Privacy Notice

Last updated: November 11, 2026

Who we are

Pembroke Soames Ltd is the controller of the personal information described in this notice. We are registered in England and Wales under company number 16176605. Our registered office is 66 Paul Street, London EC2A 4NA, United Kingdom.

We provide in-house legal and compliance recruitment, search intervention, market intelligence and career advisory services, with offices in Washington, DC, and London.

Contact us about this notice or your personal information at info@pembrokesoames.com, or write to us at our registered office.

Whose information we handle

• Candidates: legal and compliance professionals we approach, assess or advise, or who contact us about opportunities or career advisory.
• Client contacts: people at organizations that engage us or discuss engaging us.
• Referees and other professional contacts connected with a search.
• Website visitors and anyone who sends us an inquiry.

The information we collect

• Identity and contact details, such as your name, email address, telephone number and organization.
• Professional information, such as your CV, employment history, qualifications, areas of expertise and professional memberships.
• Information you choose to share about your current role, notice period, remuneration expectations and location preferences.
• Notes of our conversations, interviews and assessments, and feedback from clients about candidates we introduce.
• The content of inquiries you send through our website or by email.
• Technical information that your browser sends when you visit our website, such as your IP address.

We do not ask for sensitive personal information, such as health information or information about ethnicity or religion. Please do not include it in an inquiry or CV.

Where we get it from

Most information comes from you directly. When we research the market for a search or a market intelligence assignment, we also collect professional information from publicly available sources, such as professional networking sites, company websites, law firm and regulatory directories, and published articles. We may also receive information from clients, referees and people who recommend you.

If we collect your information from these sources, we will provide the information in this notice when we first contact you, and in any case within one month.

How we use it and our lawful bases

• Responding to inquiries. We use the details you send us to reply. Our lawful basis is our legitimate interest in responding to people who contact us, or taking steps at your request before entering into a contract.
• Recruitment and search. We identify, approach and assess candidates for roles, and manage the selection process. Our lawful basis is our legitimate interest in providing recruitment services to clients and opportunities to candidates. We will discuss a specific role with you and obtain your agreement before we introduce you to a client.
• Market intelligence. We research talent markets and team structures for clients. Our lawful basis is our legitimate interest in providing those services. Where findings are shared with clients, we share them in a way that is proportionate to the assignment.
• Career advisory. We use what you tell us to hold a confidential career conversation with you. Our lawful basis is our legitimate interest, or performing our agreement with you.
• Client relationships. We use client contact details to agree and deliver assignments and to keep in touch about our services. Our lawful basis is performing our contract with the client and our legitimate interest in managing our business relationships.
• Legal and regulatory requirements. We keep records and share information where the law requires. Our lawful basis is compliance with a legal obligation.

Where we rely on legitimate interests, we have considered your interests and rights. You can object at any time, as described below.

We do not make decisions about you based solely on automated processing.

Who we share it with

• Clients considering you for a role, once you have agreed to the introduction.
• Service providers who support our business, including website hosting, email, our website inquiry service, our email marketing provider and IT providers. They act on our instructions.
• Professional advisers, such as lawyers and accountants, where needed.
• Regulators, courts and law enforcement authorities where the law requires it.

We do not sell personal information.

Our website

Our website does not use analytics or advertising cookies. Some features rely on third-party services:

• The maps on our Contact page are provided by Google Maps and load only if you press View location. Google may set cookies and receive information about your use of the map. Google’s own privacy policy applies to that information.
• Messages sent through our inquiry form are delivered to our mailbox by FormSubmit, our inquiry service provider.

Our website is available in US English and UK English, and each has its own web address (UK English pages begin with /uk). Pages appear in US English if your device is set to a US time zone and in UK English otherwise, unless you choose with the language selector. The time zone is checked in your browser and is not sent to us. If you choose a version, your choice is saved in your browser’s local storage so that it applies on later pages and visits; it is not sent to us. If you switch versions while filling in a form, what you have typed is kept briefly in that browser tab so that it is not lost; it is not sent to us. We do not use your location or IP address to choose the spelling. You can change it at any time with the selector or by clearing your browser’s data for our website.

Like most websites, our hosting provider’s servers keep routine logs of requests to our website, including IP addresses, to deliver the website and keep it secure.

International transfers

We work across the UK, the US, Europe and the Middle East, so personal information may be transferred between our offices and to clients and service providers in other countries. When we transfer personal information from the UK to a country without UK adequacy regulations, we put in place the safeguards required by UK data protection law. Contact us for more information about these safeguards.

How long we keep it

We keep personal information only as long as we need it for the purposes above. For candidates, this generally means while you remain someone we may contact about relevant opportunities, and we review our records regularly. We keep inquiry correspondence while it is relevant to an ongoing relationship, and we keep records for longer where the law requires it or to deal with legal claims. When information is no longer needed, we delete it or make it anonymous.

Your rights

Depending on where you live and the circumstances, you may have the right to:

• ask for a copy of the personal information we hold about you;
• ask us to correct information that is inaccurate or incomplete;
• ask us to delete your information;
• ask us to restrict how we use your information;
• object to our use of your information where we rely on legitimate interests;
• ask us to transfer information you gave us to another organization;
• withdraw your agreement where we rely on it, without affecting what we did before.

These rights are subject to conditions and exceptions. For example, we may need to keep some information to meet a legal obligation. To make a request, email info@pembrokesoames.com. We may ask you to confirm your identity, and we will normally respond within one month.

If you live in a US state with its own privacy law, you may have similar rights under that law. Contact us in the same way.

Complaints

Please contact us first if you have a concern, so that we can try to resolve it. You also have the right to complain to the Information Commissioner’s Office, the UK data protection regulator, at ico.org.uk/make-a-complaint or on 0303 123 1113. If you live elsewhere, you may be able to complain to your local data protection authority.

Changes to this notice

We will update this notice when our processing changes. The date at the top shows when it was last updated.