Privacy Policy.

1. Overview

This privacy policy (“Privacy Policy”) explains how Guidepoint Global, LLC (“Guidepoint,” “we” and “us”) obtains, utilizes, discloses and safeguards information collected from Advisors, clients, and visitors to our websites in connection with our services, including without limitation www.guidepoint.com, www.guidepoint.com/advisors/, and any of our associated products, services, and offerings (“Services”). This Privacy Policy applies to our collection, use, and disclosure of personal information in the business-to-business context and from individuals, including website visitors, clients, Advisors, and potential job applicants (i.e., information that may identify, relate to, describe, reference, is capable of being associated with or could reasonably be linked, directly or indirectly, with you or your device).

If you reside in the European Economic Area (EEA) or the United Kingdom (UK), please see Specific Disclosures for the European Economic Area and the UK.

2. How Guidepoint Collects Your Personal Information

• From you. We may collect personal information and other information that you provide when you become a client or client lead, Advisor or Advisor lead, create an account, apply to an open job post, request authorization to access and use our internal chatbots, or otherwise use or interact with our Services.
• From devices you use when you interact with us online. This includes information collected through our Services and automatically from devices you use to connect or gain access to our Services. For more information about this, please see our “Cookies and similar technologies” section below.
• From third parties and publicly available sources. This includes personal information we collect from public sources including, but not limited to websites that enable social sharing, social media sites, and from our service providers, vendors, our affiliates, or other individuals and businesses. We use publicly available sources and our service providers to collect information.
• From you in person. This includes personal information we collect during in-person or virtual conferences or during interviews.

3. The Types of Personal Information Guidepoint May Collect From You

Depending on how you interact with us and whether or not you are a potential Advisor or client, we may collect the following information:

• Contact Information such as your name, home address, work address, work email address, personal email address, work telephone number, home or mobile telephone number or other similar identifiers.
• Advisor Identification and Background Information collected solely for purposes related to Advisor onboarding and verification, such as date of birth, age, gender, race, gender identity, driver’s license, identification card, passport, Social Security number, and photo.
• Payment Information used to purchase our Services.
• Account Information needed to create, maintain, and access your account, such as username, profile details you choose to provide, and feedback and reviews you may leave our Services.
• Internet Usage and Activity Information such as information collected when you interact with our Services, including browser or device model and settings, operating system, and unique identifiers, clickstream data, search history, cookies and localStorage, browsing history, search history, web-based location, IP address, coarse geolocation, and any other internet usage information our Service may automatically record when you visit.
• Device information such as browser or device model and settings, operating system, and unique identifiers.
• Inferences such as inferences drawn from any of the personal information identified so that we may better understand your preferences.
• Professional Information such as information about your job function and role, title, professional affiliations, industry focus, research preferences, employer, and employment history, and any other information that may be obtained from third-party background checks, and feedback concerning your experience as an Advisor.
• Other Personal Information you provide such as the content provided either in your job application, or of your communications with Guidepoint and our Advisors, including interactions with us online, in-person, on the phone or through other methods, including call recordings and/or transcriptions.

4. How Guidepoint Uses Your Personal Information

We may use your information for the following reasons, depending on your relationship with us:

