Privacy policy
This policy explains how Reading Security Ltd uses personal information collected through this website and in the course of our security services, and the rights you have under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Who we are
Reading Security Ltd ("we", "us") is the data controller for personal information collected through this website. We are a private limited company registered in England and Wales, company number 16995782, with our registered office at Suit 53c Flat 53c, Unimix House, London, England, NW10 7TR.
For any question about this policy or your personal information, email readingsecurity@gmail.com or call 07492 624303.
Information we collect through this website
When you send a quote request, we collect the details you enter: your name, company name (if given), email address, telephone number, the service you are interested in, the site postcode or location, your preferred start date, your coverage requirements and anything you write in the additional details box.
Please do not include sensitive information, such as health details or information about criminal matters, unless it is necessary for your enquiry.
When you visit the website, our hosting provider automatically records technical information such as your IP address, browser type and the pages requested. This is used to deliver the website and keep it secure.
How we use your information
- To respond to your enquiry and discuss your security requirements.
- To arrange a site visit and prepare a quote or proposal at your request.
- To set up and manage a contract if you become a customer.
- To keep records of enquiries and the advice given.
- To protect the website and its forms from misuse and spam.
- To meet our legal and regulatory obligations.
We do not sell your information, and we do not send you marketing unless you have agreed to receive it. We do not make decisions about you using automated processing.
Our lawful basis
- Steps before a contract (UK GDPR Article 6(1)(b)): responding to your quote request and preparing a proposal you have asked for.
- Contract (Article 6(1)(b)): providing services once you are a customer.
- Legitimate interests (Article 6(1)(f)): keeping enquiry records, running our business and keeping the website secure. We have balanced these interests against your rights.
- Legal obligation (Article 6(1)(c)): keeping financial records and meeting regulatory requirements.
Personal data in our security services
Security work can involve personal information about people at the sites we protect, such as visitor and access logs, incident reports, and CCTV images.
- Where we carry out these activities for a customer, the customer normally decides why and how the information is used. The customer is then the data controller, and we act as their processor under a written contract, as Article 28 of UK GDPR requires.
- Incident reports are shared only with the customer and, where necessary, with the police or other authorities when the law requires or permits it, for example to prevent or detect crime.
- Security officers who carry out licensable activities hold the appropriate licence from the Security Industry Authority (SIA). They are expected to handle personal information confidentially and only for the purposes of the assignment.
CCTV
Where we monitor CCTV, it is used only for the purposes agreed with the customer, such as protecting people and property and preventing and detecting crime. Contracted monitoring of public spaces is carried out by staff holding an SIA Public Space Surveillance (CCTV) licence.
We expect CCTV systems we work with to have clear signage, to be positioned to avoid capturing more than necessary, and to keep recordings secure. Footage is kept for no longer than needed for its purpose, normally no more than 31 days, unless it is required for an investigation, an insurance claim or legal proceedings. The Information Commissioner's Office publishes guidance on video surveillance.
If you want to request footage of yourself, contact the operator of the CCTV system, usually the site owner. If we receive your request, we will pass it to the customer promptly or respond ourselves where we are the controller.
Who we share information with
We share information only where necessary, with:
- Website hosting: Vercel Inc., which hosts this website and processes technical log data.
- Email delivery: Resend, which delivers quote requests from the website form to our inbox.
- Business email: Google, which provides our email service.
- Professional advisers such as accountants, insurers and legal advisers, where needed.
- The police, the SIA or other authorities, where the law requires or permits it.
Our service providers act on our instructions and must keep your information secure.
International transfers
Some of our service providers are based in, or process data in, the United States. Where personal information is transferred outside the UK, it is protected by UK adequacy regulations, such as the UK-US data bridge for certified organisations, or by the ICO's International Data Transfer Agreement or Addendum.
How long we keep information
- Enquiries that do not lead to a contract: 12 months from our last contact.
- Customer records and contracts: for the length of the contract and six years afterwards, to meet tax, accounting and legal requirements.
- Incident reports: as agreed with the customer, and for no longer than needed for their purpose or any related claim.
- Website server logs: held by our hosting provider for a short period in line with its own retention policy.
Your rights
Under UK data protection law you have the right to:
- ask for a copy of your personal information;
- ask us to correct information that is wrong or incomplete;
- ask us to delete your information;
- ask us to restrict how we use it;
- object to our use of it where we rely on legitimate interests;
- ask us to transfer information you gave us to another organisation.
Some rights apply only in certain circumstances. To make a request, email readingsecurity@gmail.com. There is normally no charge, and we will respond within one month.
Complaints
If you are unhappy with how we have handled your information, please contact us first so we can try to put it right. You also have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection regulator, at ico.org.uk/make-a-complaint or on 0303 123 1113.
Security
This website uses an encrypted (HTTPS) connection, and form submissions are protected in transit. We restrict access to personal information to people who need it and take reasonable steps to protect it from loss, misuse and unauthorised access.
Children
This website and our services are intended for businesses and adults. We do not knowingly collect information from children through the website.
Changes to this policy
We may update this policy from time to time. The date at the top shows when it was last changed.