Privacy Notice
Last updated: [DATE] — applies to innosearchpartners.com and all related correspondence with Innosearch Partners.
This notice explains what personal data Innosearch Partners collects, why, and what rights you have over it — whether you're a client contact submitting a hiring brief or a candidate we've approached about a role. It covers our activity in both the UK and the United States (New York).
1. Who we are
Innosearch Partners ("we", "us", "our") is a specialist executive search practice, founder-led by Ashley Miller, focused on infrastructure and systems roles within HFT hedge funds in London and New York.
For the purposes of UK GDPR and the Data Protection Act 2018, Innosearch Partners is the data controller for the personal data described in this notice.
Data controller: Ashley Miller, trading as Innosearch Partners
Operating jurisdiction: England, United Kingdom
Contact for privacy queries: ashley.m@innosearchpartners.com
Full correspondence details are available on request by emailing the address above.
2. What data we collect
If you're a client / hiring contact
- Name, business email address, and job title, where provided
- Information submitted via the mandate enquiry form on our website (location, hiring brief, contact email, urgency)
- Correspondence you send us by email or otherwise, and notes from calls or meetings related to a search
- Publicly available professional information (e.g. LinkedIn, company website) used to research a target firm or contact before outreach
If you're a candidate
- Name, contact details, CV/résumé, and career history
- Publicly available professional information (e.g. LinkedIn profile, professional publications)
- Notes from screening conversations, including technical discussion points relevant to assessing fit for a specific role
- Information you provide directly if you engage with us about a mandate
From our website generally
- Basic, aggregated analytics via Plausible, a privacy-focused analytics tool that does not use cookies and does not track individuals across sites. We do not use Google Analytics or third-party advertising trackers.
3. Why we process this data, and our legal basis
| Purpose | Legal basis (UK GDPR) |
|---|---|
| Responding to a mandate enquiry or hiring brief | Legitimate interests — taking pre-contractual steps at your request |
| Researching and approaching a candidate about a specific role | Legitimate interests — professional recruitment outreach, proportionate to context |
| Screening and presenting a candidate to a client, with the candidate's knowledge | Consent (candidate agrees before being put forward) and legitimate interests (client) |
| Retaining records of a completed or live search | Legitimate interests and, where applicable, legal obligation (e.g. tax/accounting records) |
We do not use your data for any purpose beyond what's described here, and we do not sell personal data or share it with third-party marketing lists.
4. Who we share data with
- Candidates: your CV and profile are only shared with a specific client, for a specific live mandate, and only after we've discussed the opportunity with you directly. We don't distribute candidate profiles speculatively or in bulk.
- Clients: your hiring brief and mandate details are treated as confidential and are not shared outside the direct running of your search — consistent with the confidentiality commitment described on our website.
- Service providers: we may use third-party tools for email, scheduling, or basic business administration. Any such provider only processes data on our instructions and is not permitted to use it for their own purposes.
- We do not sell, rent, or otherwise trade personal data with third parties for marketing purposes.
5. International transfers — UK and US
Innosearch Partners operates across London and New York, and personal data may be processed or accessed in both the UK and the United States — for example, where a UK-based candidate is being considered for a New York-based role, or vice versa.
Where personal data is transferred from the UK to the US, we take steps intended to ensure an appropriate level of protection consistent with UK GDPR requirements for international transfers (such as relying on an applicable data transfer mechanism recognised under UK data protection law).
Note: the specific transfer mechanism appropriate here depends on how the business is structured and should be confirmed with a data protection professional before this notice is relied on as final — this section describes our intent, not a completed legal assessment.
6. How long we keep data
- Client enquiries that don't proceed to a mandate: retained for up to 12 months, then deleted, unless you ask us to remove it sooner.
- Candidate data for a live or completed search: retained for the duration of the search plus a reasonable period afterward (typically up to 24 months) in case a related opportunity arises, unless you ask us to delete it sooner.
- Records required for accounting, tax, or legal purposes: retained for as long as required by law.
You can ask us to delete your data at any point outside of a legal retention requirement — see Section 7.
7. Your rights
Under UK GDPR, you have the right to:
- Access the personal data we hold about you
- Correct inaccurate or incomplete data
- Request erasure of your data, where applicable
- Restrict or object to certain processing
- Request a copy of your data in a portable format, where applicable
- Withdraw consent at any time, where we're relying on consent (e.g. before presenting your candidate profile to a client)
To exercise any of these rights, email ashley.m@innosearchpartners.com. We'll respond within one month, as required by law.
If you're not satisfied with how we've handled your data, you have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk, or, for US-related concerns, the relevant state authority.
Innosearch Partners' ICO data protection fee registration is in progress. A registration reference will be added here once complete.
8. Security
We take reasonable technical and organisational measures to protect personal data against unauthorised access, loss, or misuse — proportionate to the scale of a founder-led practice. This includes restricting access to candidate and client records, and not storing sensitive data in unsecured or publicly accessible locations.
9. Changes to this notice
We may update this notice from time to time, for example as the business grows or regulatory guidance changes. The "last updated" date at the top of this page will reflect the most recent revision.
10. Contact
For any question about this notice or how your data is handled, contact: