This Privacy Policy was last updated on April 2026 and is version 2.
This notice applies to candidates applying for roles with N Brown (part of JD Williams & Company Limited). If your application is successful, your personal data will be processed in accordance with our Colleague Privacy Policy.
You can contact our Data Protection and Privacy Office by emailing us at informationrequest@nbrown.co.uk or by writing to:
Data Protection and Privacy Office
JD Williams and Company Limited
Griffin House
40 Lever Street
Manchester
M60 6ES
Who we are
We are JD Williams & Company Limited (‘we’, ‘us’ or ‘our’). This is the legal entity responsible for how your personal data is collected, stored and processed.
JD Williams & Company Limited is a company registered in England (registered number 00178367). Our registered office is at Griffin House, 40 Lever Street, Manchester, M60 6ES.
We trade under a number of brands, including JD Williams, Simply Be, Jacamo, and three Heritage brands, and are collectively known as the N Brown Group.
What data we collect
We may collect several types of personal data about you during the recruitment process, including:
Your personal details, such as your name, address, email address and telephone number
Information you provide as part of your application, including your CV, cover letter, qualifications, skills, experience and employment history
Diversity information, such as your gender, date of birth and ethnic origin
Right to work and identity information, including documentation and checks required to verify your eligibility to work in the UK
Background check information, such as credit checks, fraud checks and Disclosure and Barring Service (DBS) checks where applicable
Information relating to criminal convictions and offences, where relevant and permitted by law
Notes and records from interviews and assessments, including feedback and evaluation of your application
Communications with you, including emails, messages and other correspondence during the recruitment process
Information about your accessibility needs, where you have chosen to share this with us so we can provide appropriate support
Where we get your data from
We mostly collect personal data directly from you when you apply for a role. We may also collect data from other sources, including:
Recruitment agencies who support us in sourcing candidates
Previous employers or referees, who may provide references about your employment
Background screening providers, who carry out checks such as identity verification, right to work checks and (where applicable) criminal record checks
Publicly available sources, such as professional profiles (for example, LinkedIn), where relevant to your application
Why and how we use your personal data
We are only allowed to use your personal data where we have a lawful basis for doing so. The table below explains how we use your personal data during the recruitment process and the legal basis we rely on.
Purpose | Lawful Basis |
Managing your application and recruitment process | Legitimate interests |
Communicating with you about your application | Legitimate interests |
Assessing your suitability for a role | Legitimate interests |
Verifying your identity and right to work | Legal obligation |
Carrying out background checks (where applicable) | Legal obligation and/or Legitimate interests |
Monitoring equality and diversity | Legal obligation /and/or Substantial public interest |
Providing reasonable adjustments | Legal obligation |
We will only use your personal data for the purpose for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose of collection. If we wish to use your personal data for an unrelated purpose, we will notify you and explain the legal basis which allows us to do so.
Use of Artificial Intelligence (AI)
We may use AI-powered tools to support administrative aspects of our recruitment process, such as transcribing interviews or assisting with drafting job adverts.
These tools help us work more efficiently but do not make final decisions about candidates. All recruitment decisions are ultimately made by our colleagues, at times supported by AI.
Where AI tools are used, this may involve processing your personal data, such as interview responses or application information. This processing is carried out under our legitimate interests in operating an efficient recruitment process.
Any third-party providers we use act as data processors on our behalf and are required to process your personal data securely and in accordance with applicable data protection laws.
Criminal record checks
We will only collect information about criminal convictions if it is appropriate given the nature of the role and where we are legally able to do so. Where appropriate, we will collect information about criminal convictions as part of the recruitment process or we may be notified of such information directly by you in the course of you working for us.
Fraud prevention (Cifas)
The personal information we have collected from you may be shared with Cifas who will use it to prevent fraud and other unlawful conduct. Further details can be obtained by contacting us using the details above.
How long we will keep your data
If your application is not successful, we will retain your data for a period of 6 months from the date of the application in order to consider and inform you about other vacancies that you may be interested in, to ensure our interview processes are fair, to provide interview feedback and to resolve any queries relating to your application and interview.
Successful candidates’ data who take up employment with the business will be retained in accordance with our Colleague Privacy Policy.
How we store and protect your data
Security of your data is very important to us. We take appropriate measures to ensure that all personal data is kept secure including security measures and processes to prevent any unauthorised access, accidental loss, disclosure, or destruction of your personal data.
