Privacy Policy
1.
Introduction
SEQUORA Ltd (“we”, “us”, “our”) is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store and share personal data when you visit or interact with our website, https://www.sequora.co.uk (“Our Site”), or otherwise engage with us. This Privacy Policy is intended to meet the transparency requirements of the UK General Data Protection Regulation (“UK GDPR”) and the Data Protection Act 2018. Please read this Privacy Policy carefully to understand how and why we use your personal data.
2.
​Information About Us
Our Site is owned and operated by SEQUORA Ltd, a company registered in England and Wales, with company number 16448755, and registered address: Units 1 & 2 Field View, Baynards Business Park, Baynards Green, Bicester, Oxfordshire, OX27 7SG.
Data Protection Lead: Warren Stonebridge
Email: privacy@sequora.co.uk
For the purposes of data protection law, SEQUORA Ltd is the data controller.
3.
What This Policy Covers
This Privacy Policy applies only to your use of Our Site, our recruitment process and other related communications with us. Our Site may contain links to third-party websites. We have no control over how those websites collect or use personal data and encourage you to review their privacy policies before providing any information.
4.
What Is Personal Data?
Personal data means any information relating to an identified or identifiable individual, as defined by the UK GDPR and the Data Protection Act 2018. This includes, for example, names, contact details, online identifiers such as IP addresses, and information you provide through enquiries or applications.
5.
Your Data Protection Rights
You have the following rights under UK data protection law: The right to be informed about our collection and use of your personal data The right of access to personal data we hold about you The right to rectification of inaccurate or incomplete data The right to erasure (the “right to be forgotten”) The right to restrict processing The right to object to processing The right to data portability Rights relating to automated decision-making and profiling We do not carry out automated decision-making or profiling. You may exercise your rights by contacting us using the details in section 2. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO). We would, however, welcome the opportunity to address your concern first by completing the form under section 14.
6.
Personal Data We Collect and How we Use It
a. Data collected automatically:
When you visit Our Site, we may automatically collect:
-
IP address
-
Browser type and version
-
Operating system and device information
-
Usage and interaction data
This data is used to operate, secure and improve Our Site.
b. Data you provide to us:
We may collect personal data when you:
-
Contact us via email or website forms
-
Engage with us on social media
-
Apply for a role with us
This may include:
-
Identity data (such as name and title);
-
Contact data (such as email address, telephone number or address);
-
Communications content;
-
and Recruitment information such as, but not limited to: CVs, education and employment history.
Where recruitment data includes special category personal data, this will be processed only where permitted by law and subject to appropriate safeguards.
c. How and why we use your personal data:
-
Where you have applied for a position with us, to:
i)
ii)
iii)
iv)
v)
vi)
​Review and process your job application
Assess your suitability for a role
Communicate with you during the recruitment process
Arrange interviews and assessments
Make recruitment decisions
Comply with legal and regulatory obligations;
-
to provide our services;
-
to comply with legal and regulatory obligations;
-
to establish, exercise or defend our legal rights;
-
to record and monitor your use of our websites or our other online services for our business purposes which may include analysis of usage, site performance and generation of marketing reports;
-
for our legitimate business interests, such as responding to enquiries, undertaking business research and analysis, including understanding our relationships with the users of our services, managing the operation of our websites and the administration of our business (please contact us if you wish to manage the purposes for which we use your data);
-
to look into any complaints or queries you may have; and/or
-
to prevent and respond to actual or potential fraud or illegal activities.
We may use your personal information for the purposes described in this Notice or any other purposes of which we have otherwise notified you.
We are committed to fair, inclusive and non-discriminatory recruitment practices. Any diversity or equality information you choose to provide is voluntary, used only in accordance with the law, and not used to make recruitment decisions. Where collected, this information may be used in anonymised or aggregated form to help us understand and improve the fairness of our recruitment processes.
7.
Lawful Bases for Processing
We process personal data only where we have a lawful basis under Article 6 UK GDPR, including:
-
Legitimate interests – responding to enquiries, undertaking business research and analysis, including understanding our relationships with the users of our services, managing the operation of our websites and the administration of our business.
-
Contractual necessity – we may need to collect and use your personal information to enter into a contract with you or to perform our obligations under a contract with you. This includes where we need to take steps at your request prior to entering into a contract.
