Privacy Notice

Who we are

Luke & Co. is an independent leadership advisory and executive search firm based in Oslo, Norway. Luke & Co. is the data controller for personal data collected through thelukecompany.com. Questions about this notice, or about how your data is handled, can be sent to lh@thelukecompany.com.

What we collect, and why

We collect personal data only when you choose to send it to us through the contact form on this site:

• Your name
• Your email address
• Your company, if you provide it (optional)
• The content of your message

We use this solely to read and respond to your enquiry, and to continue any correspondence that follows from it. We do not use it for marketing, we do not sell it, and we do not share it with third parties for their own purposes.

Legal basis

We process this data under our legitimate interest (GDPR Article 6(1)(f)) in responding to enquiries about our services. Where you have deliberately contacted us, responding is the outcome you expect. You may object to this processing at any time, in which case we will stop and delete your data.

Cookies and analytics

This website sets no cookies. We run no analytics, no advertising trackers, no social media pixels and no third-party embeds that profile you. There is nothing to consent to, which is why you are not shown a cookie banner. Should this change, this notice will be updated before any such technology is introduced.

Where your data is held

Messages sent through this site are transmitted over an encrypted connection and delivered to our email. Our website hosting and email providers act as data processors on our behalf and are bound by contract to process data only on our instructions. Where a provider stores data outside the EU/EEA, that transfer is covered by the European Commission's Standard Contractual Clauses or an equivalent safeguard.

How long we keep it

Enquiries that do not lead to an engagement are deleted within 12 months. Where an enquiry leads to a client relationship, we retain the correspondence for as long as that relationship continues and for a further period where required by Norwegian accounting or other statutory obligations. You can ask us to delete your data sooner at any time.

Your rights

Under the GDPR you have the right to request access to the personal data we hold about you, to have it corrected or erased, to restrict or object to how we process it, and to receive it in a portable format. To exercise any of these, email lh@thelukecompany.com. We will respond within one month.

If you believe we have handled your data improperly, you are entitled to complain to the Norwegian Data Protection Authority (Datatilsynet), datatilsynet.no.

Candidates and client engagements

This notice covers data collected through this website only. Personal data processed during an executive search or leadership advisory engagement — including candidate information and assessment results — is governed by the separate terms agreed with the client concerned, and by the information we provide directly to candidates at the point their data is collected.

Changes to this notice

We may update this notice as our services or providers change. The date at the top of this page shows when it was last revised.