We limit access to your personal data to those who have a genuine business need to view it and those processing your information will do so only in an authorised manner.
How we share your personal data
We may disclose and share your data with third parties which include third party service providers and other entities within our group. We will share your data with third parties where it is required by law, it is necessary to administer the working relationship with you or where we have another legitimate interest in doing so. For example, we may share your data with third parties in order to verify your identity and assess your right to work in the UK.
If you have any questions about the third-party processors and partners we may share your data with please contact our Data Protection and Privacy Office using the contact details provided above.
International transfers
We do everything we can to keep your personal data safe and protected. In some cases, we may need to transfer your data to countries outside of the UK.
Where this happens, we make sure appropriate safeguards are in place to protect your personal data in line with data protection laws. This may include ensuring that the country provides an adequate level of protection or putting contractual measures in place to safeguard your data.
If you would like more information about how and why your data may be transferred outside of the UK, please contact our Data Protection and Privacy Office using the contact details provided above.
Your personal data rights
You have several rights under data protection and privacy laws. We explain more about your rights below. If you ever wish to exercise your rights, please contact our Data Protection and Privacy Office at informationrequest@nbrown.co.uk.
Right of Access
You have the right to ask us if we use your personal data, and to see and get copies of that data. We will tell you what kind of data we have, where we got it, and who we share it with. To make things easier, we have included most of that data within this privacy policy.
We will provide any data you ask for within one month of your request. If we need more time than that, we will let you know.
Right of Rectification
If you think the data we have on you is wrong or incomplete, you can ask us to fix it. We will correct it within one month, unless we do not think it is necessary or appropriate to make the change, in which case we will explain why.
If we need more time to fix the data, we will let you know. If you think we made a mistake, you can email us at, informationrequest@nbrown.co.uk and we will investigate it.
Right of Erasure
You can ask us to delete your personal data in certain situations. For example:
We do not need it anymore.
You withdraw your consent.
We are not allowed to have it by law.
You object to us using it and we do not have a good reason to keep it.
There are some cases where we may be unable to comply with your request and delete your information. If that were to happen, we would let you know why.
Right to Restrict processing
Sometimes you can ask us to stop using your personal data. For example:
If you think the data, we have on you is incorrect - we will stop using it until we can confirm whether it is accurate or not.
Where you have objected to how we are using it - we will stop until we decide whether our reasons for using it override your objections.
If it is against the law for us to use it
If we do not need it anymore but you want us to keep it because you might need it for legal reasons in the future.
There are some cases where we may be unable to comply with your request. If that were to happen, we would let you know why.
Right to object to processing
You have the right to say that you do not want us to use your personal data. You can do this:
If we are using it for our own legitimate interests, for tasks that are in the public interest, or for official purposes.
If we are using it for marketing purposes
If we are using it for research and statistics
If you object, we will stop using your data, unless we can show that our reason for using it overrides your objection.
Right to Portability
As JD Williams & Company Limited is responsible for your personal data (what is called a 'data controller'), you have the right to ask us for a copy of it. This must be in a format that allows you to transfer it to another data controller.
Your right to transfer only applies:
To the personal data you yourself have given us
When we are using it because you agreed to it or because it is part of a contract
If the way, we are using the data is automated.
We will try to respond to your request within one month. If we need more time, we will let you know.
Right to be informed: You have the right to be informed about the collection and use of your personal data, commonly known as a 'privacy statement' or 'privacy policy'. We will provide you with information about how we collect and use your data through our Privacy policy and 'just in time' notices provided at the time of collecting your data. Our Privacy Policy is regularly reviewed and any changes to the Policy will be communicated through re-publication on our website. You can ask for a printed copy of our Privacy Policy by contacting the Data Protection and Privacy Office.
Complaints and Concerns
If you want to complain about the way we use your data, it is best to contact us first. We will investigate your complaint right away. You can complain to the Information Commissioner's Office in the UK or the Data Protection Commission in the Republic of Ireland.
To contact The Information Commissioner's Office:
Visit: ico.org.uk
Call: 0303 123 1113
Write to: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.
How to contact us
If you have any questions, comments, or requests to make about this privacy notice or your rights, here is how to contact us:
Email us: informationrequest@nbrown.co.uk
Write to: Data Protection and Privacy Office, JD Williams and Company Limited, Griffin House, 40 Lever Street, Manchester, M60 6ES.