Privacy Policy


Cornforth Consulting Ltd provides independent advice and support to the boards of investment companies, asset management and financial services companies. We take your personal data seriously and this policy sets out how and why we collect and use your data, how long we keep it, the legal basis for doing so and your rights to ask us to change or delete it.


What personal data do we collect?

We collect the data on candidates and clients necessary to carry out our various services. This information may include your CV, name, address and other contact details, your record of employment and other positions, academic record, skills and experience. It may also include, age, nationality and gender, a record of our contacts with you and comments, views or references from third parties.


Where do we collect personal data from?

We normally collect personal data directly from you. This may be your CV, which you send to us, or information that you provide in the course of meetings, telephone conversations or emails. You may also be recommended by word of mouth, for example by a friend, a current or former employer, or a colleague, and we may gather information from LinkedIn, Google, company websites, press and periodicals and other publicly available sources.


How do we use your personal data?

We use your personal data to match your skills, experience and qualifications with board roles that we have been asked to fill. We will then share this information with our clients so that they may determine whether you are a good fit for the role. By providing us with your personal information you indicate your willingness to share and have your information stored by us and to be considered for appropriate board roles.


What legal basis do we have for using your information?

For prospective candidates, clients and referees, our processing is necessary for our legitimate interests, in that we need the information in order to be able to assess suitability for potential roles, to find potential candidates and to contact clients and referees. Where candidates provide us with sensitive data, such as health information, we always ask for consent before processing that data. In that case, we always ask for your consent before undertaking such processing.


Data Security and Integrity

We use our best efforts to ensure that data is accurate, complete, current and reliable for its intended use. We use appropriate technical and organisational measures and safeguards to help protect your personal data from unauthorised access, misuse, alteration or loss. To the extent that we disclose personal data to clients or third parties, we will request that they properly protect the security and confidentiality of such information and otherwise process such data in accordance with applicable law.


How long do we keep your data?

We will generally keep your personal data for no longer than 6 years.


What are my rights?

You have the right to obtain access to your personal data; to be informed about how we use it; to have it updated or corrected if it is inaccurate or incomplete; to request that we restrict its processing or remove your data entirely from our system. When asked to remove a record from our database, we will retain minimal information to ensure we do not contact you or collect such information again.

If you don’t wish us to hold any data on you or would prefer that we do not contact you for any reason, please contact us at:


How can you contact us?

If you are unhappy with how we’ve handled your information or have further questions on the processing of your personal data, contact us at: