Legal
Privacy notice
Last updated: October 2026
This notice explains how Luxton Search collects, uses and protects personal information about candidates, clients, contacts and visitors to this website. We take the confidentiality of everyone we work with seriously, and we handle personal data in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Who we are
Luxton Search ("we", "us", "our") is an executive search business based in London and the trading name of Michael Luxton. Michael Luxton is the data controller for the personal information described in this notice.
If you have any questions about this notice or how we handle your information, please email michael@luxtonsearch.com.
Information we collect
- Candidates: your name and contact details, CV, employment history, qualifications, current and expected remuneration, notice period, career preferences, references, and notes from our conversations with you.
- Clients and business contacts: your name, job title, organisation, contact details and records of our correspondence and meetings.
- Website enquiries: the information you choose to send us through the contact form or by email.
We do not ask for special category information, such as details of health, ethnicity or religious beliefs. If you choose to share it, for example to request adjustments to an interview process, we will use it only for that purpose and with your consent.
Where we get it from
Most of the information we hold comes directly from you. Executive search also involves identifying and approaching people who may not be actively looking for a new role. To do this, we may collect professional information from publicly available sources such as LinkedIn, company websites, industry publications and regulatory registers, and from referrals by people in our network. When we collect your information this way, we will tell you when we first contact you and point you to this notice.
How we use it
- To find and assess candidates for roles and to discuss opportunities that may interest you. Lawful basis: our legitimate interests in providing executive search services, and steps taken at your request before entering into a contract.
- To introduce candidates to clients. We will always obtain your agreement before sending your details to a client for a specific role.
- To provide services to our clients and manage our business relationships. Lawful basis: performance of a contract and our legitimate interests.
- To respond to enquiries sent through this website or by email. Lawful basis: our legitimate interests in responding to you.
- To meet our legal obligations, including record-keeping, tax and accounting requirements. Lawful basis: legal obligation.
We do not sell personal information, use it for marketing lists, or make decisions about you using automated processes.
Who we share it with
- Clients: only with your explicit agreement, and only for the specific role you have agreed to be considered for.
- Referees: only when you have given us their details and asked us to contact them.
- Service providers: trusted providers of email, cloud storage and IT services who process information on our behalf, under contract and only on our instructions.
- Professional advisers and authorities: our accountants and legal advisers where necessary, or where we are required to by law.
Some of our service providers may store information outside the UK. Where this happens, we make sure it is protected by appropriate safeguards, such as a UK adequacy decision or the International Data Transfer Agreement approved by the Information Commissioner.
How long we keep it
We keep candidate information for as long as it is relevant to current or future opportunities. If we have had no contact with you for two years, we will either ask whether you would like us to keep your details or securely delete them. Client and business contact records are kept for the duration of our relationship and for six years afterwards, to meet legal and accounting requirements. You can ask us to delete your information at any time.
How we protect it
We use appropriate technical and organisational measures to keep your information secure, including password-protected and encrypted devices, secure cloud services with two-factor authentication, and limiting access to those who need it. Given the confidential nature of executive search, we never discuss a candidate's interest in a role without their permission.
Your rights
Under data protection law, you have the right to:
- ask for a copy of the personal information we hold about you;
- ask us to correct information that is inaccurate or incomplete;
- ask us to delete your information;
- object to, or ask us to restrict, how we use your information;
- ask us to transfer your information to another organisation; and
- withdraw your consent at any time, where we rely on consent.
To exercise any of these rights, email michael@luxtonsearch.com. There is no charge, and we will respond within one month. If you are unhappy with how we have handled your information, please contact us first so we can try to put things right. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.
Cookies and this website
This website does not use cookies. We do not use analytics, advertising or tracking tools, and we do not use social media plugins that follow you across other sites. Our fonts and images are hosted on our own website, so visiting it does not send your information to third parties such as Google.
Like all websites, our hosting provider may keep standard server logs, such as IP addresses and the pages requested, for a short period to keep the site secure and running. These are not used to identify you.
Our contact form does not send or store information on this website. When you submit it, it opens your own email program with your message ready to send, so we only receive what you choose to email us.
Changes to this notice
We may update this notice from time to time. The latest version will always be available on this page, with the date it was last updated shown at the top.