Privacy Policy

Exponentia Search (“Exponentia”, “we”, “us”) is a retained executive search and talent partnership firm operating from Gurugram and Mumbai, India. We are the data controller for personal data processed through this website and in the course of our search mandates.

For any privacy question or request, please use our contact form.

We collect personal data in three situations:

• Enquiries — when you submit our contact form we collect your name, email address, and optionally your company and the role you are hiring for, together with your message.
• Applications — when you apply for a role at Exponentia we collect your name, email, phone number, LinkedIn profile, the position applied for and any note you include.
• Candidate data in mandates — in the course of a search we collect professional information such as career history, compensation expectations, references and assessment notes, sourced from you directly, from public professional profiles, or from referees.

We do not use advertising cookies or third-party tracking pixels on this website.

• To respond to your enquiry and to provide search and talent advisory services.
• To assess your suitability for a role at Exponentia, or for a mandate we are running on behalf of a client.
• To share a candidate profile with a client, only where the candidate has agreed to be presented for that specific mandate.
• To meet our legal, tax and regulatory obligations.

We never sell personal data, and we do not share candidate details with a client without the candidate's prior consent.

We process personal data on the basis of your consent (where you submit a form or agree to be presented for a mandate), our legitimate interest in operating a search practice, and where applicable our legal obligations under Indian law, including the Digital Personal Data Protection Act, 2023.

Enquiry data is retained for up to 24 months from last contact. Candidate data is retained for up to 24 months from our last substantive interaction, so that we can consider you for future mandates, unless you ask us to erase it sooner. Records required for statutory or contractual purposes are retained for the period the law requires.

We share personal data only with: the client organisation for a mandate you have consented to be presented for; service providers who host our infrastructure and email; and professional advisers or authorities where the law requires it. Our processors are bound by contractual confidentiality and security obligations.

Data submitted through this website is transmitted over TLS and stored in an access-controlled managed database. Access is limited to Exponentia personnel who need it to perform their role. No system is perfectly secure, but we take reasonable and appropriate technical and organisational measures to protect your data.

You may at any time ask us to:

• Confirm what personal data we hold about you and provide a copy.
• Correct data that is inaccurate or incomplete.
• Erase your data, where we have no overriding legal obligation to retain it.
• Withdraw consent to being considered for mandates.
• Nominate another person to exercise these rights on your behalf.

Get in touch through our contact form and we will respond within 30 days.

We may update this policy as our practice evolves or the law changes. Material changes will be reflected in the “last updated” date above, and where appropriate we will notify you directly.