Privacy Policy

ISC Leadership (the “Portal”) is operated by IndySchool Consultancy (“ISC”, “we”, “us”), an executive search firm serving independent schools. The Portal is a private area for the schools we work with, our candidates and our consultants, with current searches and insights open to everyone. It can be used in a web browser or added to a phone’s home screen.

This policy explains what information the Portal collects, how we use and share it, and the choices you have. It applies only to the Portal. By using the Portal or giving us information through it, you acknowledge that your information will be handled as described here. If you do not agree, please do not use the Portal. Use of the Portal is also governed by our Terms of Use. Questions: tim@indyschoolconsultancy.com.

• Search inquiries and consultation requests: your name, school, role, contact details and what you tell us about the search.
• Search Readiness Scorecard and Internal Search Cost Calculator: your name, school, position and email, your answers, and the results.
• Candidate profiles: your name, current role and school, phone, LinkedIn profile, location, career preferences, notes and your résumé, and the searches you express interest in, with any note you add. A résumé is needed to express interest in a search.
• Messages to ISC: your name, email, optional current role, and what you write when you message ISC confidentially from the candidate area.
• Client areas (schools working with ISC): the names, email addresses and roles of the people your school asks ISC to give access; messages and feedback sent through the Portal; your job description and other files you upload; a link you share to a folder of photos; and your answers to the Search Information form, which can include compensation, benefits, tuition remission, housing, school finances and other details of the position.
• Search alerts: your email address and the roles and regions you choose.
• Account sign-in: your email address. We use emailed sign-in links, so we never collect a password. ISC consultants are given access by an ISC administrator.

What you share is your responsibility. Please give us only information that is accurate and that you have the right to share. If you give us information about another person (for example, a colleague’s details, or a school’s compensation and benefits), you confirm that you are authorized to do so. Please do not send sensitive information we have not asked for, such as Social Security or other government ID numbers, financial account numbers, health information, or information about a person’s race, religion or other protected characteristics.

• Usage events: which pages and tools are used (for example, that a scorecard was completed), linked to a random identifier stored in a cookie, and to your account if you’re signed in. We use this to understand what is helpful and to improve our services.
• Sign-in log: each time you sign in, we record your email address, the time, and a general description of your device and browser (for example, “Safari on iPhone”). We do not record your IP address in this log. You can see your own recent sign-ins on your Account page, and ISC administrators can see the log. It is kept for 180 days.
• Client area activity: when someone from a school last opened their client area, and which documents in it they opened. It is visible to ISC only.
• Cookies and device storage: a sign-in session cookie if you sign in; a security cookie that records when you were last active, so private areas can sign you out after a period without activity; a random visitor identifier; the section of the site you last chose; and small preferences on your device, such as a dismissed “add to home screen” banner. We do not use advertising cookies.
• Notifications: if you turn on phone notifications, your device’s notification address (provided by Apple, Google or your browser) and the date you turned them on.
• Shared links: links shared from a search page include a tag showing where they were shared (for example, LinkedIn or email).
• Technical logs: our hosting and database providers keep standard server logs (which can include IP addresses) to operate, secure and troubleshoot the service.

• To provide and operate the Portal, including each school’s client area.
• To respond to inquiries and messages, schedule consultations, and deliver results you ask us to email.
• To conduct executive searches, prepare search materials such as the Opportunity Statement, and consider candidates for current and future searches.
• To keep ISC consultants informed, including a daily summary of messages from their schools, candidate interest in their searches, and upcoming deadlines.
• To send search alerts and notifications you have signed up for, and service messages about your account.
• To understand how the Portal is used and to improve our services.
• To keep the Portal secure, prevent fraud and misuse, and enforce our policies.
• To comply with law, and to establish, exercise or defend legal claims.

We may also create aggregated or de-identified information that does not identify any person or school, and use it for any lawful purpose, such as understanding trends in leadership searches.

When you save a candidate profile, it is added to ISC’s confidential candidate records in our recruiting system (Loxo), together with your résumé and the searches you express interest in. When you express interest in a search, the ISC consultants leading that search are told. ISC consultants use your information to consider you for current and future searches. When you are signed in, your profile shows the basic details ISC holds for you (current role, phone, LinkedIn, location and whether we have your résumé), and changes you save update our records; previous details are kept in our records. ISC’s own notes and assessments are not shown.

