Privacy Policy

Last updated: 2025-03-23

1. Introduction

Shaw and Partners ("we," "our," or "us") respects your privacy and is committed to protecting your personal data. This privacy policy will inform you about how we look after your personal data when you visit our website, use our services, or interact with us, and tell you about your privacy rights and how the law protects you.

We are committed to protecting your personal information and your right to privacy. If you have any questions or concerns about this privacy policy or our practices with regard to your personal information, please contact us at legal@shawandpartners.com.

2. Data We Collect

We may collect, use, store and transfer different kinds of personal data about you, including:

• Identity and Profile Data: Including first name, last name, username or similar identifier, title, date of birth, gender, profile picture, and professional background
• Contact Data: Including email address, telephone numbers, physical address, and any other contact information you provide
• Technical Data: Including internet protocol (IP) address, browser type and version, time zone setting and location, operating system and platform, device information, and other technology identifiers on the devices you use to access our services
• Professional Data: Including your work history, educational background, professional certifications, skills, preferences, and other career-related information
• Usage Data: Including information about how you use our website, products, and services, such as pages visited, features used, and interaction patterns
• Marketing and Communications Data: Including your preferences in receiving marketing from us and our third parties, and your communication preferences

3. How We Collect Your Data

We collect data through various methods, including:

3.1 Direct Interactions

You may provide us with your personal data when you:

• Create an account or profile on our platform
• Apply for job opportunities through our services
• Subscribe to our newsletters or communications
• Request marketing materials
• Provide feedback or contact us

3.2 Automated Technologies

As you interact with our services, we automatically collect technical data about your equipment, browsing actions, and patterns through:

• Google Tag Manager (GTM): Used to manage and deploy marketing tags and analytics tracking on our website
• Amplitude: Used for analytics and user behavior tracking to improve our services and user experience
• LogRocket: Used for session replay and error tracking to improve service quality and troubleshoot technical issues

3.3 Third Parties and Public Sources

We may receive personal data about you from various third parties and public sources, including:

• Technical Data from analytics providers and advertising networks
• Professional Data from publicly available sources like LinkedIn
• Contact Data from publicly available professional directories

4. How We Use Your Data

We use your personal data for the following purposes:

• To create and manage your account
• To provide and maintain our services
• To match you with relevant job opportunities
• To communicate with you about our services
• To notify you about changes to our services
• To provide customer support and respond to inquiries
• To gather analysis or valuable information to improve our services
• To monitor the usage of our services
• To detect, prevent and address technical issues
• To comply with legal obligations
• To send you marketing communications (with your consent where required)

5. Legal Basis for Processing

We process your personal data based on one or more of the following legal bases:

• Consent: Where you have given us explicit consent to process your data for specific purposes
• Contract Performance: Where processing is necessary for the performance of a contract with you or to take steps at your request before entering into a contract
• Legal Obligations: Where processing is necessary for compliance with our legal obligations
• Legitimate Interests: Where processing is necessary for our legitimate interests or those of a third party, except where such interests are overridden by your interests or fundamental rights

6. Data Retention

We will only retain your personal data for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. To determine the appropriate retention period, we consider:

• The amount, nature, and sensitivity of the personal data
• The potential risk of harm from unauthorized use or disclosure
• The purposes for which we process your data
• Whether we can achieve those purposes through other means
• The applicable legal, regulatory, or operational requirements

7. Your Rights

Under applicable data protection laws, you have the following rights:

• Right to Access: Request access to your personal data and receive a copy of it
• Right to Rectification: Request correction of incomplete or inaccurate personal data
• Right to Erasure: Request deletion of personal data in certain circumstances
• Right to Restrict Processing: Request restriction of processing in certain circumstances
• Right to Data Portability: Receive your personal data in a structured format and transmit it to another controller
• Right to Object: Object to processing based on legitimate interests or direct marketing
• Right to Withdraw Consent: Withdraw consent where processing is based on consent

8. International Transfers

We may transfer your personal data to countries outside your country of residence. When we do so, we ensure appropriate safeguards are in place, including:

• Using approved standard contractual clauses
• Transferring to countries with adequate data protection laws
• Obtaining your explicit consent where required
• Implementing appropriate technical and organizational measures

9. Security Measures

We have implemented appropriate technical and organizational security measures to protect your personal data, including:

• Encryption of data in transit and at rest
• Regular security assessments and penetration testing
• Access controls and authentication mechanisms
• Regular backup procedures
• Staff training on data protection and security

10. Third-Party Services

Our website uses several third-party services:

• Google Tag Manager: Privacy policy at https://policies.google.com/privacy
• Amplitude: Privacy policy at https://amplitude.com/privacy
• LogRocket: Privacy policy at https://logrocket.com/privacy
• Amazon Web Services: Privacy policy at https://aws.amazon.com/privacy

11. Changes to This Privacy Policy

We may update this privacy policy from time to time. The updated version will be indicated by an updated "Last updated" date and the updated version will be effective as soon as it is accessible. We encourage you to review this privacy policy frequently to be informed of how we are protecting your information.

12. Contact Us

If you have any questions about this Privacy Policy or our privacy practices, please contact us at:

Email: legal@shawandpartners.com