Privacy Policy

Introduction Carlyle is an advisory Search firm that undertakes executive and non-executive mandates across the UK. In addition to Executive Search, Carlyle operates dedicated Senior Interim and Board & Advisory practices, which focus on identifying and attracting the best non-permanent talent for senior, board and advisory roles.

This privacy notice aims to give you information on how we collect and process your personal data through your use of our Site and/or Services. This version was last updated on the 29th October 2019

The information we collect and process Candidate Information

  • Personal Details : Includes first name(s), maiden name, surname, title, date of birth
  • Contact Details: Includes billing address, delivery address, email address and telephone numbers. Links to relevant social media profiles such as LinkedIn may also be collected.
  • Employment Data: Includes start date, location of employment or workplace, performance information and compensation history.
  • Recruitment Data: Copies of right to work documentation, references and other information included in a CV or cover letter or as part of the application process, employment records.
  • Financial & Transaction Data: Bank account details and details about payments to and from you (in relation to Carlyle only) and other details of services you have purchased from us. Client or Supplier Information This will include basic contact information, and also information about your role and other relevant information provided to us by your organisation. Carlyle Website & Social Media Information
  • Technical Data: Internet Protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform and other technology on the devices you use to access the site.
  • Website User Profile Data: May include your unique account reference number, preferences, feedback and survey responses. May also include how you use our site and services (Usage Data). Marketing and Communications Data: Includes your preferences in receiving marketing from us and our third parties and your communication preferences. Aggregated Data Includes statistical or demographic data for any purpose. Aggregated data may be derived from your personal data but is not considered personal data by law as this data does not directly or indirectly reveal your identity.

How we collect information

Direct Interactions: You may give us your Identity, Contact and Financial Data by filling in forms or corresponding with us by post, phone, email or otherwise. This includes personal data you provide when you: apply for our Services, attend an event with us, request marketing to be sent to you, or give us feedback. Third parties or publicly available sources: We may receive personal data about you from various third parties and public sources as set out below:

  • Technical Data from the following parties: Analytics providers such as Google based outside the EU; advertising networks; and search information providers.
  • Contact, Financial and Transaction Data: From providers of technical, payment and delivery services.
  • Identity and Contact Data: From event partners and publicly available sources such as LinkedIn and the Electoral Register based inside the EU.
  • Identity and Contact Data: As well as information about criminal offences and convictions, from criminal and identity search providers such as Know Your Candidate.

Legal basis for processing your personal information The lawful basis for processing your personal information are set out in Article 6 of the GDPR. One of the following bases will apply whenever your personal data is processed:

  • Consent: the relevant party has given clear consent for Carlyle to process their personal data for a specific purpose.
  • Contract: the processing is necessary for a contract held between Carlyle and the relevant party, or because the party has asked Carlyle to take specific steps before entering into a contract.
  • Legal Obligation: the processing is necessary for Carlyle to comply with the law
  • Legitimate Interests: the processing is necessary for Carlyle’s legitimate interests of the legitimate interests of a third party, unless there is a good reason to protect the individual’s personal data which overrides those legitimate interests. For further information regarding the lawful basis of processing personal data, please consult the following GDPR legislation: Click here

How Carlyle uses your personal data Clients and Candidates: To register you as a new Client (through your Employee) or Candidate, including prospective Candidates. To process and deliver the following Services: Manage payments, fees and charges; or to collect and recover money owed to us. For Candidates to provide advice on available opportunities and details on current openings, and where appropriate sending to our clients and relevant third parties. For Clients (and your Employees) to provide advice on the available Candidates. To manage our relationship with you which will include: Notifying you about changes to our terms or privacy policy. Asking you to provide a review. Provide you with information on upcoming events, potential opportunities and available Candidates, as well as organising your attendance at our events. To administer and protect our business and our site (including troubleshooting, data analysis, testing, system maintenance, support, reporting and hosting of data). To deliver relevant site content and advertisements to you and measure or understand the effectiveness of the advertising we serve to you. To use data analytics to improve our site, products/services, marketing, customer relationships and experience.

Marketing Carlyle may use your Identity, Contact, Technical, Usage and Profile Data to form a view on what we think you may want or need, or what may be of interest to you. From this information, Carlyle can decide which events, content, products and services may be relevant to you and send to you through our marketing messages. You may receive marketing messages from us if you have requested information from us, attended an event with us or purchased services from us and you have not opted out of receiving marketing communications.

