Who we are
This Privacy Policy explains how Bridgecrest Advisory Group, LLC (“Bridgecrest,” “we,” “us” or “our”) handles personal information. We are a recruiting and executive search firm based in Tampa Bay, Florida.
Under the EU and UK General Data Protection Regulations (GDPR), Bridgecrest is the controller of the personal information described in this policy — the organization that decides why and how it is used.
How to reach us about privacy: email privacy@bridgecrestag.com, call Business phone number, or write to We don’t currently publish a mailing address. Please contact us by email or phone and we’ll respond there.
What this policy covers
This policy applies to personal information we collect:
- through this website and any other site that links to this policy;
- when you email, call or meet with us; and
- when we provide recruiting, search and HR advisory services.
If you are a job candidate — including someone we contact about a role — our Candidate Privacy Notice explains in more detail how we handle your information during the recruiting process. It forms part of this policy.
This policy does not cover the websites or practices of our clients or of other third parties, even where we link to them.
The information we collect
Information you give us
- Contact details — your name, email address and phone number, and your job title and employer if you contact us on behalf of a company.
- What you tell us — the content of your emails, calls and meetings with us, such as details of a role you are hiring for or a role you are looking for.
- Career information — if you are a candidate, your résumé, work history, education, skills, compensation expectations, work authorization status and anything else you choose to share. The Candidate Privacy Notice covers this in detail.
Information collected automatically
We keep this deliberately minimal.
- Privacy-friendly analytics. We use Cloudflare Web Analytics to count visits and see which pages are read. It does not use cookies, does not track you across other websites and does not build a profile of you. It records aggregate information such as page views, referring websites, country, and browser and device type.
- Server logs. Like any website, ours is served by a hosting provider that automatically records technical information when you visit — your IP address, browser type, the pages requested and the time of the request. These logs are used to keep the website running and secure.
- Your display preference. If you switch between light and dark mode, your browser stores that choice on your own device. It is never sent to us. See our Cookie Notice.
Information from other sources
- Professional networks and public sources — such as public professional profiles, company websites and industry publications, when we identify people who may suit a role.
- Referrals and references — from people who recommend you, and from people you have asked to act as your referee.
- Our clients — feedback on candidates they have interviewed, and details of the roles they are hiring for.
We do not buy personal information from data brokers, and we do not use automated scraping tools to build our talent pools.
How we use it, and our legal basis
The table explains why we use personal information and, for people in the European Economic Area (EEA) and the United Kingdom, the legal basis we rely on.
| Purpose | Examples | Legal basis (EEA and UK) |
|---|---|---|
| Responding to you | Replying to emails and calls; arranging conversations | Our legitimate interest in running our business; or steps you have asked us to take before entering into a contract |
| Recruiting and search | Identifying and contacting candidates; assessing fit; introducing candidates to clients, with permission; managing interviews and offers | Our legitimate interest in providing recruiting services; your consent where we rely on it, such as keeping your details for future roles; our contracts with clients |
| Serving our clients | Understanding a client’s needs; reporting on a search; invoicing | Performance of a contract; legitimate interests |
| Running the website | Keeping the website working and secure; understanding which pages are useful | Legitimate interests |
| Legal and compliance | Keeping records; responding to lawful requests; establishing or defending legal claims; preventing fraud | Legal obligation; legitimate interests |
Where we rely on legitimate interests, we have weighed them against your rights and reasonable expectations. You can object at any time — see Your rights.
Where we rely on consent, you can withdraw it at any time. Withdrawing consent does not affect anything we did before you withdrew it.
We do not make decisions about you by automated means alone, and we do not use AI screening tools to accept or reject candidates. Every decision about a candidate is made by a person.
Who we share it with
We share personal information only as follows:
- With our clients, about candidates — only with your permission. We agree with each candidate which companies and roles they are interested in, and any to avoid, and share their details within that scope. We ask first before going outside it.
- With service providers who act on our instructions, such as our email and file-storage provider, our website host and our analytics provider. They may use the information only to provide their service to us.
- With professional advisers such as lawyers, accountants and insurers, who owe us duties of confidentiality.
- For legal reasons — where required by law, court order or a lawful request from a public authority, or where needed to protect the rights, safety or property of Bridgecrest, our clients, candidates or others.
- In a business transfer — if Bridgecrest is involved in a merger, acquisition or sale of assets, personal information may transfer to the new owner, who will be bound by this policy or will tell you about any change.
We do not sell personal information, and we do not share it for cross-context behavioral advertising. We have not done either in the past 12 months.
Cookies
This website does not use cookies — not for analytics, advertising or anything else. Our Cookie Notice has the details.
International transfers
We are based in the United States, and the personal information we hold is stored and processed in the United States. If you are in the EEA, the UK or elsewhere outside the US and you provide information to us, it will be processed in the US, where data protection law may differ from the law where you live.
When our service providers process personal information from the EEA or UK, we rely on an appropriate safeguard — such as the provider’s certification under the EU–U.S. Data Privacy Framework and its UK Extension, or the European Commission’s Standard Contractual Clauses with the UK Addendum. You can ask us which safeguard applies.