• To provide you any products and services requested;
• To communicate with you (e.g., to respond to your inquiries, referrals, comments and suggestions, and to contact you otherwise when necessary);
• To process your employment application, including verifying statements made on your application (e.g., employment history) and performing background checks;
• To facilitate the creation and maintenance of, as well as to secure, your account;
• To process an Advisor application;
• To perform internal operations necessary to develop, provide, maintain, debug, and improve our Services, including troubleshooting, providing customer and technical support, and conducting data analysis, testing, and research;
• To understand how you interact with our Services and personalize the product experience and content (including advertising and messaging campaigns);
• To collect analytics in order to understand how our Services are used and to improve them over time;
• To provide authorized individuals with secure access to our GenAI-powered conversation tool and related insights used to summarize topics and analyze expert opinions from Advisors, as further described in Section 14 below;
• To provide relevant information, offers, or content about our Services that may align with your interactions or expressed interests;
• To maintain the safety, security, and integrity of our Services, for example by authenticating users and user information and providing account security and fraud detection;
• To send you news and/or marketing communications (by email and/or phone) subject to your marketing preferences and choices, including information about Guidepoint or third-party offerings we think may be of interest to you;
• To conduct marketing research;
• To conduct market research and develop quality assurance, including to study, develop, and improve our products and services. This may include measuring and analyzing audience traffic, including tracking user interests, trends, and patterns. We may also aggregate, anonymize, and/or de-identify personal information we collect and use it for any purpose, including product development and improvement activities;
• To conduct information gathering for internal business purposes, including for data analysis, audits, and enhancing our services. We may also use inferences drawn from personal information to create a profile reflecting your preferences, so we can tailor our services to you;
• To process and complete transactions, including collecting payment and contact information to process your transactions and deliver our Services to you;
• To protect our rights and the rights of others, including to protect our and our Advisors’ safety, security, and privacy; comply with legal and regulatory requirements, for example dialogue with regulators, compliance with court orders, or other legal obligations and/or to investigate or address claims or disputes relating to your use of the Services; and
• In the case of Advisors, to match you with consulting opportunities (including through the use of certain technologies as further described in Section 14 below), provide you additional consulting opportunities with business partners, notify you of Guidepoint Global developments, process your invoices and administer honoraria.

5. How Guidepoint Discloses Personal Information

We may disclose some or all of the personal information collected from or about you with any of the following entities and for any of the following purposes:

• With vendors, consultants, business partners, payment processors, and other service providers or contractors as necessary to carry out work on our behalf and otherwise provide the Services, to process job employment applications, and/or if we believe disclosure is required by applicable law, regulation, legal process, or contractual obligation;
• With the general public, if you choose to disclose personal information when contributing content to our Services through a forum, blogs, social features, or the like;
• With other parties engaging in sponsorships and co-branded opportunities and promotions;
• With law enforcement officials, government authorities, or other third parties in response to legal process or if we believe your actions are inconsistent with our terms or other policies, and/or are fraudulent or in violation of applicable law, or as we determine necessary to protect the rights, property, or safety of Guidepoint or others;
• If we sell all or part of the company, or are part of a merger, consolidation, restructuring, and/or sale of assets or other corporate change, your information may be transferred as part of that transaction.
• With third parties at your direction or with your consent, for example, with our business partners;
• With our clients, typically in connection with consulting opportunities;
• With third parties, including a current employer (if applicable), so that such employer may request that limitations be placed on your participation in our network of Advisors arising from duties you may owe to them. Guidepoint will comply with limitations requested by an employer, through an authorized representative, for its current employees. Guidepoint also reserves the right to abide by any limitations requested by a third party for the same reason, on a case-by-case basis; and
• With third parties regarding your participation or proposed participation in any project through Guidepoint Global for the purpose of verifying any factual information you provide to us or any consents or approvals that may be needed.
• With third parties in an aggregated or non-identifying form or otherwise in a form that cannot reasonably be used to identify you.

6. Children’s Privacy

You must be 18 years or older to use our Services. Our Services are for a general audience, are not targeted to children, and we do not knowingly collect personal information from children under 18 years of age.

7. Links to Third Party Websites

We may provide links to websites and other third-party content (e.g., social media platforms) that are not owned or operated by Guidepoint. The websites and third-party content to which we link may have separate privacy notices or policies. Guidepoint is not responsible for the privacy practices of these websites.

If you provide any personal information through a third-party site, your interaction and your personal information will be collected by and controlled by the Privacy Policy of that third party site. We recommend that you familiarize yourself with the privacy policies and practices of any such third parties, which are not governed by this Privacy Policy.

8. Your Advertising Choices

When you use our Services, our third-party advertising partners, social media providers and analytics providers may collect personal information about your online activity on our Services and on third-party websites.

These providers may set web tracking tools (e.g., cookies and web beacons, as discussed further below) to collect information regarding your online activity. In addition, our advertising partners may use this information to deliver advertisements to you when you visit third party websites within their networks. If you would like more information about this practice, and to know your choices with respect to it, please visit https://youradchoices.com/, https://optout.aboutads.info/, or https://thenai.org/. You may also opt out in mobile apps using your device’s settings to opt-out of personalized advertisements or similar settings. Please note that you may continue to receive generic ads that are not based on your preferences.

