Legal

Privacy Policy

Last updated: October 25, 2026

1. Information We Collect

When you submit your profile through the candidate form on this website, I collect exactly what you provide: your name, email address, phone number, your LinkedIn or other profile URL, the CV or resume file you upload, and the contents of any message you write. The site also collects limited technical data automatically (IP address, browser type, device information, and page interactions) through essential cookies and session analytics. An account is not required to submit the candidate form. If you choose to create an account, I collect your email address and a password (or your Google sign-in identifier). If you subscribe to job alerts, I collect your email address, your category and keyword preferences, and a private unsubscribe token. If you check an application status, I collect the email address you enter and log your IP address briefly to limit automated abuse. If you refer someone, I collect your name and email address along with the name, email address, and profile URL of the person you refer, and the reason you give. If you submit a firm inquiry, I collect your name, firm, email, phone, and the details of the role. If you book a call, I collect your name, firm, email address, phone number, the time you choose, and any note you add, and I use them only to schedule, hold, and conduct that call. Booking confirmations are sent by email with a calendar invite.

2. Legal Basis for Processing (GDPR)

For individuals in the European Economic Area, we process your personal data under the following lawful bases: (a) your consent to provide your information for recruitment purposes; (b) our legitimate interests in operating an executive search business and matching candidates with opportunities; and (c) compliance with legal obligations to which we are subject. You may withdraw your consent at any time by contacting us.

3. How We Use Your Information

We use the information you provide for recruitment and executive search purposes: matching your profile with active and upcoming mandates, communicating with you about relevant opportunities, presenting qualified candidates to our hiring firm clients, maintaining our talent database, responding to your inquiries, complying with legal obligations, and improving our services. We do not sell, rent, or trade your personal information to third parties.

4. Data Sharing and Disclosure

When I put you forward for a role, I share your CV and candidate details with the hiring firm, which are private equity sponsors and their portfolio companies. That is the only routine way your data leaves Sterlyk.com. Your details are never sold, rented, or shared for advertising. I use service providers who process your data on my behalf, including Base44 (website and application hosting, database, and private file storage), Google (Gmail, for email communications and calendar invites, and Google sign-in if you choose it), and the email delivery service built into the Base44 platform. Candidate messages may also be processed by an AI language model service, as described below. I may also disclose information when required by law, court order, or government regulation, or to protect my legal rights.

4A. Use of Artificial Intelligence

I use an AI language model to help compare candidate submissions (name and the message a candidate wrote) against open roles and to surface possible matches for my review. AI output is advisory only. No hiring, rejection, or placement decision is made solely by automated means; every decision is made by a person. If you would like to opt out of AI-assisted matching, or request human review of how your profile was considered, contact me using the details below. I do not use your information to make decisions based on race, sex, age, religion, disability, national origin, or any other protected characteristic.

5. International Data Transfers

Sterlyk.com is based in the United States, and your information is processed and stored here and by the service providers I use for hosting and email, which may process it in other countries. If you are located outside the United States, submitting your information means it will be transferred to and processed in the United States.

6. Data Retention

Your candidate profile, CV, and messages are generally kept for up to 36 months from the date you submit them, or for the duration of any active search you are being considered for, whichever is longer, after which they are reviewed and deleted. Backup copies held by my hosting provider are removed on that provider's standard backup cycle. Job alert subscriptions are kept until you unsubscribe. Status-lookup IP logs are kept only as long as needed to prevent abuse. You can request deletion earlier at any time and I will act on verified requests within 30 days. Full details are set out in the Data Retention Policy on this site.

7. Data Security

We implement reasonable technical and organizational measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction. These include encryption in transit, access controls, and private storage for uploaded resumes that only an authenticated administrator can open. However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

8. Cookies and Tracking Technologies

This website uses essential cookies and browser storage required for its operation and basic functionality. We do not use advertising or cross-site tracking cookies. When you first visit, you can accept or reject non-essential session analytics; essential storage (such as keeping you signed in and remembering your cookie choice) is always on. The site uses session analytics, provided through the Base44 platform, that record how visitors interact with pages, such as pages viewed, clicks, and scrolling, so that I can see how the site is used and improve it. You can configure your browser to block cookies and storage, though some features of the site may not function as intended.

9. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data: (a) the right to access and receive a copy of your data; (b) the right to rectify inaccurate or incomplete data; (c) the right to request erasure of your data ("right to be forgotten"); (d) the right to restrict or object to processing; (e) the right to data portability; (f) the right to withdraw consent at any time; and (g) the right to lodge a complaint with your local data protection authority. California residents may exercise these rights under the CCPA/CPRA, including the right to know the categories and specific pieces of personal information collected, to correct or delete it, and to limit use of sensitive personal information. In the past 12 months I have collected these categories of personal information: identifiers (name, email, phone, IP address), professional and employment-related information (resume, profile URL, messages), internet activity (session analytics), and account credentials. I do not sell personal information or share it for cross-context behavioral advertising, and I do not discriminate against anyone for exercising their rights. To exercise any right, contact me using the information below; I may need to verify your identity first. If I deny a request, you may appeal by replying to the denial and I will review it and respond within 45 days. If you are in the EEA or UK and I have not resolved your concern, you may complain to your local data protection authority.

10. Children's Privacy

This website is not directed to individuals under the age of 18 and we do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us and we will promptly delete it.

11. Third Party Links

Our website may contain links to third party sites such as LinkedIn. We are not responsible for the privacy practices or content of those sites. We encourage you to review their privacy policies before providing any personal information.

12. Changes to This Policy

We reserve the right to update this Privacy Policy at any time. Changes will be posted on this page with an updated date. We encourage you to review this page periodically. Material changes will be communicated through the website. Continued use of the site after changes constitutes acceptance of the revised policy.

13. Professional Relationship Disclaimer

Equal opportunity: I consider candidates without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, veteran status, or any other characteristic protected by law. Sterlyk.com is a contingency-based executive search firm and not a law firm, financial advisor, or investment adviser. Nothing on this website or in our communications creates an attorney client relationship, a financial advisory relationship, or any professional relationship beyond the scope of a search engagement, which is governed by a separate signed agreement. Any information provided is general in nature and is not legal, financial, or investment advice.

14. Contact

The party responsible for your personal data is Sterlyk.com, operated by Bo Bennett, Founder and Principal, based in Nashville, Tennessee. To request access to, correction of, or deletion of your data, email bo.bennett.business@gmail.com directly, or use the Data Request page on this site. I will respond within 30 days. Job alert emails include an unsubscribe link, and you can also reply to any email to opt out. For privacy-specific inquiries, please include "Privacy Request" in the subject line.