Shandalf runs on trust — with clients, with candidates, with readers. Here's exactly what data I hold, why, and how to make me delete it. No surprises.
Last updated: 9 July 2026 · Data controller: Shandalf Limited, Dublin, Ireland · shantanu@shandalf.com
As part of Shandalf's operator-led GTM talent advisory work, I identify and introduce senior candidates for specific leadership roles that client companies have engaged me to help fill. If that's how you've heard from me, here is what I may hold: your name, current and past roles, employer, location, publicly available career information, and contact details — and, if you engage with me, your CV, compensation expectations, and notes from our conversations.
Where it comes from: public professional sources (such as LinkedIn and company websites), our direct interactions, or referrals.
Why I'm allowed to process it: legitimate interest — identifying suitable candidates for specific leadership roles. Where the law requires it, I'll ask for your consent instead.
Who sees it: only the client company for the specific role you're being considered for, and only with your knowledge. I never sell personal data, and I don't add you to mailing lists.
How long I keep it: up to 3 years from our last meaningful contact (a conversation, an application, or an introduction to a client), after which your records are deleted — unless you've asked me to stay in touch.
Want out? Reply "remove" to any message from me, or email shantanu@shandalf.com, and I'll delete your details.
I hold business contact details, engagement records, and correspondence — to deliver the work and for legitimate business development. Retained for the duration of our relationship plus the record-keeping periods Irish law requires.
This site sets no advertising cookies and runs no tracking pixels. It uses Vercel Web Analytics, a privacy-focused, cookie-free service that shows me aggregate page views — not who you are.
If you use the contact form, your message is relayed to my inbox by FormSubmit (a form-processing service) and handled like any email you'd send me. If you'd rather skip the middleman, email shantanu@shandalf.com directly.
Under GDPR you can ask me at any time to: tell you what data I hold about you, correct it, delete it, restrict or object to its processing, or hand it over in a portable format. Email shantanu@shandalf.com — I respond within one month, usually much faster.
If you're not happy with how I've handled your data, you can complain to the Irish Data Protection Commission at dataprotection.ie.
Data is stored in access-controlled systems and shared only as described on this page.
the short version: I keep only what the work needs, and you can always say "remove". →
