal basis for processing such information.
Personal data you give us directly
You may provide us with your Personal Data directly when you correspond with us by telephone, e-mail or otherwise. This includes Personal Data you provide when you submit a request via the ‘contact us’ page on our Site. The information you give us may include your name, address, e-mail address and telephone number, job title, company name, CV or other personal details that may be included in any enquiry you make.
Your career and other ways we may collect your Personal Data
In order to provide our services as a global search firm, we collect, process, use and retain Personal Data as part of the executive search process. We may get in touch with you to assess your professional experience or retrieve extra information which will be important to your qualification for a senior role. This might include your contact details, the information in your CV, compensation, referees, and details for background checks, for example employment or education history. It is our duty to keep your Personal Data up to date and we appreciate your assistance with this, by keeping us informed of developments in your career. We may also compile data from searches of your professional information publicly available via social media platforms such as LinkedIn, Google, Twitter, company websites, the press or other publications and data on your suitability for senior executive and non-executive opportunities as part of our assessment of your professional profile. Any such relevant information will be deemed as “Candidate Personal Data” and processed alongside any Personal Data that you have submitted. You are of course free to choose which, if any, Candidate Personal Data you provide; however, generally the more information you make available to us (but please note it is not our policy to seek Sensitive Personal Data as set out above), the better we are able to assess you as a Candidate in an executive search process for our clients.
How we process information
Your Personal Data may be processed for the purpose of providing our Services as defined in this Policy, in some of the ways listed below:
Client
We may collect, process, and retain your Personal Data, on the terms set out in this Policy and in our Terms and Conditions agreed with you and share your Personal Data between our Hedley May offices on a confidential basis, where required for the purpose of providing our Service for administrative, billing, and other business purposes.
Potential Candidate
As a Potential Candidate we may include your Personal Data as part of an executive search process on behalf of our clients, including to enable us to fulfil our obligations under any contract (such as our Terms and Conditions for executive search assignments). We may also evaluate your qualification for a role and verify your Candidate Personal Data for the search process and in order to manage our database.
Professional Career Advice
You may keep in touch with us so we may provide you with professional career advice. We may be in touch with you from time-to-time as a source of information about potential candidates for our clients. We may also keep you informed of possible executive and non-executive positions and opportunities with our clients that suitably match your skills and experience and make strategic introductions to help you and our clients build networks for future opportunities.
Integration Support
We will aim to stay in touch with you to provide integration support after a placement, to help ensure your and our clients’ success with the placement.
Other
We may also use Personal Data for the following:
- Analysis purposes – for assessment and analysis of our market, clients, and services (including asking you for your opinions on services and carrying out client surveys).
- De-identified data – to create anonymous, aggregated statistics about the use of our services, or other industry, marketing, and employment statistics. This anonymized data may be shared with third parties;
- Equal Opportunity Monitoring – to ensure that our processes are aligned with our commitment to ensuring equal opportunities and to aggregate and disclose diversity and other statistical information regarding our candidates and placement activities. In this context we may use Sensitive Personal Data with your consent and in accordance with Data Protection Legislation;
- Service improvement – to develop and improve new and existing services, recommendations, advertisements, and other communications and learn more about your preferences;
- Client support services – to provide client support services, or to deal with any other support queries you may have;
- Crime prevention – for the prevention or detection of fraud or crime;
- Security – to assist in keeping our Site safe and secure;
- Business purposes – for business monitoring and internal record keeping. We may use your Personal Data for our business purposes, such as audits, internal communication regarding candidates and clients, determining the effectiveness of our promotional activities, administering our services, maintaining, and securing our infrastructure, and for procurement and financial transactions;
- Legal obligations – to comply with our legal obligations, arising under applicable law;
- Training – for staff training and quality assurance purposes, particularly in relation to our executive search consultants; and
- Updates – to communicate with you, including communicating with you about the services we are providing to you, giving you information about other services, sending you notices about any material changes to our privacy notice, or details of other opportunities we think may be of interest to you including marketing communications.
Hedley May Thinking
Hedley May Thinking brings together key insights and developments that will allow you to stay ahead of issues in business and your career. We may send you Hedley May Thinking communications either by email or in printed format and we hope that you find them informative.
You can also register or opt in to receive Thought Leadership from Hedley May Thinking; in doing so you may choose to receive certain communications from us related to our Services. The information you include will be added to our contacts database and processed for the purpose of sending you Hedley May Thought Leadership and invitations to Hedley May events.
We will normally only collect personal information from you where the processing is in our legitimate interests and not overridden by your data protection interests.
You have the right to opt-out of marketing communications we send you at any time. You can exercise this right by emailing subscribe@hedleymay.com.
We look forward to you becoming part of the Hedley May community.
