Privacy Policy

Last Updated: April 2026

1. Introduction

CJPI Ltd (“CJPI”, “we”, “us”, or “our”) is committed to protecting the privacy and personal data of our clients, candidates, and website visitors. This policy outlines how we handle your data in compliance with:

  • The Data (Use and Access) Act 2025

  • The UK General Data Protection Regulation (UK GDPR)

  • The Data Protection Act 2018

  • The Privacy and Electronic Communications Regulations (PECR)

By using our website or submitting data to us, you acknowledge the practices described in this policy.

2. The Personal Data We Collect

We collect and process personal data through three primary channels:

  • Direct Interactions: Information you provide via contact forms or email, including your name, email address, and professional history.

  • Executive Search & Applications: CVs, cover letters, employment history, qualifications, and telephone numbers provided for recruitment purposes.

  • Automated Collection: When you visit our site, we use cookies and analytics to collect technical data (IP address, browser type, device info, and browsing behavior).

3. How We Use Your Data

We process your data under the following lawful bases:

  • Legitimate Interests: To evaluate candidate suitability for executive roles and to respond to business enquiries.

  • Legal Obligation: To meet regulatory requirements or verify right-to-work status.

  • Consent: For marketing communications or specific cookie tracking (which you may withdraw at any time).

4. Your Rights & Modern Enhancements

Under the Data (Use and Access) Act 2025, your rights have been clarified and updated:

  • Access Requests (DSARs): You have the right to request a copy of your data. Please note that we are required to conduct “reasonable and proportionate” searches. If we require clarification to fulfill your request, we may “stop the clock” on our 30-day response deadline until that clarification is received.

  • Automated Decision-Making: As an executive search firm, we may use software to assist in the initial screening of candidates. You have the right to request human intervention in any decision that has a significant legal or professional effect on you.

  • Correction and Erasure: You may request that we correct inaccuracies or delete your data where it is no longer necessary for the purposes collected.

5. Mandatory Complaints Procedure

In accordance with statutory requirements, we have established a formal internal complaints procedure:

  1. Submission: If you have a concern regarding your data, please contact us at [email protected].

  2. Acknowledgement: We will acknowledge your complaint within 30 days.

  3. Resolution: We aim to provide a full response without undue delay.

  4. Escalation: If you remain unsatisfied after our internal review, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO).

6. Data Sharing and Security

We do not sell your personal data. We only share information with:

  • Prospective Employers: Only where you have applied for a specific role and given consent.

  • Service Providers: Secure third-party tools (e.g., Google Analytics, Mailchimp) that comply with UK data standards.

  • Legal Authorities: If required by law to prevent fraud or protect our legal rights.

We implement robust technical and organisational measures, including encryption and strict access controls, to safeguard your information.

7. Data Retention

  • Candidates: We typically retain CVs and professional profiles for 7 years to ensure we can reach out regarding future high-level opportunities, unless you request deletion.

  • Enquiries: Contact form data is retained only as long as necessary to resolve your request.

Contact Information

For any questions regarding this policy or to exercise your data rights, please reach out to our data privacy lead:

  • Email: [email protected]

  • Phone: +44 (0)333 242 2404

  • Post: CJPI Ltd, 27 Old Gloucester Street, London, WC1N 3AX