Last updated: April 2026
Hartmann Young Limited (“we”, “us”, “our”) is committed to protectingand respecting your privacy. This Privacy Policy explains how we collect, use,store, and share personal data in accordance with applicable data protectionlaws, including the UK General Data Protection Regulation (“UK GDPR”), the DataProtection Act 2018, and, where applicable, the EU General Data ProtectionRegulation (“EU GDPR”).
This Policy applies to personal data collected when you visit ourwebsite at www.hartmannyoung.com, when you interact with us in connection with our executive search,recruitment, consulting, and assessment services (the “Services”), and when weprocess personal data in the course of providing those Services to our clients.It also explains your rights and how you may exercise them.
Hartmann Young Limited is a company registered in England and Walesunder company number 10393002, with its registered office at Toronto Square,Toronto Street, Leeds, LS1 2HJ, United Kingdom.
For the purposes of applicable data protection law, we act as a datacontroller where we determine the purposes and means of processing personaldata, including in relation to candidate sourcing, database management, andmarketing activities. In certain circumstances, we may act as a data processorwhere we process personal data strictly on behalf of, and in accordance withthe instructions of, our clients.
This Policy applies to individuals whose personal data we process in thecourse of our business, including candidates and prospective candidates,clients and their employees, referees, sources who provide market intelligence,and individuals who interact with our website or receive marketingcommunications from us.
We collect and process a range of personal data depending on the natureof our relationship with you. This may include basic contact information suchas your name, email address, telephone number, job title, and employer. In thecase of candidates, we may also process more detailed professional information,including curriculum vitae, employment history, qualifications, skills,professional memberships, publications, interview notes, and assessmentoutcomes.
In limited circumstances, and only where lawful, we may process specialcategory data, such as diversity information or health-related data, where youhave provided explicit consent or where such processing is otherwise permittedby law.
We may also process personal data relating to referees and sources,including their contact details, professional relationship to a candidate, andopinions or assessments they provide. In addition, we collect certain technicaldata when you use our website, such as IP address, browser type, and usage datathrough cookies and similar technologies.
We collect personal data directly from you when you provide informationto us, for example when you apply for a role, submit your CV, communicate withus, or engage with our Services. We also collect personal data from thirdparties, including clients, referees, sources, and publicly available sourcessuch as professional networking platforms and company websites.
In addition, we collect certain information automatically through youruse of our website, including via cookies and analytics tools, as describedfurther below.
Given the nature of executive search and recruitment services, we maycollect personal data about you from third-party sources without havingobtained it directly from you. In such cases, we will provide you with theinformation required under applicable data protection law within a reasonableperiod, and no later than one month after obtaining your data, unless anexemption applies.
This information will include the categories of personal data processed,the source from which the data was obtained, the purposes of processing, andyour rights in relation to that data. Sources of such data may include publiclyavailable professional profiles, industry databases, referrals, and marketresearch activities.
We process personal data for a number of purposes connected with ourbusiness activities. These include identifying and contacting potentialcandidates, assessing suitability for roles, facilitating recruitmentprocesses, conducting market mapping and research, managing relationships withclients, and providing our Services more generally.
We also process personal data for business development and marketingpurposes, including sending communications about our Services, events, andinsights, where permitted by law. In some cases, we may process data fordiversity monitoring, service improvement, and compliance with legalobligations.
Our lawful basis for processing depends on the context. In many cases,we rely on our legitimate interests in operating and developing our business,particularly in relation to recruitment activities and maintaining professionalnetworks. Where appropriate, we rely on contractual necessity, for examplewhere processing is required to deliver Services to a client. We may also relyon consent, particularly in relation to marketing communications or theprocessing of special category data, and on legal obligations where processingis required by law.
Where we rely on legitimate interests as a lawful basis, these interestsinclude providing executive search and recruitment services, identifyingsuitable candidates, maintaining and developing business relationships, andimproving our Services. We carry out appropriate assessments to ensure thatsuch interests are not overridden by your rights and freedoms. You have theright to object to processing carried out on this basis at any time.
We will only process special category data where you have providedexplicit consent or where we are otherwise permitted to do so under applicablelaw. Where consent is relied upon, you have the right to withdraw that consentat any time.
We may share personal data with our clients where this is necessary forrecruitment purposes, as well as with trusted third-party service providers whosupport our business operations, including IT systems, hosting providers, andassessment providers. We may also disclose personal data to professionaladvisers and to regulatory or governmental authorities where required to do soby law.
We take steps to ensure that all third parties process personal data inaccordance with applicable data protection laws and appropriate contractualsafeguards.
Due to the international nature of our business, personal data may betransferred to, and processed in, countries outside the United Kingdom or theEuropean Economic Area. Where such transfers take place, we ensure thatappropriate safeguards are in place, such as the use of Standard ContractualClauses, the UK International Data Transfer Addendum, or transfers tojurisdictions recognised as providing an adequate level of protection.
Further information about these safeguards may be obtained by contactingus.
We retain personal data only for as long as necessary to fulfil thepurposes for which it was collected and to comply with legal and regulatoryobligations. In general, candidate data is retained for up to two years fromthe date of last meaningful contact, client data is retained for the durationof the business relationship and for a period thereafter in line with legalrequirements, and marketing data is retained until you opt out or after aperiod of inactivity. Referee and source data is typically retained for asimilar period to candidate data.
Where personal data is no longer required, it is securely deleted oranonymised.
Under applicable data protection law, you have a number of rights inrelation to your personal data. These include the right to access your data, torequest correction of inaccurate data, to request deletion of your data, torestrict or object to processing, and to request the transfer of your data toanother party. Where processing is based on consent, you have the right towithdraw that consent at any time.
You also have the right to object to the processing of your personaldata for direct marketing purposes. In addition, you have the right to lodge acomplaint with the Information Commissioner’s Office (ICO) if you believe thatyour data has been processed unlawfully.
We do not carry out solely automated decision-making that produces legalor similarly significant effects on individuals.
We use cookies and similar technologies to ensure the proper functioningof our website, to analyse usage, and to improve user experience. Whererequired by law, we will obtain your consent before placing non-essentialcookies on your device. You may manage your cookie preferences through ourwebsite or your browser settings.
We implement appropriate technical and organisational measures toprotect personal data against unauthorised access, loss, misuse, alteration, ordisclosure. While we take reasonable steps to safeguard personal data, nosystem can be guaranteed to be completely secure.
Where you provide us with personal data relating to another individual,such as a referee, you are responsible for ensuring that the individual isaware of this disclosure and has been provided with a copy of, or access to,this Privacy Policy.
We may update this Privacy Policy from time to time to reflect changesin legal requirements or our processing activities. Any updates will bepublished on our website and will take effect from the date of publication.
If you have any questions about this Privacy Policy or wish to exerciseyour rights, you may contact us at:
Email: hello@hartmannyoung.com
Post:
Data Protection Officer
Hartmann Young Limited
Toronto Square, Toronto Street
Leeds, LS1 2HJ
United Kingdom