Privacy Policy
Last updated: July 22, 2026
1. Who we are and what this covers
Praeva Partners Limited (“Praeva”, “we”, “us”) is an executive search firm. We are the data controller for the personal data described in this notice and are registered with the Information Commissioner’s Office (registration ZC048110). Contact: privacy@praevapartners.com, or Praeva Partners Limited, Airedale House, Albion Street, Leeds LS1 5AP (registered office).
This notice covers: visitors to praevapartners.com (section 2); candidates (section 3); clients, referees and sources (section 4). Sections 5 onwards apply to everyone.
2. Website visitors
Through the website we collect information you send us (for example via our contact form or by emailing an address published on the site: your name, contact details and the content of your message) and technical and analytics data (IP address, browser type, pages visited and similar usage data, collected via cookies and analytics tools — see section 5).
We use this to respond to enquiries, to provide and improve our services and site, and to understand how the site is used. Our legal bases are our legitimate interests (running and promoting our business), your consent (for non-essential cookies and any marketing you opt into), and steps taken to enter into a contract with you. Enquiry correspondence is kept for two years from our last contact unless it leads to an ongoing relationship.
3. Candidates
You may give us your personal details directly (by email, phone, a meeting, or via our website), or we may obtain them from another source such as LinkedIn, professional networks, published sources, a referee, or a recommendation.
What we hold
- Name, contact details and location
- CV, career history, qualifications, current and expected remuneration
- Interview and assessment notes, references, and our correspondence with you
- Details of roles we have discussed with you and clients we have introduced you to
Special categories of personal data (for example health or diversity information) are collected only where necessary and with an appropriate lawful basis – usually your explicit consent.
Why, and our legal basis
We process candidate data to provide work-finding services: contacting you about opportunities, assessing suitability, presenting you to clients with your agreement, arranging interviews and offers, and managing our relationship with you. Our legal bases are our legitimate interests (maintaining our candidate database, providing search services to candidates and clients, contacting you about relevant opportunities), your consent where we ask for it (including before presenting you to a specific client), compliance with legal obligations, and contract.
Where your data comes from
Where we did not obtain your data from you directly, we will have sourced it from LinkedIn or other professional/published sources, referees, recommendations from our network, or our clients. Some of this may come from publicly accessible sources. We will provide this notice when we first communicate with you.
How long we keep candidate records
The Conduct of Employment Agencies and Employment Businesses Regulations 2003 require us to keep work-seeker records for at least one year after we last provide work-finding services. As an executive search firm we maintain long-term relationships with senior candidates, so we retain candidate records under our legitimate interests for four years from our last meaningful contact, after which we review whether continued retention is justified and delete or anonymise records where it is not.
4. Clients, referees and sources
Client contacts
We hold business contact details, role and organisation information, and our correspondence with you. We use this to deliver and manage search engagements, maintain our relationship, and tell you about our services. Our legal bases are performance of a contract, our legitimate interests (running and promoting our business), and legal obligation. Client records are kept for six years after the engagement ends, in line with our retention schedule. We may also share limited business contact details, in hashed form, with advertising platforms (LinkedIn, Meta) so that our advertising reaches relevant professional audiences – you can object at any time via privacy@praevapartners.com.
Referees and sources
If a candidate names you as a referee, or you provide input on a candidate as a source, we hold your name, contact details, your relationship to the candidate, and the opinions you give. We use this solely for assessing candidates as part of a search, under our legitimate interests. Reference information is retained with the relevant candidate record. If you would prefer not to be contacted for references, tell us at privacy@praevapartners.com and we will record that.
5. Cookies and analytics
Cookies are small text files placed on your device by websites you visit. We use them to make the site work, to measure how it is used, and to improve it. Non-essential cookies are set only with your consent, which you can give or withdraw through the cookie banner at any time.
- Essential – cookies from our website platform (Webflow) that make the site work. Always on.
- Analytics – Google Analytics 4, which gives us anonymous statistics about how the site is used. Only with your consent.
- Advertising – Google Ads, Meta Pixel and LinkedIn Insight Tag. Only with your marketing consent – see below.
- Video – embedded YouTube/Vimeo players, in privacy-enhanced mode where available.
The specific cookies in each category, and how long they last, are listed in our Cookie Policy at praevapartners.com/legal-pages/cookie-policy, which our consent tool generates and keeps up to date automatically. You can view and change your cookie choices via the cookie banner at any time.
With your consent, we use advertising cookies from Google, Meta and LinkedIn to show our advertising to people who have visited our site. These operate only if you accept marketing cookies through the banner, and you can withdraw consent at any time. Our tags are managed through Google Tag Manager in Consent Mode, which blocks them until consent is given. We never use candidate information to build advertising audiences.
We use IP addresses to analyse trends, administer the site and gather aggregate demographic information; they are not linked to personally identifiable information. Our site may link to external websites – we are not responsible for their privacy practices.
6. How we use AI
We use AI assistants on paid business accounts to support research, drafting and working with our own systems. Under our agreements with these providers, data we submit is not used to train their models. Where AI features operate inside our recruitment software, the provider acts as our processor under contract. We do not put special categories of personal data into general-purpose AI tools.
AI never makes decisions about you. Every judgement in our search work – who to approach, who to present, who to appoint – is made by people. We do not carry out automated decision-making or profiling that produces legal or similarly significant effects (UK GDPR Article 22). If you have questions about our use of AI, or would prefer we limit it in relation to your data, contact privacy@praevapartners.com.
7. Who we share personal data with
- Clients – organisations to whom we may introduce candidates (private, investor-backed businesses and their investors), always with the candidate’s prior agreement for a specific role
- Referees and former employers, when taking references with the candidate’s knowledge
- Service providers who host or support our systems – our CRM and recruitment software providers, Microsoft 365, our website and analytics providers, our AI providers and our IT support provider
- Advertising platforms – Google, Meta and LinkedIn: cookie data you have consented to and, for business contacts only, hashed contact details for audience matching. Never candidate information.
- Professional advisers – accountants, legal advisers and insurers – and auditors assessing our compliance
- The Recruitment and Employment Confederation (REC) and regulators or law enforcement where required by law
We do not sell personal data.
8. Overseas transfers
Praeva operates in the UK. Some of our service providers may store or process data outside the UK/EEA (for example cloud hosting). Where that happens we ensure an adequate level of protection through UK adequacy regulations, the UK International Data Transfer Agreement or equivalent safeguards.
9. Retention
We keep personal data only as long as necessary for the purpose we collected it, in line with our internal Retention Schedule. Key periods are stated in the sections above; different laws may require us to keep certain records (for example financial records) for longer.
10. Your rights
You have the right to be informed; of access; to rectification; to erasure in certain circumstances; to restrict processing; to data portability; to object to processing based on legitimate interests; not to be subject to automated decision-making; and to withdraw consent at any time. To exercise any right, contact privacy@praevapartners.com.
11. Security
We protect personal data through access controls and password management, multi-factor authentication on our core systems, encrypted cloud services, and limiting access to those who need it for their role. Email and the internet are not fully secure, so we cannot guarantee the security of information in transit to or from us.
12. Changes and complaints
We will update this notice from time to time and post changes here with a revised date; material changes will be flagged on this page. If you have a concern about how we handle your data, please contact privacy@praevapartners.com first so we can try to resolve it. You also have the right to raise concerns with the Information Commissioner’s Office on 0303 123 1113 or at https://ico.org.uk/make-a-complaint/.