Legal
Privacy Policy
Last updated 3 September 2026
Who we are
Vigilance Ltd (“we”, “us”, “our”) is a company registered in England and Wales under company number 16530359. We provide security services including manned guarding, event security, mobile patrols, vacant property inspections, key holding and close protection.
For the purposes of UK data protection law, Vigilance Ltd is the data controller for personal data collected through this website.
- Registered office
- 27 Kingston Road, South Wimbledon, London, England, SW19 1JX
- Company number
- 16530359
- Data protection contact
- Hello@vigilanceltd.co.uk
- ICO registration number
- ZB953873
What personal data we collect
We only collect personal data that you actively give us. This website does not require you to create an account, and we do not buy personal data from third parties.
When you submit our enquiry form, we collect:
- Your name
- Your email address
- Your company name, if you provide one
- Your telephone number, if you provide one
- The service you are interested in, the site location, and your required timing, if you provide them
- The content of the message you write to us
If you email us directly, we receive whatever information you choose to include in that email.
When you use our Security Visibility Scorecard, we collect your name, company, work email, answers, score, priority actions and your separate marketing preference. If you choose to receive marketing, we also record when and where that choice was made and the version of the privacy notice shown to you.
When you request a downloadable business resource, such as our Security Contractor Switch Pack, we collect your name, company, work email and separate marketing preference. We use these details to provide the requested resource and record your request.
Our web host records standard server log information, including IP addresses, for the purpose of operating the site securely and detecting abuse. We do not use this information to identify individual visitors.
If you apply for a job with us
When you apply through our Join the team page we collect your name, contact details, the role you applied for, your SIA licence number if you supply one, where you are based, your availability, and whatever you tell us about your experience.
- Considering your application
- Lawful basis: taking steps at your request prior to entering into a contract, and our legitimate interest in recruiting suitable staff.
- Screening to BS 7858
- If we take your application forward we will verify a five-year employment history and your right to work. Lawful basis: legal obligation for right-to-work checks, and legitimate interests plus the requirements of our clients and insurers for the wider screening.
- How long we keep applications
- Twelve months from your last contact if we do not take it forward, so we can consider you for something else. Tell us if you would rather we deleted it sooner and we will.
Please do not send us documents containing your National Insurance number, passport or licence images through the website form. We will ask for those securely if and when we need them.
Why we use it, and our lawful basis
UK GDPR requires us to have a lawful basis for each use of your personal data. Ours are:
- Responding to your enquiry
- Lawful basis: legitimate interests. It is in both our interests and yours that we are able to reply to an enquiry you have chosen to send us. Where the enquiry leads towards a contract, we also rely on taking steps at your request prior to entering into a contract.
- Providing security services under contract
- Lawful basis: performance of a contract with you, or with the organisation you represent.
- Keeping records of enquiries and incidents
- Lawful basis: legitimate interests, and where applicable legal obligation — for example where records are required for licensing, insurance or health and safety purposes.
- Providing and saving your scorecard result
- Lawful basis: legitimate interests. We use the details and answers you provide to operate the assessment, retain your result and understand interest in our services.
- Providing a requested business resource
- Lawful basis: legitimate interests. We use the contact details you provide to deliver the requested resource, prevent repeated automated delivery and understand interest in our services.
- Optional email marketing
- Lawful basis: consent. Marketing is optional, the box is not pre-selected, and you can withdraw your consent at any time. Declining marketing does not prevent you from using the scorecard.
- Optional analytics cookies
- Lawful basis: consent, which you give through our cookie banner and can withdraw at any time.
We do not use your enquiry, scorecard or resource-request details for email marketing unless you have separately asked us to, and we do not sell personal data to anyone.
International transfers
Some of our providers process data outside the UK. Where that happens, we rely on UK adequacy regulations, or on the International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, so that your data continues to receive an equivalent standard of protection.
How long we keep it
- Enquiries that do not become work
- Up to 24 months from your last contact with us, then deleted.
- Scorecard details and results
- Up to 24 months from your last interaction with us, then deleted unless they become part of a client relationship or we must keep them for a legal reason.
- Downloadable-resource requests
- Up to 24 months from your last interaction with us, then deleted unless they become part of a client relationship or we must keep them for a legal reason.
- Email marketing records
- Until you withdraw consent or we stop the marketing activity. We may retain a minimal suppression record afterwards so we continue to respect your opt-out.
- Client records and correspondence
- For the duration of the contract and 6 years afterwards, reflecting the limitation period for contractual claims in England and Wales.
- Records required for statutory or insurance purposes
- For the period required by the relevant obligation.
- Server logs
- Retained by our host on a short rolling basis for security purposes.
Your rights
Under UK GDPR you have the right to:
- Be informed about how we use your personal data — which is what this policy is for
- Request a copy of the personal data we hold about you
- Have inaccurate personal data corrected
- Request erasure of your personal data in certain circumstances
- Restrict our processing of your personal data in certain circumstances
- Object to processing carried out on the basis of legitimate interests
- Request portability of data you provided to us, where processing is based on consent or contract and carried out by automated means
- Withdraw consent at any time, where we rely on consent
To exercise any of these rights, email Hello@vigilanceltd.co.uk. We will respond within one month. There is no charge, unless a request is manifestly unfounded or excessive.
Security
This website is served over HTTPS. Enquiry submissions are transmitted over encrypted connections, and access to our inbox is restricted to staff who need it. No transmission over the internet can be guaranteed completely secure, but we take appropriate technical and organisational measures proportionate to the risk.
Please do not send sensitive operational security information — such as alarm codes, key locations or vulnerability details — through the enquiry form. We will arrange a secure channel for that once we are engaged.
Complaints
If you are unhappy with how we have handled your personal data, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner's Office, the UK supervisory authority for data protection.
- Website
- ico.org.uk
- Helpline
- 0303 123 1113
Changes to this policy
We may update this policy to reflect changes in how we operate or in the law. The date at the top of this page shows when it was last revised. This version was published on 3 September 2026.