Privacy Policy

1. Introduction

Wyatt Carruthers Jebb Ltd is a QA registered firm under ISO 9001. We are committed to complying with the Data Protection Act 2018, the UK General Data Protection Regulation (UK GDPR), and applicable cyber liability and cybersecurity standards, including Cyber Essentials. Wyatt Carruthers Jebb Ltd regards the lawful and correct treatment of personal information as integral to the success of its operations and to maintaining confidence between the Company and with whom it carries out business. This policy explains how we collect, use, store, and protect personal data.

2. Information We Collect

We collect personal data necessary to provide our professional services. This includes: name, postal address, email address, and telephone number. Data may be collected directly, through enquiries, service applications, communications, or via third-party sources such as agents, contractors, and public information sources. All our phone calls are recorded for training and monitoring purposes. This information is held for no longer than two years.

3. Children

We do not knowingly collect personal data relating to children under 16 without parental or guardian consent.

4. How We Use Your Information

Your data is processed for legitimate business purposes, including service delivery, communication, responding to enquiries, compliance with legal obligations, and improving our services. We do not sell personal data or use it for unsolicited marketing.

5. Legal Basis for Processing

We process personal data under the following lawful bases:

• Legitimate interests
• Performance of a contract
• Compliance with legal obligations
• Consent (where explicitly required)

6. Cyber Liability and Security Measures

We maintain Cyber Essentials certification and implement industry‑standard cybersecurity controls. Measures include encryption, access controls, data minimisation, staff training, and regular cybersecurity risk assessments. We cannot guarantee the security of data transmitted via third‑party systems.

7. Data Storage and Retention

Personal data is securely stored and retained only as long as necessary to fulfil contractual, regulatory, and legal obligations.

8. Sharing Your Information

We may share data with authorised employees, contractors, service providers, regulatory authorities, and legal representatives where necessary. Third parties are contractually required to protect data.

9. International Transfers

Where data is transferred outside the UK, we ensure appropriate safeguards under UK GDPR, such as adequacy regulations or standard contractual clauses.

10. Cookies

Our website uses cookies to support functionality, security, and performance. Cookies do not collect personally identifiable information.

11. Your Rights

Under UK GDPR, you have the right to:

• Access your data
• Request rectification or deletion
• Restrict processing
• Data portability
• Withdraw consent (where applicable)
• Lodge a complaint with the ICO

Requests can be made to: hq@wcjeng.co.uk.

12. Changes to this Policy

This policy is reviewed regularly and updated as required.

Last updated: February 2026