Privacy Policy

Briefcase Consulting Limited ("Briefcase Consulting", "we", "us", or "our") respects your privacy and is committed to protecting your personal data. This privacy notice explains how we collect, use, disclose, and safeguard your personal data when you interact with us, including through our website, by email, telephone, or written correspondence.

1. Important Information and Who We Are

This privacy notice aims to give you information on how Briefcase Consulting collects and processes your personal data, including any data you may provide through our website or in relation to our recruitment services. Our services are not intended for individuals under 18 years of age, and we do not knowingly collect data relating to children.

Briefcase Consulting Limited is the data controller and responsible for your personal data. We are a company registered in England and Wales under registration number 16553778 and with our registered office at:

71–75 Shelton Street, Covent Garden, London WC2H 9JQ

We have appointed a Data Privacy Manager, who is responsible for overseeing questions in relation to this privacy notice.

You can contact us at: mrobertson@briefcase-consulting.com

You have the right to make a complaint at any time to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection: www.ico.org.uk | Telephone: 0303 123 1113. However, we would appreciate the chance to deal with your concerns before you approach the ICO. Please contact us in the first instance.

2. The Data We Collect About You

We may collect, use, store, and transfer the following types of personal data:

- Identity Data: Full name, title, date of birth, gender, marital status.
- Contact Data: Email address (personal and/or business), phone numbers, postal address.
- Professional Data: Job title, employment history, current and previous employers, academic and professional qualifications, notice period, salary expectations.
- Recruitment Data: CVs, cover letters, interview feedback, role applications, preferences, and notes from calls or meetings.
- Technical Data: IP address, browser type/version, time zone setting, device type, operating system, and platform.
- Usage Data: Information about how you use our website and interact with us online.
- Marketing and Communications Data: Preferences in receiving marketing from us and your communication preferences.

We do not collect any Special Category Data unless you voluntarily provide it and only where lawful to do so. We do not knowingly collect data relating to children.

3. How We Collect Your Personal Data

We collect data using the following methods:

- Direct interactions: You may provide personal data by submitting your CV, completing forms, or corresponding with us.
- Automated technologies: As you interact with our website, we automatically collect technical data via cookies and similar technologies.
- Third-party or publicly available sources: Professional or social media platforms, law firm websites, legal publications, and referees.
- Embedded systems: When you submit information through our website (e.g., via registration forms or job applications), the data is entered directly into a secure third-party CRM system through embedded iframe forms. We do not store this personal data directly on our website servers.

4. Legal Basis for Processing Personal Data

Our platform may use automated decision-making features to assist in matching candidates with job opportunities. These processes are designed to enhance efficiency and consistency in recruitment outcomes. You have the right to request human intervention, express your point of view, or contest decisions made by automated means where legally required.

We process your personal data based on: performance of a contract, legitimate interests, consent (where applicable), and legal obligations.

5. How We Use Your Personal Data

We use your personal data to: provide recruitment services; match candidates with roles; manage applications; communicate opportunities; improve our site; and maintain records. All submitted data is securely processed via our third-party CRM system.

6. Marketing Communications

We may send you relevant job opportunities and insights. You can opt out anytime via the 'unsubscribe' link or by contacting us. We do not sell your data.

7. Sharing Your Personal Data

We share data only with your consent, including with clients, CRM providers, IT support, or legal advisors, and always under confidentiality.

8. International Transfers

We do not routinely transfer data outside the UK/EEA. If required, it will only occur with your consent and under appropriate safeguards.

9. Cookies and Website Data

We use cookies, including Google Analytics, to understand site usage and improve performance. Google may process and store data externally. You may manage or disable cookies in your browser or opt out using Google's browser add-on.

10. Data Security

We are working towards ISO/IEC 27001 compliance and follow strong data protection practices including access control, encryption, and breach response procedures. Our third-party CRM also applies strong security controls.

10a. Data Hosting and Embedded Systems

We use a third-party CRM system to manage personal data submitted via our website. The system is accessed through secure iframe forms and includes robust security features. We do not store personal data locally on our servers.

11. Data Retention

We retain data only as long as necessary for recruitment or legal purposes. Candidate data may be retained up to 2 years unless deletion is requested.

12. Your Legal Rights

We also uphold your rights as outlined in the Human Rights Act 1998, ensuring your data is handled with respect for your privacy and personal freedoms.

You have rights to access, correct, erase, restrict or object to processing, and withdraw consent. Contact mrobertson@briefcase-consulting.com to exercise them.

13. Changes to This Privacy Notice

We may update this policy. The latest version will always be published on our website.