Executive search involves sensitive information about people's careers. Kleboe Ltd treats data protection as a core responsibility, not an afterthought.
Our framework
We comply with the UK GDPR, the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations 2003. Kleboe Ltd is registered with the Information Commissioner's Office as a data controller.
Our principles
- Lawful and transparent: we tell people how we use their data, in our privacy notice and candidate privacy notice.
- Purpose-limited and minimal: we collect only what a search needs.
- Accurate: we keep records up to date and correct them on request.
- Time-limited: we follow a retention schedule and delete data we no longer need.
- Secure: see our information security statement.
- Accountable: we keep records of our processing and review them every year.
Retention schedule
- Candidate records: up to 12 months after last meaningful contact, reviewed every 12 months.
- Client contracts and invoices: six years after the end of the financial year.
- Unsuccessful enquiries: 12 months.
Suppliers
Every supplier who processes personal data for us is bound by a written data processing agreement under Article 28 UK GDPR.
Data breaches
We have a breach procedure. Where a breach is likely to result in a risk to people's rights, we report it to the ICO within 72 hours and tell those affected where needed.
Your rights
To make a subject access request or use any other data protection right, email enquiries@kleboe.co.uk. We respond within one month, free of charge.