PRIVACY AND PERSONAL DATA PROTECTION POLICIES

IMPORTANT: Please read this Privacy Policy carefully to understand why we collect your personal data and how Loftus Bradford Executive Search, S.L.U., located at Av. de la Catedral, num. 6 1º, 08002 Barcelona, Spain, processes such data in connection with the website or websites it operates (hereinafter, the “Websites”).
This Privacy Policy may be amended from time to time. You should review it each time you visit the Websites.

Last updated: 30/06/2026.

SCOPE

This Privacy Policy is publicly available and accessible to all users and customers of Loftus Bradford Executive Search, S.L.U. It applies to all Websites operated by Loftus Bradford Executive Search, S.L.U., with www.loftusbradford.com serving as the primary website and domain.

This Privacy Policy also applies to any documents or communications issued by Loftus Bradford Executive Search, S.L.U. that link to it or instruct recipients to review it in order to understand how Loftus Bradford Executive Search, S.L.U. processes their personal data.

The following sections provide general information regarding the purposes for which personal data is used and describe such processing activities in further detail.

PERSONAL DATA WE COLLECT

The processing of personal data is governed by Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (the “GDPR”), and by Organic Law 3/2018 of December 5 on Personal Data Protection and Guarantee of Digital Rights, which adapts the GDPR to the Spanish legal system and supplements and further develops its provisions (the “LOPDGDD”).

Loftus Bradford Executive Search, S.L.U. respects your right to privacy and complies with applicable law to protect the personal data of its customers and users.

Loftus Bradford Executive Search, S.L.U., acting as the Data Controller, processes your personal data with the utmost confidentiality and has implemented the technical and organizational measures necessary to ensure the confidentiality and security of such data and to prevent its alteration, loss, unauthorized processing, or unauthorized access.

To provide you with information and, where applicable, enable you to book or use the products and services offered by Loftus Bradford Executive Search, S.L.U. through its Websites, we may need you to provide certain personal data. This information allows us to personalize our services and tailor them to your interests and needs.

You are responsible for notifying Loftus Bradford Executive Search, S.L.U. of any changes to the personal data you have registered through our Websites so that our records can be kept accurate and up to date.

To help us improve our services, you may receive a satisfaction survey after the completion of a service. The survey may ask you to evaluate the services received and provide a brief comment regarding your experience.

We collect and process your personal data for the following purposes:

Responding to requests for services;
Providing the requested services;
Preparing quotes;
Sending status updates regarding ongoing services;
Sending promotional communications that we believe may be of interest to our customers;
Conducting quality and satisfaction surveys to improve the services provided by Loftus Bradford Executive Search, S.L.U.; and
Completing the documentation required to process any incident or assistance covered by your insurance company.

We may also collect information regarding your use of our Websites through various technologies, including cookies.

Where processing is based on your consent, you may withdraw that consent at any time. You may also exercise your rights of access, rectification, erasure, restriction of processing, data portability, and objection by using the methods described in the EXERCISE OF RIGHTS section of this Privacy Policy.

METHODS OF COLLECTION

Loftus Bradford Executive Search, S.L.U. collects personal data through various channels, including its Websites, its telephone customer service center, its physical locations when a quote or service is requested, and its profiles or pages on LinkedIn.

Where applicable, you will be given the opportunity to object to the use of your personal data for advertising or marketing communications.

DISCLOSURE OF PERSONAL DATA TO THIRD PARTIES

For the administration and performance of the contract, it may be necessary—and, in certain cases, essential to the provision of the service—to disclose your personal data, to service providers such as:

Companies that assist with human resources management, including administrative agencies and law firms;
Information technology service providers and other third parties that assist us in providing digital services, e-commerce services, customer relationship management systems, web analytics, search engine services, and similar services;
Transportation and delivery service providers, including postal and courier services; and
Third parties that assist us in providing information technology services, including platform providers, hosting providers, and providers of maintenance and support services for our databases, software, and applications that may contain personal data concerning you.

We select these third parties with due care. They are provided only with the personal data strictly necessary to perform the services contracted by you. The agreements entered into between such third parties and Loftus Bradford Executive Search, S.L.U. expressly provide that they may not use your personal data for any purpose other than the provision of the relevant contracted services. We use our best efforts to ensure that all third parties with which we work maintain appropriate safeguards for the security of your personal data.

