WestonBrook Associates Limited – Privacy Notice  

 
Effective date: 2nd March 2026 

Last updated: 2nd March 2026 

​

1. Introduction 

This Privacy Notice explains how WestonBrook Associates Limited (“we”, “us”, “our”) collects, uses, stores, and protects personal data in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and PECR. 

2. Personal Data We Collect 

• Candidate data: contact details, CVs, employment history, qualifications, salaries, gender & nationality, right-to-work information, interview notes. 

• Client data: business contact information, vacancy details, communications. 

• Website & technical data: IP addresses, cookies, analytics. 

• Special category data (if provided): diversity data, health data. 

3. How We Collect Personal Data 

We collect data through CV uploads, job applications, enquiry forms, interviews, emails, phone calls, publicly available sources and website analytics. 

4. How We Use Your Data 

• Match candidates to job opportunities. 

• Process applications and communicate with candidates. 

• Respond to client staffing enquiries. 

• Manage business relationships. 

• Website administration and security. 

• Legal and regulatory compliance. 

5. Lawful Bases 

• Consent. 

• Contract. 

• Legitimate interests. 

• Legal obligations. 

6. Data Sharing 

Data may be shared with clients, technology providers, professional advisors, and regulatory authorities. We never sell your data. 

7. International Transfers 

Transfers outside the UK use lawful safeguards, such as adequacy regulations or Standard Contractual Clauses. 

8. Data Retention 

• Candidate data: up to 24 months. 

• Client data: up to 7 years. 

• Analytics data: usually 12–26 months. 

9. Your Rights Under UK GDPR 

You may request access, rectification, erasure, restriction, data portability, object to processing, or withdraw consent. Requests can be sent to contact@weston-brook.com. 

10. Security of Your Data 

We use security measures including encryption, access controls, and secure storage. 

11. Cookies 

See our Cookie Policy 

12. Third-Party Links 

We are not responsible for privacy practices of external sites. 

13. Contact & Complaints 

Email: contact@weston-brook.com 

You may also complain to the ICO at https://ico.org.uk. 

14. Changes to This Notice 

Updates will be posted on this page.