How long we keep it
We keep personal information only as long as we need it for the purposes in this policy, and then delete it. Our standard periods are:
| Information | How long we keep it | Then |
|---|---|---|
| Candidates we have not placed | 24 months after our last meaningful contact with you | We delete your information, or ask whether you would like us to keep it for future roles. |
| Candidates we have placed | The length of the placement guarantee, plus 4 years | Covers guarantee periods, disputes and record-keeping obligations, then deleted. |
| Candidates who ask us not to contact them | Until you ask us to contact you again. A request about a single role is kept until that role is filled or closed | Deleted. Until then we keep only your name, your contact details and the role, if there is one. |
| Referees and references | 12 months after the reference is given | Deleted, or kept with the candidate record if it forms part of a placement file. |
| Client contacts and business correspondence | The length of the relationship, plus 3 years | Deleted, except where a longer period is required for tax or accounting records. |
| General enquiries that do not progress | 12 months after our last reply | Deleted. |
| Privacy and data rights requests | 24 months after the request is closed | Kept to show we responded as required, then deleted. |
We may keep information for longer where the law requires it, or where we need it to establish, exercise or defend a legal claim.
How we protect it
We use reasonable technical and organizational measures to protect personal information, including:
- limiting access to the people at Bridgecrest who need it for their work;
- multi-factor authentication on the email and file-storage accounts that hold personal information;
- encrypted connections to this website, and encrypted storage from our providers; and
- deleting information when its retention period ends.
No method of transmission or storage is completely secure. If a security incident affects your personal information, we will notify you and the relevant authorities as the law requires.
Email is not encrypted from end to end. Please do not send us passport scans, Social Security numbers or bank details. We will never ask for them by email.
Your rights
Depending on where you live, you may have the right to:
- know and access the personal information we hold about you, and receive a copy;
- correct information that is inaccurate;
- delete your information;
- port your information — receive it in a portable, machine-readable format;
- object to or restrict how we use it;
- withdraw consent where we rely on it;
- opt out of the sale or sharing of personal information, targeted advertising and profiling — although we do none of these; and
- appeal if we decline your request.
We extend these rights to everyone, wherever you live. You do not need to be a resident of a particular state or country to ask.
Your Privacy Rights explains how to make a request, how we verify it and how quickly we respond. We will not treat you differently for exercising any of your rights.
California residents
This section supplements the rest of this policy for California residents, including job applicants and candidates, under the California Consumer Privacy Act as amended by the California Privacy Rights Act (together, the “CCPA”).
Categories of personal information
In the past 12 months we have collected the following categories. For each we give the sources, why we use it and who we disclose it to. We do not sell or share any of it.
| Category | Examples | Sources | Purpose | Disclosed to |
|---|---|---|---|---|
| Identifiers | Name, email address, phone number, IP address | You; public professional sources; referrals; automatically | Responding to you; recruiting services; website security | Service providers; clients, for candidates who have given permission |
| Customer records (Cal. Civ. Code § 1798.80(e)) | Name, contact details, employment history, education | You; public sources; referrals | Recruiting services | Service providers; clients, with permission |
| Characteristics of protected classifications | Only if you choose to include them, for example your age or veteran status on a résumé | You | Not used to assess candidates | Only within a résumé you have permitted us to share |
| Professional or employment information | Work history, skills, compensation expectations, references, interview notes | You; referees; clients; public sources | Recruiting services | Clients, with permission; service providers |
| Education information | Degrees, institutions, certifications | You; public sources | Recruiting services | Clients, with permission |
| Internet or network activity | Pages visited and browser type, through server logs and aggregate analytics | Automatically | Operating and securing the website | Hosting and analytics providers |
| Approximate location | Country and region derived from IP address | Automatically | Security; aggregate analytics | Hosting and analytics providers |
| Inferences | Our assessment of your fit for a role | Our own assessment | Recruiting services | Clients, with permission |
| Sensitive personal information | Only if included in something you send us, such as immigration or work authorization status | You | Providing the services you asked for | Clients, only where needed for a role and with permission |
Sensitive personal information
We use sensitive personal information only for purposes the CCPA regulations permit — to provide the services you have asked for — and never to infer characteristics about you. The right to limit its use therefore does not apply, but you can ask us to delete it at any time.
Sale, sharing and Global Privacy Control
We do not sell personal information or share it for cross-context behavioral advertising, including the personal information of consumers under 16. We treat a Global Privacy Control signal from your browser as a valid request to opt out, even though there is currently nothing to opt out of.
Exercising your rights
You have the rights to know, access, correct and delete, and the right not to be discriminated against for exercising them. You may make a request yourself or through an authorized agent. Your Privacy Rights explains how.
Shine the Light
We do not disclose personal information to third parties for their own direct marketing purposes.
EEA and UK residents
- Controller: Bridgecrest, contactable as shown at the top of this policy.
- Legal bases: set out in How we use it.
- Transfers: see International transfers.
- Complaints: you have the right to complain to the data protection supervisory authority where you live or work, or where you believe a breach occurred. In the UK this is the Information Commissioner’s Office. We would appreciate the chance to address your concern first.
- Providing information: you are not required to give us personal information, but if you do not, we may be unable to respond to you or help you find a role.
Children
Our website and services are intended for adults. They are not directed to children under 16, and we do not knowingly collect personal information from children. If you believe a child has given us personal information, contact us and we will delete it.
Changes to this policy
We will update this policy when our practices change. The “Last updated” date at the top of this page shows when it last changed. If we make a material change, we will post a prominent notice on this website and, where we have your email address and the change affects you, tell you directly.
Contact us
Email privacy@bridgecrestag.com, call Business phone number, or write to We don’t currently publish a mailing address. Please contact us by email or phone and we’ll respond there.
Questions about this document? Email privacy@bridgecrestag.com.