Privacy notice

Website privacy notice

Gillespies is committed to protecting and respecting the privacy of all visitors to its website. In line with the requirements of the General Data Protection Regulations (effective 25 May 2018), this privacy policy outlines how Gillespies will control, process and handle any personal data that is collected as a result of you browsing or using this website. By visiting you are accepting and consenting to the practices described in this policy. If you do not agree with the following policy you may wish to cease using this website.

Information we collect from you

We collect the following information:

  • Contact information you give us by applying for a position at the practice.
  • We may automatically collect IP addresses, information about your visit and how you use our website, to help us improve and our services and your user experience.
  • You may provide us with information by corresponding with us by telephone, email, or otherwise as indicated on the website.

How we use your information

When we collect personal information from our clients and other members of the public, we may use it:

  • To maintain responsible commercial relations with you
  • To understand your service and project needs
  • To manage and develop our business and operations
  • To meet legal and regulatory requirements
  • To notify you of changes to our services
  • To process a job application, if appropriate; see our recruitment privacy policy for further information
  • To recommend your product or service to relevant industry contacts
  • To keep our site safe and secure

When you voluntarily give us your personal information we will only use it for the above purposes. If we intend to use your personal information for a purpose other than those above, we will seek your express consent.

Who will it be shared with?

Gillespies will only use this information for our own internal purposes. We will not sell, rent or otherwise distribute any personal information to third parties, other than as specified above.

Your legal rights

You have the right to ask us not to process your personal information. You also have the right to see and correct data that we hold about you. If your details change or any other information we hold is inaccurate or out of date, please contact us directly by email or post using the below details.

By post

Data Controller
Gillespies LLP
The Coach House
Hinksey Hill

By email

Please send your email to

We will try to respond to all legitimate requests within one month. Occasionally it may take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.

Data security and protection

Gillespies is committed to ensuring that your information is safe, and will take reasonable technical and organisational precautions to ensure that your personal information is treated securely. In order to prevent unauthorised access or disclosure, we have put in place suitable physical, electronic and management procedures to safeguard and secure the information we collect online.

Data retention

Gillespies will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

Gillespies will hold information for clients, consultants and suppliers for the duration of the contract for a specific project, as well as 12 years post completion in accordance with professional indemnity requirements. For unsuccessful job applications, we will keep your personal data on file for 6 months in case there are other further employment opportunities for which you may be suited. You may withdraw your consent to this at any time, by emailing

Third-party links

Our website may contain links on some pages that, when clicked, will take you to our industry clients’ and consultants' websites. If you follow a link to any of these websites this privacy statement does not apply, and we do not accept responsibility or liability for their policies.

Use of cookies

Cookies are small text files that are saved to your computer.

We use ‘traffic log cookies’ to identify which pages are being used. This helps us analyse data about webpage traffic and improve our website in order to tailor it to our customers’ needs. We only use this information for statistical analysis purposes.

Overall, cookies help us provide you with a better website, by enabling us to monitor which pages you find useful and which you do not. Gillespies does not use cookies to collect or store personally identifiable information about you. You can choose to accept or decline the use of cookies on your computer when you visit this website. Please click here to read our cookie policy. To find out more about cookies, including how to see what cookies have been set and how to manage and delete them, visit

Data breaches and reporting

If it becomes apparent that a potential data breach has occurred, Gillespies will endeavour to report this to the ICO within 72 hours of becoming aware of the data breach. This will be the case if the data breach is likely to result in damage to a person’s reputation, financial loss, loss of confidentiality, or major financial or social disadvantage. If the breach is likely to result in a high risk to the rights and freedoms of the data subject the company will also contact the data subject without undue delay.

Data breaches will be reported to the Information Commissioner Office (ICO) by calling the dedicated personal data breach helpline on 0303 123 1113.