WestonBrook Associates Limited – Privacy Notice
Effective date: March 2026
Last updated: June 2026
1. Introduction
This Privacy Notice explains how WestonBrook Associates Limited (“we”, “us”, “our”) collects, uses, stores, protects, and manages personal data in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, the Privacy and Electronic Communications Regulations (PECR), and amendments introduced under the Data (Use and Access) Act 2025 effective from 19 June 2026.
2. Personal Data We Collect
• Candidate data: contact details, CVs, employment history, qualifications, salaries, gender & nationality, right-to-work information, interview notes.
• Client data: business contact information, vacancy details, communications.
• Website & technical data: IP addresses, cookies, analytics.
• Special category data (if provided): diversity data, health data.
3. How We Collect Personal Data
We collect data through CV uploads, job applications, enquiry forms, interviews, emails, phone calls, publicly available sources and website analytics.
4. How We Use Your Data
• Match candidates to job opportunities.
• Process applications and communicate with candidates.
• Respond to client staffing enquiries.
• Manage business relationships.
• Website administration and security.
• Legal and regulatory compliance.
• Respond to and investigate data protection complaints.
5. Lawful Bases
• Consent.
• Contract.
• Legitimate interests.
• Legal obligations.
6. Data Sharing
Data may be shared with clients, technology providers, professional advisors, and regulatory authorities. We never sell your data.
7. International Transfers
Transfers outside the UK use lawful safeguards, such as adequacy regulations or Standard Contractual Clauses.
8. Data Retention
• Candidate data: up to 24 months.
• Client data: up to 7 years.
• Analytics data: usually 12–26 months.
• Complaints records: retained for up to 6 years from closure of the complaint unless a longer retention period is legally required.
9. Your Rights Under UK GDPR
You may request access, rectification, erasure, restriction, data portability, object to processing, or withdraw consent. Requests can be sent to contact@weston-brook.com.
10. Security of Your Data
We use security measures including encryption, access controls, and secure storage.
11. Data Protection Complaints Procedure
Under updated UK data protection legislation effective from 19 June 2026, individuals have the right to raise a complaint directly with us regarding how their personal data has been collected, processed, stored, shared, or otherwise handled.
How to Make a Complaint:
• By email: contact@weston-brook.com
• By post: WestonBrook Associates Limited, using our published business address.
• By telephone or directly to a member of staff.
What Happens Next:
• We will acknowledge receipt of your complaint within 30 calendar days.
• We will investigate the matter promptly and fairly.
• We may contact you for further information if needed.
• We will keep you informed of progress where appropriate.
• We will provide a written outcome without undue delay.
If you remain dissatisfied after we have responded, you have the right to escalate your complaint to the Information Commissioner’s Office (ICO):
https://ico.org.uk/make-a-complaint/
12. Cookies
See our Cookie Policy at /cookie-policy.html.
13. Third-Party Links
We are not responsible for privacy practices of external sites.
14. Contact Details
Email: contact@weston-brook.com
15. Regulatory Complaints
You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) if you believe your data protection rights have been breached.
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
https://ico.org.uk
16. Changes to This Notice
Updates will be posted on this page and reflected by the “Last updated” date above.