Data retention
We will retain your Personal Data for the period necessary to fulfil the purposes for which it was collected as outlined in this Policy unless a longer retention period is required by law. Where you provide us with your Personal Data for the purposes of being considered for our executive and non-executive search and other services, it is in Hedley May’s legitimate interest to retain such Personal Data, so we can notify you of and consider you for future opportunities which may be of interest to you. If you no longer wish us to hold your Personal Data on our system and for requests for access, or corrections, please refer to the “Accessing your personal data and other rights you have” section of this Policy.
We may disclose your Personal Data to the following entities:
Hedley May
Your Personal Data will be accessible to Hedley May members and employees, and we may need to transfer your Personal Data between Hedley May offices, for example, between our London and New York offices to provide the services you require or any other services/assistance you request. All Hedley May offices are required to follow the privacy practices set forth in this Policy, or such other privacy notice that we may notify to you. Where we transfer your Personal Data to other Hedley May offices outside the UK and EEA, we will ensure that appropriate transfer agreements and mechanisms are in place.
Our Clients
With discretion and confidentially we may disclose excerpts of your Candidate Personal Data where we are contracted to provide our Services to a client, (as set out in this Policy) to such client for the purposes of our executive search assignments or our Services. We will only disclose what is necessary for the purpose and will seek to obtain your permission to disclose your Candidate Personal Data in greater detail and when putting you forward on an executive search.
Third Party referees
With discretion we may disclose excerpts of your Candidate Personal Data to other organizations or individuals (e.g., former colleagues or other individuals within your industry) for reference or recommendation purposes or where we need to conduct other background checks as part of the executive search process. We will only disclose what is necessary for that purpose.
Service providers
We use third party service providers to help us to administer certain activities and services on our behalf, such as IT services, management of our database servers and hosted software, CV verification, and background checks. We may share your Personal Data with such third-party service providers solely for the purpose of enabling them to perform such services on our behalf and they will operate only in accordance with our instructions and will be subject to applicable Data Protection Legislation.
Third parties when required by law or to protect our services
We will disclose your Personal Data to comply with Data Protection Legislation and applicable laws or respond to valid legal process, including from law enforcement or other government agencies; to protect our clients and candidates (e.g. to prevent spam or attempts to defraud users of our services); to operate and maintain the security of our Services (e.g. to prevent or stop an attack on our systems or networks); or to protect the rights or property of Hedley May, including enforcing any terms or agreements governing the provision of our Services.
Business transfers
We may disclose and/or transfer Personal Data as part of any actual or contemplated merger, sale, transfer of assets, acquisition, financing and/or restructuring of all or part of our business, bankruptcy, or similar event, including related to due diligence conducted prior to such event where permitted by law.
Other parties with your consent or at your direction
We may share Personal Data about you with third parties when you consent to or request such sharing.
Legal Basis for Processing Personal Information
If you are resident in the European Economic Area, our legal basis for collecting and processing personal information depends on the type of personal information as well as the reason for collecting it.
We will normally collect personal information where it is in our legitimate interests to do so and not overridden by your data protection interests.
We will gain your consent before sharing your personal information with third parties (such as with a client for whom we are conducting a search), and we will gain your explicit consent before collecting and processing your sensitive personal information.
If you have questions about our legal basis for processing your personal information, please contact us at privacy@hedleymay.com.
Where we store your personal data
Your Personal Data will be stored in our confidential systems accessible only by Hedley May or by third party service providers acting on our behalf. We will never distribute or share your information outside the company without your consent. The Personal Data that we collect from you may be transferred to, processed, and stored at a destination outside the UK and European Economic Area (“EEA”), including but not limited to our New York office in the United States of America or in any other country where Hedley May or its affiliates, subsidiaries or service providers maintain facilities. Your Personal Data may also be processed by staff operating outside the UK and EEA who work for us (e.g., in our New York office) or for one of our suppliers. Such staff may be engaged in the provision of support services, among other things.
By using any of our services and/or submitting your Personal Data to us, you agree to the collection, transfer, storage, and processing of your information outside of the UK and EEA. We will take all reasonable steps necessary to ensure that your Personal Data is kept secure and treated in accordance with this Policy and the requirements of applicable law wherever the data is located. Where we transfer your Personal Data outside the UK and EEA to other countries, we will ensure that appropriate transfer agreements and mechanisms (such as the EU Model Clauses which govern the transfer of Personal Data between our UK and New York offices) are in place to help ensure that our third-party service providers provide an adequate level of protection to your Personal Data. We will only transfer your Personal Data outside the UK and EEA in accordance with Data Protection Legislation and applicable laws or where you have given us your consent to do so.
What do we do to keep your personal data secure?
We use the appropriate physical and technical measures created to safeguard your Personal Data. Once we have received your Personal Data, we use strict procedures to prevent illegal processing and we have security features to try to prevent unauthorised access, including firewall, anti-virus software and encryption. Both physical and technical safeguarding measures are regularly reviewed and updated. We ensure that our staff have regular training to support the above.