Additionally, we may collaborate with our service providers and identity partners (“Identity Resolution Partners”) to deliver advertising and identify the different devices and browsers you may use to access our Services. We and our Identity Resolution Partners may facilitate identity resolution by creating probabilistic and deterministic identifiers. These identifiers may use personal information, including your name, email address, phone number, and Internet Usage and Activity Information to generate an online identifier reasonably linkable to you and/or your device or browser. For example, we may disclose hashed email address, phone number, or other information about your device to our Identity Resolution Partners, whom may, in turn, return an online identifier that we may store in a first party cookie or similar technology and disclose to our advertising partners to provide you a more personalized advertising experience. We are not responsible for the privacy practices of our Identity Resolution Partners, which are separate from our own and not covered by this Privacy Policy.

9. Keeping Your Advisor Data Updated

As one of the Terms & Conditions of Advisor participation in the network of Advisors, Advisors are required to regularly update the biographical and employment information provided to Guidepoint. If you are an Advisor, you are entitled to review the personal information Guidepoint Global holds about you and may ask that we revise your personal information to ensure that it is current and correct.

10. Information Security

We use commercially reasonable administrative, technical, personnel, and physical measures designed to safeguard information in our possession against loss, theft and unauthorized use, disclosure, or modification. However, no one can guarantee the complete safety of your information.

11. Cookies and Similar Technology

We and our partners use various tools to collect data when you visit our sites and apps, including cookies, pixels, localStorage, and other similar technologies. Some of these technologies store data in the browser or on your device. Other technologies may use network-related or other information to recognize your device (e.g., IP address). Our Services use these technologies, for example, when you first request a web page and data is then stored on your computer or other device so the website or mobile application can access personal information when you make subsequent requests for pages from that Service. These technologies may also be used to collect and store information about your usage of the Services, such as pages you have visited, other content you viewed, and search history. Additionally, we may these technologies to collect analytics and measure the use of our Services.

We and our partners may also use these technologies to gather personal information about how you view and use our Services and content and to connect your activity with other data we store about you. We and our partners may collect your personally identifiable information about your online activities over time and across different websites when you use the Services. The use of these technologies helps us serve you better by understanding what you are interested in, tracking trends, measuring the effectiveness of ads, saving your preferences, and storing information you may want to retrieve on a regular basis. We also allow specific, approved partners to collect data from your browser or device for advertising and measurement purposes using their own similar tools.

Your web browser can be set to allow you to control these technologies, such as whether you will accept cookies, reject cookies, or to notify you each time a cookie is sent to your browser. If your browser is set to reject cookies, websites that are cookie-enabled will not recognize you when you return to the website, and some website functionality may be lost. The Help section of your browser may tell you how to prevent your browser from accepting these technologies, such as cookies. To find out more about cookies, visit https://www.aboutcookies.org. Depending on the make and model of your phone, you may be able to use device settings to opt out of the use of certain device IDs for targeted advertising. For more information about Google Analytics, please review the site “How Google uses data when you use our partners’ sites or apps,” located at https://www.google.com/policies/privacy/partners/. To opt out of Google Analytics specifically, please go to https://tools.google.com/dlpage/gaoptout.

Some browsers permit the user to send a “Do Not Track” (“DNT”) preference to websites that the user visits indicating that the user does not wish to be tracked over time and across websites. Because there is not yet a common understanding of how to interpret DNT, we do not currently respond to the DNT signal on our websites. We do, however, respond to global privacy preferences when required by law.

12. Opting-Out of Network Membership

You may elect to opt-out of membership in the Network at any time by contacting us and providing Guidepoint with written or electronic notice. To contact us, please refer to the “Contact Us” Section below. Upon receipt of such notice, we will cease contacting you and cease presenting information concerning you to Clients for potential consulting opportunities. You may separately request to opt-out of membership with any business partners if you have elected to consult with them.

13. Marketing Preferences

We may periodically send promotional materials or notifications related to our Services. If you want to stop receiving promotional materials from us, follow the unsubscribe instructions at the bottom of each email. There are certain service notification and other non-promotional emails that you may not opt-out of, such as notifications of changes to our Services or policies. We will work to comply with your request promptly.

