Privacy Policy

Updated April 2025

This policy explains how we process personal data within our business delivering search, talent and coaching services in line with the relevant data protection legislation. By submitting your personal data (and any sensitive personal data) to us, you consent to All Leaders processing your data in accordance with those principles.

Your privacy is important to us. We encourage you to read this policy carefully as it contains important information on who we are, how and why we collect, store, use and share personal information, your rights in relation to your personal information and how to contact us regarding this policy or the matters it refers to. 

Please review this policy periodically for any updates; the latest date of publishing will be listed above.

Who we are

All Leaders Limited (‘we’ or ‘us’ or ‘our’) is an executive search, talent strategy and executive coaching firm. We are registered with the Information Commissioner’s Office for purposes of the UK Data Protection Act (DPA). Our registration number is ZB880138.

Personal information we may collect 

All Leaders collects and uses certain information about the people with whom we work. These people include employees, clients, candidates, referees and suppliers, as well as potential employees, clients, candidates, referees and suppliers.

You have choices about the data we collect. When you are asked to provide personal data, you may decline. But if you choose not to provide data requested, then you may not be able to be considered for an appointment that All Leaders is handling (if you are a candidate), or we may not be able to fulfil our obligations to you (if you are a client).

We obtain personal data about you when you provide us with your CV, send us an email, submit data to us through our website or contact us via any other means. Additionally, the nature of our work means we may process data without speaking directly with you but always in accordance with a legitimate business interest in line with Section 6 of the DPA.

The data we collect depends on the nature of our relationship, but can include the following: 

• name and contact data such as email addresses, postal addresses, phone numbers, and other similar contact data; 
• biographical information; 
• correspondence – this may include emails, telephone/virtual conference calls, notes from calls, notes from face-to-face meetings, instant messages (eg. WhatsApp messages) and text messages; 
• CVs or any other documents you share with us, including on rare occasions copies of passports, visas and other official papers; 
• a photo of you freely available in the public domain, or specifically shared by you.

We may also on occasion collect Special Category Data, always in line with Section 6. Primarily this will also be with your explicit consent, and only (a) if it is essential in order to fulfil our contractual obligations to a client - for example, candidates for a role with a Genuine Occupational Requirement may be asked to disclose their religious views, (b) if it will exclusively be used for the purposes of diversity and equality of opportunity monitoring, or (c) if it will be for the benefit of the candidate – for example in the case of a Disability Confident client. 

Any voluntary inclusion of Special Category Data is not encouraged but will be understood by us as express consent to All Leaders holding and processing this information. 

Special Category Data collected without consent will be strictly within the parameters of the DPA Schedule 1(8-9), and will only ever be considered in anonymised, aggregate form with a view to enabling equality to be promoted or maintained.

How we use your personal data

• we collect and process data on employees in order to run our company, to fulfil our legal obligations, and to administer services like payroll and employee benefits;
• we collect and process data on clients in order to perform our contractual obligations to them and for credit control purposes;
• we collect and process data on current suppliers and prospective suppliers in order to ensure the smooth running of our business in support areas such as IT, accountancy, cleaning, and so forth;
• we collect and process data on the company’s contacts (primarily consisting of potential/actual candidates, coaching clients and potential/actual sources of advice and recommendations, but also including employees, client contacts and some suppliers) in order to fulfil our contractual obligations to our clients by providing recruitment or coaching services to them, or in order to fill internal vacancies within All Leaders itself.

Disclosure of your personal data

If you express an interest in an appointment we are handling, then we may share your information with the client for that appointment. Such sharing will be on the condition of confidentiality, usually in documents which are password protected or encrypted and circulated only to an agreed group of individuals.

In addition, we may share personal data among All Leaders-controlled affiliates and subsidiaries. We may also share personal data with vendors or agents we've hired to secure our systems or provide support services to us. In such cases, these companies must abide by our data privacy and security requirements and are not allowed to use personal data they receive from us for any other purpose. We may also disclose personal data as part of a corporate transaction such as a merger or sale of assets.

Finally, we will access, transfer, disclose and preserve personal data when we have a good faith belief that doing so is necessary to: 

• comply with applicable law or respond to valid legal process, including from law enforcement or other government agencies; 
• protect our clients or candidates, for example to prevent spam or attempts to defraud, or to help prevent the loss of life or serious injury of anyone;
• operate and maintain the security of our products, including to prevent or stop an attack on our computer systems or networks; or 
• protect the contractual rights or property of All Leaders.

Lawful basis for processing your data

We have undertaken a careful assessment of our lawful basis for all our data processing activities, relying on the definitions provided in the General Data Protection Regulation (GDPR). For example, our lawful basis for collecting and processing data on current clients is Contractual Necessity.

In relation to contacts undertaken as part of our core headhunting and coaching work (ie. candidates, prospective candidates, coaching clients and sources of advice and recommendations), our lawful basis is Legitimate Interests (whereby personal data may be processed on the basis that the controller has a legitimate interest in processing those data, provided that such legitimate interest is not overridden by the rights or freedoms of the affected data subjects). This determination is underpinned by a Legitimate Interests Assessment, based on guidance provided by the Data Protection Network. 

In summary our rationale is: 

• that the data subjects would have a reasonable expectation that we will process their data in this way;
• that we believe our interests and those of the data subjects are broadly aligned; 
• that the impact of our data processing is highly unlikely to be of any detriment to the data subjects; 
• that appropriate safeguards and compensating controls have been put in place;
• that we make it clear at every stage, through this Data Protection and Privacy Statement, the rights that the data subjects have.

We believe we have fully considered the necessity and purpose of our processing activities, and that we have given appropriate and serious consideration to the privacy rights of the individuals we interact with.

If the scope or nature of our processing operation changes then this rationale will be immediately reviewed.

How to review and control your personal data

You can request that we show you what data we hold about you, update your data, or delete your data. To make a request of this nature, please email tanya.stevens@allleaders.co.uk.

Your data rights

You have the following rights:

• to request confirmation that your data is held by, and being processed by, us; 
• to have access to any personal data we hold about you; 
• to request that we rectify or update your personal data; 
• to object to the processing of your personal data; 
• to withdraw your consent; 
• to lodge a complaint with a data protection authority; 
• to request that we delete whatever data we hold about you (your ‘right of erasure’ or ‘right to be forgotten’); 
• the right to data portability; and 
• rights in relation to automated decision making and profiling.

As applicable under French law, you can also send us specific instructions regarding the use of your personal data after your death.

It should simply be noted that exercising some of the above rights may prevent you from being considered for an appointment that All Leaders is handling (if you are a candidate), or prevent us from being able to fulfil our obligations to you (if you are a client).

Security of your data

All Leaders is committed to protecting the security of your personal data. We use a variety of security technologies and procedures to help protect your personal data from unauthorised access, use or disclosure. For example, we store the personal data you provide on computer systems that have limited access and are in controlled facilities. When we transmit highly confidential data (such as multiple candidate CVs) over the Internet we use an access encrypted format. All our computers have authorised and current anti-virus protection software. 

How long we retain your personal data

All Leaders retains personal data on its contacts for no more than seven years following that person’s last contact with All Leaders.

How to contact us about data protection matters

If you have a privacy concern or question, please contact us at tanya.stevens@allleaders.co.uk. We will respond within 30 days. Our postal address is All Leaders, 205 Regent Street, London, W1B 4HB.