Legal
Privacy Policy
How Carnegie Consulting collects, uses and protects the personal information you share with us.
Last updated: July 2026
Who we are
Carnegie Consulting is a specialist finance recruitment and advisory firm based in London. We are the data controller for the personal information described in this policy. If you have any questions about how we handle your data, please contact us at [email protected].
Information we collect
When you submit an enquiry or candidate form, we collect the information you provide, which may include your name, email address, telephone number, the content of your message and, where you choose to share it, your CV and career details.
When you request one of our gated reports or guides, we collect your name and email address so that we can send the document to you by email.
For security purposes, our systems temporarily record the internet address (IP address) of requests made to our download service. This is used solely to prevent abuse, such as automated or excessive requests, and is held only in short-term memory rather than stored.
We do not knowingly collect more information than we need to respond to your enquiry, to send you a document you have requested, or to discuss a potential role or mandate with you.
How we use your information
We use your information to respond to your enquiry, to send you documents you have requested, to discuss recruitment opportunities and advisory services, and to keep in touch where you have asked us to. Our lawful bases for processing under UK GDPR are your consent, and our legitimate interest in providing recruitment and advisory services.
We will only send you market intelligence or updates where you have asked to receive them, and you can unsubscribe at any time.
Who we share it with
We do not sell personal data, and we do not share it with third parties for their own marketing. We use a small number of trusted service providers to operate this website and to deliver email on our behalf. These providers act as our data processors, only process data on our instructions, and are bound by contractual confidentiality and data protection obligations.
Where a service provider processes data outside the United Kingdom, we ensure appropriate safeguards are in place, such as a UK adequacy decision or the applicable standard contractual clauses with the UK addendum.
How we protect it
We apply appropriate technical and organisational measures to protect personal data, including encrypted connections (HTTPS) across the website, access on a need-to-know basis and secure disposal when data is no longer required.
How long we keep it
We retain personal data only for as long as is necessary for the purposes for which it was collected, after which it is securely deleted. Candidate information is kept for the period during which it remains relevant to your career, and we will remove it sooner on request.
Your rights
Under UK data protection law you have the right to access the personal data we hold about you, to ask us to correct or delete it, to object to or restrict its processing, and to withdraw consent at any time. To exercise any of these rights, please email [email protected].
You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection, at ico.org.uk or by calling 0303 123 1113, if you believe your data has not been handled properly. We would, however, appreciate the chance to address your concerns first.
Changes to this policy
We may update this policy from time to time. Any changes will be published on this page with a revised date.