Legal

Privacy Policy & Data Protection

Last updated: October 2026

Lyle Alexander Consulting LLC (“we,” “us,” or “our”) is committed to protecting the privacy and security of your personal information. This policy explains what data we save, why we save it, how we use it, and your rights in relation to it.

This policy applies to all individuals who interact with us — including website visitors, candidates, clients, business contacts we reach out to, and anyone who subscribes to our newsletter or uses our digital tools.

Information We Save

We save personal information in the following contexts:

When you use our website: We use Google Analytics 4 to collect anonymized data about how visitors interact with our website, including pages visited, time on page, and traffic sources. This data does not identify you personally. Google Analytics runs only if you accept analytics cookies in the cookie banner. You can also opt out of Google Analytics tracking by using the Google Analytics Opt-out Browser Add-on.

When you register as a candidate: We save your name, email address, phone number, LinkedIn URL, current role and company, and any resume or supporting documents you choose to upload. This information is used to represent you to relevant clients and opportunities.

When you book a call: We save your name, email address, and any information you provide through our booking system (TeamBook) for the purpose of scheduling and managing your appointment.

When you join our newsletter waitlist or subscribe: We save your email address to send you Defend the Margin — our newsletter, sent every two weeks, covering market intelligence, mental models, and practical thinking for leaders in the talent industry. Until the newsletter launches, waitlist sign-ups are held in our own database, hosted by Supabase, and we use them only to send you the newsletter. Every issue will carry an unsubscribe link, and you can ask us to remove you from the waitlist at any time.

When you unlock a Talent Market Snapshot or a candidate spotlight: we save your name, work email, company and your answer to 'What brings you here?', so the consultant presenting those candidates can follow up with you about them. We also set one cookie so full profiles stay open in that browser for 30 days. We don’t email you from the page.

When you contact us: We save your name, email address, company, and the content of your message for the purpose of responding to your enquiry.

SMS communications: By opting in to receiving SMS text messages about your application or engagement with Lyle Alexander Consulting, you acknowledge and agree that your consent data, mobile number, and personal information will be collected and stored solely for the purpose of providing you with updates and relevant information. We will not share or sell your mobile number or consent data to third parties under any circumstances. Message frequency may vary. Message and data rates may apply — please consult your carrier for further information. Carriers are not liable for delayed or undelivered messages. Reply STOP to cancel and HELP for help.

How We Use Your Information

We use your information to:

  • Respond to enquiries and fulfill service requests
  • Match candidates to relevant roles and represent them to clients
  • Schedule and manage calls and meetings
  • Send our newsletter to subscribers (with their consent)
  • Contact business professionals about candidates and our recruitment services
  • Follow up on emails and pages we have sent
  • Analyze and improve website performance
  • Comply with our legal obligations

We do not sell, rent, or trade your personal information to third parties. We do not use your data for automated decision-making or profiling without your knowledge.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

Business Development and Outreach

We contact business professionals at their work email address and on LinkedIn about candidates and our recruitment services. We do this on the basis of our legitimate interest in offering services that are relevant to their work.

We find these contact details in public professional profiles, on company websites, through referrals, and through business data providers that find work email addresses.

Every outreach email we send includes an Unsubscribe link. Using it stops all further outreach to that address. You can also ask us to stop at any time by writing to info@lyle-alexander.com.

Candidate Spotlights

We publish anonymized profiles, called Spotlights, of candidates who are working with us, and we share them with prospective employers. A Spotlight carries no name and no employer name, and we write each one to avoid identifying the candidate.

A candidate can ask us to take their Spotlight down at any time, and we will.

Use of AI

We use AI tools inside our CRM to draft messages, summarize calls and transcripts, suggest matches, and research companies.

A person reviews every message before it is sent to anyone outside the firm. We do not use AI to make hiring decisions about candidates.

The AI in our CRM is provided by Anthropic. Under Anthropic’s commercial terms, which cover business use of its services, Anthropic may not train its models on customer content.

Engagement Tracking

Links in emails we send may carry a code unique to the recipient. When someone opens a page through that link, we record that they viewed it and whether they clicked to book a call. We use this to follow up at the right time and to learn which content is useful.

