Privacy Policy
Effective Date: August 18, 2026
Last Updated: August 18, 2026
Sedulo Search Limited ("Sedulo," "we," "us," or "our") is committed to protecting the privacy and security of personal information collected from our candidates, clients, website visitors, and business partners (collectively, "you").
This Privacy Policy describes how we collect, use, disclose, and protect personal information when you utilize our recruitment services, access our website at sedulo.io (the "Service"), or engage in business with us across global jurisdictions, including the United States, United Kingdom, and European Economic Area (EEA).
1. Information We Collect
We collect information that identifies, relates to, describes, or is reasonably capable of being associated with you ("Personal Information").
A. Information You Provide Directly
Contact Information: Full name, business/personal email address, phone number, and physical address.
Professional & Employment Data: CV/resume, cover letters, employment history, educational background, professional certifications, skills, salary expectations, references, and portfolio links.
Application & Background Information: Work authorization/visa status, job preferences, and details necessary for pre-employment screening (where permitted by law). We only collect Sensitive Personal Information (such as background check results) where necessary for a specific role and where permitted by law. We do not use Sensitive Personal Information to infer characteristics about you, and we do not collect it for marketing purposes.
Client & Vendor Communications: Billing details, corporate contact details, position requirements, and records of correspondence.
B. Information Collected Automatically
Device & Usage Data: IP address, browser type, operating system, referring URLs, pages viewed, time spent on pages, and standard web log data collected via cookies and analytics tracking. Our website uses cookies and similar tracking technologies to support analytics and site functionality. You can manage your cookie preferences through your browser settings or our cookie banner, where available.
C. Information from Third-Party Sources
Public & Professional Networks: Information gathered from public professional profiles (e.g., LinkedIn), industry directories, or mutual referrals.
2. How We Use Your Information
We use your Personal Information for legitimate business purposes connected to our executive search and recruitment services, including:
Fulfilling Recruitment Services: Matching candidate profiles with executive and technical roles at client organizations, evaluating qualifications, and managing candidate pipelines.
Client Relationship Management: Managing contracts, business communications, invoicing, and service updates with prospective and current clients.
Marketing & Communications: Sending relevant job opportunities, industry insights, and event invitations (with your consent or option to opt out).
Website Analytics & Optimization: Monitoring trends, troubleshooting performance, and improving website functionality.
Legal Compliance & Defense: Meeting regulatory obligations, responding to lawful requests, and establishing or defending legal claims.
3. Disclosure of Personal Information
We do not sell your Personal Information for monetary compensation. We share Personal Information only under the following circumstances:
With Clients: Sharing candidate resumes, interview notes, and professional credentials with prospective employers in connection with potential job openings.
With Service Providers: Trusted third-party vendors who perform services on our behalf (e.g., applicant tracking systems [ATS], CRM platforms, cloud hosting, email delivery, and background verification partners).
Business Transfers: In connection with a corporate merger, restructuring, acquisition, or sale of assets.
Legal Obligations: When required by law, court order, or governmental regulation, or to protect the rights, property, and safety of Sedulo, our users, or others.
4. International Data Transfers
Sedulo Search Limited is headquartered in the United Kingdom and operates globally, including in the United States. If you are located outside the UK (including in the US or EEA), your Personal Information may be transferred to, stored, and processed in jurisdictions that have different data protection laws than your home country.
Where cross-border transfers occur, we implement appropriate safeguards to ensure your data remains protected, including:
Utilizing standard contractual clauses (SCCs) or UK International Data Transfer Agreements (IDTA).
Operating under applicable adequacy framework arrangements.
Implementing robust organizational and technical security measures across all locations.
5. Data Retention
We retain your Personal Information only for as long as necessary to fulfill the purposes for which it was collected, including satisfying legal, accounting, or reporting requirements.
As a general guide: resumes and candidate profiles are retained for up to 24 months after your last interaction with us, unless you ask us to delete them sooner or opt into our talent community for longer-term consideration. Client and billing records are retained for 7 years to meet accounting and tax requirements. When a specific retention period doesn't apply, we keep data only as long as needed for the purpose it was collected.
