WFC collects and processes personal information, or personal data, relating to its employees and workers as well as clients and contractors to manage our working relationships. This personal information may be held by the WFC on paper or in electronic format.

WFC are committed to protecting personal data and to fair and transparent processing and will only use personal data for the purposes described in this privacy statement or as stated at the point of collection.


Data Processing Principles

We rely on several lawful basis of processing when we collect and use personal data to operate our business and provide products and services to our clients. These include:

  • Public interests – where the processing of data is necessary for providing certain services to clients (eg statutory audit) or for certain requirements we are subject to.
  • Legal obligations – to comply with the legal and regulatory obligations we are subject to as a commercial business.
  • Contract – to perform contractual obligations we may have with an individual or to take steps to enter into a contract with an individual.
  • Consent – where an individual has freely given consent at the time their personal data was provided to us.
  • Legitimate interests – the legitimate interests can be ours, our clients or other third parties (eg to provide our services, to develop or protect our business, or to keep people informed about relevant products and services) and we always balance the rights of individuals with ours’ and others’ legitimate interests.


How we keep data secure

Security is of the upmost importance to us. Whilst no data transmission over the internet or any other network can be guaranteed as 100% secure, we take all reasonable steps to safeguard the personal data we hold, and we have in place appropriate technical and organisational measures.


How long do we keep personal data?

We keep personal data only for as long as necessary and this will reflect the requirements of:

  • the activity or service for which it is being processed
  • any legal, regulatory or contractual requirements
  • the time in which any litigation or investigations might arise from providing a service.


Individuals’ rights

Individuals have certain rights over their personal data that we process.

If we process your personal data and you exercise any of your rights, we will aim to respond promptly and within any required time limit. However, please note that the length of time it will take us to respond will be dependent on the nature and extent of your request.

You have a right to:

  • access – you can ask us for a copy of the personal data that we hold on you
  • rectification – if you become aware of any errors or inaccuracies concerning your personal data, please let us know so that amendments can be made.
  • withdraw consent – where we process personal data based on consent, you have a right to withdraw consent at any time. For any other withdrawals of consent please contact us on the details below
  • erasure/deletion – you can ask us to erase or delete your personal data when we no longer need it for the purposes it was obtained
  • restrict or object to our processing – you can ask to restrict or object to our processing of your personal data (eg removal from a marketing subscription list).


If you wish to exercise any of your rights, please contact us.


Who to contact

If you have any questions about this privacy statement, wish to complain about our use of personal data or exercise one of your rights, please send your correspondence to:


Data Controller

Olympus House

Kingsteington Road

Newton Abbot


TQ12 2SN



You also have the right to report concerns or make complaints to the Information Commissioner’s Office (ICO). For more information on your rights and how to contact the ICO, please refer to their website.