Privacy Policy
Privacy Policy
Last updated: 4 May 2026
Last updated: 4 May 2026
Who We Are
Gale & Co. Ltd ("Gale & Co.", "we", "us", "our") is a specialist design recruitment and capability consultancy registered in England and Wales (Company No. 16777186), operating from London.
We are committed to protecting and respecting your privacy. This policy explains how we collect, use, store, and protect personal data when you visit our website, register as a candidate, or otherwise interact with us. We are the data controller for the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Gale & Co. Ltd ("Gale & Co.", "we", "us", "our") is a specialist design recruitment and capability consultancy registered in England and Wales (Company No. 16777186), operating from London.
We are committed to protecting and respecting your privacy. This policy explains how we collect, use, store, and protect personal data when you visit our website, register as a candidate, or otherwise interact with us. We are the data controller for the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Website visitors
When you visit our website, we may collect and process the following:
Name, email address, and message content submitted via contact forms
Name and email address if you subscribe to our mailing list
Technical data via cookies: IP address, browser type, pages visited, device type, and referral source — used in aggregate and does not identify any individual
We use this data for our legitimate interests: to respond to enquiries, improve our website, and provide the services you have requested. Where we send marketing communications, we do so only with your consent.
When you visit our website, we may collect and process the following:
Name, email address, and message content submitted via contact forms
Name and email address if you subscribe to our mailing list
Technical data via cookies: IP address, browser type, pages visited, device type, and referral source — used in aggregate and does not identify any individual
We use this data for our legitimate interests: to respond to enquiries, improve our website, and provide the services you have requested. Where we send marketing communications, we do so only with your consent.
Candidates
When you register with Gale & Co. or are identified as a potential candidate, we may collect and store:
Full name, email address, phone number, and location
Curriculum vitae (CV), employment history, qualifications, salary expectations, and notice period
Portfolio materials and publicly available professional information (e.g. LinkedIn)
Notes from conversations, interviews, or assessments
Right to work documentation (see Section 4)
We may receive this information directly from you, from publicly available sources, or from third parties such as referrers or sourcing tools. We use this information to assess suitability for roles, to present your profile to prospective employers (with your knowledge and agreement), and to maintain our candidate database.
We will retain candidate records for three years from the date of our last substantive contact with you. We periodically review inactive records and may contact you to confirm whether you wish to remain registered.
When you register with Gale & Co. or are identified as a potential candidate, we may collect and store:
Full name, email address, phone number, and location
Curriculum vitae (CV), employment history, qualifications, salary expectations, and notice period
Portfolio materials and publicly available professional information (e.g. LinkedIn)
Notes from conversations, interviews, or assessments
Right to work documentation (see Section 4)
We may receive this information directly from you, from publicly available sources, or from third parties such as referrers or sourcing tools. We use this information to assess suitability for roles, to present your profile to prospective employers (with your knowledge and agreement), and to maintain our candidate database.
We will retain candidate records for three years from the date of our last substantive contact with you. We periodically review inactive records and may contact you to confirm whether you wish to remain registered.
Right to work documentation
This category of data is handled with additional care. We process it only where we have a clear lawful basis and only at an appropriate stage of the recruitment process.
This category of data is handled with additional care. We process it only where we have a clear lawful basis and only at an appropriate stage of the recruitment process.
As part of our recruitment process, we may collect and store copies of documents used to verify your right to work in the United Kingdom, in compliance with the Immigration, Asylum and Nationality Act 2006 and Home Office guidance. These may include:
Passport or national identity document
Biometric residence permit
Home Office share code confirmation
Other documents listed under Home Office right to work checking guidance
We retain right to work documentation for two years after the end of any placement, in line with statutory requirements. We do not request this documentation speculatively.
As part of our recruitment process, we may collect and store copies of documents used to verify your right to work in the United Kingdom, in compliance with the Immigration, Asylum and Nationality Act 2006 and Home Office guidance. These may include:
Passport or national identity document
Biometric residence permit
Home Office share code confirmation
Other documents listed under Home Office right to work checking guidance
We retain right to work documentation for two years after the end of any placement, in line with statutory requirements. We do not request this documentation speculatively.