The code travels in the link itself. We do not set a cookie to do this.

Calls and Transcripts

Calls with us may be recorded and transcribed using Fireflies, so that we have an accurate record of what was said. Where the law requires it, we tell you at the start of the call.

How We Store and Protect Your Information

Candidate and client records are held in Defrag, our CRM. Defrag’s database is hosted by Supabase. We migrated these records from JobAdder to Defrag in 2026, and JobAdder still holds historical records from before the move. Access is restricted to authorized team members only.

Our email and calendars run on Google Workspace. Phone calls and SMS run on Dialpad. Website analytics data is held by Google Analytics. Newsletter sign-ups are held in our own database, hosted by Supabase. Booking data is held by our TeamBook system hosted on Railway.

We are committed to:

  • Restricting and monitoring access to sensitive data
  • Using secure, encrypted connections across all our digital tools
  • Not storing data for longer than necessary
  • Establishing clear procedures for reporting privacy breaches

Data Retention

We retain candidate records for up to three years from the date of last contact, after which records are reviewed and either updated with your consent or securely deleted. Client records are retained for the duration of the relationship and up to three years thereafter.

Newsletter subscriber data is retained for as long as you remain subscribed. You may unsubscribe at any time.

Business contacts we reach through outreach are kept while there is a reasonable prospect of doing business together, and reviewed after two years without contact. If you unsubscribe, we keep your email address only on a suppression list, so that we never contact you again.

Website analytics data is retained in accordance with Google Analytics’ standard retention settings (26 months by default).

Your Rights

Depending on your location, you may have the following rights in relation to your personal data:

  • Right of access — to request a copy of the personal data we hold about you
  • Right to rectification — to request correction of inaccurate data
  • Right to erasure — to request deletion of your data, subject to our legal obligations
  • Right to restrict processing — to request that we limit how we use your data
  • Right to data portability — to receive your data in a structured, machine-readable format
  • Right to object — to object to our processing of your data in certain circumstances

To exercise any of these rights, contact us at: info@lyle-alexander.com

We will respond to all requests within 30 days.

Cookies

Our website uses the following cookies:

  • Google Analytics cookies (_ga, _ga*) — used to collect anonymized analytics data. These are analytical cookies and do not identify you personally. We set them only if you accept them in the cookie banner. If you decline, Google Analytics does not load.
  • Session cookies — used to maintain your login session if you access the team portal. These expire when you close your browser.

We remember your cookie choice in your browser’s local storage, so we don’t ask again on every page. We do not use advertising cookies, and we do not serve third-party advertising on this website.

You can change your choice at any time:

Third-Party Services

We use the following third-party services, each with their own privacy policies:

Data Protection Policy

Our Company Data Protection Policy reflects our commitment to treating information of employees, clients, candidates, and all interested parties with the utmost care and confidentiality.

Our data will be:

  • Accurate and kept up to date
  • Saved fairly and for lawful purposes only
  • Processed within our legal and moral boundaries
  • Protected against any unauthorised or illegal access

Our data will not be:

  • Communicated informally or without authorization
  • Stored for more than a specified amount of time
  • Transferred to organizations or countries without adequate data protection policies
  • Distributed to any third party, except where required by law. Mobile phone numbers, text messaging originator opt-in data, and consent records are never distributed to any third party for any reason

Applicable Law

This policy is governed by and construed in accordance with the laws of the State of Texas, United States. We also acknowledge and comply with the following frameworks where applicable:

  • General Data Protection Regulation (GDPR) — European Union
  • Data Protection Act 2018 — United Kingdom
  • California Consumer Privacy Act (CCPA) — California, USA

Contact & Complaints

For any privacy-related questions, requests, or complaints, please contact:

John Lyle
Lyle Alexander Consulting LLC
info@lyle-alexander.com
(512) 522-2778
www.lyle-alexander.com

If you are based in the EU or UK and are not satisfied with our response, you have the right to lodge a complaint with your local data protection authority.

Lyle Alexander Consulting LLC · Registered in Texas, USA · Last updated October 2026