In addition, under applicable law or in connection with your contractual relationship with Loftus Bradford Executive Search, S.L.U., certain personal data may be disclosed to:

Public authorities with jurisdiction over the sectors in which Loftus Bradford Executive Search, S.L.U. operates, where required by applicable law;
Spanish law enforcement authorities, as required by law;
Banks and financial institutions for the processing of payments and collections relating to the services provided; and
Legal professionals, where such disclosure is required by law or necessary for the performance of the contracted services.

Personal data shall not be disclosed to third parties except in the circumstances described above, where required by law, or pursuant to a court order.

INTERNATIONAL TRANSFERS OF PERSONAL DATA

To provide the services you have contracted, it may be necessary to transfer and store your personal data in a country outside the European Economic Area (EEA). Your personal data may also be processed by personnel located outside the EEA who work for Loftus Bradford Executive Search, S.L.U. or for its service providers.

Loftus Bradford Executive Search, S.L.U. carries out transfers of personal data outside the EEA securely and in accordance with applicable law. Where a destination country does not provide a level of protection equivalent to that required within the EEA, Loftus Bradford Executive Search, S.L.U. implements appropriate safeguards to ensure that the relevant third parties comply with the obligations set forth in this Privacy Policy. Such safeguards may include reviewing the third parties’ privacy and security standards and entering into specific agreements based on the Standard Contractual Clauses adopted by the European Commission.

PROCESSING ACTIVITIES AND USES

You may withdraw any authorization you have granted for your personal data to be used for a specific purpose at any time. The withdrawal of such authorization shall not have retroactive effect.

Provision and Management of Contracted Services and Billing

The requested service cannot be provided unless the required personal data are supplied.

Personal data and data relating to the service shall be retained in our records for the period necessary to honor the warranty applicable to the service provided, which shall be five years.

Data relating to service billing shall be retained in our records for the period necessary to comply with the legal and tax obligations applicable to the services provided by Loftus Bradford Executive Search, S.L.U., which shall be five years plus the current year.

With respect to this processing activity, you may exercise the following rights, where applicable:

The right of access, to determine what personal data we retain and process; and
The right to rectification, where you consider that the personal data are inaccurate or have changed, including your contact details.

Handling of Inquiries

Personal data, contact details, images, shall be retained in our records for the period necessary to handle the requested matter.

With respect to this processing activity, you may exercise the following rights, where applicable:

The right of access, to determine what personal data we retain and process;
The rights to object to and restrict processing, so that, once your request has been processed, your personal data are no longer processed for the purpose of handling your inquiry;
The right to rectification, where you consider that the personal data are inaccurate or have changed; and
The right to erasure where you withdraw your consent to this processing activity.

Quality Assurance

To fulfill our customer service quality commitments, we may periodically conduct surveys to assess customer and user satisfaction with the services provided and thereby improve our services.

These surveys are conducted electronically. You will receive an email containing a link to the website where the survey is completed. The surveys do not collect any personal data in addition to the data you have previously provided to us.

Contact details collected for the purpose of sending you a quality survey shall be used only where you have given your express consent.

Personal data processed for this purpose shall be retained for three months.

With respect to this processing activity, you may exercise the following rights, where applicable:

The rights to object to and restrict processing, so that, once your request has been processed, your personal data are no longer processed for quality assurance purposes; and
The right to rectification, where you consider that the personal data are inaccurate or have changed.

Information About Loftus Bradford Executive Search, S.L.U.’s Services

To keep you informed about the services provided by Loftus Bradford Executive Search, S.L.U. and occasional promotions, we need to process your contact details.

Each communication sent to you shall include an option to unsubscribe. You may also exercise the rights listed below at any time.

With respect to this processing activity, you may exercise the following rights, where applicable:

The rights to object to and restrict processing, so that, once your request has been processed, your personal data are no longer processed for marketing or informational purposes;
The right to rectification, where you consider that the personal data are inaccurate or have changed; and
The right to erasure where you withdraw your consent to this processing activity.

Preparation of Quotes

The personal data you provide for the preparation of a quote shall be retained in our records until you inform us that you have decided not to proceed or until two years have elapsed, whichever occurs first. Upon expiration of that period, the data shall be deleted. If you accept the quote, the data shall become part of the processing activity relating to the provision of the service.

With respect to this processing activity, you may exercise the following rights, where applicable:

The right of access, to determine what personal data we retain and process;
The right to rectification, where you consider that the personal data are inaccurate or have changed, including your contact details; and
The right to erasure where you definitively decide not to proceed with the services quoted by Loftus Bradford Executive Search, S.L.U.

