Privacy Policy

Last updated: December 2025

1. Who We Are

This website is operated by Grech Associates Executive Search Inc. (“Grech Associates”, “we”, “us”, or “our”), a corporation based in the Province of Ontario, Canada.

Our website address is: https://grechassociates.com

We provide retained executive search and related board advisory services to organizations in Canada and internationally.

This Privacy Policy describes how we collect, use, disclose, and protect personal information obtained through this website and in the course of our business activities.

2. Scope of this Policy

This Policy applies to:

  • Visitors to our website; and
  • Individuals who contact us through the site (for example via the contact form or email).

It does not replace any privacy terms that apply to specific mandates or client engagements. Those may be governed by separate engagement letters or contractual documents.

By using this website or submitting personal information to us, you consent to the practices described in this Policy, subject to any additional rights you may have under applicable law.

3. What Personal Information We Collect

We may collect the following types of personal information:

3.1 Information you provide directly

When you use our contact form or otherwise communicate with us, we may collect:

  • Name
  • Organization and job title
  • Email address
  • Other information you choose to include in your message or attachments

If you contact us by email, phone, or other channels, we may also keep records of that correspondence.

3.2 Online usage information

When you visit our website, we may collect limited technical and usage information, such as:

  • IP address and approximate geographic region
  • Browser type and version
  • Device type and operating system
  • Pages viewed, links clicked, and the date/time of your visit
  • Referring website or source

This information is typically collected through cookies and similar technologies (see Section 6).

We do not intentionally collect sensitive personal information (e.g., health, union membership, or highly confidential financial data) through this website.

4. How We Use Personal Information

We use personal information for the following purposes:

Responding to inquiries

  • To read, respond to, and manage your inquiries or requests.

Providing and improving our services

  • To evaluate how our website is used and to improve its content, usability, and security.
  • To understand the profile of organizations and leaders who may be interested in our services.

Business development and relationship management

  • To follow up with you about potential or ongoing mandates, subject to your preferences and expectations.

Compliance and risk management

  • To comply with legal, regulatory, or professional obligations.
  • To detect, prevent, or address security incidents and misuse of our site.

We do not sell or rent personal information.

5. Legal Basis (for visitors in the EU/UK)

While we are based in Canada, some visitors may reside in jurisdictions (such as the EU/UK) that require us to identify legal bases for processing. Where applicable, we may rely on:

  • Your consent (for example, when you voluntarily submit a contact form);
  • Our legitimate interests in operating a professional services business, maintaining relationships, and improving our website; and
  • Legal obligations to which we are subject.

6. Cookies and Similar Technologies

Our website may use cookies or similar technologies to:

  • Recognize your browser;
  • Analyze aggregate site traffic and usage patterns; and
  • Improve the performance and security of the site.

You can usually configure your browser to:

  • Notify you when a cookie is set;
  • Accept or reject cookies; or
  • Delete cookies that have already been set.

If you disable cookies, some features of the website may not function as intended.

If we use third-party analytics tools (such as Google Analytics), those providers may also collect and process usage data in accordance with their own privacy policies.

7. How We Share Personal Information

We may share personal information in the following limited circumstances:

Service providers and partners

  • With trusted service providers who support our operations (e.g., web hosting, email service, IT support, or analytics).
  • These providers are only given the information necessary to perform their services and are expected to protect it.

Professional advisors

  • With legal, accounting, or other professional advisors where necessary for legitimate business or legal reasons.

Legal and regulatory requirements

  • Where required by law, regulation, court order, or competent authority.

Business transactions

  • In connection with a proposed or actual merger, acquisition, or other corporate transaction involving Grech Associates, subject to appropriate confidentiality safeguards.

We do not sell lists of visitors, candidates, or clients to third parties.

8. International Transfers

Our website is hosted on servers that may be located outside your province, state, or country of residence. As a result, personal information may be transferred to jurisdictions whose privacy laws differ from those in your home jurisdiction.

Where required by law, we will take appropriate steps to ensure that personal information transferred outside of Canada receives a comparable level of protection.

9. Data Security

We take reasonable physical, technical, and administrative measures to protect personal information against loss, theft, misuse, unauthorized access, disclosure, alteration, and destruction.

However, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security of information transmitted to or from our website, and you provide information at your own risk.

10. Data Retention

We retain personal information only for as long as reasonably necessary to:

  • Respond to your inquiry;
  • Maintain and manage our relationship with you or your organization;
  • Comply with legal and regulatory obligations; and
  • Resolve disputes and enforce our agreements.

When personal information is no longer required, we will delete or anonymize it in a manner consistent with our retention practices and applicable law.

11. Your Rights and Choices

Depending on applicable law (including PIPEDA and substantially similar provincial legislation), you may have the right to:

  • Request access to the personal information we hold about you;
  • Request correction or update of inaccurate or incomplete information;
  • Withdraw consent for certain uses of your information (where processing is based on consent); and
  • Raise a concern or complaint about our handling of your personal information.

To exercise these rights, please contact us using the details in Section 13. We may need to verify your identity before responding.

For visitors in jurisdictions with additional rights (such as the EU/UK), you may also have the right to object to certain processing, request restriction of processing, or request data portability, where applicable.

12. Third-Party Websites

Our website may contain links to websites or resources operated by third parties. We are not responsible for the privacy practices or content of those sites.

If you follow a link to any third-party site, you should review that site’s privacy policy before providing any personal information.

13. Contacting Us

If you have any questions, requests, or concerns about this Privacy Policy or our handling of personal information, you may contact us at:

Grech Associates Executive Search Inc.
150 King Street West, Suite 200
Toronto, ON M5H 1J9
Canada

Email: info@grechassociates.com

14. Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or other factors. When we do, we will revise the “Last updated” date at the top of this page.

We encourage you to review this Policy periodically to stay informed about how we handle personal information.