Privacy Policy

1. Introduction

This Privacy Policy explains how Contact Front Security Ltd collects, uses and protects your personal information when you use our website or engage with our services.

Contact Front Security Ltd trades as Contact Front and Contact Front Security.

Company Registration Number: 12153707
VAT Registration Number: GB 469 184 255

Registered Office:
14-40 Victoria Road
Aldershot
Hampshire
GU11 1TQ

This policy applies to personal information collected through our website, during training bookings, and when providing private security services.

If you have any questions regarding this policy, please contact us using the details provided at the end of this document.

2. Information We Collect

We may collect and process the following types of personal information.

Information you provide directly

When you interact with our website or services, we may collect information including:

  • full name
  • email address
  • telephone number
  • billing address
  • payment details (processed securely by our payment provider)
  • training course booking information

This information may be provided when you:

  • book a training course
  • complete a contact form
  • contact us by email
  • make a payment for services

Training and certification information

For certain qualifications, including SIA-related training and accredited First Aid qualifications, we may be required to collect additional learner information such as:

  • date of birth
  • identification details
  • course attendance records
  • assessment results

This information may be required by awarding organisations in order to issue training certificates.

Information collected at events, exhibitions and meetings

When we attend trade shows, exhibitions and industry events, we may collect contact information from individuals who visit our stand or speak with our representatives, including:

  • name and job title
  • company or organisation
  • business email address
  • telephone number
  • details of services or training of interest
  • notes from the conversation

This information is collected only with your consent at the point of capture and is used to follow up on your enquiry and, where you have agreed, to send you occasional updates about our services.

3. How We Use Your Information

We use your information in order to:

  • process training course bookings
  • confirm course attendance
  • communicate important course information
  • process payments
  • maintain training records
  • register learners with awarding organisations
  • issue training certificates
  • respond to enquiries submitted through our website
  • deliver contracted security services

Our lawful basis for processing

We rely on the following lawful bases under UK GDPR (Article 6):

Legal obligation — where required to retain records by awarding organisations, regulators or law.

Contract — where processing is necessary to deliver training, security services, or fulfil bookings you have made.

Legitimate interests — for responding to enquiries you have submitted and maintaining business records.

Consent — for marketing communications and for personal data you provide at events, exhibitions or meetings. You may withdraw consent at any time.

4. Security Services

In addition to training services, Contact Front Security Ltd provides private security services for events, venues and organisations.

When delivering security services we may process limited personal information necessary to provide those services. This may include:

  • client contact details
  • venue or event information
  • operational records
  • incident reports where required for safety or legal purposes

This information is processed only where necessary for the delivery of security services, compliance with legal obligations or the protection of individuals and property.

Where personal data is collected as part of security operations, it will be handled in accordance with applicable data protection legislation and retained only for as long as required for operational, legal or regulatory purposes.

5. Payment Processing

Payments made through our website are processed securely through Stripe.

When you make a payment, your payment details are handled directly by Stripe and are not stored on our servers.

Stripe may collect information necessary to process your payment, including billing information and payment card details.

Stripe’s privacy policy can be viewed at: https://stripe.com/privacy

Where payment is made by bank transfer, payment details are processed through our banking provider.

6. Contact Forms

Our website uses Contact Form 7 to allow visitors to submit enquiries.

When you complete a contact form, the information you provide (such as your name, email address and message) is sent to us by email so that we can respond to your enquiry.

This information is not used for marketing purposes unless you have specifically requested further information about our services.

7. Cookies

Our website uses cookies to improve functionality and understand how visitors use the site.

Cookies may be used for purposes including:

  • essential website functionality
  • remembering user preferences
  • anonymous visitor statistics

We use CookieYes to manage cookie consent and allow visitors to control which cookies are used.

You may change your cookie preferences at any time through the cookie consent banner.

8. Analytics

We use Burst Statistics to collect anonymous information about how visitors interact with our website.

This helps us understand website usage and improve our services.

Burst Statistics collects aggregated data and does not normally identify individual users.

9. How We Store Your Information

We take appropriate technical and organisational measures to protect your personal information.

Information submitted through our website may be stored securely within our website systems, email systems and internal training records.

We retain personal information only for as long as necessary to:

  • provide our services
  • maintain training certification records
  • comply with legal and regulatory requirements

Retention periods

We retain personal information only for as long as necessary to provide our services, maintain training records, and comply with legal and regulatory requirements. We typically apply the following retention periods:

  • Training certification records: as mandated by the relevant awarding organisation and regulator. This includes, for example, Highfield, Worksafe, and requirements set by the Security Industry Authority (SIA) for licensed-sector training. Retention periods vary by qualification and are typically between 3 and 7 years.
  • Booking and financial records: 6 years (HMRC requirement).
  • Marketing leads and event contacts: until consent is withdrawn, or 24 months of no contact, whichever is sooner.
  • Enquiry records where no service is taken: 12 months.
  • Operational security records: for the duration of the contract, plus 12 months unless required to retain longer.

Records are securely destroyed when retention periods expire.

10. Sharing Your Information

We may share personal data where necessary with:

  • payment providers such as Stripe
  • awarding organisations responsible for issuing training certificates
  • regulatory authorities where required by law

We do not sell, rent or trade personal information to third parties.

International transfers

Some of our service providers may process personal data outside the United Kingdom. This includes:

  • Stripe (payment processing)
  • HubSpot (customer relationship management and lead capture)
  • MailerLite (email marketing)

Where this is the case, we ensure appropriate safeguards are in place — typically the UK International Data Transfer Agreement or Standard Contractual Clauses recognised by the Information Commissioner — to protect your information to UK GDPR standards.

11. Your Data Protection Rights

UUnder UK data protection law, you have the right to:

  • request access to the personal data we hold about you (a “subject access request”)
  • request correction of inaccurate or incomplete personal data
  • request deletion of your personal data in certain circumstances
  • restrict or object to certain forms of processing
  • request a copy of your personal data in a portable format, where applicable
  • withdraw consent at any time, where our processing relies on consent (withdrawal does not affect the lawfulness of processing carried out before withdrawal)
  • not be subject to decisions based solely on automated processing — we do not use automated decision-making or profiling
  • lodge a complaint with the Information Commissioner’s Office at https://ico.org.uk if you believe we have not handled your data correctly

To exercise any of these rights, please contact privacy@contactfrontsecurity.co.uk.

12. Data Security

We take appropriate technical and organisational measures to protect personal information from loss, misuse or unauthorised access.

However, while we take reasonable precautions to safeguard personal data, no method of internet transmission is completely secure.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our services or legal obligations.

The most current version will always be available on this page.

14. Contact

For questions about this Privacy Policy, to exercise any of your data protection rights, or to withdraw consent:

Data protection contact: privacy@contactfrontsecurity.co.uk

General enquiries: Contact Front Security Ltd Trading as Contact Front / Contact Front Security

Aldershot Enterprise Centre, 14-40 Victoria Road, Aldershot, GU11 1TQ

Tel: 01420 551358 Email: info@contactfrontsecurity.co.uk Website: https://contactfront.co.uk

ICO registration number: ZC176850