Online Privacy Policy For LEAD.

Effective Date: 1 May 2026

 

1. Introduction

LEAD (“we”, “our” or “us”) is committed to protecting personal information in accordance with the Privacy Act 2020 (New Zealand).

This Privacy Policy explains how we collect, use, disclose, store and protect personal information relating to candidates, clients, referees, contractors, website users and other individuals we engage with in the course of our recruitment and talent services. 

By engaging with us, including through our website, third party job boards, or online forms, you acknowledge this Privacy Policy.

 

2. What personal information we collect

Depending on your relationship with us, we may collect:

● Full name and contact details
● Curriculum vitae, employment history and qualifications
● Professional registrations and certifications
● Salary, rate and remuneration information
● Immigration or work eligibility status
● Referee details and reference information
● Interview notes, screening outcomes and assessment results
● Psychometric, skills or aptitude testing results
● Health and safety information relevant to a placement
● Bank account and tax information (for contractors or payroll purposes)
● Communications between you and us
● Website usage information (including cookies and analytics data)

We only collect personal information that is reasonably necessary for our lawful business purposes.

 

3. How we collect personal information

3.1 Information collected directly from you

We collect personal information directly when you:

● Apply for a role
● Register on our website
● Contact us by phone, email or in person
● Attend interviews or events
● Engage us as a client
● Submit information through third-party job boards or recruitment platforms

When we collect information directly from you, we take reasonable steps to ensure you are aware of:

● The fact that the information is being collected
● The purpose of collection
● The intended recipients
● Our name and contact details
● Whether the collection is authorised or required by law
● Your right to access and correct your information

3.2 Information collected indirectly (IPP 2 and IPP 3A)

In some circumstances, we collect personal information from third parties rather than directly from
you. These sources may include:

● Job boards such as SEEK
● Professional networking platforms such as LinkedIn
● Referees
● Former employers
● Clients
● Partner recruitment agencies
● Publicly available sources

Under Information Privacy Principle 2 (IPP 2), we must have a lawful basis to collect personal information indirectly. Before collecting indirectly, we assess whether an IPP 2 exception applies, including where:

● You have authorised the collection
● The information is publicly available
● The collection from you directly would prejudice the purpose of collection
● The collection is necessary to avoid prejudice to the maintenance of the law
● Other statutory grounds apply

Under Information Privacy Principle 3A (effective 1 May 2026), where we collect personal information indirectly, we will take reasonable steps to inform you of:

● The fact that the information has been, or will be, collected
● The purpose for the collection
● The intended recipients of the information
● Our name and contact details as the organisation collecting the information
● Whether the collection is authorised or required by law
● Your right to request access to and correction of your information

This notification may be provided by email, through candidate portal messaging, or by other
reasonable means.

3.3 Exceptions to indirect collection notification

IPP 3A recognises that notification will not always be required. We may not provide notice where permitted by law, including where:

● You have already been made aware of the collection
● Non-compliance would not prejudice your interests
● The information will not be used in an identifiable form (for example, research or statistical purposes)
● The information is collected from a publicly available source
● It is not reasonably practicable to notify you (for example, where we do not have contact details)
● Notification would prejudice the purposes of collection (for example, in suspected fraud investigations)
● Notification would pose a serious threat to public health or safety, or to the health and safety of any individual
● Another statutory exception applies

Where we rely on an exception, we document the basis for doing so.

 

4. Purpose of collection

We collect and use personal information for purposes including:

● Assessing suitability for employment or contract roles
● Presenting candidate profiles to clients (with appropriate authorisation)
● Conducting reference and background checks
● Verifying qualifications and work eligibility
● Managing contractor payroll and compliance obligations
● Communicating with you about job opportunities and recruitment services
● Sending relevant job alerts or recruitment-related updates
● Business administration, reporting and service improvement
● Complying with legal and regulatory obligations

You may opt out of receiving marketing or job alert communications at any time.
We will not use personal information for unrelated purposes unless permitted by law or with your consent.

 

5. Disclosure of personal information

We may disclose personal information to:

● Prospective or current employers for recruitment purposes
● Referees and verification providers
● Payroll providers and professional advisers
● IT, cloud and software service providers
● Government agencies where required by law

We take reasonable steps to ensure third parties handle personal information in accordance with applicable privacy obligations.

5.1 JobAdder

We use JobAdder as our recruitment management system.

In respect of candidate and client data stored in JobAdder:

● LEAD remains responsible for the personal information stored in our JobAdder account.

JobAdder provides the recruitment platform and processes information on our behalf in accordance with our instructions.
We retain ownership and control of candidate and client records stored within our JobAdder account and remain responsible for responding to access, correction and deletion requests. JobAdder may engage approved sub-processors and uses secure cloud infrastructure. Further information is available in JobAdder’s privacy documentation and data processing terms.

5.2 Third party platforms

Where you interact with us via third party platforms such as SEEK or LinkedIn, your information is also subject to those platforms’ privacy policies. We are not responsible for the privacy practices of external websites.

 

6. Artificial intelligence and automated tools

Our recruitment systems may include features supported by artificial intelligence technologies provided within secure cloud environments. Where AI tools are used:

● Processing occurs within secure environments
● Information remains subject to confidentiality and data protection safeguards
● Information generated about candidates is treated as personal information

Where AI-supported tools are used, outputs are subject to human review before being relied upon in recruitment decisions.

 

7. Overseas disclosure

If personal information is transferred outside New Zealand, we will ensure appropriate safeguards are in place as required by the Privacy Act 2020.

 

8. Data storage, security and retention

We take reasonable technical and organisational measures to protect personal information from loss, misuse, unauthorised access, alteration or disclosure. These include:

● Secure recruitment database systems
● Access controls and password protections
● Confidentiality obligations for staff
● Secure cloud-based storage

Personal information is stored within secure cloud-based systems used for recruitment and business operations. We retain personal information only for as long as necessary for the purposes for which it was collected or as required by law. Where records are deleted from active systems, residual copies may remain within secure backup systems for a limited period as part of disaster recovery processes.

 

9. Privacy breaches

If we experience a privacy breach that is likely to cause serious harm, we will notify the Office of the Privacy Commissioner and affected individuals as required by the Privacy Act 2020.

 

10. Access and correction

You have the right to:

● Request confirmation of whether we hold personal information about you
● Request access to your personal information
● Request correction of your personal information

Requests can be made using the contact details below. We will respond within the timeframes required by law.

 

11. Cookies and website data

Our website uses cookies and similar technologies to enhance user experience and analyse website traffic. You may manage cookie preferences through your browser settings.

 

12. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in law or business practices.

The most current version will be available on our website.

 

13. Contact details

LEAD Executive Search
Level 2, 106–108 Quay Street, Britomart, Auckland 1010, New Zealand
Email: [email protected]
Attn: Operations Manager