Data Protection Officer
Data Protection Officer (DPO)
- Location: Leyland HQ | Hybrid | Min 2 Days in the office
- Role Type: Full-time, Permanent
Ready to shape data privacy at the UK’s #1 online bathroom retailer?
At Victorian Plumbing, we’re proud to be the UK’s leading online bathroom retailer. From continuous innovation across our digital platforms to expanding our footprint across the Group, we’re moving fast - and data is at the heart of everything we do.
We’re looking for an experienced, pragmatic Data Protection Officer (DPO) to step into a highly visible, hands-on role. If you’re someone who thrives on building genuine relationships, cutting through complex jargon, and turning data protection into a clear, business-enabling asset, this is the role for you.
Why join Victorian Plumbing?
Real Impact & High Visibility: You’ll sit right at the centre of the action, advising key stakeholders on real-world customer, colleague, and business initiatives.
A Culture of Autonomy: We trust our experts. You’ll have the freedom and backing to drive our data privacy strategy forward, further enhancing our compliance framework.
A Fast-Paced, Growing Group: Working across e-commerce, digital marketing, and group operations, no two days will look the same. You’ll gain broad exposure across a thriving market leader.
What you’ll be doing
As our DPO, you’ll be the driving force on all data protection matters, ensuring we meet all our legal obligations while keeping commercial momentum strong.
- Partnering with the Business: Build trusted relationships across teams to provide clear, practical guidance on data protection risks and requirements.
- Enabling Projects & Change: Advise on new systems, marketing campaigns, and digital products early in the process - guiding DPIAs to keep privacy embedded by design.
- Managing Privacy Operations: Oversee individual rights requests (including DSARs), refine our incident response protocols, and manage supplier due diligence and data-sharing agreements.
- Evolving the Framework: Keep our privacy notices, policies, and retention schedules practical, up-to-date, and aligned with changing legislation.
- Championing Compliance: Deliver engaging guidance and training to colleagues in plain English, while acting as the main point of contact for the ICO.
What we’re looking for
We're after a DPO who blends strong legal/regulatory knowledge with a sensible, risk-based approach.
- Solid Privacy Expertise: Proven experience in a dedicated data protection role with strong knowledge of UK GDPR, the Data Protection Act 2018, the Data (Use and Access) Act 2025 and PECR.
- A Pragmatic Problem-Solver: You know the difference between strict legal requirements and best-practice recommendations - you can assess real risk and propose workable, business-friendly steps.
- Great Communication Skills: You can translate complex data law into plain English that teams can understand and act on straight away.
- Stakeholder Management: Strong stakeholder management skills and the ability to build trust, handle challenges constructively and influence people across different teams.
- Retail or E-Commerce Background (Desirable): Experience in-house within retail, digital marketing, or consumer-focused sectors is a bonus.
- Qualifications (Desirable): CIPP/E, CIPM, or an equivalent privacy certification.
How to Apply
Ready to drive data privacy forward with an industry leader? Click Apply below to submit your CV and start the conversation.
While this is a full-time role, we are receptive to part-time proposals** for the right candidate. Equally, we are open to discussing a hybrid working arrangement. This will be discussed with you at application; however, 2 days at our HQ (Leyland) would be ideal.
Equality, Diversity & Inclusion:Victorian Plumbing is an equal opportunity employer. We recruit solely on merit and do not discriminate based on age, disability, gender reassignment, marriage or civil partnership, pregnancy or maternity, race, religion or belief, sex, or sexual orientation. We are committed to building a diverse workforce and providing a supportive environment for all. By applying, you consent to your data being processed in accordance with UK GDPR.
**Agency Notice:Victorian Plumbing operates an in-house Talent Acquisition model; we do not accept unsolicited CVs Any profiles submitted without a prior written agreement will be treated as a "gift" to the Group, and no fees will be owed. In line with UK GDPR, unsolicited personal data will be deleted. No agency calls, please.