Privacy Policy

Plenum’s use of data reflects the professionalism, ethics and integrity of the organisation. 


This notice sets out the way in which we Plenum Search Ltd collect and use information acquired through our research activities (including but not limited to: google searches, social networking, referrals, phone calls, emails and meetings). Our policies are designed to provide consistency with our responsibilities and your rights under relevant privacy law including GDPR. Please read this carefully so that you understand how we will use your information and your rights regarding this. 

Why we collect your personal information

We take your privacy very seriously. We are retained/instructed by leading financial services organisations to identify and place highly skilled individuals. Whilst responsive to client requests, our core focus within the niche space of institutional investment expertise. We have identified you an individual who is likely to have (now or in future) skills and or experience that may be of interest to our clients.  

Our legal basis for collecting this information is that as headhunters that proactively target passive candidates, we have legitimate interest in collecting and storing your personal data.  

What information we collect and how

Typically we collect your contact details such as mobile phone number and email address. We also collect information on your current and previous employers, details of your work, skills and experiences, education and qualifications. Through our discussion about your career plans, we also collect information on your future plans, motivations, aspirations, drivers and successes.   

What we do with your personal information

We will hold your personal data to be able to inform you about, and place you in, the most suitable position according to your background and experience.  

Where your information might be shared

We will only make your personal information available to the organisation(s) to which you agreed to share the information. As part of mapping exercises, we may share non-sensitive information with our clients or prospects. Such information will be limited to superficial information (eg name, job title and employer) such as may be found in the public domain. As this mapping may occur before we have had any interaction with you, we do not typically seek consent to do so. However,  your CV will never be sent to an organisation without your clear consent.  

How long we might hold your information and why

We will retain your personal data only for as long as is necessary. Different laws require us to keep different data for different periods of time. 

We must also keep payroll records of any directly employed PAYE workers, holiday pay, sick pay and pensions auto-enrolment records for as long as is legally required by HMRC and associated national minimum wage, social security and tax legislation. 

Data will be retained in line with our retention policy (a copy of which is available on request). Upon expiry of that period a review will be conducted as to whether the information should be retained or deleted. 

How we keep your information safe

Our cloud based CRM system is hosted on world class disaster proof infrastructure in distributed data centres for the maximum data security. Whilst UK based, where data is accessed from outside the EU, no data is stored outside of cloud-based password-protected tools.  Whilst predominantly a digital processor, where any paper is used it is disposed of in confidential waste. All devices are password protected.  

How we ensure you keep control of your personal information

Please be aware that you have the following data protection rights: 

  • The right to be informed about the personal data we processes on you; 
  • The right of access to the personal data we processes on you; 
  • The right to rectification of your personal data; 
  • The right to erasure of your personal data in certain circumstances; 
  • The right to restrict processing of your personal data; 
  • The right to data portability in certain circumstances; 
  • The right to object to the processing of your personal data that was based on a public or legitimate interest; 
  • The right to withdraw consent at any time. 
  • Where you have consented to us processing your personal data you have the right to withdraw that consent at any time by contacting. 

If you wish to complain about this privacy notice or any of the procedures set out in it please contact our head office by email. The data controller for our practice is TC Jefferson, he can be contacted via 

You also have the right to raise concerns with Information Commissioner’s Office on 0303 123 1113 or at, or any other relevant supervisory authority should your personal data be processed outside of the UK, if you believe that your data protection rights have not been adhered to.