Privacy Policy

Last updated: 15 June 2025

This Privacy Policy explains how SPR Protect ("we", "us", "our") collects, uses, and protects personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and relevant data protection legislation. By accessing our website or engaging our services, you accept the terms outlined in this policy.

We are committed to managing your data responsibly, securely, and transparently, in line with our professional obligations and the trust you place in us.

1. About SPR Protect

SPR Protect is a partnership operating in the United Kingdom, providing security, alarm, CCTV, fire protection, and property maintenance services. We understand that the nature of our work often involves sensitive information and data — and we treat that responsibility with the utmost care.

2. Information We Collect

We collect personal and technical information necessary to deliver our services effectively and to meet legal, contractual, and operational obligations.

This includes, but is not limited to:

• Contact details: Full name, telephone number, email address, and postal address

• Security system data: Alarm logs, CCTV recordings (where managed by us), and fire system records

• Photographic data: Images of installations or completed works, excluding identifiable personal features unless explicit consent is given

• Access credentials: System passwords, lock codes, or device patterns required for configuration, servicing, or technical support

• Payment data: Transaction records, payment method, invoice references, and any information required to process or confirm payment

• Website usage data: IP address, browser type, device identifiers, pages visited, duration of visit, and referring websites

We do not knowingly collect data from children under the age of 13, and our services are not directed at minors. Please contact us immediately if you become aware of a minor providing us with their data.

3. Legal Basis for Processing Data

We only process personal data where lawful grounds apply under the UK GDPR. These may include:

• Performance of a contract: To carry out work or services you have requested

• Legal obligation: To meet statutory or regulatory requirements

• Legitimate interest: To ensure system functionality, perform maintenance, or protect our business and clients

• Consent: Where explicitly required (e.g. publication of non-anonymised photos)

We always aim to balance our legitimate business needs with your privacy rights.

4. How Your Information Is Used

Your data may be used for the following purposes:

• To provide quotations and respond to service enquiries

• To carry out installations, repairs, servicing, or emergency call-outs

• To securely maintain system credentials or access codes

• To invoice and process payments

• To maintain internal records for legal, tax, or audit purposes

• To communicate regarding service updates or scheduled visits

• To evaluate and improve our services and operational procedures

• To comply with applicable laws and industry standards

We do not engage in direct marketing, and we will never sell, rent, or otherwise distribute personal data to third parties for commercial gain.

5. Storage and Security of Data

All personal information is stored securely, using reasonable and proportionate safeguards based on the sensitivity of the data and the risks involved.

These safeguards include:

• Password-protected and encrypted digital storage

• Limited internal access to authorised personnel only

• Secure destruction of physical documentation when no longer needed

• Regular review of data storage and retention practices

Although we take all reasonable steps to secure your data, we cannot guarantee absolute security due to the inherent risks of internet transmission.

6. System Passwords and Access Credentials

Where system passwords, codes, or patterns are required for configuration or support purposes, these will be stored securely and handled strictly in accordance with operational necessity. Access is restricted to qualified personnel, and clients may request to update or withdraw such credentials at any time, subject to verification and technical feasibility.

7. Media, Photography and Online Use

We may occasionally take photographs of completed work for portfolio or marketing purposes. Such media will never include personal identifiers, faces, or visible location/address information unless explicit permission has been granted. We strive to represent our work tastefully and professionally, respecting the privacy of every client and property.

If you object to the use of any imagery that may relate to your installation, you may contact us at any time to request its removal.

8. Cookies and Website Analytics

We use cookies and analytics tools to understand how visitors interact with our website and to improve the functionality, speed, and content relevance of the site.

Cookies are small data files stored on your device which may collect anonymous usage data such as:

• Device type and browser

• Pages visited and duration

• Referring site or search engine

• IP address (anonymised where possible)

You can disable cookies in your browser settings; however, this may affect some features of the site.

9. Data Sharing and Third Parties

We may share your data with carefully selected third parties solely for the purpose of fulfilling a service or legal requirement. This includes:

• IT and hosting service providers

• Payment processors

• Subcontractors or engineers assisting in service delivery

• Legal, regulatory, or tax authorities (when required by law)

All such parties are required to adhere to strict confidentiality and data protection standards and are not permitted to use your data for any purpose unrelated to our contract or service. While we strictly instruct all such parties to adhere to these standards, we cannot ultimately be held responsible for the actions & decisions of such parties. If you become aware that one of these parties have not operated by these standards, please contact us immediately.

10. Your Rights Under UK GDPR

Under the UK GDPR, you have the right to:

• Request access to the personal data we hold about you

• Request rectification of inaccurate or outdated information

• Request erasure of your data (subject to lawful limitations)

• Object to or restrict certain types of data processing

• Withdraw consent at any time where applicable

• Lodge a complaint with the UK Information Commissioner’s Office (ICO)

We will respond to all rights requests in accordance with the UK GDPR timescales and legal requirements.

To exercise your rights, please contact us using the details provided below.

11. Data Retention

We retain personal data only for as long as necessary to fulfil the purpose it was collected for, or to comply with legal, contractual, or regulatory obligations.

Retention periods vary depending on:

• Type and purpose of the data

• Applicable legal or financial obligations

• Technical requirements or system lifespans

When no longer required, data is securely deleted or anonymised.

12. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices or content of such websites. We encourage users to review the privacy policies of any external site they visit.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our business operations or legal obligations. Updated versions will be posted on our website and take effect immediately upon publication.

You are advised to check this page periodically for any updates.

14. Contact Details

If you have any questions regarding this Privacy Policy or how we handle your personal data, you may contact our office at:

SPR Protect
Email: office.sprprotect@gmail.com
Phone: 07876 613104
Website: www.sprprotect.co.uk

If you are dissatisfied with our response, you may raise a complaint with the Information Commissioner’s Office (ICO):
www.ico.org.uk