14. How We Use Artificial Intelligence

We use artificial intelligence (“AI”) tools for limited business purposes as part of our Services, including to enable and assist our clients with conducting research on a variety of topics and recommending relevant Advisors for client projects. Please see additional disclosures for California residents directly below.

Our Use of Generative AI
We provide research capabilities powered by generative AI (“GenAI”), allowing our clients to ask questions and receive fully sourced answers from project transcripts, the Guidepoint library, and publicly available resources. The sources of the datasets include a sample of Advisor profiles, expert interview transcripts, and publicly available resources. These datasets further the intended purpose of our GenAI service by providing pertinent information in response to client queries. The sources of the datasets include over two million Advisor profiles and over 100,000 interview transcripts. Within the datasets, the following types of labels are used: Advisor ID assigned by Guidepoint internally, Advisor job title and professional biography, transcript title, and substantive text of the transcript. The data in the datasets utilized by GenAI does not include data that is protected by copyright, trademark, or patent and these datasets were not purchased or licensed by us. The data in the datasets does not include personal information other than a pseudonymous ID number and do not include aggregate consumer information. We performed cleaning, processing, or modification to the datasets for the purpose of making the datasets searchable by GenAI. The datasets were collected during the following time period: from 2004 through the present; and the datasets were first used during the development of our GenAI service on the following dates: first quarter of 2025. We have not used synthetic data generation in its development.

15. Additional Information for Residents of California

California residents have certain rights with respect to their Personal Information, as described below. We have provided detailed descriptions above in the “How Guidepoint Collects Your Personal Information,” “The Types of Personal Information Guidepoint May Collect From You,” “How Guidepoint Uses Your Personal Information,” and “How Guidepoint Discloses Personal Information” sections of this Privacy Policy. This section provides information for California residents in connection with the California Consumer Privacy Act (“CCPA”). Under the CCPA, and for purposes of this Section, “Personal Information” generally means information that identifies, relates to, or describes a particular California resident.

We provide our Services on a business-to-business basis. As a result, the Personal Information we collect – except when it relates to California residents – is generally not subject to certain U.S. state privacy laws. The following section applies specifically to California residents and their Personal Information.

What We Collected, Disclosed, and/or Shared/Sold

In the past 12 months, we have disclosed (or have enabled you to disclose) and have collected the following categories of Personal Information. Additionally, we do not knowingly “share” or “sell” Personal Information of minors under 16 years of age.

 

Category of Personal Information Collected	Categories of Parties to Whom Personal Information Is Disclosed	Categories of Third Parties to Whom Personal Information is “Sold” or “Shared”
Identifiers, such as contact information, name, email address, phone number, address, IP address, and online and device identifiers	Cloud service providers (such as our email service providers and cloud-based survey and customer service tools we use); and payment processors.   Affiliates for purposes of business operations and support.	Advertising and marketing providers; business partners.
Personal information, as defined in the California Customer Records law, such as contact and financial information	Vendors, such as cloud service providers (including cloud-based customer service and survey tools we use), payment processors, and business partners. Affiliates for purposes of business operations and support.	Business partners.
Characteristics of protected classifications under California law, such as age or gender	Vendors, such as cloud service providers (including cloud-based customer service and survey tools we use.   Affiliates for purposes of business operations and support.	Business partners.
Commercial information, such as payment information	Service providers, Company Affiliates, and other providers or partners that support our operational business purposes.	N/A
Biometric information	Service providers, Company Affiliates, and other providers or partners that support our operational business purposes.	N/A
Internet or network activity information, such as hardware model, device software platform, mobile carrier, preferred languages, and interactions with our websites.	Cloud service providers (such as our email service providers and cloud-based survey; and, customer service tools we use).   Affiliates for purposes of business operations and support.	N/A
Geolocation data, such as device location	Service providers that enable image functionality on our behalf.   Affiliates for purposes of business operations and support.	Business partners.
Audio, electronic, visual and other similar information, such as your profile picture	Service providers, Company Affiliates, and other providers or partners that support our operational business purposes	Business partners.
Professional or employment-related information, such as work history, prior employer, job function, and documents needed for Advisor identification and/or verification	Cloud service providers (such as our email service providers and cloud-based survey; verification services, and customer service tools we use).   Affiliates for purposes of business operations and support.	Business partners.
Inferences drawn from any of the Personal Information listed above to create a profile or summary about, for example, an individual’s preferences and characteristics	Cloud service providers (such as our email service providers and cloud-based survey and customer service tools we use); and payment processors.   Affiliates for purposes of business operations and support.	N/A

Please note that we may process Personal Information in each of the above categories in order to protect ours and others’ rights, and/or to complete a merger or sale of assets or other corporate transaction.

