Privacy Policy.
Privacy
Entity
Gilbert Lennard Executive Search
Effective
1 January 2026
Last Updated
March 2026
Jurisdiction
UAE & USA
Gilbert Lennard Executive Search (“Gilbert Lennard”, “we”, “us”, “our”) is committed to protecting the personal data of everyone we work with — candidates, clients, referees, and website visitors. This policy explains what data we collect, why we collect it, how we use it, and what your rights are.
We operate under the data protection laws of the United Arab Emirates (Federal Decree-Law No. 45 of 2021) and, where relevant, the United States. Where we engage with individuals in the EEA or UK, we additionally apply the standards of the GDPR and UK GDPR.
This policy applies to data collected via this website, through direct engagement with our team, and through third-party sources such as LinkedIn. It does not apply to third-party websites we may link to.
01
Who We Are
Gilbert Lennard is the data controller for all personal data collected through this website and our recruitment activities.
Legal Name
Gilbert Lennard Executive Search
Dubai Office
Dubai International Financial Centre, Dubai, UAE
Los Angeles Office
Beverly Hills, Los Angeles, CA 90067, USA
Data Contact
02
Data We Collect
The personal data we collect depends on your relationship with us. We collect only what is necessary for the purpose for which it is collected.
For Candidates this includes name, contact details, CV, employment history, qualifications, compensation expectations, interview notes, assessment results, and reference check responses. For Clients this includes contact details of individuals within client organisations, role briefs, and interview feedback. For Referees this includes name, role, and responses during a structured reference check. For Website Visitors this includes IP address, browser type, and pages visited via analytics, and any information submitted through contact forms.
We do not collect or process special category data — such as health information, ethnicity, or religious beliefs — unless strictly necessary and with your explicit consent.
03
How We Use It
We use personal data to provide executive search services, to communicate with you, and to improve how we operate. This includes identifying and assessing candidates for active mandates, approaching candidates with relevant opportunities, managing the recruitment process, conducting reference checks with prior candidate consent, fulfilling our obligations under a signed Terms of Business, communicating search progress to clients, and complying with applicable legal and regulatory obligations.
We do not use personal data for automated decision-making that produces legal or similarly significant effects without human involvement.
04
Legal Basis
Legitimate Interests
Identifying and approaching candidates for relevant roles, maintaining candidate and client records, and operating our business. We balance these interests against your rights.
Contract
Processing required to fulfil obligations to clients under a signed Terms of Business, or to a candidate where we are acting on their behalf.
Legal Obligation
Where required by law — for example, for compliance, tax, or regulatory purposes.
Consent
For activities not covered above — such as reference checks or mailing lists. You may withdraw consent at any time.
08
Sharing Data
We share personal data only where necessary and only with parties bound by appropriate confidentiality or data protection obligations. Candidate profiles and assessment results are shared with the specific client that has commissioned the search — candidates are made aware of this before their profile is submitted.
We use a small number of third-party platforms — including our CRM and candidate portal — which process data on our behalf under data processing agreements. We do not sell data to any third party.
We may disclose personal data where required by law, court order, or regulatory authority — including the DFSA in Dubai or applicable US regulatory bodies.
We never sell, rent, or trade personal data with third parties for marketing or commercial purposes.
06
How Long We Keep It
Active Candidates
Duration of an active search and up to 3 years thereafter, unless you request deletion sooner.
Placed Candidates
Up to 7 years following placement, for business record-keeping and legal purposes.
Client Contacts
Duration of the business relationship and up to 7 years thereafter.
Reference Check Notes
Up to 3 years following the relevant search.
Website Analytics
Aggregated and anonymised — up to 26 months.
07
Your Rights
Depending on your location and applicable law, you have the following rights. We will respond to all requests within 30 days.
Access
Rectification
Erasure
Restriction
Portability
Objection
Withdraw Consent
Complain
To exercise any of these rights, contact us at [email protected].
05
Security
We implement appropriate technical and organisational measures to protect data against unauthorised access, loss, alteration, or disclosure. All data in transit is encrypted using TLS. Access to personal data is restricted to team members who require it. Our candidate portal is password-protected and access is logged. In the event of a breach likely to result in risk to your rights, we will notify you and the relevant authority as required by law.
09
International Transfers
Gilbert Lennard operates in both the UAE and the United States. Personal data may be transferred between our offices and to third-party service providers in other countries as part of normal business operations. Where data is transferred outside jurisdictions recognised as offering adequate data protection, we ensure appropriate safeguards are in place — including standard contractual clauses or equivalent mechanisms where required.
10
Cookies
Our website uses a small number of cookies. We do not use advertising or tracking cookies.
Essential
Required for the website to function. These cannot be disabled.
Analytics
Aggregate and anonymised data on how visitors use the site. No personal identification.
Preference
Remember choices you have made, such as cookie consent status.
11
Changes to This Policy
We may update this Privacy Policy from time to time. The date at the top of this page reflects when it was last updated. Where changes are material, we will take reasonable steps to notify individuals whose data we hold. Continued use of our website after a change has been published constitutes acceptance of the updated policy.
12
Contact Us
If you have any questions about this Privacy Policy, wish to exercise your rights, or have a concern about how we have handled your personal data, please contact us.
Data Protection Contact
Gilbert Lennard Executive Search
Email: [email protected]
Dubai: Dubai International Financial Centre, Dubai, UAE
Los Angeles: Beverly Hills, Los Angeles, CA 90067, USA