When determining retention periods, we consider:
The duration of an active recruitment search or talent community engagement.
Statutory limitation periods under applicable state and federal laws.
Legal requirements to retain records regarding hiring and employment inquiries.
When Personal Information is no longer needed, we securely destroy, erase, or anonymize it.
6. United States Regional Privacy Rights (CCPA/CPRA & State Laws)
This section applies solely to residents of US states with comprehensive privacy legislation, including California, Colorado, Virginia, Connecticut, Texas, and Utah.
A. Categories of Personal Information Collected & Disclosed
In the preceding 12 months, we have collected and disclosed the following statutory categories of Personal Information for operational business purposes:
Identifiers (name, email address, phone number, IP address) — disclosed to Clients, Cloud Providers, ATS Vendors
Professional/Employment Information (resumes, employment history, qualifications) — disclosed to Prospective Employers/Clients
Internet/Network Activity (browsing history on sedulo.io, interaction with site) — disclosed to Analytics & Hosting Providers
Commercial Information (records of services requested or provided) — disclosed to Payment Processors, Accounting Software
B. Sales and Sharing Disclosure
We do not sell Personal Information for monetary consideration. We do not share Personal Information for cross-context behavioral advertising. We do not collect or process Sensitive Personal Information for the purpose of inferring characteristics about consumers.
Because we do not sell or share Personal Information, no opt-out link is required under current law. If this changes, we will update this policy and provide a clear opt-out mechanism on our website.
C. Your Consumer Rights
Depending on your state of residence, you may have the following rights regarding your Personal Information:
Right to Know / Access: Request disclosure of the specific pieces and categories of Personal Information we have collected about you.
Right to Delete: Request erasure of your Personal Information, subject to certain legal exceptions (e.g., fulfilling an ongoing contract or meeting record retention laws).
Right to Correct: Request correction of inaccurate Personal Information.
Right to Opt-Out: Opt out of any future processing for targeted advertising, sale, or profiling in furtherance of automated decisions (Sedulo does not engage in automated decision-making that produces legal or similarly significant effects).
Right to Non-Discrimination: We will not discriminate against you for exercising any of your privacy rights.
We will respond to verified consumer rights requests within 45 days, as required by applicable state law. If we need more time, we will notify you and explain the reason for the extension.
D. Children's Privacy
Our Service is not directed to individuals under the age of 18. We do not knowingly collect Personal Information from minors. If we learn that we have inadvertently collected such information, we will delete it promptly.
7. European & UK Privacy Rights (GDPR / UK GDPR)
If you are located in the UK or EEA, you have the following rights regarding our processing of your personal data:
Right of Access, Rectification, and Erasure: Access your data, request correction of errors, or request deletion ("right to be forgotten").
Right to Restrict or Object: Limit how we process your data or object to processing based on legitimate interests or direct marketing.
Right to Data Portability: Request a structured, machine-readable copy of your data.
Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time.
Right to Complain: File a complaint with your local data protection authority (e.g., the UK Information Commissioner's Office - ICO).
8. Security Measures
We enforce technical and organizational measures to safeguard your Personal Information against unauthorized access, loss, misuse, alteration, or destruction. These measures include encrypted communications (SSL/TLS), access controls, multi-factor authentication, and secure cloud storage protocol. However, no internet transmission or electronic storage method is 100% secure.
9. Changes to This Privacy Policy
We may update this Privacy Policy periodically to reflect changes in our legal obligations or operational practices. We will post the revised policy on this page with an updated "Last Updated" date. We encourage you to review this policy regularly.
10. Governing Law
This Privacy Policy is governed by the laws of England and Wales. For matters specifically relating to US state privacy rights, applicable US state law will govern those rights as described in Section 6.
11. Contact Us & Exercising Your Rights
To exercise your privacy rights, submit a data request, or ask questions regarding this policy, please contact us using the details below:
Email: info@sedulo.io (Direct Data Privacy Inquiries)
Company Name: Sedulo Search Limited
Website: https://www.sedulo.io
When submitting a request, please provide your full name and state/country of residence so we can verify your identity and route your request to the appropriate team.