LEGAL

Privacy Policy

Last updated: July 27, 2026

Exergy Partners LLC (“Exergy Partners,” “we,” “us,” or “our”) is an executive search and growth strategy firm based in Massachusetts, USA. This Privacy Policy explains what personal information we collect, how we use and share it, how long we keep it, and the choices and rights you have. It applies to our website at exergy.partners (the “Site”) and to the personal information we process in the course of providing executive search and related services (the “Services”).

If you have any questions, contact us at contact@exergy.partners.

1. Information We Collect

Information you provide directly

  • Contact form submissions: name, work email address, company, area of interest, and the contents of your message.
  • Correspondence: information you share with us by email, phone, video call, or in meetings.
  • Candidate information: if you are a candidate or prospective candidate, we may collect your resume/CV, employment history, education, compensation expectations, references, work authorization status, and other information relevant to a search engagement.

Information we collect from other sources

  • Publicly accessible professional information: professional information from publicly accessible sources, including information publicly displayed on professional-networking platforms.
  • Approved third-party platform access: separately, where an individual authorizes an application connection or a platform otherwise grants us approved API access, we may receive data fields from that platform and use them only for the purpose, scope, and retention period its terms permit (see Section 3 below).
  • References and referrals: information provided by people who refer or recommend you.
  • Public sources: company websites, press coverage, conference materials, patents and publications, and other publicly available professional information.
  • Our clients: information about candidates or roles provided by the companies that engage us.

Information collected automatically

When you visit the Site, we and our service providers collect certain information automatically using cookies and similar technologies, including IP address, browser type, device information, pages visited, referring URLs, and interactions with the Site. We use:

  • Vercel Analytics — privacy-focused, aggregated site usage measurement.
  • HubSpot — form handling, contact management, and website activity tracking associated with our CRM.
  • Google Analytics — site usage and traffic measurement. You can opt out via the Google Analytics opt-out browser add-on.

2. How We Use Personal Information

  • To respond to inquiries and communicate with you.
  • To provide our executive search Services: identifying, evaluating, and presenting candidates for leadership roles, and advising clients on talent strategy.
  • To assess whether a role may be a fit for you as a candidate, and to present your profile to a client with your knowledge and consent.
  • To maintain our internal candidate and client records (CRM).
  • To operate, secure, and improve the Site, and to understand how visitors use it.
  • To comply with legal obligations and enforce our agreements.

Where the EU/UK General Data Protection Regulation (GDPR) applies, our legal bases for processing are: your consent; performance of a contract or steps taken at your request before entering a contract; our legitimate interests in operating an executive search business (which we balance against your rights); and compliance with legal obligations. Where we rely on consent, you may withdraw it at any time as described in Section 8.

3. Data from Third-Party Platforms and APIs

Some professional information reaches us through third-party platforms and their application programming interfaces (“APIs”), where the platform has approved our access and, where applicable, the individual has authorized the connection. LinkedIn is currently the primary such platform. This section describes how we handle that data.

Platform terms take precedence. Where a platform’s terms, product documentation, or agreement govern data we receive through it, those requirements control the scope, permitted use, and retention of that data, and they take precedence over the more general practices described elsewhere in this Policy. Where they prohibit storage or impose a shorter retention period than we would otherwise apply, the platform’s requirements govern. This is a distinct category from professional information we obtain independently from public sources, referrals, clients, or the individual directly, which is handled as described in Sections 1, 2, and 6.

  • What we receive: only the data fields the approved platform product makes available to us. The fields vary by product; we do not request or receive fields beyond what that product provides.
  • When we receive it: at the point access is authorized, and thereafter only as the applicable product and agreement permit.
  • How we use and disclose it: solely to provide the functionality described at authorization, in connection with a specific search engagement. Where we present a candidate to a client, we do so wherever practicable with the candidate’s prior knowledge and consent. We do not sell platform-sourced data, use it for advertising, or make it available as part of any external product or service. We do not use it for generalized sourcing, profiling, enrichment, or to build or maintain a long-term candidate database unless the applicable platform program expressly permits it.
  • Retention: we retain or cache platform-sourced data only for the period permitted by the applicable product terms and documentation as in effect and made known to us. We do not use it to refresh, enrich, or maintain long-term candidate records except where the platform expressly permits that use and retention.
  • Withdrawing authorization: you can revoke an application’s access at any time through the platform’s own settings. On LinkedIn, this is under Data privacy → Other applications → Permitted services. You may also contact us directly to withdraw any consent you have given us.
  • Deletion: upon a valid request from an individual, we will delete platform-sourced data associated with that individual from our active systems and instruct applicable service providers to do the same, subject only to limited retention required by law. We will also delete such data promptly after we receive notice of, or otherwise become aware of, a revocation of authorization, the termination of our access to the relevant product, or a change in the platform’s requirements that calls for deletion. You may submit a request by emailing contact@exergy.partners. See Section 8 for details.

