Privacy Policy | White Cube Consulting

Last updated: July 2026 | This policy applies to whitecubeconsulting.com and all services provided by White Cube Consulting Ltd.

White Cube Consulting Ltd ("we", "us" or "our") is committed to protecting your personal data and

respecting your privacy. This privacy policy explains how we collect, use, store and protect information about you when you visit our website, contact us or use our services.

We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We are the data controller for the personal data we collect through this website and our business activities.

1. Who We Are

White Cube Consulting Ltd is a Human Resources, Training and Development and Recruitment consultancy registered in Scotland.

Registered Address: 1st Floor, 5 Abercrombie Court, Prospect Road, Arnhall Business Park, Westhill, AB32 6FE

Trading address: 431 Union Street, The Capitol, Aberdeen, AB11 6DA

Telephone: 01224 531524

Email: hello@whitecubeconsulting.com

If you have any questions about this privacy policy or how we handle your personal data, please contact us using the details above.

2. What Personal Data We Collect

We may collect and process the following categories of personal data:

Identity data: name, job title
Contact data: email address, telephone number, postal address
Professional data: organisation name, sector, role, details of your HR or people management challenges
Communication data: the content of messages and enquiries you send us
Technical data: IP address, browser type and version, time zone, browser plug-in types, operating system (collected automatically when you visit our website)
Usage data: information about how you use our website, including pages visited and links clicked
Marketing and communications preferences: your preferences for receiving communications from us
For recruitment candidates: CV, employment history, qualifications, references and other information relevant to a recruitment or assessment process

3. How We Collect Your Personal Data

We collect personal data through the following means:

Direct interactions: when you complete an enquiry or contact form on our website, send us an email, call us or engage with us at an event
Automated technologies: when you browse our website, we may automatically collect technical and usage data using cookies and similar technologies (see our Cookie Policy)
Third parties: where you have been referred to us by a client or professional contact, or where we have been engaged to support a recruitment or HR process on behalf of an employer
Publicly available sources: LinkedIn and other professional networks. For example where we may identify potential candidates in the context of executive search or recruitment assignments

4. How We Use Your Personal Data

We use your personal data only for the purposes described in this policy and only where we have a lawful basis for doing so. The lawful bases we rely on are:

Legitimate interests: where processing is necessary for our legitimate business interests, such as responding to enquiries, managing client relationships and improving our services
Contract: where processing is necessary to perform a contract we have entered into with you or your organisation, or to take steps at your request before entering into such a contract
Legal obligation: where we are required to process data to comply with a legal obligation
Consent: where you have given us clear and specific consent to process your data for a particular purpose, such as receiving marketing communications

Specifically, we use personal data to:

Respond to your enquiries and provide the services you have requested
Manage our client relationships and deliver consulting, recruitment and development services
Send you information about our services, insights and updates, where you have consented or where we have a legitimate interest in doing so
Improve our website and services
Comply with our legal and regulatory obligations
Process recruitment and assessment activities on behalf of our clients

5. Marketing Communications

We may send you information about our services, new resources, articles and events where you have opted in to receive such communications, or where you are an existing client or contact and we believe the information is relevant to you.

You have the right to opt out of marketing communications at any time by clicking the unsubscribe link in any email we send you, or by contacting us directly at hello@whitecubeconsulting.com.

We will never sell your personal data to third parties or use it for purposes unrelated to our services.

6. Sharing Your Personal Data

We do not sell, rent or trade your personal data. We may share your data with trusted third parties in the following circumstances:

Service providers who support the operation of our business, such as IT systems, website hosting, email platforms and analytics tools. These parties process data only on our instructions and are subject to confidentiality and data protection obligations.

Clients and employers, where we are conducting recruitment or assessment services on their behalf and disclosure is necessary to complete the assignment. We will inform you of any such sharing in the context of the relevant service.

Professional advisers such as lawyers, accountants and insurers, where necessary.

Law enforcement or regulatory authorities, where required by law.

All third parties with whom we share data are required to handle it in accordance with applicable data protection law.

7. International Transfers

We do not routinely transfer personal data outside the United Kingdom. Where any transfer outside the UK is necessary, we will ensure that appropriate safeguards are in place in accordance with UK GDPR requirements.

8. Data Retention

We retain personal data only for as long as is necessary for the purposes for which it was collected, and in accordance with our legal obligations.

Enquiry and contact data: typically retained for up to two years following the last communication, unless we enter into a client relationship in which case data is retained for the duration of the relationship and for a period of up to six years thereafter.

Recruitment candidate data: retained for up to twelve months following the conclusion of a recruitment process, unless the candidate is placed, in which case data is retained in line with our client obligations.

Website analytics data: retained in accordance with the settings of the analytics platform used, typically up to twenty-six months.

We regularly review the data we hold and securely delete or anonymise data that is no longer required.

9. Your Rights

Under UK GDPR, you have the following rights in relation to your personal data:

The right to access: you can request a copy of the personal data we hold about you
The right to rectification: you can ask us to correct inaccurate or incomplete data
The right to erasure: you can ask us to delete your data in certain circumstances
The right to restrict processing: you can ask us to limit how we use your data in certain circumstances
The right to data portability: you can ask us to provide your data in a structured, machine-readable format in certain circumstances
The right to object: you can object to our processing of your data where we rely on legitimate interests as our lawful basis
Rights related to automated decision-making: we do not carry out automated decision-making or profiling that produces legal or similarly significant effects

To exercise any of these rights, please contact us at info@whitecubeconsulting.com. We will respond to all requests within one month. There is no charge for exercising your rights in most circumstances.

10. Cookies

Our website uses cookies and similar technologies to improve your browsing experience and to help us understand how the site is used. For full details of the cookies we use and how to manage them, please see our Cookie Policy.

11. Security

We take the security of your personal data seriously and have put in place appropriate technical and organisational measures to protect it against accidental loss, unauthorised access, disclosure, alteration or destruction.

While we take every reasonable precaution to protect your data, no method of transmission over the internet or electronic storage is completely secure. If you have concerns about the security of your data, please contact us immediately.

12. Third-Party Links

Our website may contain links to third-party websites. This privacy policy applies only to our website and services. We are not responsible for the privacy practices of other sites and encourage you to read their privacy policies before providing any personal data.

13. Changes to This Policy

We may update this privacy policy from time to time. Any changes will be published on this page with the date of the most recent update. We encourage you to review this policy periodically.

Where changes are material, we will take reasonable steps to inform you, for example by adding a notice to our website or contacting you directly where appropriate.

14. How to Complain

If you are unhappy with how we have handled your personal data, please contact us in the first instance at hello@whitecubeconsulting.com and we will do our best to resolve your concern.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's supervisory authority for data protection:

Information Commissioner's Office | ico.org.uk | Helpline: 0303 123 1113