Under California, “sale” and “share” do not include, for example, the transfer of Personal Information as an asset that is part of a merger, bankruptcy, or other similar transaction involving all or any portion of our business.

Sensitive Personal Information

We do not process “sensitive” Personal Information for purposes other than those permitted by applicable law (such as, in California, to provide the services and for security purposes).

Data Retention

We will retain your Personal Information for the period necessary and proportionate to fulfill the purpose(s) for which the Personal Information was collected or processed as outlined in this Section unless a longer retention period is required or allowed by law.

Purposes

We may use this Personal Information for the following purposes, including commercial purposes:

• to operate, manage, and maintain our business;
• to provide our Services;
• to accomplish our business purposes and objectives, including:
  • developing, improving, repairing, and maintaining our Services;
  • personalizing, advertising, and marketing Services;
  • conducting research, analytics, and data analysis;
  • maintaining our facilities and infrastructure;
  • quality and safety assurance measures;
  • conducting risk and security controls and monitoring;
  • detecting and preventing fraud;
  • performing identity verification;
  • performing accounting, audit, and other internal functions;
  • complying with the law, legal process, and internal policies;
  • maintaining records; and
  • exercising and defending legal claims.

Depending on your interactions with us, we may not have used Personal Information collected about that California resident for each (or any) of these purposes.

Sources of Personal Information

We collect this Personal Information directly from California residents themselves, as well as from social media platforms (e.g., if the individual has connected a social media account to our website); referrals; joint marketing, co-branding, co-promotional, or advertising partners; and sources of demographic and other information, including through devices you used to interact with us through our Services. All sources of personal information collected are noted in the “How Guidepoint Collects Your Personal Information” and “The Types of Personal Information Guidepoint May Collect From You” sections above.

Your California Privacy Rights

California residents have certain rights with respect to their Personal Information, as described below. We are required by law to verify your identity in connection with certain requests in order to prevent unauthorized access of your data. Failure to verify your identity may result in your request not being processed. Where required by applicable law, we will notify you if we deny your request and notify you of the reasons we are unable to honor your request. You can exercise these rights by following the instructions in the “To Exercise Rights” section below.

Right to Know and Access Personal Information: You may request to access the following information we have collected and maintain about you:

• The specific pieces of Personal Information we collected about you;
• The categories of Personal Information we collected about you and the categories of sources;
• The business or commercial purpose for collecting, disclosing, or selling Personal Information about you; and,
• The categories of Personal Information about you that we sold, shared, or otherwise disclosed and the categories of third parties to whom we sold, shared, or otherwise disclosed that Personal Information.

Please note that, in some instances, we may decline to honor your request or only honor your request in part, where, for example, we are unable to verify your identity or an exception to this right applies.

Deletion of Personal Information: You may request that we delete your Personal Information. Depending on the scope of your request, we may refrain from granting your request, as permitted by applicable law. For example, we may be legally required to retain your Personal Information in our business records. Please note that, in some instances, we may decline to honor your request or only honor your request in part, where, for example, we are unable to verify your identity or an exception to this right applies.

“Do Not Sell or Share” Personal Information: As noted above in this section, we disclose some categories of Personal Information in ways that may be considered a “share” or “sale” under the CCPA. You have the right to opt out of this “sharing” and “selling” of Personal Information and may do so by following the instructions in the “To Exercise Rights” section below. We also honor alternative opt-out signals, such as the GPC. We process opt-out preference signals in a frictionless manner. We do not sell Personal Information for monetary consideration.

Correction of Inaccurate Personal Information: You have a right to request the correction of inaccurate Personal Information that we may have on file about you. Please note that, in some instances, we may decline to honor your request or only honor your request in part, where, for example, we are unable to verify your identity or an exception to this right applies.

Non-Discrimination: You have the right to be free from unlawful discrimination for exercising your above-listed rights under the CCPA.

