Privacy Policy
Your privacy is important to us. This policy explains how Maxi Global Security collects, uses, and protects your personal information.
1. Introduction
Maxi Global Security Limited ("we", "our", or "us") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website maxiglobalsecurity.co.uk or use our services.
We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We are registered with the Information Commissioner's Office (ICO) under registration number [Registration Number].
2. Information We Collect
2.1 Personal Information
We may collect the following personal information:
- Name and job title
- Contact information including email address and telephone number
- Company name and address
- Information relevant to security assessments
- CCTV footage when visiting our premises
- Information provided in correspondence with us
2.2 Technical Information
We automatically collect certain technical information:
- IP address and browser type
- Operating system and device information
- Pages visited and time spent on our website
- Referring website addresses
- Cookie data (see our Cookie Policy)
2.3 Special Category Data
For certain security services, we may need to process special category data such as criminal records data. This will only be done with your explicit consent and in compliance with applicable laws.
3. How We Use Your Information
3.1 Lawful Basis for Processing
We process your personal data under the following lawful bases:
- Contract: To perform our security services
- Legitimate Interests: To operate our business effectively
- Legal Obligation: To comply with laws and regulations
- Consent: Where you have given explicit consent
- Vital Interests: To protect someone's life
3.2 Purposes of Processing
We use your information to:
- Provide security assessment and consultancy services
- Respond to enquiries and communicate with you
- Process payments and maintain records
- Comply with legal and regulatory requirements
- Improve our services and website
- Send relevant marketing communications (with consent)
- Protect against fraud and maintain security
4. Data Sharing and Disclosure
We may share your personal information with:
- Service Providers: Third parties who assist in operating our business
- Professional Advisers: Lawyers, accountants, and insurers
- Law Enforcement: When required by law or court order
- Business Partners: With your consent for specific services
- Successor Entities: In case of merger or acquisition
We do not sell, rent, or trade your personal information to third parties for marketing purposes.
5. Data Security
We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. These measures include:
- Encryption of data in transit and at rest
- Regular security assessments and audits
- Access controls and authentication procedures
- Staff training on data protection
- Incident response and breach notification procedures
- ISO 27001:2022 certified information security management
6. Data Retention
We retain personal information for as long as necessary to fulfil the purposes for which it was collected, including:
- Client records: 7 years after last service provision
- Financial records: 6 years as required by HMRC
- Security assessment data: 5 years or as agreed with client
- Marketing contacts: Until consent withdrawn
- CCTV footage: 30 days unless required for investigation
7. Your Rights
Under UK GDPR, you have the following rights:
- Access: Request copies of your personal data
- Rectification: Request correction of inaccurate data
- Erasure: Request deletion of your data
- Restriction: Request limited processing of your data
- Portability: Receive your data in a portable format
- Object: Object to processing of your data
- Automated Decisions: Not be subject to automated decision-making
To exercise any of these rights, please contact our Data Protection Officer at dpo@maxiglobalsecurity.co.uk.
8. International Transfers
We primarily process data within the UK. If we need to transfer data outside the UK, we ensure appropriate safeguards are in place, such as:
- Adequacy decisions by the UK government
- Standard contractual clauses approved by the ICO
- Your explicit consent for specific transfers
9. Children's Privacy
Our services are not directed at individuals under 18 years of age. We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal information, please contact us immediately.
10. Updates to This Policy
We may update this Privacy Policy from time to time. The updated version will be indicated by an updated "Last Updated" date and the updated version will be effective as soon as it is accessible. We encourage you to review this Privacy Policy frequently to be informed of how we are protecting your information.
11. Contact Information
If you have any questions about this Privacy Policy or our data practices, please contact us:
Data Controller: Maxi Global Security Limited
Address: Court House, Bridgend, CF31 1BE
Email: info@maxiglobalsecurity.co.uk
Phone: +44 07427 274736
Data Protection Officer: info@maxiglobalsecurity.co.uk