PRIVACY POLICY

Drummond Board Advisory Privacy Policy

Drummond Board Advisory is a Board advisory and executive search firm operating globally across all sectors in both the public and private markets. It collects, uses and stores a variety of data on individuals for the purposes of Board advisory and executive search.

Drummond Board Advisory is committed to protecting the privacy of your personal data.  This statement summarises our policy regarding the collection, use and transfer of your personal data, the security measures Drummond Board Advisory employs to protect such data and your rights in relation to it.

This policy: 
Clarifies how long we keep your personal data for: 

  • Clarifies the legal basis, and how and why we collect and use your personal data 
  • States the effect of refusing to provide the personal data requested
  • Clarifies when, why and with whom we will share your personal data 
  • Sets out the types of personal data that we collect on you 
  • Clarifies your different rights and choices when it comes to your personal data 
  • Clarifies how we may contact you and how you can contact us
  • Which categories of data we collect and the sources we use 
  • Clarifies how we store and access your personal data 

What personal data do we collect on you? 
We collect information necessary to enable us to identify opportunities for you and also any further information needed to assess your eligibility through the different stages of a search process. This information may include:  

  • CVs, resumes and work history 
  • Remuneration data 
  • Employment references 
  • Educational records and checks
  • Assessments on fit for role

Classification of Data 
The personal data we collect in order to carry out our legitimate business interests includes: 

  • Name 
  • Address/location 
  • Education 
  • Career history 
  • Remuneration
  • Performance and suitability assessments 
  • Formal and informal references 
  • Telephone, email, video conferencing and other relevant contact information 
  • Profile picture (online sources) 

    We do not process sensitive personal data such as ethnic origin, political opinions, religious beliefs or physical or mental health information. If a client asks to see the diversity statistics for a search, we will always seek a candidate’s permission to store this information. Diversity statistics on areas of sensitive personal data will be kept anonymous when shared with the clients and will not be attributable to an individual candidate.

Data Sources 
The personal data used by Drummond Board Advisory is sourced from one or more of the following methods: 

  • Directly from you either by telephone, email, online and face to face contact 
  • From an agent/third party acting on your behalf.
  • By reference or word of mouth, e.g. you may be recommended by a friend, a former or current employer, or a former or current colleague
  • Through publicly available sources including company records, websites and press releases 
  • Other online sources including but not limited to LinkedIn and Boardex

How we store and access your data 
We store your personal data as follows: 

  • Our internal database to which only Drummond Board Advisory has access, and that access is password protected 
  • Typed or handwritten records taken from calls or face to face meetings which are then uploaded onto our internal database and shredded or stored in a locked cupboard 
  • Other data (documents, emails and contacts) is stored on our password protected IT system

How do we use your personal data? 
We use your personal data to match skills, experience and education with a potential employer. We will initially collect basic information on you such as contact details, role position and experience and pass this on to the client. If you are suitably qualified and interested in proceeding, we will, with your agreement, collect more information from you as the search process progresses  

How long do we keep your personal data for? 
For our legitimate business interests, personal data about clients and candidates is stored indefinitely, unless you request otherwise. Retaining contact with clients and candidates (both actual and prospective) and understanding an individual’s career and personal progression is a critical factor in our ability to carry out our legitimate business

Who do we share your personal data with? 
Your personal data is shared with the client who initiates a search for an individual, to ascertain whether you might be a fit for the position. We may also conduct checks on you to verify the information you have provided, and we may share details with the respective client in those circumstances.

What legal basis do we have for using your information? 
We will only collect and use personal data for the legitimate purposes of: 

  • Executing an Executive or Non-Executive Director search 
  • Providing Board advisory services.
  • Business development activities pursuant to conducting search or Board advisory assignments 
  • Collecting and using personal data to enable us to fulfil a contractual obligation

What happens if you do not provide us with the information we request, or ask that we stop processing your information? 
If you do not provide the personal data necessary, or request that we stop processing your personal data, we will not be able to match you with suitable search assignments. At your request, you will be removed from our database and will not be contacted by us in future. 

Do we make automated decisions concerning you? 
We do not carry out any form of automated exercise or process to determine suitability.

Do we share your data outside of the UK? 
To better match your profile with current opportunities, we may transfer your personal data to clients and Drummond Board Advisory Partner colleagues in countries outside the UK. These countries’ privacy laws may be different from those in your home country. Where we transfer data to a country which has not been deemed to provide adequate data protection standards, we have security measures and approved model clauses in place to protect your personal data.

What rights do you have in relation to the data we hold on you? 
By law, you have a number of rights when it comes to your personal data. Further information and advice about your rights can be obtained from the data protection regulator in your country.

Rights: What does this mean?  

  • The right to be informed. You have the right to be provided with clear, transparent and easily understandable information about how we use your information and your rights. 
  • The right of access. If we are processing your information, you have the right to obtain access to your information, and certain other information (similar to that provided in this Privacy Policy). To enable you to check that your information is being used in accordance with data protection law. 
  • The right to rectification. You are entitled to have your information corrected if it is inaccurate or incomplete. 
  • The right to erasure. Also known as ‘the right to be forgotten’, you can request the deletion or removal of your information where there is no compelling reason for us to retain it. This is not a general right to erasure; there are exceptions. 
  • The right to restrict. You have the right to suppress the further use of processing your information. When processing is restricted, we can still store your information, but may not use it further. We keep lists of individuals who have requested that further use of their information to be suppressed to ensure that the restriction is respected. 
  • The right to data portability. You have rights to obtain and reuse your personal data for your own purposes across different services. 
  • The right to object to processing. You have the right to object to certain types of processing, including processing for direct marketing (i.e. if you no longer want to be contacted in regard to potential opportunities).
  • The right to lodge a complaint. You have the right to lodge a complaint about the way we handle or process your personal data with your national data protection regulator. 
  • The right to withdraw consent. If you have given your consent to anything we do with your personal data, you have the right to withdraw your consent at any time (although if you do so, it does not mean that anything we have done with your personal data with your consent up to that point is unlawful). 

We act on requests and provide information free of charge, but may charge a reasonable fee to cover our administrative costs of providing the information for: 

  • Baseless or excessive/repeated requests, or 
  • Further copies of the same information

Alternatively, we may be entitled to refuse to act on the request.

Please consider your request responsibly before submitting it. We will respond as soon as we can. Generally, this will be within one month from when we receive your request. 

How will we contact you? 
We may contact you by telephone, email or social media. Please advise us if you prefer a particular mode of contact. 

How can you contact us? 
If you are unhappy with how we have handled your information, or have further questions on the processing of your personal data, contact us at: linda@drummondboardadvisory.com