Data Protection

DATA PROTECTION

Last Updated: 3 August 2026

1. OUR COMMITMENT

Spencer & Thurlow is committed to protecting the personal information entrusted to us by our candidates, clients and website visitors.

We recognise the importance of handling personal data securely, fairly and transparently and are committed to complying with applicable UK data protection legislation, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. WHAT PERSONAL DATA WE HOLD

Depending on your relationship with Spencer & Thurlow, we may process information including:

  • Name

  • Contact details

  • Employment history, Curriculum Vitae (CV), professional qualifications, salary expectations and career preferences

  • Interview notes, client recruitment requirements and website usage information

We only collect information that is necessary for providing our executive search and recruitment services.

3. HOW WE PROTECT YOUR INFORMATION

We take appropriate technical and organisational measures to protect personal information against unauthorised access, loss, misuse, disclosure, alteration and destruction.

Access to personal information is limited to authorised personnel who require it to carry out their professional responsibilities.

4. HOW WE USE PERSONAL DATA

Personal information is processed only where there is a lawful basis to do so. This may include executive search assignments, candidate introductions, recruitment administration, client communications, responding to enquiries, legal and regulatory compliance, and improving our services.

5. DATA SHARING

Where appropriate, Spencer & Thurlow may share personal information with prospective employers, professional advisers, technology providers supporting our business, and regulatory authorities where required by law. We do not sell personal information to third parties.

6. DATA RETENTION

We retain personal information only for as long as reasonably necessary to fulfil recruitment services, comply with legal obligations and maintain appropriate business records. When personal information is no longer required, it is securely deleted or anonymised.

7. YOUR RIGHTS

Under UK data protection legislation, individuals have the right to access their personal information, request corrections or deletion, restrict or object to processing, request data portability, withdraw consent where applicable, and lodge a complaint with the Information Commissioner’s Office (ICO). Requests will be handled promptly and in accordance with applicable legislation.

8. SECURITY

Spencer & Thurlow continually reviews its security measures to ensure personal information remains protected. Although no online system can guarantee absolute security, we maintain appropriate safeguards to minimise risk and protect confidential information.

9. CONTACT

If you have any questions regarding data protection or wish to exercise your rights, please contact Spencer & Thurlow at contact@spencerandthurlow.com.