GDPR, Privacy Policy & Cookie Policy

Last updated: November 2026

Who we are

TPI Search is the trading name of Transfer Pricing International Ltd ("TPI Search", "we", "us"), a recruitment and executive search firm specialising in Transfer Pricing, Tax and Tax Technology. We are registered in England and Wales (company number 06475316). Our registered office is Berkeley Suite, 35 Berkeley Square, Mayfair, London W1J 5BF, and our address for correspondence is 28 Queen Street, London EC4R 1BB.

We are the controller of the personal data described in this policy. This means we decide how and why it is used, and we are responsible for looking after it under the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and, where it applies to you, the EU General Data Protection Regulation. We are registered with the Information Commissioner's Office (ICO), registration number ZA937705.

We are not required to appoint a Data Protection Officer. Aaron Leslie, Co-Founder and Managing Partner, is responsible for data protection at TPI Search. If you have any questions about this policy or how we use your data, email us at info@tpi-search.com or write to us at our correspondence address above.

The short version

We use your details to help you find a role, or to help our clients find people, and to reply when you get in touch.
This website does not store your CV or the messages you send. CVs, applications and job alert sign-ups go to Recruiterflow, our recruitment system. Contact form messages come to us by email.
We do not sell your data.
We only use analytics cookies if you say yes, and you can change your mind at any time.

The information we collect

Information you give us. When you apply for a role, send us your CV, fill in our contact form, or speak or write to us, you may give us your name, contact details, CV, employment history, qualifications, salary and notice period, the kind of roles you are interested in, and anything else you choose to tell us. When you use the contact form we receive your name, email address, phone number (if you give it) and your message. When you create a job alert, your name, email address, location (if you give it) and the kinds of role you want to hear about go straight to Recruiterflow, and we email you about matching roles until you ask us to stop.

Information from other sources. We may receive information about you from clients, from people who refer you to us, from referees, and from public professional sources such as LinkedIn.

Information about your visit. When you visit this website, our hosting provider processes technical information such as your IP address, browser type and the pages you request, so that the site can work and stay secure. If you accept analytics cookies, we also collect information about how you use the site (see Cookies below).

We do not ask for special category data (such as health, ethnicity or religious beliefs) or criminal records information. If a client role legally requires such checks, we will tell you first and only do so with your agreement or where the law allows.

How we use your information, and our legal reasons

To provide recruitment services: matching you to roles, introducing you to clients with your agreement, arranging interviews and keeping in touch during the process. Legal basis: our legitimate interests in running a recruitment business, and taking steps at your request before entering into a contract.
To work with our clients: contacting people at client firms about their hiring needs. Legal basis: our legitimate interests.
To answer enquiries: replying to messages sent through our contact form, by email or by phone. Legal basis: our legitimate interests in responding to you.
To send you relevant roles and updates: where you have asked for them. Legal basis: your consent or, for people we already work with, our legitimate interests. You can opt out at any time.
To understand how our website is used: only if you accept analytics cookies. Legal basis: your consent.
To keep the website secure and protect against spam and abuse. Legal basis: our legitimate interests.
To meet our legal obligations: for example, record keeping, tax, and checks on the right to work where required. Legal basis: legal obligation.

Where we rely on legitimate interests, we have weighed them against your rights, and you can object at any time (see Your rights below).

We do not make decisions about you based solely on automated processing.

We only share what is needed, and only with:

Clients, when you have agreed that we can put you forward for a role.
Referees and verification providers, where checks are part of a recruitment process you are taking part in.
Service providers who process data for us under contract and on our instructions: Recruiterflow (our recruitment system, which holds candidate records and job applications), Microsoft 365 (our email), Cloudflare (website hosting, security, the spam check on our contact form, and delivering contact form messages to us) and Google Analytics (website statistics, only if you accept analytics cookies).
Professional advisers such as lawyers, accountants and insurers, and authorities such as HM Revenue & Customs where the law requires it.
A buyer or successor, if all or part of our business is ever sold or merged, under the same protections.