A cookie is a small file of letters and numbers which we store on your browser, or the hard drive of your computer, if you agree and use the services of our Site. Cookies contain information that is transferred to your computer’s hard drive.
Our website uses cookies to distinguish you from other users of our website. This helps us to provide you with a better experience when you browse our website and also allows us to improve our site.
When you visit our website, you have the right to decide whether to accept or reject cookies, as well as modify your cookie preferences in the cookie settings visible in the bottom left-corner of the page when you first visit our website. If you choose to reject or modify cookies, you may still use our website.
The type of cookies we use are:
Essential website cookies – these are strictly necessary for the website to function properly. These cookies ensure basic functionalities and security features of the website, anonymously.
Functional cookies – these cookies help to perform certain functionalities like sharing the content of the website on social media platforms, collect feedbacks, and other third-party features.
Performance cookies – these cookies are used to understand and analyze the key performance indexes of the website which helps in delivering a better user experience for the visitors.
Analytics cookies – these cookies are used to understand how visitors interact with the website. These cookies help provide information on metrics the number of visitors, bounce rate, traffic source, etc.
Advertisement cookies – these cookies are used to provide visitors with relevant ads and marketing campaigns. They track visitors across websites and collect information to provide customized ads.
Other cookies – these cookies are those that are being analyzed and have not been classified into a category as yet.
Third Party Sites
Please note that third parties (including, for example providers of external services like web traffic analysis services) may also use cookies, over which we have no control. These cookies are likely to be analytical/performance cookies or targeting cookies.
We use analytics service providers, such as Google Analytics, who assist us in understanding the usage of our website, to enable us to improve our services.
Our site may, from time to time, contain links to and from other websites that are not operated by us. These linked sites are not under our control and as such, we are not responsible for the privacy practices or the content of any linked websites. If you follow a link to any of these websites, please note that these websites have their own privacy policies and any Personal Data collected by the Third Party’s website will be controlled by the privacy notice of that third party and we do not accept any responsibility or liability for these policies. Please check these policies before you submit any Personal Data to these websites.
Accessing your personal data and other rights you have
Depending on whether the European Data Protection Legislation applies to you, you have certain rights which include the right to correct, restrict/block, rectify, object, access and revoke your consent to any applicable aspect of this Policy or ask us to delete any of your Personal Data that we hold. You also have the right to data portability (e.g., to move, copy or transfer your personal data from one organization to another). If you wish to enforce any of your rights, then please contact us by email at privacy@hedleymay.com. For further concerns in relation to your rights you may contact the Information Commissioner’s Office.
We will collect, store, and process your Personal Data in accordance with your rights under any applicable data protection laws. For further information about your rights, see below:
Subject Access Request
You have the right to request details of the Personal Data which we hold about you and copies of such Personal Data.
Right to Withdraw Consent
Where you have consented to our processing of your Personal Data, you have the right to withdraw such consent at any time. In the event you wish to withdraw your consent to processing, please contact us using the details provided in the ‘Contact’ section below or email privacy@hedleymay.com.
Data Portability
Data Portability
You may, in certain circumstances, request us to port (e.g., transmit) your Personal Data directly to another organization.
Rectification
We want to ensure that Personal Data that we hold about you is accurate and up to date. If you think that any information, we have about you is incorrect or incomplete, please let us know. We will use our best endeavors and have policies and procedures in place to ensure that the information we hold about you is accurate and up to date.
Erasure (“right to be forgotten”)
You have the right to have your Personal Data erased in certain specified situations.
Additional Notice for Californian Residents
California Shine the Light
Residents of the State of California have the right to request information about other companies to whom the company has disclosed certain categories of personal information during the preceding year for those companies’ direct marketing purposes. If you are a California resident and would like to make such a request, please email privacy@hedleymay.com or write to us or call us at:
Hedley May
52 Vanderbilt Avenue
9th Floor
New York
NY 10017
+1 646 666 9390
Special Information for Nevada Residents
Residents of the State of Nevada have the right to opt out of the sale of certain pieces of their information to other companies who will sell or license their information to others. At this time, we do not engage in the sale of information, as that term is defined in Nevada Revised Statutes Chapter 603A.
Changes to our privacy policy
Any changes we may make to our Privacy Policy in the future will be posted on this page and, where appropriate, notified to you by e-mail. Please check back frequently to see any updates or changes to our Policy. The “last updated” legend at the top of this page states when the policy was last updated and any changes will become effective upon our posting of the revised Policy.
Children
Our Site is not directed at children under 13 years of age, and we do not intentionally collect or maintain Personal Data about anyone under this age. Should we discover that we have collected Personal Data from a child who is under 13, we will promptly delete that Personal Data. Although our Website is not directed to children under the age of 13, if your child uses our Services and you wish to review or delete your child’s Personal Data, you may do so request by contacting us at the email address set forth in the “Contact” section.
Contact
Questions, comments, and requests regarding this Policy are welcomed and should be addressed to privacy@hedleymay.com.
