Privacy Policy

Judith & Co Recruitment
Website: https://judithrecruit.com/
Last updated: 01/05/2026

Introduction

Judith & Co Recruitment (“we”, “us”, or “our”) is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal data when you visit our website, contact us, or use our services.
We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
This policy applies to all visitors to our website and individuals who communicate with us.

Who We Are (Data Controller)

Company Name: Judith & Co Recruitment
Website: https://judithrecruit.com/
Email: info@judithrecruit.com
Telephone: 020 3325 5791
Judith & Co is the data controller responsible for your personal data.

What Personal Data We Collect

We only collect personal data that is necessary to operate our business, respond to enquiries, or provide services.

Information You Provide to Us
We may collect personal data when you:

• Complete a contact form
• Request information or services
• Submit documents (such as a CV)
• Communicate with us by email or telephone

This information may include:

• Name
• Email address
• Telephone number
• Company name
• Job title
• CV or employment information (if applicable)
• Any information you include in your message
• Information Collected Automatically

When you visit our website, we may automatically collect:

• IP address
• Browser type and version
• Pages visited and time spent on the site
• Device and usage information
• Referring website
• Cookies and tracking data

This information helps us improve our website and maintain security and is not shared with third parties or used for marketing purposes.

How We Use Your Personal Data

We use personal data for legitimate business purposes, including:

• Responding to enquiries
• Providing services
• Communicating with clients or candidates
• Improving website performance and user experience
• Monitoring website security
• Complying with legal obligations

We do not sell or rent personal data to third parties.

Lawful Basis for Processing

Under UK GDPR, we rely on the following lawful bases:

Legitimate Interests
To operate our business, respond to enquiries, and maintain website functionality and security.

Consent
Where required, such as accepting cookies or submitting information through forms.

Legal Obligation
Where we are required to retain or disclose information under applicable laws.

Cookies

Our website uses cookies and similar technologies to improve functionality, analyse website traffic, and ensure security.
Cookies may be used to:

• Understand how visitors use the website
• Improve performance and usability
• Provide security protection
• Remember preferences

You can manage or withdraw consent for cookies at any time using the cookie banner or your browser settings.

Third-Party Services

We may use trusted third-party providers to support our website and business operations.
These services may include:

• Website hosting providers
• Email delivery services
• Analytics tools (such as Google Analytics)
• Website security and monitoring tools
• SEO or performance tools
• Form handling or CRM systems

These providers only process personal data as necessary to deliver their services and are required to protect your data.

Data Sharing

We only share personal data where necessary to operate our business or comply with legal requirements.
We may share data with:

• IT and website service providers
• Professional advisers
• Service providers supporting our operations
• Regulatory authorities or law enforcement where required

We do not sell personal data.

International Data Transfers

Some service providers may store or process data outside the United Kingdom.
Where this occurs, we ensure appropriate safeguards are in place, such as:

• UK adequacy decisions
• Standard contractual clauses
• Secure data transfer mechanisms

Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected.
Typical retention periods may include:

• General enquiries: up to 24 months
• Client or customer records: up to 24 months
• Recruitment or candidate information: up to 24 months
• Website analytics data: typically up to 24 months
• Security logs: as required for system protection

We may retain information longer where required by law.

Data Security

We take appropriate technical and organisational measures to protect personal data from unauthorised access, loss, misuse, or disclosure.
These measures may include:

• Secure hosting environments
• Firewall and malware protection
• Encrypted connections (HTTPS)
• Access controls
• Regular software updates

Your Data Protection Rights

Under UK GDPR, individuals have the right to:

• Access personal data
• Correct inaccurate data
• Request deletion of data
• Restrict processing
• Object to processing
• Request data portability
• Withdraw consent at any time

To exercise any of these rights, please contact us using the details provided above.

Complaints

If you have concerns about how we handle personal data, please contact us first so we can resolve the issue.
You also have the right to lodge a complaint with the UK data protection authority:
Information Commissioner’s Office (ICO)
Website: https://www.ico.org.uk

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in legal requirements or business operations.
Any updates will be published on this page with a revised “Last updated” date.