Skip to main content


We are committed to protecting the personal information of our clients. This policy sets out the basis on which Vincent & Brown may collect, store and process any personal data as a result of your use of this website.

If you have any questions about our Privacy Policy and data protection practices please contact or by writing to Vincent & Brown, Studio 12, Middlethorpe Business Park, Sim Balk Lane, Bishopthorpe, York, YO23 2BD.

While we take reasonable steps to ensure that the personal information we process is accurate and up to date, we rely on our users to keep us informed of any changes during their relationship with us.

This version was lasted updated September 2020.

The Type of Personal Information We Collect

You can visit our website without providing personal information, however we may automatically collect IP addresses, information about your visit and how you use our website.

You may provide us with personal information by corresponding with us by phone, email, or otherwise. This information may include identity and contact data when enquiring about our services or job vacancies, financial and transaction data when we are providing services, and marketing and communications data.

How We Collect Personal Information and Why We Have It

Most of the personal information that we process is provided to us directly by you to enable us to provide you with our services or to engage your services. This includes:

Processing and responding to enquiries
Delivering services, including processing payments
Maintaining responsible commercial relations
Notifying you of changes to our services
Administering and protecting our business and website (including the use of data analytics)
Recommending relevant products or services

Under the General Data Protection Regulation (GDPR), the lawful bases we rely on for processing this information are:

Performance of a contract with you
It is necessary for our legitimate interests
It is necessary to comply with a legal obligation
You have given us consent

Where we are legally required to hold some types of information to fulfil our statutory obligations the information will be held on our systems for as long as is necessary for the relevant activity.

We may sometimes collect personal information from third parties (with your consent) for example references. We will get your express consent before we share your personal data with a third party for marketing purposes

How We Store Your Personal Information

Vincent & Brown retain personal data only for as long as required to fulfil the purposes for which it was collected or for as long as otherwise required or permitted by the applicable legislation. Further information on the different periods of time after which personal data will be destroyed or returned to the originator is available from our Data Protection Lead.

We have appropriate security measures in place to prevent your personal information from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. We limit access to your personal information to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal information on our instructions and are subject to a duty of confidentiality.

Your Data Protection Rights

Under data protection law, you have rights including:

Your right of access – You have the right to ask us for copies of your personal information

Your right to rectification – You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.

Your right to erasure – You have the right to ask us to erase your personal information in certain circumstances.

Your right to restriction of processing – You have the right to ask us to restrict the processing of your personal information in certain circumstances.

Your right to object to processing – You have the right to object to the processing of your personal information in certain circumstances.

Your right to data portability – You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.

You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.

You can exercise any of your rights by contacting our Data Protection Lead via email at:

If you have any concerns about the use of your personal information, you can make a complaint to us at:

You can also complain to the Information Commissioner’s Office (ICO) if you are unhappy with how we have used your data via the helpline number 0303 123 1113 or the website