Privacy Policy

Have a look at our privacy policy below.

1. Introduction & scope
Whitfield & Brown (Developments) Ltd (“we”, “us”, “our”) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, store, and protect personal data in relation to our website, your interactions with us (e.g. contact forms, job applications), and other services we provide.

2. Data controller
We are the data controller for the personal data we collect in connection with our website, services, and interactions with clients, suppliers, job applicants, and others.

3. Personal data we collect
We may collect and process the following types of personal data:

  • Contact information: name, address, phone number, email.

  • Professional / business data: company, job title, qualifications, employer.

  • Application / recruitment data: CV, employment history, references, interview notes.

  • Technical / usage data: IP address, browser type, device, pages visited, referring URLs, time stamps.

  • Communications data: correspondence you send us (emails, messages).

  • Other data you provide: e.g. in forms, surveys, feedback.

4. Lawful basis for processing
We process your data where one or more of the following apply:

  • Consent: you have given permission (e.g. to receive marketing).

  • Contract: processing is necessary to perform a contract or take steps before entering into one.

  • Legitimate interests: to run and improve our business, provided it does not override your rights.

  • Legal compliance: to fulfil legal obligations (e.g. record keeping).

5. Purposes of processing
We use personal data to:

  • respond to your enquiries, requests, or correspondence;

  • manage job applications and recruitment;

  • provide services or information you request;

  • improve and maintain our website and services;

  • conduct marketing (where consented);

  • comply with regulatory or legal obligations;

  • protect our rights and prevent fraud or misuse.

6. Disclosure to third parties
We may disclose data to:

  • service providers and subcontractors (e.g. IT hosts, email systems, recruitment platforms);

  • professional advisers (lawyers, auditors);

  • regulatory or government authorities if required by law or regulation;

  • other parties in case of business reorganisation, sale, merger, or acquisition (with appropriate safeguards).
    We will ensure that any third party engaging with personal data abides by appropriate confidentiality and security obligations.

7. International transfers
If personal data is transferred outside the UK or EEA, we will ensure appropriate safeguards (e.g. standard contractual clauses, approved mechanisms) are in place to ensure your data remains protected.

8. Data retention
We retain personal data only as long as necessary for the purposes for which it was collected, including to comply with legal, accounting, or reporting obligations. After that, we securely delete or anonymise it.

9. Your rights
Under applicable data protection law, you may have the following rights:

  • access: obtain a copy of the data we hold about you;

  • rectification: correct inaccuracies or incomplete data;

  • erasure (“right to be forgotten”) under certain conditions;

  • restriction: limit processing in specific cases;

  • portability: receive data in a structured, machine-readable format;

  • objection: object to processing based on legitimate interests or direct marketing;

  • withdraw consent where processing is based on consent;

  • lodge a complaint with a supervisory authority (e.g. UK ICO).

To exercise any rights, contact us at mail@whitfieldbrown.com. We may request proof of identity before responding.

10. Security
We adopt appropriate technical and organizational measures to protect personal data from unauthorised or unlawful access, alteration, disclosure or destruction. This includes encryption, secure servers, restricted access, and staff training.

11. Children
Our website and services are not directed at children. We do not knowingly collect personal data from individuals under the age of 18. If you believe a child has provided us data, please contact us to have it removed.

12. Changes to this policy
We may update this Privacy Policy to reflect changes in law, technology, or our practices. We will post the updated version on our website with a revision date. Your continued use of our services after changes constitute acceptance of the new policy.

13. Contact us
If you have any questions or concerns about this Privacy Policy or wish to exercise your rights, please contact:
Whitfield & Brown (Developments) Ltd
Email: mail@whitfieldbrown.com