Authorized Agent

California consumers may have the right to submit a request through an authorized agent. If you are an authorized agent acting on behalf of a consumer to exercise a privacy right discussed in this section, you must be able to demonstrate that you have the requisite authorization to act on behalf of the consumer. We may also contact the consumer directly to verify his or her own identity and that the consumer granted you authorization to act on their behalf as an authorized agent. An authorized agent may also be permitted to act on behalf of a consumer in order to exercise certain opt-out rights. If you are an authorized agent trying to exercise rights on behalf of a consumer, please contact us at the contact information below with supporting verification information, which should include proof that you have the consumer’s authorization to act. Under certain circumstances, we may also require you to prove and verify your identity if you are acting as an authorized agent on behalf of a consumer.

To Exercise Rights:

In order to exercise your right to opt-out of the sale or sharing of your Personal Information, please visit our “Do Not Sell or Share My Personal Information” page.

In order to exercise your other rights described above, please email us at [email protected] or submit a request through our online Contact Us form. Additionally, we may need to obtain information about you or your specific request in order to verify your identity and respond.

Shine the Light Disclosure

We do not disclose Personal Information as defined by California Civil Code § 1798.83 (the “Shine the Light Law”) with third parties, other than our affiliates, for their direct marketing purposes absent your consent. If you are a California resident, you may request information about our compliance with the Shine the Light Law by sending an email to [email protected] or by sending a letter to 675 Avenue of the Americas, 2nd Floor, New York, NY 10010. Any such request must include “California Shine the Light Request” in the subject line and include your name, street address, city, state, and ZIP code. Please note that we are only required to respond to one request per customer each year, and we are not required to respond to requests made by means other than through the email address or mailing address referenced above.

16. Updates to the Policy

Guidepoint may update this policy from time to time. To the extent permitted by law, any changes to our Privacy Policy will be posted to the websites and will become effective upon posting, and, if available, by clicking “I accept” to the revisions, you accept the modification. Any changes will be effective only after the effective date of the change and will not affect any dispute arising prior to the effective date of the change.

17. Contact us

We welcome all requests, suggestions and questions concerning our use of your Personal Information. All such communication should be directed to [email protected], or call us at (212) 375-2980.

18. APPENDIX 1: Specific disclosures for the European Economic Area (EEA) and the United Kingdom (UK)

I. APPLICATION AND IDENTITY OF THE DATA CONTROLLER

This Appendix applies to the Guidepoint group companies’ processing of Personal Information relating to individuals residing in the EEA and the UK as well as Guidepoint group companies’ processing of any Personal Information in the EEA and the UK (regardless of where the relevant individuals reside). This Appendix should be read alongside, and with reference to the terms used in, the main body of the Privacy Policy, but in the event there is a conflict between this Appendix and other parts of the Privacy Policy, this Appendix shall take precedence in respect of the Personal Information that is subject to it.

For the purposes of EEA and UK law, the data controller of the Personal Information subject to this Appendix will depend on where you are located and the Services you receive. Guidepoint Global, LLC is a data controller in relation to your Personal Information alongside the following Guidepoint companies:

i. Guidepoint Global UK (UK); and

ii. Guidepoint Global Single (Greece).

You can find more information relating to the relevant data controller(s) in the “Contact Us” section below.

II. LEGAL BASIS FOR PROCESSING

You can read about the Personal Information that we collect and the purposes for which we use and share it in sections 2 – 5 of the Privacy Policy.

When we process your Personal Information for the purposes outlined in the Privacy Policy, we ensure that we have a lawful basis to do so to ensure that our processing of it is compliant. We will generally rely on one or more of the following legal grounds:

• Performance of a contract: This is relevant where we collect and use your personal information where necessary to enter into a contract with you or to perform our obligations under a contract with you.
• Legitimate interest: This is relevant where we use your personal information where it is necessary for our legitimate interests and those interests do not override your rights.
• Compliance with law or regulation: This is relevant where we use your personal information where it is necessary to comply with applicable laws.
• Consent: This is relevant where we need your consent to use your personal information. However, we do not usually need your consent if there is another legal ground as above. You can withdraw your consent by contacting us (see below).

In the list below, we have set out the relevant lawful basis that applies to each purpose for which we use your Personal Information.

