CERNOR
Privacy Policy
How Cernor handles personal information when you visit this website, enquire about a search or participate in our professional search and talent research activities.
Updated 28 October 2026
01
Who we are and what this policy covers
Cernor is a company organized under the laws of the State of Delaware, United States. This policy covers our corporate website, business correspondence, retained executive and specialist search, international search and related talent research. You can contact us at hello@cernor.app.
A separate notice or agreement may apply to an application, interview experience or specific engagement. This policy does not replace those documents or govern an employer’s independent use of information. Mandatory local protections continue to apply.
02
Responsibility for personal information
We determine how personal information is used for our website, business relationships and research that we conduct for our own purposes. For a client engagement, our role depends on the agreed work and who determines its purposes and essential means. Where we act solely on a client’s documented instructions, the relevant agreement governs that processing.
Clients remain responsible for their own recruitment processes and decisions. If a request concerns information we hold on their behalf, we may refer it to the responsible client and assist as required. We will explain our role for the activity concerned on request.
03
Information we handle
For business enquiries and correspondence, this can include your name, professional contact details, organization, role, hiring needs and messages. For candidates, it can include professional history, qualifications, skills, work samples, location, availability, role preferences, compensation expectations where relevant and information needed to discuss lawful work eligibility.
Research and assessment records may include source references, communications, interview notes, relevant opinions, corrections and recommendations. Website hosting also involves technical request data such as IP addresses, browser information, timestamps and security or error logs. The form’s current handling is explained separately below.
04
Sources and accuracy
We obtain information from you, authorized client contacts, referrals and professional sources that we may lawfully use, including publicly available professional profiles, publications and company websites. Public availability does not remove privacy obligations or make information accurate.
We seek to retain relevant source context, distinguish reported facts from judgments and correct material inaccuracies brought to our attention. If someone refers you, we may contact you to explain the relevant opportunity and how your details were obtained. Tell us if information is outdated, incorrectly attributed or used outside an agreed scope.
05
Purposes and lawful grounds
We use relevant information to respond to enquiries, define a mandate, research potential candidates, contact professionals, arrange discussions, assess relevant experience, prepare recommendations and administer engagements. We also use necessary information for security, accounting, legal compliance and the establishment or defence of legal claims.
Where a legal basis is required, we use the basis appropriate to the activity: steps you request before a contract or performance of a contract with you; legitimate interests in proportionate professional search, business administration and security where permitted and balanced against your rights; legal obligations; or consent where required. A client contract alone does not justify every use of candidate information. We do not assume that consent to one activity authorizes unrelated marketing.
06
Sensitive information and proportionality
Please do not send identity documents, financial account details, health records, criminal-history information or other sensitive material through a general enquiry. We seek only information relevant to the work and avoid unnecessary protected characteristics in assessment.
If a specific process requires sensitive information, we first need an appropriate purpose, lawful condition and suitable handling arrangements. Requests for an accommodation can be discussed privately. Refusing optional information does not by itself imply that a candidate is unsuitable.
07
Interviews, technology and human judgment
Search work may involve screening conversations, interviews and evidence-based assessment. Where recording, transcription or AI assistance is proposed, the relevant experience must explain its use and any additional data handling; consent will be obtained where required. This website does not itself record interviews.
Technology can help organize and analyse material, but its outputs may be incomplete or wrong. Recommendations require human review. Cernor does not make a final hiring decision solely by algorithm; the employer makes its own hiring decision. You can ask us to correct information or raise a concern about an assessment.
09
International handling
International search can involve clients, candidates and service providers in different countries, including the United States. Their privacy laws may differ from those where you live. We consider the destination, purpose and applicable transfer requirements before a restricted transfer.
Where required, safeguards may include an applicable adequacy decision, approved contractual protections or another lawful transfer mechanism. Additional notice, assessment or separate consent will be used where the applicable law requires it. Contact us for information about the safeguards relevant to your information.
10
How long information is kept
We keep personal information for as long as reasonably necessary for the purpose for which it is handled, including the relevant search, agreed professional relationship and applicable legal or recordkeeping requirements. We consider sensitivity, accuracy, potential disputes and whether a less identifying record would meet the need.
An ended search does not automatically justify indefinite retention for other opportunities. Continued candidate contact must have an appropriate basis and respect your choices. When information is no longer needed, it should be deleted or appropriately de-identified, subject to lawful preservation duties and the practical clearing of backups.
11
Security and confidentiality
We use proportionate organizational and technical measures to limit unauthorized access, loss and misuse. Access should follow the work actually authorized, and sensitive material should be shared through an agreed suitable channel. No website, email system or storage method is completely secure.
Do not send confidential candidate files or unnecessary personal details in a general email enquiry. Contact hello@cernor.app to arrange an appropriate exchange or report a suspected information-security issue. We address incidents and provide notices where applicable law requires them.
12
What the website enquiry form does
The current business enquiry form checks the information you enter and opens a confirmation page. It does not transmit the fields to Cernor, create a delivered enquiry or send an email. To send an enquiry, email hello@cernor.app. Opening an email link alone does not send a message; you must send it from your email service.
Entered fields remain in browser memory and are not persistently stored by the website. A short-lived session marker without personal details may be saved to permit the confirmation page. The form’s consent checkbox does not turn this into delivery or authorize analytics. Information you choose to email is handled as correspondence under this policy.
14
Your choices and rights
Depending on the applicable law and our role, you may request access, correction, deletion, a copy or portability of information, restriction of processing, or object to a use, including relevant direct marketing. You may withdraw consent for future processing based on it, without affecting prior lawful processing, and complain to the competent privacy authority. Some rights have legal exceptions.
Email hello@cernor.app with enough context to identify the activity and your request. We may seek proportionate identity verification and respond within the applicable legal period. We will explain a refusal or limitation where required. You may use an authorized representative where permitted. Exercising a privacy right will not itself result in unlawful discrimination. You can also tell us that you do not want further candidate approaches.
15
Professional audiences and other websites
The website and search activities described here are intended for adults acting in a professional capacity. We do not knowingly seek children’s information through this website. If you believe a child has supplied information, contact us so that we can address it appropriately.
Links to employers, professional platforms or other websites are subject to those organizations’ own practices. Their inclusion is not a promise about their security, accuracy or data handling. Review the relevant notice before providing information to them.
16
Updates and contact
We may update this policy to reflect changes in our work, the website or legal requirements. The date above identifies the current edition. Material changes will be brought to your attention where required; a new notice is not permission to use previously collected information for an incompatible purpose.
For privacy questions, source corrections, candidate-contact preferences or requests about this policy, contact Cernor at hello@cernor.app.