Last updated: 19 October 2026
At a glance
- We are Wenham Carter. We run executive search and recruitment for senior and specialist roles, mainly in technology-led industries.
- We hold personal information about candidates, contractors, client contacts, referees and website visitors.
- We use it to find, assess and place people, to serve our clients, and to run our business.
- We do not sell your personal information.
- You can ask to see, correct or delete your information at any time. Email datacomplianceofficer@wenhamcarter.com.
The rest of this page gives the detail.
Who we are
“Wenham Carter”, “we”, “us” and “our” mean the group companies below. Each is responsible for the personal information it handles. If you are not sure which company holds your information, ask us.
- Wenham Carter Limited, registered in England, company number 04990020. ICO registration Z1703696.
- Wenham Carter Consulting Limited, registered in England, company number 07905696. ICO registration ZA312607.
- Wenham Carter Consulting Inc, a New York corporation, 1 Dock 72 Way, Brooklyn, NY, USA. It handles our US-based recruitment work.
The UK companies have their registered office at 96a Coleridge Street, Hove, BN3 5AA, United Kingdom. Our group companies share CRM and IT systems.
This notice covers our website, our recruitment services, and our emails, calls, messages and meetings.
Who we hold information about, and why
Candidates and contractors
We collect your name and contact details, CV, work history, qualifications, skills, salary and role preferences, notes from our conversations, and references. If we place you as a contractor, we also collect the details needed to contract and pay you, such as tax and bank details.
We use this to find and assess you, match you to roles, tell you about opportunities, put you forward to clients, and manage placements and contracts.
Before we send your details to a client, we agree with you which clients, or which types of client and markets, we may approach on your behalf.
Client contacts and prospects
We collect business contact details, job title, and a record of our dealings with you. We use this to manage our relationship, provide our services, and tell you about our services.
Referees, suppliers and other contacts
We hold business contact details and, for referees, what you tell us about a candidate. We use this to check references, manage suppliers, and follow up on introductions.
Website visitors
We collect technical information about your visit, such as device, browser and pages viewed, and anything you send us through a form. See our Cookie Policy for detail.
Where we get your information
- From you, directly.
- From public sources, such as LinkedIn, company websites and business registers.
- From job boards and contact-data providers.
- From referrals, referees and introductions from candidates, clients and other contacts.
- From our clients.
If we find you from a source other than you, we will send you a link to this notice when we first contact you.
Our legal bases
Data protection law says we need a lawful reason to use your information. Ours are:
- Legitimate interests. This is our main basis for finding and assessing candidates, matching them to roles, contacting you about opportunities, managing client relationships, sending business-to-business marketing, and running our business. Our interest is running a recruitment business. Your interest is hearing about relevant roles and having your information handled fairly. We weigh the two and you can object at any time.
- Contract. To enter into and perform a contract with you, for example a contractor assignment.
- Legal obligation. To meet legal duties, such as tax records, right-to-work checks and responding to authorities.
- Consent. We ask for your explicit consent before we collect health information or other sensitive information. We ask for consent to email marketing where the law requires it. You can withdraw consent at any time.
Every marketing email has an unsubscribe link.
Sensitive information
We do not ask for sensitive information, such as health, ethnicity, religion or criminal records, unless it is needed. An example is adjustments for an interview. If we do ask, we explain why and ask for your explicit consent. Background checks are only carried out where a role requires them and the law allows.
Who we share it with
- Clients and prospective employers. Only within what we have agreed with you.
- Our group companies.
- Service providers. They help us run our business, for example CRM, email, telephony, IT, payroll, background-check providers and professional advisers. They may only use your information on our instructions.
- Authorities and legal advisers. Where the law requires, or to establish or defend legal claims.
- A buyer or investor. If our business or part of it is sold or restructured.
We never sell your personal information. We do not share it for cross-context behavioural advertising.
Sending information abroad
We work internationally. Your information may be handled in the UK, the US and other countries where our clients, candidates or service providers are located.
When we send personal information outside the UK or the EEA, we make sure a lawful safeguard is in place. Examples are an adequacy decision, the UK International Data Transfer Agreement or Addendum, or the UK-US data bridge. Contact us if you would like more detail.
Calls, software and AI tools
We may record some calls. We will tell you at the start of the call if we do. Recordings are kept for no longer than 12 months unless we need them for a legal claim.
We use software, including AI-assisted tools, to help us search for, organise and summarise information. People at Wenham Carter make the decisions about candidates. We do not make hiring or rejection decisions using automated means alone. You can ask for a person to review any decision that affects you, and you can object to the use of these tools on your information.
How long we keep it
- People we have worked or spoken with (candidates, contractors and client contacts): up to 5 years after our last meaningful contact. Senior searches often span several years.
- People we found but never engaged with: up to 2 years.
- Contract, payroll and tax records: as long as the law requires, usually 6 years in the UK.
- Anything needed for a legal claim or investigation: until the matter is closed.
We review our records at least once a year and delete or anonymise anything past these periods. You can also ask us to delete your information sooner. See “Your rights” below.
Security
We use technical and organisational measures to protect personal information, including access controls and secure systems. If you think your information is no longer secure, contact us straight away at datacomplianceofficer@wenhamcarter.com. If a breach puts your rights at risk, we will tell the regulator and affected people as the law requires.
Your rights
You have the right to:
- get a copy of your information
- have inaccurate information corrected
- have your information deleted, in some cases
- restrict how we use your information, in some cases
- object to our use of your information, including for marketing
- receive your information in a portable format, in some cases
- withdraw consent, where we rely on it
- ask for a person to review any decision made with the help of automated tools
To use any of these rights, email datacomplianceofficer@wenhamcarter.com. We may need to check your identity first. We reply within one month. For complex requests we may extend this by up to two months, and we will tell you why.
How to complain
If you are unhappy with how we have handled your information, please tell us first. Email datacomplianceofficer@wenhamcarter.com with “Complaint” in the subject line.
- We will acknowledge your complaint within 30 days.
- We will investigate without undue delay and tell you the outcome.
You can also complain to the regulator. In the UK this is the Information Commissioner’s Office. If you are in the EU, you can complain to your local data protection authority.
US residents
We do not sell personal information and we do not share it for cross-context behavioural advertising. If you live in a US state with a privacy law, such as California, you can ask us to tell you what we hold, correct it, or delete it. Use the contact details above. We will respond within the time the law allows. We will not treat you differently for making a request.
Children
Our services are for adults. We do not knowingly collect information about anyone under 18.
Links to other sites
This notice does not cover other websites that we link to, such as LinkedIn. Please read their privacy notices.
Changes to this notice
We review this notice at least once a year and when the law or our practices change. The date at the top shows when it was last updated.
Contact us
Data Protection Lead
Wenham Carter
96a Coleridge Street, Hove, BN3 5AA, United Kingdom
Email: datacomplianceofficer@wenhamcarter.com
Phone: +44 (0) 1273 648 040
Please do not put sensitive information in emails to us.