Business clients
We collect details such as name, job title, organisation, telephone number, and email address when you instruct us. We use this information to fulfil our contractual obligations and to manage our client relationship. We retain client information for six years from the end of our last engagement.
We collect details such as name, job title, organisation, telephone number, and email address when you instruct us. We use this information to fulfil our contractual obligations and to manage our client relationship. We retain client information for six years from the end of our last engagement.
Marketing
We may use your personal data to send details about our services, market insights, and events we think may be of interest. You may opt out at any time by clicking the unsubscribe link in any email or contacting us at hello@galeandco.com.
We may use your personal data to send details about our services, market insights, and events we think may be of interest. You may opt out at any time by clicking the unsubscribe link in any email or contacting us at hello@galeandco.com.
Automated processing
We do not undertake solely automated decision-making that produces legal or similarly significant effects on individuals.
We do not undertake solely automated decision-making that produces legal or similarly significant effects on individuals.
Legal basis for processing
We process personal data on the following lawful bases:
Contract performance — to fulfil or take steps to enter into a contract with you
Legal obligation — including right to work verification requirements
Legitimate interests — for recruitment services, client relationship management, and website improvement, where your interests do not override ours
Consent — for marketing communications and non-essential cookies
We process personal data on the following lawful bases:
Contract performance — to fulfil or take steps to enter into a contract with you
Legal obligation — including right to work verification requirements
Legitimate interests — for recruitment services, client relationship management, and website improvement, where your interests do not override ours
Consent — for marketing communications and non-essential cookies
Disclosure to third parties
We do not sell your personal data. We may share data with:
Prospective employers (candidates only, with your agreement)
Technology providers: Attio (CRM), Kit/ConvertKit (email), Calendly (scheduling), Apollo.io (sourcing), Google Analytics (website analytics)
Professional advisers including lawyers and accountants
Regulatory or legal authorities where required by law
We do not sell your personal data. We may share data with:
Prospective employers (candidates only, with your agreement)
Technology providers: Attio (CRM), Kit/ConvertKit (email), Calendly (scheduling), Apollo.io (sourcing), Google Analytics (website analytics)
Professional advisers including lawyers and accountants
Regulatory or legal authorities where required by law
Data security
We implement appropriate technical and organisational measures to protect your personal data. Access to sensitive records — including CVs and right to work documentation — is restricted to those with a legitimate need.
We implement appropriate technical and organisational measures to protect your personal data. Access to sensitive records — including CVs and right to work documentation — is restricted to those with a legitimate need.
Your rights
Under UK GDPR, you have the right to access, correct, erase, restrict or object to processing, and to data portability. Erasure requests for right to work documentation held for placed candidates may be subject to statutory retention obligations.
To exercise any right, contact hello@galeandco.com. We will respond within one month.
You also have the right to complain to the Information Commissioner's Office at ico.org.uk.
Under UK GDPR, you have the right to access, correct, erase, restrict or object to processing, and to data portability. Erasure requests for right to work documentation held for placed candidates may be subject to statutory retention obligations.
To exercise any right, contact hello@galeandco.com. We will respond within one month.
You also have the right to complain to the Information Commissioner's Office at ico.org.uk.
Changes to this policy
We may update this policy from time to time. Any changes will be posted on this page with a revised date. Where changes are material, we will take reasonable steps to notify you.
We may update this policy from time to time. Any changes will be posted on this page with a revised date. Where changes are material, we will take reasonable steps to notify you.
[MAIN PAGES]
[ADDITIONAL PAGES]
[Contact]
All Rights Reserved
[MAIN PAGES]
[ADDITIONAL PAGES]
[Contact]
All Rights Reserved
[MAIN PAGES]
[ADDITIONAL PAGES]
[Contact]
All Rights Reserved
[ADDITIONAL PAGES]
[Contact]
All Rights Reserved