Privacy Notice

Who we are

Luke & Co. is an independent leadership advisory and executive search firm based in Oslo, Norway. Luke & Co. is the data controller for personal data collected through thelukecompany.com. Questions about this notice, or about how your data is handled, can be sent to lh@thelukecompany.com.

What we collect, and why

You send us personal data when you choose to, through the contact form on this site or the candidate form on our For Candidates page:

• Your name
• Your email address
• Your company, if you provide it (optional)
• The content of your message

Candidate messages may also include a LinkedIn address, if you choose to give one. We use all of this solely to read and respond to what you sent, and to continue any correspondence that follows from it. We do not use it for marketing, we do not sell it, and we do not share it with third parties for their own purposes.

Separately from anything you send us, this site counts page views in aggregate. That is described under Cookies and analytics below.

Legal basis

We process this data under our legitimate interest (GDPR Article 6(1)(f)) in responding to enquiries about our services. Where you have deliberately contacted us, responding is the outcome you expect. You may object to this processing at any time, in which case we will stop and delete your data.

Cookies and analytics

This site uses Cloudflare Web Analytics, which is cookieless. It counts page views and where visits come from in aggregate. It sets no cookies, stores nothing on your device, does not fingerprint your browser and cannot follow you across other sites, so there is nothing about you to identify and nothing to consent to. That is why you are not shown a cookie banner.

We run no advertising trackers, no social media pixels, and no other third-party embeds that profile you.

Where your data is held

Messages sent through this site are transmitted over an encrypted connection and delivered to our email. Our website hosting and email providers act as data processors on our behalf and are bound by contract to process data only on our instructions. Where a provider stores data outside the EU/EEA, that transfer is covered by the European Commission's Standard Contractual Clauses or an equivalent safeguard.

How long we keep it

Enquiries that do not lead to an engagement are deleted within 12 months. Where an enquiry leads to a client relationship, we retain the correspondence for as long as that relationship continues and for a further period where required by Norwegian accounting or other statutory obligations. You can ask us to delete your data sooner at any time.

Our analytics hold no personal data to retain: the figures are aggregate counts, with nothing linking them to you or to anything you have sent us.

Your rights

Under the GDPR you have the right to request access to the personal data we hold about you, to have it corrected or erased, to restrict or object to how we process it, and to receive it in a portable format. To exercise any of these, email lh@thelukecompany.com. We will respond within one month.

If you believe we have handled your data improperly, you are entitled to complain to the Norwegian Data Protection Authority (Datatilsynet), datatilsynet.no.

Candidates and client engagements

This notice covers data collected through this website only. Personal data processed during an executive search or leadership advisory engagement — including candidate information and assessment results — is governed by the separate terms agreed with the client concerned, and by the information we provide directly to candidates at the point their data is collected.

Changes to this notice

We may update this notice as our services or providers change. The date at the top of this page shows when it was last revised.