Review of Employment Applications

The personal data you provide to participate in our recruitment processes shall be processed for the purpose of evaluating your application. If you are selected to proceed to the next stage, we shall notify you accordingly. The personal data provided shall be retained for a maximum of one year, after which they shall be deleted.

With respect to this processing activity, you may exercise the following rights, where applicable:

The right of access, to determine what personal data we retain and process;
The right to rectification, where you consider that the personal data are inaccurate or have changed, including your contact details; and
The right to erasure where you withdraw your consent to this processing activity.

Website Browsing

When you browse Loftus Bradford Executive Search, S.L.U.’s Websites, non-identifying data may be collected. Such data may include IP addresses, approximate geographic location, records of how the services and Websites are used, and other data that cannot be used to identify the user. Non-identifying data may also include information concerning your browsing habits collected through third-party services.

We use this information to analyze trends, administer the Websites, track users’ movements within the Websites, and collect demographic information about our user base as a whole.

LEGAL BASES FOR PROCESSING YOUR PERSONAL DATA

Loftus Bradford Executive Search, S.L.U. processes personal data on different legal bases, depending on the purpose for which the data are used:

Performance of a Contract or Steps Taken Prior to Entering into a Contract

Personal data must be processed to provide and manage the contracted service and to issue the corresponding invoices. The service cannot be provided without this information.
Personal data provided for the preparation of a quote are processed to manage the proposed transaction and are retained until the user decides not to proceed or for a maximum period of two years.
Personal data provided by job applicants are processed for recruitment purposes and, where an applicant is not selected, are retained for a maximum period of one year.

Compliance With a Legal Obligation

Billing-related data are retained for the period necessary to comply with applicable legal and tax obligations, which is five years plus the current year.

Legitimate Interests Pursued by Loftus Bradford Executive Search, S.L.U.

Personal data processed to handle inquiries are retained until the requested assistance has been completed.
Satisfaction surveys may be conducted to evaluate service quality and improve our services. Such data shall be processed only where the user has given consent.
Non-identifying data concerning the use of our Websites may be collected through third-party tools to improve the user experience and optimize the Websites.

User Consent

Contact details are processed for the purpose of sending marketing communications and promotional offers only where the user has given express consent. Consent may be withdrawn at any time, without retroactive effect.
Quality surveys shall be sent only where the user has agreed to receive them.

In all cases, the user may exercise the rights of access, rectification, erasure, restriction of processing, objection, and data portability in accordance with applicable data protection laws.

CATEGORIES OF PERSONAL DATA WE PROCESS

In accordance with the purposes described above, Loftus Bradford Executive Search, S.L.U. processes the following categories of personal data:

Identification data: first and last name, mailing address, email address, postal code, and telephone number;
Academic and professional data: education, qualifications, academic records, professional experience, and membership in professional associations or professional bodies, in connection with recruitment processes;
Traffic and location data;
Metadata derived from electronic communications;
Commercial information; and
Economic, financial, and banking data.

The USER undertakes to provide truthful, accurate, complete, and up-to-date information and shall be responsible for any loss or damage arising from a breach of this obligation.

If the USER provides personal data relating to third parties, the USER represents that those third parties have consented to the disclosure of their data and undertakes to inform them of the contents of this provision, holding Loftus Bradford Executive Search, S.L.U. harmless from any liability in this regard. Notwithstanding the foregoing, Loftus Bradford Executive Search, S.L.U. may carry out any verification reasonably necessary to confirm compliance with this requirement and may apply appropriate due diligence measures in accordance with applicable data protection laws.

SECURITY MEASURES IMPLEMENTED TO PROTECT PERSONAL DATA

Loftus Bradford Executive Search, S.L.U. is committed to protecting the personal data and privacy of its users. To safeguard the information covered by this Privacy Policy, Loftus Bradford Executive Search, S.L.U. implements appropriate technical and organizational measures designed to prevent the loss, unauthorized alteration, disclosure, or other unauthorized processing of personal data.

Such measures include:

Encryption of communications between the USER’s device and our servers;
Perimeter security measures, including firewalls, corporate antivirus software, backup systems, and up-to-date operating systems on servers and other equipment; and
Other security measures designed to prevent unauthorized access to users’ personal data.