-
Consent – where required, such as for certain cookies. we may (but usually do not) need your consent to use your personal information. You can withdraw your consent by contacting us.
-
Legal obligation – complying with applicable laws and regulations.
Where special category data is processed, we rely on an appropriate condition under Article 9 UK GDPR, such as compliance with employment law obligations or explicit consent where required.
The use of cookies and similar technologies is governed by the Privacy and Electronic Communications Regulations (PECR), with any personal data collected through cookies processed in accordance with the UK GDPR.
8.
Marketing Communications
If we introduce marketing communications or marketing cookies in the future, we will update this Privacy Policy and our Cookie Policy accordingly.
9.
Cookies and Similar Technologies
Our Site uses cookies and similar technologies to ensure it functions correctly, remains secure and performs effectively.
-
Strictly necessary cookies are used for core functionality and security and do not require consent.
-
Where analytics or other non-essential cookies are used, these will be set only with your consent via our cookie banner.
Full details of the cookies we use, including their purpose and duration, are available in our Cookie Policy, accessible via the footer of Our Site.
10.
Website Hosting, Processors and Data Sharing
We use Wix.com Ltd to host and operate our website and to provide related technical services, such as website security, performance monitoring and form handling.
When you submit information through our website (for example by completing a contact form), that information is processed on our behalf by Wix acting as a data processor. Wix processes personal data only in accordance with our instructions and does not use it for its own independent purposes.
As part of providing its services, Wix may store and process personal data on secure servers located in several countries outside the United Kingdom. Where this occurs, appropriate safeguards are in place to ensure that personal data is protected in accordance with UK data protection law.
Personal data submitted via Our Site may be processed by Wix and its authorised sub-processors for hosting, security, analytics and technical support purposes. Further information about Wix’s sub-processors and the safeguards in place with them can be found at: List of Wix's Sub-Processors | Help Center | Wix.com.
We currently use analytics tools only to the extent enabled by our website platform and configuration and do not deploy independent third-party marketing or advertising technologies.
We share personal data only where necessary to:
-
Operate Our Site and provide our services;
-
comply with legal obligations;
-
and protect our legitimate interests.
We do not sell personal data. We remain responsible for deciding why and how your personal data is used, for responding to data protection requests, and for ensuring compliance with the UK GDPR and the Data Protection Act 2018.
Social media plug-ins
We may use social media plug-ins (LinkedIn, Twitter, Facebook, Instagram) to improve our website’s user experience, make our content more visible and thereby promote our business. We do not control the processing of personal data in the context of social media plug-ins, and we do not have any access to the data collected and transferred by the social media plug-in to the social network provider.
11.
International Data Transfers
As part of our use of Wix, personal data may be transferred outside the United Kingdom, including to jurisdictions such as Israel, the European Union and the United States. Where international transfers occur, appropriate safeguards are in place, such as standard contractual clauses or intra-group data transfer agreements, to ensure compliance with UK data protection law.
12.
Data Security
We take appropriate technical and organisational measures to protect personal data, including:
-
Limiting access to those with a legitimate need to know;
-
confidentiality obligations;
-
secure hosting environments (our website host ensures industry-standard security measures – HTTPS, encryption, PCI DSS compliance); and
-
procedures for detecting, managing and reporting data breaches.
While no system can guarantee absolute security, we take reasonable steps to protect personal data from unauthorised access, loss or misuse.
13.
Data Retention
We retain personal data only for as long as necessary for the purposes for which it was collected, including:
-
Enquiry and correspondence data: up to 12 months after last contact.
-
Recruitment data:
i)
ii)
Unsuccessful applicants: up to 6 months after the recruitment process ends.
Successful applicants: relevant data will form part of your personnel record.
Retention periods may vary where legal or regulatory obligations apply.
14.
How to Exercise Your Rights or Make a Complaint
To exercise your data protection rights, please contact us using the below details:
Email: privacy@sequora.co.uk, for the attention of the Data Protection Lead.
To submit a complaint about how we handle your data, complete the form below.
​
​If you remain dissatisfied, you may lodge a complaint with the Information Commissioner’s Office.
15.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect legal, regulatory or operational changes. Any updates will be published on Our Site. We recommend reviewing this page periodically.
Last updated: 19/01/2026
