Privacy Policy

The data controller is Strance HR Solutions India Pvt Ltd, E Floor, Taj Deccan, Road No. 1, Banjara Hills, Hyderabad, Telangana 500034, India. The firm also maintains offices at Al Fayha, Jeddah 22241, Saudi Arabia, and 1111B S Governors Ave, STE 34519, Dover, DE 19904, United States.

STRANCE is an executive search and leadership intelligence firm. This policy covers strance.net and the enquiry and registration forms on it. It does not cover third-party sites we link to, including changelabs.ai.

We collect only what a form asks for. We do not buy personal data, and we do not build profiles from browsing behaviour.

If you submit a client enquiry (Hire Executive Leadership)

Your name, company, job title, work email address, phone number, the hiring need you describe, role seniority, industry, market, whether the search is confidential, your timeline, and any message you write. We also record which page you submitted from and any campaign parameters in the link you arrived through.

If you register with the executive network (Join Executive Network)

Your name, current title, current company, location, email address, phone number, LinkedIn URL, function, industry, seniority, markets of interest, your confidentiality preference, and the résumé file you choose to upload. As above, we record the submitting page and any campaign parameters.

Verification and abuse prevention

Both forms confirm your email address with a one-time code before submission. We store your email address, a cryptographic hash of the code (never the code itself), a hash of your IP address, the number of attempts, and expiry and consumption timestamps. Rate limiting stores only a hashed key — no readable email address or IP address is written to it.

Measurement

Where analytics is enabled, we use Google Analytics 4 to count page views and record that a form was started and submitted. We do not send your name, email address, phone number or résumé to any analytics service.

Client enquiries are held to respond to you and to carry out the search you are asking about. The basis is your consent when you submit the form, and thereafter our legitimate interest in conducting the professional relationship, or the performance of a contract if one follows.

Executive registrations are held so we can consider you for senior mandates. The basis is your consent, which you give explicitly at submission and may withdraw at any time.

Verification and rate-limiting data is held on the basis of our legitimate interest in keeping the forms secure and usable.

We do not sell personal data, and we do not share it for advertising.

Discretion is the substance of this business, not a courtesy. If you register as an executive, we do not disclose your candidacy, your details or your interest in a move to your current employer, and we do not present your profile to a client without your agreement to that specific mandate.

Client mandates are treated as commercially confidential. We do not name client organisations publicly, including in case studies and marketing material.

An uploaded résumé is transferred directly from your browser to a private Amazon S3 bucket using a short-lived signed URL that expires within five minutes. The bucket is not public and its objects are not reachable by URL. Our database stores only the file’s location, original filename, type and size — never the file contents.

Access is limited to STRANCE personnel working on search mandates, again through short-lived signed links.

We use a small number of established providers. Each acts on our instructions only.

• Vercel — hosts and serves this website.
• Supabase — the PostgreSQL database holding form submissions.
• Amazon Web Services (S3) — private storage for uploaded résumés.
• Resend — delivers transactional email, including verification codes and internal notifications.
• Cloudflare — DNS, caching and protection against malicious traffic.
• Google Analytics and Tag Manager — website measurement, where enabled.

Our content management system holds published editorial content only. No personal data you submit is stored in it.

STRANCE operates across India, the Middle East and the United States, and the providers above operate globally. Your data may therefore be processed outside your country of residence. Where data originating in the European Economic Area or the United Kingdom is transferred, we rely on the European Commission’s standard contractual clauses or an applicable adequacy decision.

We keep personal data only as long as it serves the purpose it was given for, then delete it.

• Client enquiries: 24 months from the last substantive contact.
• Executive registrations and résumés: 36 months from registration or the last contact, whichever is later, after which we ask you to confirm you wish to remain on file.
• Email verification records: deleted once consumed or expired, and in any case within 30 days.
• Rate-limiting records: retained only for the length of the rate-limit window.

We may keep records for longer where a law, a tax obligation or a live legal claim requires it.

You may ask us to give you a copy of the personal data we hold about you, correct it, delete it, restrict or object to how we use it, or provide it in a portable form. Where we rely on your consent, you may withdraw it at any time; withdrawal does not affect anything done before you withdrew.

To exercise any of these, write to privacy@strance.net. We will respond within 30 days. We may ask you to confirm your identity first, so that we do not disclose your data to someone else.

Deleting your data. A request to delete removes your submission from our database and permanently deletes any uploaded résumé from storage. Ask at the address above and say which form you used; this is the deletion pathway and it requires nothing more from you than an email.

If you are in India, you may raise a grievance with our Grievance Officer, Harika Reddy, at privacy@strance.net, under the Digital Personal Data Protection Act, 2023. If you are in the European Economic Area or the United Kingdom, you may also complain to your national supervisory authority.

This site sets no advertising cookies and does not track you across other websites. Where analytics is enabled, Google Analytics sets cookies to count visits and measure which pages are read. You can block or delete these in your browser settings without losing access to any part of the site.

Traffic is encrypted in transit. Form submissions are written to a database that is not reachable from the browser, résumés are stored privately as described above, verification codes are stored hashed, and credentials are held in environment variables rather than in code. No system is perfectly secure, but data is not kept in the browser beyond the moment of upload.

This site addresses senior executives and the organisations that hire them. It is not directed at children, and we do not knowingly collect data from anyone under 18.

If this policy changes materially we will update the effective date above and, where the change affects data you have already given us, tell you directly. The dates at the top of this page state which version is operative.

Strance HR Solutions India Pvt Ltd, E Floor, Taj Deccan, Road No. 1, Banjara Hills, Hyderabad, Telangana 500034, India. Privacy enquiries: privacy@strance.net.

Our terms of use govern your use of this website.