Privacy Policy

1. Data Controller Identification

This Privacy Notice explains how YSF PROTECTION LIMITED (“we”, “us”, or “our”), a private limited company incorporated and registered in England and Wales with registered office at 38 District Road, Wembley, London, HA0 2LG, collects, holds, and processes personal information in compliance with the United Kingdom General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Categories of Information We Collect

We may collect and process the following categories of personal data in relation to our commercial security operations:

• Enquiry & Quotation Information: Name, professional title, business email address, telephone contact details, company name, and site location details.
• Client Premises & Site Access Records: Visitor sign-in registers, contractor credentials, electronic access logs, and incident report logs created in the course of manned guarding duties.
• CCTV & Surveillance Footage: Closed-circuit video recordings captured at client properties where YSF Protection is contracted to manage or monitor surveillance systems under British Standard BS 7958 and the Information Commissioner's Office (ICO) CCTV Code of Practice.
• Technical Data: IP addresses, browser types, and usage metrics collected via essential functional cookies when accessing our corporate website.

3. Lawful Bases for Processing

Under UK GDPR Article 6, we rely on the following lawful bases:

• Contractual Performance: Processing required to prepare formal security quotations and execute protective service contracts.
• Legitimate Interests: Securing property, preventing crime, protecting human life, investigating security breaches, and maintaining business operational records.
• Legal Obligation: Compliance with statutory duties under the Private Security Industry Act 2001, health and safety regulations, and tax authorities.

4. CCTV & Video Surveillance Handling

Where YSF Protection operates CCTV or body-worn video (BWV) on behalf of clients, video footage is stored securely with restricted access controls. Footage is retained for a standard duration of 30 calendar days before automatic overwriting, unless required for ongoing criminal investigation or legal proceedings, in which case it is transferred via encrypted media to law enforcement authorities.

5. Data Sharing & Disclosures

We do not sell, rent, or commercially exploit personal data. We disclose information only to:

• Designated client representatives as defined in our Assignment Instructions;
• Emergency services (UK Police, Fire & Rescue, Ambulance) in the event of an incident;
• Regulatory bodies including the Security Industry Authority (SIA);
• Authorised IT and security infrastructure contractors operating under strict data processing agreements.

6. Your Statutory Rights Under UK GDPR

Under UK data protection legislation, you possess legal rights regarding your personal data:

• The right to be informed about how your data is used;
• The right to request access to the personal data we hold about you (Subject Access Request);
• The right to request correction of inaccurate or incomplete records;
• The right to request erasure of data where processing is no longer legally justified;
• The right to object to processing based on legitimate interests.

7. Contacting Our Data Protection Officer

To exercise any statutory rights or submit a data protection enquiry, please write to:

You also have the right to lodge a complaint directly with the UK supervisory authority, the Information Commissioner's Office (ICO) at ico.org.uk.