Last updated: 22 March 2026
L'AGENCE ("L'AGENCE", "we", "us") is an executive search firm. This platform is used to manage candidate pipelines and provide clients with access to curated shortlists. Our registered contact for data matters is: privacy@lagenceexecutive.com.
We collect and process the following categories of personal data: • Candidate data: name, email, LinkedIn URL, current employer, job title, location, and AI-generated match scores derived from publicly available professional profiles. • Client data: name, email address, organization name, and login session data. • Usage data: page views, feature interactions, and IP addresses for security purposes. • Communication data: notes, feedback reactions, and messages sent through the platform.
We process personal data under the following lawful bases: • Legitimate interests (Art. 6(1)(f) GDPR): sourcing and assessing professional candidates for executive-level roles is a legitimate business interest. • Contract performance (Art. 6(1)(b)): to fulfil search mandates agreed with our clients. • Consent (Art. 6(1)(a)): for direct outreach to candidates, where required. You have the right to object to processing based on legitimate interests at any time.
Candidate profiles are processed by Google Gemini (via the Gemini API) to generate a match score and fit rationale. This processing is based on publicly available professional information. No automated decisions with legal or significant effects are taken solely by AI, all shortlists are reviewed by a human recruiter before being presented to clients.
Candidate data is retained for 24 months from the date of collection, or until a deletion request is received. Client and user account data is retained for the duration of the client relationship plus 12 months. Log and audit data is retained for 90 days.
Under GDPR, you have the right to: • Access your personal data (Subject Access Request) • Correct inaccurate data • Request erasure ("right to be forgotten") • Object to processing • Data portability • Lodge a complaint with your national supervisory authority To exercise any right, email: privacy@lagenceexecutive.com. We will respond within 30 days.
We use the following sub-processors: • Vercel (hosting), EU/US data centres, DPA in place • Supabase / PostgreSQL (database), EU region • Google Gemini API (AI processing), governed by Google's enterprise data processing terms • Resend (transactional email), DPA in place • Apollo.io (candidate sourcing), professional data aggregator • HubSpot (CRM), EU data residency option enabled
We may update this policy from time to time. We will notify registered users of material changes by email at least 14 days before they take effect.