Please note that where we need to collect Personal Information by law, or under our contract with you, and you fail to provide that data when requested, we may not be able to provide our Services to you.

Why do we use your Personal Information (by reference to section 4 of the Privacy Policy)	Legal basis
To provide you any products and services requested.	Contract performance (for contracts with natural persons), legitimate interests (for contracts with legal entities), as well as legitimate interests (for all situations going beyond our contractual obligations, to enable us to operate our business and provide our Services).
To communicate with you (e.g., to respond to your inquiries, referrals, comments and suggestions, and to contact you otherwise when necessary).	Contract performance, legitimate interests (to enable us to perform our obligations and provide our Services).
To process your employment application, including verifying statements made on your application (e.g., credit and employment history), performing background and credit checks.	Contract performance (employment contract), legal obligation (to enable us to comply with our employment obligations), legitimate interests (to undertake our recruitment activities).
To process an Advisor application.	Contract performance, legitimate interests (to enable us to provide our Services).
To facilitate the creation and maintenance of, as well as to secure, your account.	Legitimate interests (to enable us to perform our obligations, operate our business and provide our Services).
To perform internal operations necessary to develop, provide, maintain, and improve our Services, including troubleshooting, providing customer and technical support, and conducting data analysis, testing, and research.	Contract performance, legitimate interests (to enable us to perform our obligations, operate our business and provide our Services).
To understand how you interact with our Services and personalize the product experience and content (including advertising and messaging campaigns).	Legitimate interests (to allow us to improve our Services).
To collect analytics in order to understand how our Services are used.	Legitimate interests (to allow us to improve our Services).
To provide authorized individuals with access to our internal chatbot powered by generative AI and relevant insights to summarize topics and analyze expert opinions from Advisors	Consent (where required), legitimate interests (to enable us to perform our obligations, operate our business and provide our Services).
To provide relevant information, offers, or content about our Services that may align with your interactions or expressed interests.	Consent (where required), legitimate interest (where we are not required to rely on consent) (to keep you updated with news in relation to our products and Services).
To maintain the safety, security, and integrity of our Services, for example by authenticating users and providing account security and fraud detection.	Legitimate interests (to allow us to provide you with the content and Services on the websites in a secure manner). Legal obligation (for the prevention and detection of crime).
To send you news and/or marketing communications (by email, phone) subject to your marketing preferences and choices, including information about Guidepoint or third-party offerings we think may be of interest to you.	Consent, legitimate interest (where we are not required to rely on consent) (to keep you updated with news in relation to our products and Services).
To conduct marketing research and market research and develop quality assurance, including to study, develop, and improve our products and services. This may include measuring and analyzing audience traffic, including tracking user interests, trends, and patterns.	Legitimate interests (to allow us to improve our Services).
To conduct data analysis, audits, and enhancing our services.	Legitimate interests (to allow us to improve our Services and conduct internal business purposes)
To process and complete transactions, including collecting payment and contact information to process your transactions and deliver our Services to you.	Contract performance, legitimate interests (to enable us to perform our obligations, operate our business and provide our Services).
To comply with legal requirements and/or to investigate or address claims or disputes relating to your use of the Services.	Legal obligations, legitimate interests (to cooperate with law enforcement and regulatory authorities).
In the case of Advisors, to match you with consulting opportunities (including through the use of automated processing), notify you of Guidepoint Global developments, process your invoices and administer honoraria.	Contract performance, legitimate interests (to enable us to perform our obligations and provide our Services).

III. SENSITIVE PERSONAL INFORMATION

In very limited circumstances, we may collect restricted amounts of sensitive personal information such as health data and/or data concerning racial or ethnic origins, for the following purposes:

i. diversity and inclusion monitoring, where permitted by law and where you have provided your explicit consent;

ii. upon a specific client request, where you have provided your explicit consent;

iii. service safety, security, and integrity, where processing is necessary for reasons of substantial public interests (e.g. the prevention or detection of crime); and/or

iv. complying with legal requirements such as law enforcement requests/investigations, where processing is necessary to defend or establish legal claims, or necessary for reasons of substantial public interests (processing for the prevention and detection of fraud/crime).

IV. CONSENT FOR PROCESSING

As set out above, in some cases we will need your consent to process your Personal Information.

