Privacy Policy

Effective Date: 18th November 2025

1. Introduction

SecDef (“SecDef”, “we”, “us”, or “our”) is committed to ensuring the security and protection of the personal data that we process, and to providing a compliant and consistent approach to data protection in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and the UK GDPR (as applicable).
This Privacy Policy outlines how we collect, use, store, and protect your personal data when you engage with us, whether through our services, website, or any other interaction.

2. Who We Are
Ricky Gamble T/A SecDef
Company Reg: 6562366044
VAT Reg: 494 8161 53
Data Protection Officer (DPO): Ricky Gamble
Phone: 07516 229498
Website: www.secdef.co.uk ; www.secdef.services
Email: [email protected] ; [email protected]
[email protected] ; [email protected]

3. What Data We Collect
Depending on the nature of our relationship with you (e.g., client, employee, visitor, contractor), we may collect the following personal data:
Clients & Service Users:
• Full name, address, and contact details
• Site access details and security protocols
• CCTV footage (if installed/monitored)
• Keyholding data, alarm codes, and access logs
• Incident and response reports
Employees & Contractors:
• Personal identification and contact information
• Background check data
• Emergency contact details
• Work-related qualifications, licenses, and training records
• Clock-in/clock-out data and GPS location (where applicable)

4. How We Use Your Data
We process your personal data for the following lawful purposes:
• To deliver contracted security, alarm response and key holding services
• To respond to alarm activations and perform site patrols
• To communicate with clients and staff
• For employment and HR administration
• For internal audits, insurance, and legal compliance
• To meet regulatory and licensing obligations (e.g., SIA licensing)
All data is processed under the following lawful bases: performance of a contract, legal obligation, legitimate interests, or consent, as applicable.

5. Sharing Your Data
We do not sell your data. We may share your personal data with trusted third parties in the following circumstances:
• Law enforcement or emergency services (in the event of an incident)
• Regulatory bodies (e.g. SIA)
• Alarm receiving centres and monitoring partners
• IT and data hosting service providers
• Insurers and legal advisors
All third-party processors are contractually obligated to adhere to GDPR standards.

6. Data Retention
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. Typical retention periods include:
• Client and incident records: 6 years
• Employee records: 6 years after termination
• CCTV footage (where applicable): 30 days, unless legally required otherwise
• Keyholding records: Duration of contract + 1 year

7. Your Rights
Under the GDPR, you have the following rights regarding your personal data:
• Right to access – Request a copy of the data we hold about you.
• Right to rectification – Request corrections to inaccurate or incomplete data.
• Right to erasure – Request deletion of your data (in certain circumstances).
• Right to restrict processing – Request a restriction on processing.
• Right to data portability – Receive your data in a portable format.
• Right to object – Object to processing based on legitimate interests.
• Right to lodge a complaint – With the Information Commissioner’s Office (ICO) or relevant supervisory authority.
To exercise your rights, please contact our DPO at [email protected]

8. Security Measures
SecDef takes data protection seriously. We implement appropriate technical and organizational measures, including but not limited to:
• Encryption of sensitive data
• Access control and secure key management
• Staff confidentiality agreements and GDPR training
• Secure storage of keys, documentation, codes and digital records
• Routine audits and access logging

9. International Data Transfers
We do not routinely transfer data outside the UK or EEA. If such transfers are required, we will ensure adequate safeguards are in place, such as standard contractual clauses.

10. Updates to This Policy
We may update this policy periodically to reflect changes in our practices or legal obligations. The latest version will always be available on our website or upon request.

11. Contact Us
For any questions, concerns, or requests regarding your personal data or this policy, please contact:
Data Protection Officer: Ricky Gamble
Email: [email protected]
Phone: 07516 229498
Address: 77 Ellerby Drive, Wisbech, Cambridgeshire, PE14 0TA
This document is issued Ricky Gamble T/A SecDef and is subject to change based on future legal or operational developments.