Privacy Policy
Website & Business Contact Privacy Notice
Last updated: 5 August 2026
Cervantes is committed to handling personal information with the confidentiality and compliance standards expected of a leading executive search firm. This policy explains our practices across search services and this website, and your rights under applicable law.
1. Introduction & Commitment
Cervantes (Beijing) Information Technology Co., Ltd. (“we”, “us”, or “Cervantes”) provides executive search and leadership advisory services. Safeguarding personal information is fundamental to how we work.
This policy applies when you interact with us through cervantesbj.com, contact forms, search briefs, job applications, job-matching tools, and related channels. It does not govern third-party sites or services you may visit separately.
We process personal information lawfully, fairly, and transparently; apply security measures proportionate to risk; and respect your rights to know, decide, access, correct, and delete your data where applicable.
2. Data Controller
Data controller: Cervantes (Beijing) Information Technology Co., Ltd.
Headquarters: No. 10 A, Shuangqiao East Road, Chaoyang District, Beijing
Website: cervantesbj.com
Privacy inquiries: mercado@cervantesbj.cn (or via our Contact page)
3. Scope & Relationship Types
Depending on how you interact with us, you may fall into one or more of the following categories. The information we collect and how we use it varies accordingly:
- Candidates / job seekers: applications, job matching, advisor conversations, assessments
- Clients / mandating organisations: search briefs, contracts, shortlists, progress reporting
- Website visitors: browsing public content, contact forms, insights
- Referees / references: background information provided with appropriate consent
4. Information We Collect
Categories of personal information we may process include:
- Identity & contact: name, email, phone, location
- Professional background: employment history, education, skills, languages, compensation expectations (if you choose to provide them)
- Résumé & attachments: CVs, portfolios, and related documents you upload
- Mandate & business information: company name, role specifications, organisational needs (clients)
- Communications: emails, form submissions, advisor notes (where appropriately authorised)
- Technical data: IP address, browser type, device information, access logs (security and site improvement)
5. How We Obtain Information
We may obtain personal information from:
- Information you provide directly (forms, applications, email, calls)
- Third parties you authorise (referrals, background checks, where consent or legal basis applies)
- Lawfully public sources (professional networks, public directories, news, for talent mapping)
- Clients (role and organisation information within an active search mandate)
- Automatic collection (site logs, cookies — see below)
6. Purposes of Processing
We use personal information only as necessary for the following purposes:
- Search & placement: assessing fit, presenting authorised candidate materials to clients
- Public listings & applications: publishing approved roles and processing your applications
- Client & advisor communications: enquiries, meetings, service reporting
- Compliance & risk: identity checks, conflict screening, record-keeping
- Site security & improvement: fraud prevention, troubleshooting, analytics (where feasible, de-identified)
- Legal obligations: regulatory compliance, disputes, lawful requests from authorities
7. Legal Basis
We process personal information under applicable laws, including the Personal Information Protection Law of the PRC, on one or more of the following bases:
Your consent (e.g. submitting a CV, optional features, marketing where offered);
Performance of a contract to which you are a party (search mandates, application handling);
Compliance with legal obligations;
Protection of vital interests in emergencies;
Public interest activities such as news reporting or supervision within reasonable limits;
Processing of information you have made public or that is lawfully public, within reasonable limits;
Other grounds provided by law.
Where processing is consent-based, you may withdraw consent at any time without affecting processing already carried out before withdrawal.
8. Client & Candidate Confidentiality
Confidentiality is central to executive search. We apply tiered access controls and limit internal and external disclosure.
Public job listings on this site do not display client company names by default. An alias or anonymised description is used only with written client authorisation.
When presenting candidates to clients, we share personal information only with candidate knowledge and consent, or where otherwise required by law.
We do not expose internal business-system login to the public. Clients and candidates interact through forms, applications, and advisor channels on this site — there is no redirect from the marketing site to internal systems.
We do not sell personal information to third parties without authorisation.
10. Retention
We retain personal information only as long as necessary for the purposes described, unless a longer period is required or permitted by law.
Candidate records in our talent database: retained while services continue, you remain in contact, or you have not requested deletion; we periodically review inactive records for anonymisation or deletion.
Mandate and transaction records: retained per contract, accounting, and regulatory requirements.
Website logs: typically up to 12 months unless extended for security investigations.
When retention periods expire, we delete or anonymise personal information.
11. Security Measures
We implement technical and organisational measures aligned with industry practice, including:
- Separate deployment of the marketing site and internal business systems; sensitive APIs not exposed to the public internet
- Encryption in transit (HTTPS), access controls, and activity logging
- Staff confidentiality training and least-privilege access
- Résumés and attachments stored on controlled servers
- Incident response and impact assessment procedures
12. Cross-Border Transfers
Our primary operations and data storage are within the People’s Republic of China.
If personal information must be provided to overseas recipients, we will comply with applicable cross-border transfer requirements (security assessment, standard contractual clauses, certification, or other lawful mechanisms) and inform you of the recipient, purposes, methods, and your rights.
In cross-border searches or multinational mandates, we transfer only what is necessary and require recipients to provide protection no less than described in this policy.
13. Your Rights
Under applicable law, you may have the following rights (we respond within statutory or reasonable timeframes):
- Access & copy: understand how we process your data and obtain a copy
- Correction & completion: update inaccurate or incomplete information
- Deletion: request deletion where legally applicable, including removal from our talent database
- Withdraw consent: stop future consent-based processing
- Restrict or object: where provided by law
- Explanation: request clarification of our processing rules
- Complaints: lodge a complaint with the Cyberspace Administration or other competent authority
15. Minors
Our services are directed at adults with full legal capacity and business clients. We do not knowingly collect personal information from individuals under 18.
If you believe we have inadvertently collected a minor’s information, contact mercado@cervantesbj.cn and we will promptly delete it.
16. Policy Updates
We may update this policy from time to time. Material changes will be communicated via a notice on this site or other appropriate means.
The updated policy takes effect upon publication. Continued use of our services indicates your understanding of the changes; if you disagree, please stop using our services and contact us regarding your information.
17. Contact Us
For questions about this policy or to exercise your rights, contact us at:
Email: mercado@cervantesbj.cn
You may also use the Contact page on this site. We aim to respond within 15 business days, or within any shorter period required by law.
