Privacy Policy

Last Modified: 12 April 2026

Westbrook Data Protection Services Limited known as (WDPS) is a UK-based legal and compliance advisory firm, specialising in data protection law. We are a limited company registered in England and Wales under Company Registration Number 09518843. We are also registered with the Information Commissioners Office: ICO Registration Number: ZB099496

This policy applies only to your use of Our website and your interactions with the Westbrook Data Protection Services Limited If you follow any link to other websites, your data will be used in accordance with the privacy policies of such third parties.

The name Westbrook Data Protection Services Limited is registered trademarks of Westbrook Data Protection Services and can be found here. All rights reserved.

Related Policies: For additional policies, please see our Terms and Conditions and our Cookie Policy

Who is responsible for your personal data?

The General Data Protection Regulation 2016/679) distinguish between a “controller” and a “processor” for the purposes of this policy Westbrook Data Protection Services Limited is the “data controller” of your personal data, meaning we determine how and why your data is used. Our company is a registered business in the United Kingdom. You can contact us at dpo@wdps.co.uk or at 2nd Floor, Midas House, 62 Goldsworth Road, Woking, GU21 6LQ with any questions about this policy or your personal data rights. You can also reach out to our Data Protection Officer at: dpo@wdps.co.uk for any data protection queries.

We are committed to respecting and protecting your privacy in line with UK data protection laws, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 and our founder is a registered solicitor with the Solicitors Regulation Authority in England and Wales as well as a member of IAPP.

Our data protection officer

Westbrook Data Protection Services Limited
2nd Floor, Midas House
62 Goldsworth Road
Woking, GU21 6LQ
Tel: +44 (0)7976 939 016
Email: dpo@wdps.co.uk

Our DPO is a qualified legal advisor with significant experience in UK data protection compliance. WDPS is registered with the Information Commissioner’s Office under registration number ZB099496.

Your privacy rights

As a data subject you have the following rights in respect of the personal data we hold on you.

You have the right to ask for a copy of the personal data we hold about you and to learn how we use it (this is often called a “Data Subject Access Request” or DSAR). We have one-month to complete this. Under the Data (Use & Access) Act 2025, if we need to ask you for more information to confirm your identity or to narrow down exactly what data you need, we may “stop the clock” on this one-month deadline. We will restart the countdown as soon as we have what we need from you. This helps us ensure we get you the right information as quickly and securely as possible. You can find our form here.
Correction of inaccurate or incomplete data: If any of your personal data is inaccurate or incomplete, you have the right to have it corrected or updated without undue delay. You can also request that we complete any data that is incomplete.
Request erasure: You can ask us to delete or remove your personal data in certain circumstances. This right, also known as “the right to be forgotten,” applies, for example, if the data is no longer necessary for the purposes it was collected, you withdraw consent (and no other legal basis for processing exists), or if the data has been unlawfully processed.
Restrict processing: You have the right to request that we suspend or limit the processing of your personal data in specific situations. For instance, if you contest the accuracy of your data, you can ask us to restrict processing while we verify the information. Or if you object to our processing based on legitimate interests, you may request restriction pending the verification of whose interests prevail.
Data portability: For data you have provided to us, which we process by automated means on the basis of your consent or for performance of a contract, you have the right to request a copy in a structured, commonly used, machine-readable format (e.g. CSV file), and you have the right to have that data transmitted to another controller where technically feasible. In plain terms, this allows you to take your data to another service.
Object to processing based on our legitimate interest: You have the right to object to our processing of your personal data when it is based on legitimate interests or performed for direct marketing.
Other rights. You have the right to lodge a complaint with the Information Commissioners Office if you are unhappy with how we have handled your data. Their details are: Wycliffe House Water Lane Wilmslow Cheshire SK9 5AF. You can contact them on 0303 123 1113
Direct marketing: You can object at any time to processing of your personal data for direct marketing purposes, and if you do, we will stop processing your data for that purpose immediately. (If you object to marketing emails, it’s effectively the same as unsubscribing, which you can do easily as noted above.)
Legitimate interests: You may object if you believe our legitimate interest processing negatively impacts your rights, and we will reconsider the balance or cease processing unless we have a compelling reason that overrides your objection.
Rights related to automated decision-making: If we ever use automated decision-making or profiling that produces legal effects or similarly significant effects for you, you have the right to not be subject to such decisions without human intervention. You also have the right to express your point of view and contest the decision. (Note: Our current services do not involve decisions made solely by algorithms that have significant effects on individuals. Should this change, we will update this policy and ensure appropriate safeguards as required by law).
Right to withdraw consent: If we are processing your personal data based on your consent, you have the right to withdraw that consent at any time. This will not affect the lawfulness of processing based on consent before its withdrawal. For example, you can withdraw your consent to marketing emails by unsubscribing, or to cookie usage by updating your cookie settings. Once consent is withdrawn, we will stop the related processing activities.
Right to lodge a complaint: If you believe we have infringed your data protection rights or not handled your personal data properly, you have the right to file a complaint with the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection. You can contact the ICO via their website or helpline. We would, however, appreciate the chance to address your concerns before you approach the ICO, so please consider reaching out to us first.

