Privacy Policy

1. About Us

SALFS Security & Training ("SALFS", "we", "our", or "us") is a professional provider of security personnel and accredited training services in the United Kingdom. We are committed to safeguarding the privacy and data protection rights of our clients, trainees, employees, and website visitors in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and other applicable laws.

Our Data Protection Officer can be contacted at: info@salfs.com

2. Scope of This Policy

This policy applies to all personal data we collect, whether:

Through our website: [https://www.salfs.com/]
Via email, phone, online chat, or forms
In-person during training enrolment, employment processing, or client onboarding
Through CCTV or body-worn video where applicable (e.g., on duty or on training premises)

3. What Personal Data We Collect

Depending on how you engage with SALFS, we may collect:

A. Contact and Identification Information

Full name
Date of birth
Address
Email and phone number
National Insurance number
Passport, driving licence, or other ID documents

B. Employment and Licensing Information

CVs and employment history
SIA licence numbers and expiry dates
DBS check records
Emergency contact details

C. Training Data

Enrolment forms
Course attendance records
Assessment scores and certification status
Learning support needs

D. Website and Technical Data

IP address and device type
Cookies and browsing data
Login timestamps (if applicable)

E. CCTV and On-Site Surveillance

Footage recorded for health, safety, or training verification purposes

4. Lawful Basis for Processing

We only process your data when we have a valid legal basis. These include:

Purpose - Lawful Basis

Course registration & certification - Contract

Employment applications - Legitimate interest / Contract

SIA licence validation - Legal obligation

Marketing emails (where opted in) -Consent

CCTV and site security - Legitimate interest

Health & safety incident reporting - Legal obligation

5. How We Use Your Data

We use personal data for:

Delivering accredited training (e.g., Door Supervision, First Aid)
Processing course results, issuing certificates, and verifying qualifications
Vetting candidates for employment in accordance with BS7858
Assigning staff to client sites and managing deployment
Ensuring health, safety, and compliance at training locations
Communicating with you about services, job openings, or course availability
Improving website functionality and understanding visitor behaviour

6. Data Sharing and Disclosure

We may share your data with:

Awarding bodies: e.g., Highfield Qualifications (for certifications)
Government and regulatory agencies: SIA, ICO, DBS, or law enforcement
Clients or employers: where you're being assigned or placed, with your consent
Service providers: IT support, cloud hosting, marketing, and CRM platforms under contract
Legal and professional advisors: auditors, legal counsel

We ensure all third parties follow strict confidentiality and security standards.

7. International Transfers

We primarily process your data within the UK. If any data is transferred outside the UK (e.g., cloud platforms), we ensure appropriate safeguards are in place, such as:

Adequacy decisions by the UK government
Standard contractual clauses approved by the ICO
Additional security and encryption where necessary

8. Data Retention

We retain your personal data only as long as necessary, depending on the purpose:

Data Type - Retention Period

Training records (certification) - 7 years

Employment records - 6 years after termination

CCTV footage - 30–90 days (unless required for investigation)

Enquiries via contact forms - 12 months

Marketing consent - Until opt-out or consent withdrawal

9. Your Data Protection Rights

Under UK data protection law, you have the following rights:

Right of access – to request a copy of your personal data
Right to rectification – to correct inaccurate or incomplete data
Right to erasure – to request deletion where lawful
Right to restriction – to limit processing in certain circumstances
Right to object – to data use in certain situations (e.g., marketing)
Right to data portability – to obtain your data in a commonly used format

To exercise these rights, please email: dpo@salfssecurity.co.uk
We will respond within one month, unless legally permitted to extend.

10. Cookies and Tracking

Our website uses cookies to:

Improve your browsing experience
Track usage for analytics purposes
Manage session data for secure login

You can control cookies through your browser settings. For full details, see our separate [Cookie Policy].

11. Data Security Measures

We implement appropriate technical and organisational measures to keep your data secure, including:

SSL encryption on all web forms
Access control and role-based permissions
Staff training in data protection and cybersecurity
Secure servers and firewalls

In case of a data breach, we will notify you and the ICO where required by law.

12. Children’s Data

Our services are intended for individuals aged 16 and above. We do not knowingly collect data from individuals under this age unless required by specific training programmes, in which case we will seek appropriate parental or guardian consent.

13. Changes to This Policy

We may update this privacy policy from time to time. The most current version will always be available on our website with a clear effective date. We will notify you of significant changes where appropriate.

14. Contact Us

If you have any questions, concerns, or complaints about this policy or how we handle your data, please contact:

SALFS Security & Training
Email: info@salfs.com
Data Protection Officer: info@salfs.com
Website: [https://www.salfs.com]

If you're not satisfied with our response, you may contact the Information Commissioner’s Office (ICO): [https://ico.org.uk]