Where Loftus Bradford Executive Search, S.L.U. engages service providers located outside the European Union to maintain the platform, any international transfer of personal data shall be carried out in accordance with the security and data protection requirements established by applicable law, with appropriate safeguards to protect the integrity and confidentiality of the information.

RECAPTCHA

We use the Google Inc. (“Google”) reCAPTCHA service to protect data submitted through forms available on our Websites. This service distinguishes data submitted by individuals from messages generated by automated systems and involves the transmission to Google of the user’s IP address and any other data required to provide the reCAPTCHA service.

For this purpose, such data shall be transmitted to and processed by Google. Google encrypts IP addresses within the Member States of the European Union and other countries that are parties to the European Economic Area Agreement. Only in exceptional cases shall an IP address be transmitted to a Google server in the United States and encrypted there.

On behalf of the owner of these Websites, Google shall use this information to evaluate users’ use of the reCAPTCHA service. The IP address transmitted through reCAPTCHA shall not be combined with other data held by Google.

Google’s Privacy Policy applies to such processing. Further information is available at: https://policies.google.com/privacy

By using the reCAPTCHA service, the USER consents to Google’s processing of personal data relating to the USER in the manner and for the purposes described above.

GOOGLE ANALYTICS

The Websites use Google Analytics, a web analytics service provided by Google Inc., a Delaware corporation whose principal place of business is located at 1600 Amphitheatre Parkway, Mountain View, California 94043, United States (“Google”).

Google Analytics uses cookies, which are text files placed on your device, to help analyze how users interact with the Websites. The information generated by the cookie concerning your use of the Websites, including your IP address, shall be transmitted directly to and stored by Google on servers located in the United States.

Google shall use this information on our behalf to monitor and analyze your use of the Websites, compile reports concerning Website activity, and provide other services relating to Website activity and Internet usage.

Google may disclose this information to third parties where required to do so by law or where such third parties process the information on Google’s behalf. Google shall not associate your IP address with any other data held by Google.

You may prevent the processing of your data by disabling cookies through the appropriate settings in your browser. However, you should be aware that doing so may prevent you from using all features and functionality of the Websites.

By using the Websites, the USER consents to Google’s processing of information concerning the USER in the manner and for the purposes described above.

EXERCISE OF DATA PROTECTION RIGHTS

We consider the protection of your personal data to be of fundamental importance. Accordingly, you have the following rights with respect to the processing of your personal data:

Right to Transparent Information: You have the right to receive clear, transparent, and easily understandable information regarding how we process your personal data.
Right of Access: You have the right to obtain confirmation as to whether Loftus Bradford Executive Search, S.L.U. processes personal data concerning you and, where applicable, to access such data.
Right to Erasure, also known as the Right to Be Forgotten: You have the right to request the erasure of your personal data where there is no lawful or legitimate reason for its continued processing or retention. Where applicable, and upon receiving a valid request, we shall inform third parties to whom the data have been disclosed that any links to, copies of, or replications of such personal data must be erased.
Right to Restriction of Processing: You have the right to request that Loftus Bradford Executive Search, S.L.U. restrict the processing of your personal data where the data are inaccurate, the processing is unlawful, the data are no longer required for the purposes for which they were processed, or you have objected to the processing pursuant to Article 21(1) of the GDPR while it is determined whether Loftus Bradford Executive Search, S.L.U.’s legitimate grounds override your interests, rights, and freedoms.
Right to Data Portability: You have the right to receive the personal data you have provided to us in a structured, commonly used, and machine-readable format and, where technically feasible, to have such data transmitted directly to another data controller.
Right to Rectification: You have the right to request the rectification of inaccurate or outdated personal data and to have incomplete personal data completed.
Right to Object: You have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data by Loftus Bradford Executive Search, S.L.U.

You may submit a written request to exercise any of these rights to:

Loftus Bradford Executive Search, S.L.U.
Av. de la Catedral, num. 6 1º, 08002 Barcelona, Spain
B67528083

You may also submit your request through any of the following channels:

In person at our offices;
By email to gdpr@loftusbradford.com; or
By telephone at +34 936 424 677.

We may require additional documentation reasonably necessary to verify your identity before processing your request.

You may also lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos or “AEPD”) in any of the following circumstances:

You have requested to exercise your rights and have not received a response from the Data Controller within one month;
You have received a response but disagree with it; or
You believe that the Data Controller has violated applicable data protection laws in connection with any of its processing activities.

General information concerning privacy and personal data protection is available from the AEPD at: https://www.aepd.es