We do not sell your personal data.

International transfers

Some of our service providers and clients are based outside the UK, including in the European Economic Area and the United States. When your data is transferred outside the UK, we make sure it is protected: for example, the country has been found to provide adequate protection (such as the EEA, or US companies certified under the UK Extension to the EU–US Data Privacy Framework), or we use the UK International Data Transfer Agreement or Addendum, or the transfer is necessary to put you forward for a role you have asked to be considered for.

How long we keep your information

We keep your information only for as long as we need it:

Candidates: five years from the last time we were in touch with you. Shortly before then, we will email you to ask whether you would like us to keep your details. If you say yes, the five years start again from that point. If you do not reply, we delete your record.
Client contacts: for as long as we have a business relationship, and for five years from the last time we were in touch.
Contact form messages: in our email for as long as needed to deal with your enquiry. If you become a candidate or client, the candidate or client periods above apply.
Records we must keep by law, such as financial records, for as long as the law requires (usually six years).

Your rights

You have the right to:

ask for a copy of the personal data we hold about you
ask us to correct data that is wrong or incomplete
ask us to delete your data
object to us using your data on the basis of our legitimate interests, and to stop direct marketing at any time
ask us to restrict how we use your data
ask us to transfer data you gave us to you or to another organisation
withdraw your consent at any time, where we rely on consent (this does not affect anything we did before you withdrew it)

To use any of these rights, email info@tpi-search.com. There is usually no charge. We may ask you to confirm your identity, and we will reply within one month (or tell you within that month if we need longer for a complex request).

Complaints

If you are unhappy with how we have handled your data, please tell us first at info@tpi-search.com. We will acknowledge your complaint within 30 days and tell you what we are doing about it.

You also have the right to complain to the Information Commissioner's Office (ICO), the UK data protection regulator: ico.org.uk/make-a-complaint. If you live in the EU, you can also contact the data protection authority in your country.

Keeping your information safe

We use appropriate technical and organisational measures to protect your data, including encrypted connections (HTTPS) on this website, access controls on our systems, and contracts with our service providers that require them to protect it. Only people who need your data for their work can see it. No method of sending data over the internet is completely secure, but we will tell you and the ICO about a data breach where the law requires.

Links to other websites

Our website links to other websites, including Recruiterflow's application forms and LinkedIn. Those sites have their own privacy policies, and we are not responsible for how they use your data.

Cookies

Cookies are small files that a website stores on your device. Under UK and EU rules, a website may only use cookies that are not strictly necessary if you agree to them.

Strictly necessary cookies. These make the website work and keep it secure, so they do not need your consent. You can block them in your browser settings, but parts of the site may not work.

tpi_consent (this website): remembers your choice about analytics cookies. Kept for 6 months.
__cf_bm (Cloudflare): helps tell people from automated traffic, to protect the site. Kept for 30 minutes.
cf_clearance (Cloudflare): set only if a security check is shown, to remember that you passed it.

Analytics cookies (only with your consent). If you click "Accept analytics", we use Google Analytics to count visits and see which pages are used, so we can improve the site. Google Analytics sets cookies named _ga and _ga_ followed by an ID, which we keep for up to 13 months. If you click "Reject", or ignore the banner, these cookies are not set and Google Analytics does not load.

Visit counts without cookies. Our hosting provider, Cloudflare, also counts page views and measures how quickly pages load, using Cloudflare Web Analytics. It sets no cookies, stores nothing on your device and does not identify you or follow you across other websites, so it does not need your consent. We use it, in our legitimate interests, to keep the site working well.

We do not use advertising or social media tracking cookies.

Changing your mind. You can change your choice at any time with the "Cookie settings" link at the bottom of every page. If you withdraw consent, we remove the analytics cookies we set. You can also delete cookies in your browser settings.

Changes to this policy

We review this policy from time to time. The date at the top shows when it was last updated. If we make significant changes, we will tell people we are working with.