How we handle personal information.

GracePeak Global Search (“GracePeak”, “we”, “us”) is a global executive search and leadership advisory firm. We are the controller of the personal information described in this policy.

For any question about this policy, or to exercise the rights described in section 10, write to contact@gracepeakglobal.com.

This policy covers personal information we process through this website, and in the course of providing search and advisory services. That includes information about:

From website visitors: the name, work email, company, topic, market and message you submit through the enquiry form; your cookie and consent preferences; and technical information such as IP address, browser and device type, which our hosting provider processes to deliver and secure the site.

From candidates and prospective candidates: career history, current and previous roles, education and qualifications, professional achievements, publications and public professional profiles, compensation information and expectations, location and mobility preferences, work authorisation status where relevant, availability, our own assessment notes and interview records, and feedback from referees.

From client contacts: business contact details, role and organisation, and the information exchanged in the course of a mandate.

From other sources: professional networks and public profiles, company websites, published research and industry press, conference and publication records, referrals from our network, and information a client shares with us about a role or an organisation.

We may collect information about you from these public and third-party sources without contacting you first. This is standard practice in executive search, and it is why the lawful basis in section 4 and the rights in section 10 matter.

We process personal information for the purposes below. Where the UK or EU GDPR applies, the lawful basis is given in brackets.

We do not seek special category data — such as health, racial or ethnic origin, religious belief, or trade union membership — and we ask candidates not to include it. Where such information is unavoidable (for example, an accommodation needed for an interview, or work authorisation status that reveals nationality), we process it only where we have an appropriate lawful basis, and normally with your explicit consent.

We do not use automated decision-making that produces a legal or similarly significant effect on you. Our systems assist research; a senior partner makes the judgment.

We do not sell personal information, and we do not share it for cross-context behavioural advertising.

We share personal information with:

We operate across China, the United States, Europe, the United Kingdom, Japan, Singapore, the Middle East and Australia, and personal information moves between those locations as part of running a cross-border search.

Where personal information is transferred out of the UK or the European Economic Area to a country without an adequacy decision, we rely on the UK International Data Transfer Agreement or the European Commission's Standard Contractual Clauses, together with a transfer risk assessment. Transfers involving personal information collected in mainland China are made in accordance with applicable Chinese personal information protection law.

You can ask us for details of the safeguards that apply to a specific transfer.

Enquiries sent through this website are retained for as long as needed to respond and to keep a record of the conversation, and are then deleted.

Candidate information is retained for as long as it remains relevant to our talent network, and is reviewed periodically. Information that is out of date, or that belongs to someone who has asked us to stop, is deleted or anonymised.

Records relating to a completed mandate are retained for the period required by our contractual, tax and professional obligations.

You can ask us to delete your information at any time — see section 10.

Access to candidate and client information is limited to the people who need it for a mandate. Data is encrypted in transit, held in access-controlled systems, and our partners and staff are bound by confidentiality obligations.

Confidentiality runs in both directions: we treat what a client tells us about a role, and what a candidate tells us about their situation, as equally protected.

Depending on where you live, you may have the right to:

California residents have the right to know what personal information we collect, to have it deleted or corrected, to opt out of its sale or sharing, and not to be discriminated against for exercising those rights. We do not sell personal information and we do not share it for cross-context behavioural advertising. Residents of other US states with comprehensive privacy laws have comparable rights, which we honour on the same basis.

To exercise any of these rights, write to contact@gracepeakglobal.com. We will verify your identity before acting on a request.

This site is built to work without tracking. We use only what is strictly necessary to serve the site securely, plus a single stored preference recording your own consent choice so that we do not ask again on every page.

We set no analytics, advertising or profiling cookies unless you have accepted them. You can change or withdraw your choice at any time via “Cookie settings” in the footer, and through your browser settings.

We update this policy when our practices change. The effective date at the top of this page tells you which version you are reading. Material changes will be highlighted on this page.

Questions, requests or complaints about this policy: contact@gracepeakglobal.com.