Privacy & Cookie Policy

2. Contact Details

• Legal Entity: Westworld Consulting Limited
• Company Registration: England and Wales, Company Number 8672769
• Registered Office: 130 Aztec West, Bristol, BS32 4UB, United Kingdom
• ICO Registration: ZA551878
• Data Protection Officer: Robert Hooper
• Email: [email protected]
• Postal Address: 130 Aztec West, Almondsbury, Bristol, BS32 4UB
• Telephone: +44 (0) 1454 629 628

Regulatory Authority: Information Commissioner's Office (ICO) at www.ico.org.uk

3. Why We Collect Your Data

Business Development Purposes:

• Outreach and marketing regarding Westworld's products and services
• Contacting individuals at businesses potentially benefiting from client offerings
• Selection based on job title and organisational sector

Work Finding Services Purposes:

• Providing employment-related opportunities
• Assessing candidate suitability
• Database management
• Processing candidate submissions
• Payment arrangements
• Service development and relationship management

4. Data Collected

For Business Development:

• Name
• Job title
• Business address
• Business telephone numbers (direct and mobile)
• Business email address
• LinkedIn URL

Data sourced from: LinkedIn, Xing, Companies House, Google, and direct phone or face-to-face contact.

For Work Finding Services (initial data):

• Contact details (name, addresses, telephone numbers, email)
• CV and work history
• Job preferences

For Work Finding Services (upon engagement):

• Date of birth
• ID and Right to Work documentation
• National Insurance number
• Third-party screening outcomes (security clearance, criminal records)
• Financial information (bank details, tax details, pension scheme)
• Referee details
• Emergency contact information
• Next of Kin details

Technical Information:

• IP address
• Email behaviour tracking (open rates, forwards)
• Cookie data

5. How Personal Data is Used

Business Development: The organisation sends information by email, phone, LinkedIn, or post believed relevant to recipient roles. Communication includes work extracts and opportunities to discuss services. Recipients may opt out.

CRM Software Used: OnePageCRM (see onepagecrm.com/privacy)

Work Finding Services: Matching skills and experience with available opportunities, providing information about similar opportunities, submission of details to clients or internal departments, Right to Work verification, security and criminal record checks, contractual engagement, and payment for work performed.

6. Grounds for Processing

Legal Bases: Consent, legitimate interest, legal obligation compliance, and contractual obligation fulfilment.

Consent Processing: Westworld processes special category data only with explicit consent. Consent withdrawal is permitted at any time. Processing ceases upon withdrawal when consent is the sole legal basis.

Legitimate Interest Processing (Business Development): Connecting business clients with potentially interested businesses. Approaching prospective clients believing they would benefit from Westworld services.

Legitimate Interest Processing (Work Finding): Providing work-finding services, database management and record updates, seeking necessary consent, providing similar product or service information, managing application, screening, and selection processes, submitting details to third-party agencies for pre-assignment screening, managing subsequent engagement contracts, and contacting about future assignments.

Legal Obligation: Processing for investigating, reporting, and detecting crime and complying with applicable laws. Includes internal audits demonstrating compliance with industry standards.

Contractual Necessity: Processing required to fulfil contracts and meet legal and contractual requirements under Employment Agencies and Employment Businesses Regulations 2003, immigration and tax legislation, and safeguarding requirements.

7. Third-Party Data Sharing

Internal access is limited to employees with a job-specific need-to-know basis.

Business Development Sharing: Business clients (partnership-based disclosure for business development purposes).

Work Finding Services Sharing: Placement clients, former employers (for references), approved intermediary and umbrella companies, payroll service providers, other recruitment agencies in supply chain, government agencies (HMRC, UK Border Agency, DBS), and external screening providers.

Additional Sharing: IT and system administration service providers (inside and outside EU), professional advisers (lawyers, bankers, auditors, insurers) in EU, HM Revenue and Customs and UK regulators and authorities, and potential business acquirers or merger partners.

All third parties must respect personal data security and comply with applicable law. Service providers are prohibited from using personal data for their own purposes; processing is limited to specified purposes per organisational instructions.

8. Your Rights

• Access Request: Receive a copy of held personal data and verify lawful processing
• Correction Request: Have incomplete or inaccurate data corrected
• Erasure Request: Delete personal data where processing lacks legitimate basis
• Processing Objection: Object where relying on legitimate interest or direct marketing
• Processing Restriction: Suspend processing in certain circumstances
• Data Portability: Transfer personal data in a structured, commonly-used, machine-readable format
• Consent Withdrawal: Withdraw consent at any time without affecting prior processing lawfulness

No fee is charged for data access or rights exercise. The organisation may charge a reasonable fee for clearly unfounded, repetitive, or excessive requests. Standard response within one month.

9. Data Retention

Personal data is retained only as long as necessary for collection purpose and erased upon retention period end.

• Business Development: Up to 5 years since last contact
• Prospective candidates: Up to 5 years since last contact
• Engaged workers: Up to 7 years following final payment

10. Data Security

The organisation is committed to protection against unauthorised access, alteration, disclosure, or destruction. Security measures include data hashing and encryption, regular information collection review, service and data encryption, restricted employee, contractor, and agent access, and internal data security policies.

11. International Data Transfers

Personal information is generally stored within the European Economic Area. Due to business nature and technology requirements, information may transfer to third-party service providers outside the EEA. Westworld implements adequate protection measures ensuring information security.

12. Changes

Policy changes will be communicated via email or website notice. Last updated 1 September 2019. Individuals are responsible for informing Westworld of personal data changes during the relationship.

13. Cookies

This website uses cookies to distinguish users and provide an improved experience.

Cookie types used:

• Strictly Necessary Cookies: Required for website operation including secure area login functionality. Store no personal information.
• Analytical/Performance Cookies: Recognise visitor numbers and track movement patterns to improve website functionality.
• Functionality Cookies: Recognise returning users enabling content personalisation and preference remembering.
• Targeting Cookies: Record website visits, visited pages, and followed links to increase relevance.

Browser settings adjustment enables cookie disablement. Consult respective browser online help files for specific instructions. Disabling cookies may reduce website functionality.

Contact for further information: [email protected] or +44 (0) 1454 629 628