We take commercially reasonable steps to stay current with the terms applicable to each platform we use, and we act promptly on changes once they are communicated to us or otherwise come to our attention. Our use of LinkedIn data is also governed by LinkedIn’s own agreements and policies, including the LinkedIn API Terms of Use and LinkedIn Privacy Policy.

4. How We Share Personal Information

We do not sell personal information, and we do not share it for cross-context behavioral advertising. We share personal information only with:

  • Our clients: candidate information is shared with the client for a specific search engagement, wherever practicable with the candidate’s prior knowledge and consent.
  • Service providers: vendors who host and support our website, CRM, analytics, communications, and document management (e.g., Vercel, HubSpot, Google), under agreements limiting their use of the data to providing services to us.
  • Professional advisers: lawyers, accountants, and insurers where reasonably necessary.
  • Legal and safety: where required by law, subpoena, or legal process, or to protect the rights, safety, or property of Exergy Partners or others.
  • Business transfers: in connection with a merger, acquisition, financing, or sale of all or part of our business.

5. Cookies

The Site uses cookies and similar technologies for functionality and analytics as described in Section 1. Most browsers let you refuse or delete cookies through browser settings. Disabling cookies may affect some Site functionality. Where required by law, we will request your consent before setting non-essential cookies.

6. Data Retention

We retain personal information for as long as reasonably necessary for the purposes described in this Policy. Because executive search relationships often span years, we may retain candidate information obtained directly from the candidate, from a client, from a referral, or from a lawful public source in our talent network while it remains relevant to potential future opportunities, unless you ask us to delete it. Contact form and CRM records are retained while we have an active relationship or legitimate business need, and thereafter as required by law. When personal information is no longer needed, we delete or de-identify it.

This retention period does not apply to data received through third-party platform APIs. That data is retained only for the period permitted by the applicable platform product terms and documentation, as described in Section 3. Where those requirements prohibit storage or impose a shorter retention period, they control.

7. Data Security

We use commercially reasonable technical and organizational measures designed to protect personal information against unauthorized access, loss, misuse, or alteration. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. Your Rights and Choices

Depending on where you live, you may have some or all of the following rights with respect to your personal information:

  • Access — request a copy of the personal information we hold about you.
  • Correction — request that we correct inaccurate or incomplete information.
  • Deletion — request that we delete your personal information.
  • Portability — request your data in a portable format.
  • Objection / restriction — object to or request that we restrict certain processing.
  • Withdraw consent — where processing is based on consent, withdraw it at any time without affecting the lawfulness of processing before withdrawal.

These rights are provided under laws including the GDPR (for individuals in the EU/UK) and U.S. state privacy laws such as the California Consumer Privacy Act (CCPA/CPRA) where applicable. To exercise any of these rights, email contact@exergy.partners with your request. We will respond within the timeframe required by applicable law and may need to verify your identity first. We will not discriminate against you for exercising your rights. If you are in the EU/UK, you also have the right to lodge a complaint with your local data protection authority.

Data received through third-party platform APIs. In addition to the rights above, we will delete platform-sourced data associated with an individual from our active systems, and instruct applicable service providers to do the same, upon a valid request from that individual, subject only to limited retention required by law. We will also delete such data promptly after we receive notice of, or otherwise become aware of, a revocation of authorization or the termination of our access to the relevant product — without requiring the individual to submit a separate request to us.

9. International Data Transfers

We are based in the United States, and the personal information we collect is processed and stored in the United States, where privacy laws may differ from those in your jurisdiction. Where we transfer personal information from the EU/UK to the United States, we rely on appropriate safeguards such as standard contractual clauses or the recipient’s participation in a recognized data transfer framework.

10. Children’s Privacy

The Site and Services are intended for business professionals and are not directed to children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us personal information, please contact us and we will delete it.

11. Third-Party Links

The Site may contain links to third-party websites, including LinkedIn. Those sites are governed by their own privacy policies, and we are not responsible for their practices.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the revised version on this page with an updated “Last updated” date. Material changes will be highlighted on the Site or communicated directly where required by law.

13. Contact Us

Exergy Partners LLC
Massachusetts, USA
contact@exergy.partners