In instances where you give your consent for us to process your Personal Information, you are able to withdraw your consent at any time by contacting us at [email protected], provided that we are not required by applicable law or professional standards to retain such information.

V. HOW WE SHARE PERSONAL INFORMATION

We may share your Personal Information in accordance with the “How Guidepoint discloses Personal Information” section above.

VI. DATA RETENTION

Our retention periods for Personal Information are based on business needs and legal requirements. We will retain your Personal Information while we are using it, for purposes described in the section 4 of the Privacy Policy and section II above. We may continue to retain it after we have ceased such legitimate business purposes.

We will also retain your Personal Information as necessary to comply with our legal obligations, resolve disputes, enforce our agreements, comply with applicable industry standards, and in accordance with disaster recovery procedures.

The length of time for which we will retain your Personal Information will depend on the purposes for which we need to retain it. After we no longer need to retain your Personal Information, we will delete it or securely destroy it in accordance with our records retention policy.

VII. DATA TRANSFERS

We may transfer your Personal Information outside the UK or the EEA, in particular to the US (where our headquarters are located) and to other countries where we have offices. In these cases, we will ensure that your Personal Information is protected and transferred in a manner consistent with legal requirements applicable to the Personal Information, as some countries may not protect Personal Information in the same way as in the UK or EEA. In particular, we will ensure that either:

(a) the country to which we send the Personal Information is approved by the UK or the EEA for receiving Personal Information. All EEA countries are approved by the UK and the UK is approved by the EEA; or

(b) the recipient has signed a contract based on “standard contractual clauses” approved by the UK or EEA which require the recipient to protect your Personal Information; or

(c) in limited circumstances, another approved export mechanism or export derogation applies.

In all cases any transfer of your Personal Information will be treated in a manner compliant with applicable data protection law.

Please contact us as set out in the Contact Us paragraph below if you would like to see a copy of the specific safeguards applied to the export of your Personal Information.

VIII. DATA SUBJECT RIGHTS

You have a number of rights in relation to your Personal Information, which are summarized below:

• Right to access- you have the right to ask for a copy of the Personal Information we hold about you;
• Right to rectification- you have the right to request for Personal Information we hold about you to be rectified. We may seek to verify the accuracy of the Personal Information before rectifying it;
• Right to erasure (right to be forgotten)- you have the right to request the erasure of your Personal Information in certain circumstances;
• Right to restriction- you have the right to request the restriction (i.e. keep but not use) of your Personal Information in certain circumstances;
• Right to objection- you have the right to object to the processing of your Personal Information in certain circumstances;
• Right to data portability- you have the right to request and receive the Personal Information that you have provided to us in a structured, commonly used and machine readable format and to have this information transmitted to another organisation; and
• Rights in relation to automated decision making and profiling- you have the right not to be subject to a decision based solely on automated processing, including profiling.

To exercise your rights with respect to your Personal Information, please contact us at [email protected]. Please note that certain conditions and exemptions apply to the exercise of many of these rights and so you will not be able to exercise them in all situations. However, we will consider and evaluate each request that we receive and respond in accordance with our legal obligations.

Right to stop marketing: You also have the right to ask us not to process your personal information for direct marketing purposes at any time, including any profiling related to the direct marketing.

To exercise this right, you can click the “unsubscribe” option on any direct marketing email you receive from us, or contact us at [email protected].

IX. RIGHT TO LODGE A COMPLAINT WITH A SUPERVISORY AUTHORITY

You have a right to lodge a complaint with your local data protection authority. In the UK, this is the Information Commissioner’s Office.

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Telephone number: 0303 123 1113

Website: www.ico.org.uk

You can find details of the data protection authority in other European countries here: https://edpb.europa.eu/about-edpb/about-edpb/members_en.

X. CONTACT US

For questions regarding this Privacy Policy, you can contact us the following ways:

1. Email

[email protected]

2. Telephone

(212) 375-2980

3. Local office

Guidepoint Greece

Guidepoint Global Single

Karagiorigu Servias 4

1st Floor 105 62

Athens

Greece

Guidepoint UK

Guidepoint Global UK Ltd

Ground Floor

Kinnaird House

1-4 Pall Mall East

London

SW1Y 5AU

4. Online Contact Us Form

Available at: https://www.guidepoint.com/contact-us/.