We do not share your profile or résumé with a school without your permission. When you agree to be presented to a school, or apply to a search, we share the information needed for that search with that school.

Creating a profile, expressing interest or applying does not guarantee that you will be contacted, considered, presented to a school, interviewed or hired. Decisions about candidates rest with ISC and its client schools.

Everything in a client area (updates, documents, messages and feedback, the Search Information form and the list of people with access) is visible to the people at that school whom ISC has approved for that search, and to ISC. A client area never shows candidates’ identities. Each school is responsible for who it asks ISC to approve, and for telling ISC promptly when someone should no longer have access.

Materials in a client area are confidential to the search. Please do not copy or share them outside the people involved in your school’s search. Links you share with us to your own file storage (for example, Google Drive) are governed by that provider’s terms and your sharing settings.

We do not sell personal information, and we do not share it for targeted advertising. We share information only as follows:

• Service providers that run the Portal for us, under confidentiality and data-protection obligations: Vercel (hosting); Supabase (database, sign-in and private file storage); Loxo (ISC’s recruiting system, for candidate profiles and interest); Resend (sending email); Calendly (scheduling); and Apple, Google or your browser’s push service (delivering notifications you turn on).
• Client schools, for candidates who have agreed to be presented, as described above.
• Legal and safety reasons: when we believe disclosure is required by law, subpoena or other legal process, or is necessary to protect the rights, property or safety of ISC, our clients, candidates or others, or to investigate fraud or misuse.
• Business transfers: if ISC is involved in a merger, acquisition, reorganization or sale of assets, information may be transferred as part of that transaction, subject to this policy.
• With your permission, or at your direction.

Some searches are confidential. For those we do not show the school’s name or location, including in link previews, alerts and notifications.

We keep information for as long as we need it for the purposes in this policy, including consideration of candidates for future searches, and as long as needed to meet legal, accounting and record-keeping obligations, resolve disputes and enforce our agreements. Search alerts and notifications stop as soon as you unsubscribe or turn them off. When a search ends, the school’s client area stays open read-only for 30 days (longer if agreed) and then closes; ISC keeps its records of the search. The sign-in log is kept for 180 days. Copies may remain in backups for a limited period after deletion.

• Delete your account: signed-in users can delete their account from the Account page. This removes your sign-in, candidate profile and preferences from the Portal, and asks ISC to remove your record from our recruiting system. ISC may keep information we are required to keep by law or need for the purposes described above, such as records of a completed search.
• Alerts and notifications: every alert email has an unsubscribe link, and notifications can be turned off in the Portal or in your device settings.
• Access, correction or deletion: email tim@indyschoolconsultancy.com to ask to see, correct or delete information we hold about you. We will respond as required by the law that applies to you, and we may need to verify your identity first. We may decline a request where the law allows, for example where fulfilling it would reveal information about another person or confidential search information.

We use reasonable administrative, technical and physical safeguards to protect information. Information is encrypted in transit, access is limited to people who need it, and the database enforces access rules on every request, so each school sees only its own search. Files are kept in private storage and opened through links that expire after two minutes. You are signed out automatically after 30 minutes without activity (12 hours for ISC staff), and you can sign out on every device from your Account page.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. Email, including sign-in links and messages you send us, may not be secure in transit. Because sign-in links are sent to your email, please keep your email account secure, do not forward sign-in links, and tell us promptly at tim@indyschoolconsultancy.com if you believe your account has been used without your permission.

The Portal links to other websites and services, such as school websites, application pages, Calendly and file-sharing links. We are not responsible for the privacy practices or content of services we do not operate; their own policies apply.

ISC is based in the United States, and the Portal and its service providers process information in the United States. If you use the Portal from outside the United States, you understand that your information will be transferred to and processed in the United States, where privacy laws may differ from those where you live.

The Portal is intended for adults working in or with independent schools. It is not directed to children, and we do not knowingly collect information from anyone under 16. If you believe a child has given us information, contact us and we will delete it.

We may update this policy from time to time. We will post the updated policy here and revise the date above, and we will highlight significant changes in the Portal. Your continued use of the Portal after an update means you accept the updated policy.

IndySchool Consultancy · tim@indyschoolconsultancy.com