You can exercise your rights at any time by contacting us (see Contact Us below). We will respond to requests as soon as possible and no later than one month. There is normally no fee for exercising your rights; however, if a request is manifestly unfounded or excessive, we may charge a reasonable fee or decline to comply.

What personal data we collect

We collect personal information from you when you use our services. This may be through the use of our website in which case e use cookies and Google Analytics. You can find out how we collect your data in our cookie policy here.

If you engage in our signing service we may collect:

Name
Email address
Company name
Phone number
Content of your message
Photo ID
Passport details

We use this information to respond to your enquiry and for the purpose of verification.

If you choose to become a client, we may collect information to advise you and carry out the work you commission us to do. This will include:

Name
Email address
Passport details
Photo ID
Company name
Phone number
Content of your message
Any documents you provide to us

Legal basis for processing

If you contact us, your personal data is processed:

On the basis of legitimate interests – to provide you with a reply and handle your enquiry or for the purpose of verification and to carry out the work you commission us to do.

We do not process personal data for marketing unless you have opted in to receive communications.

How we use your information

To respond to your enquiries or requests
To provide legal or compliance advice (when requested)
To provide signing services (when requested)
To fulfil any contractual or legal obligations
We do not use your information for profiling, marketing, or analytics.
We do not sell or share your data with third parties.

Where and how your data is stored

Our website is hosted by Catalyst2. While we do not actively collect or store personal data on our site, our web host may automatically log anonymous technical information (such as your IP address) for security and maintenance purposes. All data is stored on secure UK-based servers and is protected by industry-standard security measures including firewalls and 24/7 monitoring. For more details, please see the Catalyst2 Privacy Policy for more details.

Retention periods

Where physical data is required such as photocopy of your ID we retain this on site and in a locked cabinet. All correspondence relating to our signing service is deleted within 3 months unless required for legal or contractual purposes such as ongoing contract.

If you engage with another one of our services we will retain your data for 6 years. After this point it will be securely destroyed.

Who we share your data with

We do not share your personal data with third parties.

Marketing and advertising

If you have signed up for marketing with us we only use your personal information to send you email marketing.. you will have a choice in every email to opt-out.

Children’s privacy

Our services are not intended for individuals under the age of 13. We do not knowingly collect personal data from children. If we become aware that we have received personal information from a child, we will delete it promptly.

External links

Our website may contain links to other websites. We are not responsible for the content or privacy practices of these third-party sites.

Changes to this privacy policy

We reserve the right to update or modify this Privacy Policy at any time. Any changes will be effective immediately upon posting the updated Privacy Policy on our website. It is your responsibility to review this Privacy Policy periodically to stay informed about how we are protecting the personal information we collect.

How to complain

If you have concerns about how we handle your data, please contact us directly at dpo@wdps.co.uk
If you’re not satisfied with our response, you may lodge a complaint with the Information Commissioner’s Office:

ICO contact details:
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Website: https://ico.org.uk

Contact us

We review this privacy policy regularly and update it as needed to reflect changes in our practices or legal obligations. The current version was last updated on 12 April 2026.