Legal

Data Protection

Last updated: August 2026

CORA Search respects your privacy and is committed to protecting your personal data. This notice explains how we collect, use, store and protect your information when you visit our website or contact us, in accordance with UK data protection law (including the UK GDPR and Data Protection Act 2018).

1. Who we are

CORA Search is a governance recruitment business based in London, United Kingdom. For the purposes of data protection law, CORA Search is the data controller responsible for your personal data.

To contact us about data protection, please use the contact form on our Website and mark your message for the attention of Data Protection.

2. What data we collect

We may collect and process the following information:

• Contact details, such as your name and email address when you submit our contact form;
• Enquiry information, including whether you are a client, candidate or referrer, and the content of your message;
• Technical data, such as browser type, device information and pages visited, where optional analytics cookies are accepted;
• Cookie preferences, your choices about how we use cookies on the Website.

We do not intentionally collect special category data (such as health information) through the Website. Please avoid including sensitive personal data in contact form messages unless it is relevant to your enquiry.

3. How we use your data

We use your personal data to:

• respond to enquiries submitted via the Website;
• provide recruitment services where a relationship is established;
• improve the Website and understand how visitors use it (only with your consent for non-essential cookies);
• comply with legal and regulatory obligations.

4. Lawful bases

We process personal data on the following lawful bases:

• Consent, for optional cookies and certain marketing communications where required;
• Legitimate interests, to respond to enquiries, operate our business and improve our services, balanced against your rights;
• Contract, where processing is necessary to deliver recruitment services you have requested;
• Legal obligation, where we must retain or disclose information to comply with the law.

5. How long we keep your data

We retain personal data only for as long as necessary for the purposes described in this notice. Enquiry data is typically kept for up to two years unless a recruitment relationship continues, in which case we retain relevant records for the duration of that relationship and as required by law.

6. Sharing your data

We do not sell your personal data. We may share information with:

• trusted service providers who support our Website or business operations (for example, hosting or email services), under appropriate data processing agreements;
• regulators or authorities where required by law.

If we transfer data outside the UK, we ensure appropriate safeguards are in place as required by UK data protection law.

7. Your rights

Under UK data protection law, you have the right to:

• request access to the personal data we hold about you;
• request correction of inaccurate data;
• request erasure of your data in certain circumstances;
• object to or restrict processing in certain circumstances;
• request portability of data you have provided to us;
• withdraw consent at any time, where processing is based on consent;
• lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk.

To exercise any of these rights, please contact us via the contact form.

8. Cookies

Cookies are small text files stored on your device when you visit a website. We use the following types:

Essential cookies

These are necessary for the Website to function. They include remembering your cookie consent choice. Essential cookies do not require your consent.

Optional cookies

With your permission, we may use optional cookies to understand how visitors use the Website, for example, which pages are viewed most often. These help us improve the site over time. Optional cookies are only set if you click “Accept all” on our cookie banner.

You can change your preferences at any time using the Cookie settings link in the footer.

9. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss or misuse. However, no method of transmission over the internet is completely secure.

10. Changes to this notice

We may update this notice from time to time. The “Last updated” date at the top of this page will change when we do. We encourage you to review this page periodically.

11. Related information

Please also read our Terms & Conditions, which govern use of the Website.