Privacy Policy and GDPR Statement
In a nutshell
We’ve updated our privacy policy to reflect the UK’s data protection rules, known as the General Data Protection Regulation (GDPR). GDPR gives you more control over how organisations use your personal data – but the rules themselves can be complex.
Here’s a simple summary of what we do, and don’t do, with your data. This summary is provided in the spirit of communicating in plain English. It does not replace or supersede the content of our formal policy below.
- If you’re a client, we collect and store business-related information to deliver our services. Sometimes, we share this data with trusted partners who are helping deliver part of the work. This is based on what GDPR calls our legitimate interests.
- If you’re someone we’d like to work with, we may keep your business contact details so we can stay in touch with you about our services. We’ll only contact you for marketing purposes if you’ve given us permission. You can opt out at any time. This is handled under the legal basis of consent.
- If you’re an Associate, we store and use your profile data so we can match you with suitable opportunities. Because this is central to how our business works, we treat this as a legitimate interest under GDPR.
- If you’re known to Preos, another business in the Change Associates Group, your contact details may be visible to us in our shared client system. This access is for internal use only – we won’t contact you unless we already have a relationship with you, and we won’t market to clients of Preos.
- We use secure systems and best practice to protect your data and will never sell your personal information. You have rights over your data, including the right to see what we hold and, in some cases, to ask for it to be deleted. You’ll find more about this in section 8 of the full policy.
- Unless we agree otherwise, or the law or audit requirements say we must keep it longer, we’ll keep your data for up to two years after we last heard from you.
- We use cookies on our website to understand how people use it and to remember your cookie preferences. While it’s technically possible to link website data to individuals, we don’t do this.
If you have any comments, questions or concerns about this policy or how we store, process and use data please contact us at info@changeassociates.com.
For further details, see our Privacy and Cookies Policy.

