Privacy Notice
How GFFC uses personal information collected through this website and in the ordinary course of business. Information about candidates and prospective candidates is covered by the separate Candidate Privacy Notice.
Draft — pending UK legal review. This document is a working draft prepared for the GFFC Executive Search website. It must be reviewed and approved by qualified UK legal counsel before launch. Version 2026-09-21-draft.
1. Who we are
GFFC Limited ("GFFC", "we", "us") is the data controller for personal information collected through https://gffc.io and in the course of our business. Our registered office is 105 High Street, Brentwood, England, CM14 4RR, company number14683888. For any privacy question, contactprivacy@gffc.io.
2. What this notice covers
This notice covers information about website visitors, client contacts, suppliers and general business enquiries. If you are a candidate or prospective candidate, please read ourCandidate Privacy Notice.
3. Information we collect
- Contact details you provide, such as name, email, telephone and company;
- Enquiry details, including the content of messages you send to us;
- Technical information such as IP address, browser type and pages visited, collected via cookies where you consent (see ourCookie Policy).
4. How we use it and our lawful bases
- To respond to enquiries and provide our services.Lawful basis: legitimate interests and, where relevant, performance of a contract.
- To operate, secure and improve the website.Lawful basis: legitimate interests, and consent for non-essential cookies.
- To comply with legal obligations.Lawful basis: legal obligation.
5. Sharing
We do not sell personal information. We share it only with service providers acting on our instructions (such as hosting, email and CRM providers), professional advisers, and authorities where required by law.
6. International transfers
Where personal information is transferred outside the UK, we use appropriate safeguards such as the UK International Data Transfer Agreement or a valid adequacy mechanism.
7. Retention
We keep personal information only as long as necessary for the purposes set out above, and delete or anonymise it when it is no longer needed, unless a longer period is required by law.
8. Your rights
Subject to applicable law, you have rights to access, rectify, erase, restrict or object to processing, and to withdraw consent where it is the basis. Contactprivacy@gffc.io to exercise them.
9. Complaints
You can complain to the UK Information Commissioner's Office at ico.org.uk. We would welcome the opportunity to resolve your concern first.
10. Version
Version 2026-09-21-draft, effective 21 September 2026.