Image 2022 01 25 T11 57 59

Privacy Policy

This Privacy Policy was last updated on 08th February 2022 and is version 1.0.

The purpose of this notice

This Privacy Policy sets out how we collect and use your personal information for recruitment purposes and what your individual data protection and privacy rights are.

The Policy applies if you apply for a job with N Brown, if you are successful in your application our Colleague Privacy Policy will then apply to how we process your data as an employee.

Who is responsible for processing your personal data

JD Williams & Company Ltd trading as N Brown is the registered Data Controller. This is the legal entity responsible for how your personal data is collected, stored and processed.

Personal data we collect about you

In applying for a role with us, the information we collect includes (but isn’t limited to);

  • Your name, address and contact details which includes email address and telephone number, ethnic origin, date of birth and gender.

  • Details we need to check your identity and right to work in the UK (including performing credit reference checks, fraud checks and Disclosure and Barring Service checks)

  • Your CV and any accompanying Cover Letter or additional documentation provided by the candidate upon application

  • Details of your qualifications, skills, experience and employment history and details of your referees

  • Information about criminal convictions and offences

How we collect your data

We may collect personal data about you through the application and recruitment process, either directly from candidates when you submit a job application or from various third parties including recruitment agencies.

We may also collect additional information from third parties including previous employers and background check agencies including credit reference agencies.

How we will use your data

We will process your personal data for purposes including contacting you regarding application, assessing and determining your suitability for a role, verifying your identity and assessing your right to work in the UK, for equal opportunities and monitoring, providing reasonable adjustments for disabilities or conditions for applications and interviews and for considering and informing you about other vacancies that you may be interested in.

We will only process your personal data where we have a legal basis to do so including where we have your consent, where we have a legal obligation, where it is necessary for the performance of a contract or supports our legitimate interests.

We will only use your personal data for the purpose for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose of collection. If we wish to use your personal data for an unrelated purpose, we will notify you and explain the legal basis which allows us to do so.

Criminal record checks

We will only collect information about criminal convictions if it is appropriate given the nature of the role and where we are legally able to do so. Where appropriate, we will collect information about criminal convictions as part of the recruitment process or we may be notified of such information directly by you in the course of you working for us.

How long we will keep your data

If your application is not successful, we will retain your data for a period of 6 months from the date of the application in order to consider and inform you about other vacancies that you may be interested in, to ensure our interview processes are fair, to provide interview feedback and to resolve any queries relating to your application and interview. Successful candidates’ data who take up employment with the business will be retained in line with our Colleague Privacy Policy.

How we store your data

Security of your data is very important to us. We take appropriate measures to ensure that all personal data is kept secure including security measures and processes to prevent any unauthorised access, accidental loss, disclosure, or destruction of your personal data. We limit access to your personal data to those who have a genuine business need to view it and those processing your information will do so only in an authorised manner.

How we share your data

We may disclose and share your data with third parties which include third party service providers and other entities within our group. We will share your data with third parties where it is required by law, it is necessary to administer the working relationship with you or where we have another legitimate interest in doing so. For example, we may share your data with third parties in order to verify your identity and assess your right to work in the UK.

If you have any questions about the third-party processors and partners we may share your data with please contact our Data Governance team using the details in the ‘How to Contact Us’ section below.

How to contact Us

If you have any questions, comments or complaints about this Privacy Policy or our use of your personal data, please contact us at:

Data Governance Team

JD Williams and Company Limited trading as N Brown

Griffin House

40 Lever Street

Manchester M60 6ES

If you are at all dissatisfied with the information provided by the Data Governance Team, please address any complaints to the Data Protection Officer at the same address.

Your personal data rights
Right of Access: 

You may wish to access a copy of the personal data we hold about you - known as a Subject Access Request and can do so by contacting the Data Governance team using the contact details provided above. We will respond to your Subject Access Request as soon as possible and, in any event, within one month. However, in the event that we need more information from you such as to verify your identity, the response period will commence from the time that we have received that information.

Right of Rectification:

If you believe there is an error as to the personal data we hold about you, please contact the Data Governance team using the contact details provided above. 

Right of Erasure:

You have the right to request your personal data to be permanently deleted from our records and systems. Your request will always be considered in light of the purposes and legal bases for which we process your personal data and in certain circumstances we may need to retain your data and so may not be able to carry out your request. Please address any request to delete your data to the Data Governance team.

Right to Restrict processing:

Should you believe that we are processing your personal data in a way that you did not understand or agree to and wish to restrict such processing, please speak to the Data Governance team who will be able to assist you.

Right to object to processing:

You have the right to object to certain types of processing of your personal data. Should you wish to object to such processing please contact the Data Governance team using the contact details provided above.

Right to Portability:

In the event that you wish to move your personal data that we hold on you to another organisation in the form of an excel or csv format, please contact the Data Governance team who will be able to assist you.

Right to be informed:

You have the right to be informed about the collection and use of your personal data, commonly known as a 'privacy statement' or 'privacy policy'. We will provide you with information about how we collect and use your data through our Privacy policy and 'just in time' notices provided at the time of collecting your data. Our Privacy Policy is regularly reviewed and any changes to the Policy will be communicated through re-publication on our website. You can ask for a printed copy of our Privacy Policy by contacting the Data Governance team.

Right to complaint to the Information Commissioner’s office (ICO):

You have a right to lodge a complaint with the Information Commissioner's Office (ICO) if you have any concerns about how your personal data has been processed. For more information, please visit