Change of Purpose Carlyle will only use your personal data for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason, and this reason is compatible with the original purpose. If the relevant party wishes to receive an explanation as to how the processing for the new purpose is compatible with the original purpose, please get in touch via our Contact Us page. If Carlyle needs to use your personal data for an unrelated purpose, we will notify you and we will explain the legal basis which allows us to do so. Please note that we may process your personal data without your knowledge or consent, in compliance with the above rules, where this is required or permitted by law.

Where personal data is held & Data Security Collected personal information of all relevant parties outlined in section 1 is stored on an internally centralized database that is accessible by all direct Carlyle employees. The database is only accessible to approved Carlyle team members with a secure login account. This database will NOT be accessible to any user who does not own an approved internal account or who is not under the direct employment of Carlyle. The personal data stored in this database will only made available to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on Carlyle’s instructions and are subject to a duty of confidentiality.

Disclosure of personal data to third parties Carlyle may have to share your personal data with the parties set out below: Clients and their Employees to assess your suitability for employment within their business. Service providers based within the EU who provide marketing, IT management and support systems. Third parties to whom we may choose to sell, transfer, or merge parts of our business or our assets. Alternatively, we may seek to acquire other businesses or merge with them. If a change happens to our business, then the new owners may use your personal data in the same way as set out in this privacy police. Third party suppliers and co-hosts for event planning and coordination where you indicate to us you would like to attend. Carlyle requires all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with our instructions.

Data retention Your personal information will only be retained as long as necessary to fulfil the purposes it was collected for, including for purposes of satisfying any legal, accounting, or reporting requirements. To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.

Your legal rights Under data protection laws in relation to your personal data, certain circumstances grand the following rights: Access to information: the right to request a copy of the information Carlyle holds about you. Accuracy of information: Carlyle wants to make sure your personal information is accurate and up-to-date. You may ask Carlyle to correct or complete information that is not wholly accurate. Right to erasure: You may have the right to erasure, more commonly known as the ‘right to be forgotten’. This means that in certain circumstances you can require Carlyle to delete personal information held about you. Ability to restrict processing: You may also have the right to require Carlyle to restrict the use of your personal information in certain circumstances e.g. if the information is incorrect and you wish Carlyle to stop using it until it has been corrected. Right to data portability: You may have the right to receive personal data Carlyle holds about you in a format that enables you to transfer it to another data controller. Review by an independent authority: You will always have the right to lodge a complaint with a supervisory body such as the Information Commissioner’s Office (ICO) click here Preventing direct marketing: Carlyle does not sell your personal data. From time to time, Carlyle may send emails containing information about new features and other news about our business. This is considered direct marketing. Carlyle will always inform you if we intend to use your personal data or if we intend to disclose your information to a third party for any such purpose. Objecting to other uses of your information: You may also have the right to object to Carlyle’s use of your information in other circumstances. In particular, where you have consented to Carlyle’s use of your personal data, you have the right to withdraw such consent at any such time.

Cookies Cookies are files saved on your phone, tablet or computer when you visit a website. We use cookies to store information about how you use the CARLYLEASSOCIATES.CO.UK website, such as the pages you visit. Most web and mobile device browsers automatically accept cookies but you can change your browser to prevent this, or to notify you each time a cookie is sent. Please not however, blocking or deleting cookies used on the site may prevent you from taking full advantage of the site. Carlyle makes use of the following specific cookies: First Party Cookies: Cookies that are stored by our website. Only we can read them. Session Cookies: These are stored while you browse our site and are then deleted once you leave. Third Party Cookies & Performance Cookies: Google Analytics to measure how you use the website so we can improve it based on user needs. Google Analytics sets cookies that store anonymised information about: How you got to the site. The pages you visit on CARLYLEASSOCIATES.CO.UK and how long you spend on each page What you click on while you’re visiting the site. Cookies that help with our communications and marketing These cookies may be set by third party websites such as LinkedIn to measure which channels its users access their site via. In Carlyle’s case it would be through our social links found on the footer of each page on our website.

Contact details Carlyle has an appointed data privacy manager who is responsible for overseeing questions in relation to this privacy notice. If you have any questions about this privacy notice, including requests to exercise your legal rights set above. You can contact the data privacy manager by using the contact details below:

Carlyle Associates Limited, trading as Carlyle Associates Data Privacy Manager: Carol-Ann Searles Email Address: info@carlyleassociates.co.uk
Postal Address: 32 Charlotte Square, Edinburgh, Scotland, EH2 4ET Telephone Number: 0131 625 5000