Skip to main content
VigilanceLtd

Legal

Privacy Policy

Last updated 3 September 2026

Who we are

Vigilance Ltd (“we”, “us”, “our”) is a company registered in England and Wales under company number 16530359. We provide security services including manned guarding, event security, mobile patrols, vacant property inspections, key holding and close protection.

For the purposes of UK data protection law, Vigilance Ltd is the data controller for personal data collected through this website.

Registered office
27 Kingston Road, South Wimbledon, London, England, SW19 1JX
Company number
16530359
Data protection contact
Hello@vigilanceltd.co.uk
ICO registration number
ZB953873

What personal data we collect

We only collect personal data that you actively give us. This website does not require you to create an account, and we do not buy personal data from third parties.

When you submit our enquiry form, we collect:

  • Your name
  • Your email address
  • Your company name, if you provide one
  • Your telephone number, if you provide one
  • The service you are interested in, the site location, and your required timing, if you provide them
  • The content of the message you write to us

If you email us directly, we receive whatever information you choose to include in that email.

When you use our Security Visibility Scorecard, we collect your name, company, work email, answers, score, priority actions and your separate marketing preference. If you choose to receive marketing, we also record when and where that choice was made and the version of the privacy notice shown to you.

When you request a downloadable business resource, such as our Security Contractor Switch Pack, we collect your name, company, work email and separate marketing preference. We use these details to provide the requested resource and record your request.

Our web host records standard server log information, including IP addresses, for the purpose of operating the site securely and detecting abuse. We do not use this information to identify individual visitors.

If you apply for a job with us

When you apply through our Join the team page we collect your name, contact details, the role you applied for, your SIA licence number if you supply one, where you are based, your availability, and whatever you tell us about your experience.

Considering your application
Lawful basis: taking steps at your request prior to entering into a contract, and our legitimate interest in recruiting suitable staff.
Screening to BS 7858
If we take your application forward we will verify a five-year employment history and your right to work. Lawful basis: legal obligation for right-to-work checks, and legitimate interests plus the requirements of our clients and insurers for the wider screening.
How long we keep applications
Twelve months from your last contact if we do not take it forward, so we can consider you for something else. Tell us if you would rather we deleted it sooner and we will.

Please do not send us documents containing your National Insurance number, passport or licence images through the website form. We will ask for those securely if and when we need them.

Why we use it, and our lawful basis

UK GDPR requires us to have a lawful basis for each use of your personal data. Ours are:

Responding to your enquiry
Lawful basis: legitimate interests. It is in both our interests and yours that we are able to reply to an enquiry you have chosen to send us. Where the enquiry leads towards a contract, we also rely on taking steps at your request prior to entering into a contract.
Providing security services under contract
Lawful basis: performance of a contract with you, or with the organisation you represent.
Keeping records of enquiries and incidents
Lawful basis: legitimate interests, and where applicable legal obligation — for example where records are required for licensing, insurance or health and safety purposes.
Providing and saving your scorecard result
Lawful basis: legitimate interests. We use the details and answers you provide to operate the assessment, retain your result and understand interest in our services.
Providing a requested business resource
Lawful basis: legitimate interests. We use the contact details you provide to deliver the requested resource, prevent repeated automated delivery and understand interest in our services.
Optional email marketing
Lawful basis: consent. Marketing is optional, the box is not pre-selected, and you can withdraw your consent at any time. Declining marketing does not prevent you from using the scorecard.
Optional analytics cookies
Lawful basis: consent, which you give through our cookie banner and can withdraw at any time.

We do not use your enquiry, scorecard or resource-request details for email marketing unless you have separately asked us to, and we do not sell personal data to anyone.

Who we share it with

We share personal data only with service providers who help us operate this website and respond to you. Each acts as a processor under a written agreement, and may only use the data on our instructions.

Vercel Inc.
Website hosting and delivery. Processes server logs and traffic data.
Resend
Delivery of enquiry form submissions to our inbox and requested resources to website visitors.
Supabase
Secure storage of Security Visibility Scorecard and downloadable-resource contact details, consent records and results.
[EMAIL PROVIDER]
Our business email provider, which stores correspondence with you, including job applications.

We may also disclose personal data where we are legally required to do so — for example to the police, a court, a regulator, or the Security Industry Authority — or where it is necessary to establish, exercise or defend legal claims.

International transfers

Some of our providers process data outside the UK. Where that happens, we rely on UK adequacy regulations, or on the International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, so that your data continues to receive an equivalent standard of protection.

How long we keep it

Enquiries that do not become work
Up to 24 months from your last contact with us, then deleted.
Scorecard details and results
Up to 24 months from your last interaction with us, then deleted unless they become part of a client relationship or we must keep them for a legal reason.
Downloadable-resource requests
Up to 24 months from your last interaction with us, then deleted unless they become part of a client relationship or we must keep them for a legal reason.
Email marketing records
Until you withdraw consent or we stop the marketing activity. We may retain a minimal suppression record afterwards so we continue to respect your opt-out.
Client records and correspondence
For the duration of the contract and 6 years afterwards, reflecting the limitation period for contractual claims in England and Wales.
Records required for statutory or insurance purposes
For the period required by the relevant obligation.
Server logs
Retained by our host on a short rolling basis for security purposes.

Your rights

Under UK GDPR you have the right to:

  • Be informed about how we use your personal data — which is what this policy is for
  • Request a copy of the personal data we hold about you
  • Have inaccurate personal data corrected
  • Request erasure of your personal data in certain circumstances
  • Restrict our processing of your personal data in certain circumstances
  • Object to processing carried out on the basis of legitimate interests
  • Request portability of data you provided to us, where processing is based on consent or contract and carried out by automated means
  • Withdraw consent at any time, where we rely on consent

To exercise any of these rights, email Hello@vigilanceltd.co.uk. We will respond within one month. There is no charge, unless a request is manifestly unfounded or excessive.

Security

This website is served over HTTPS. Enquiry submissions are transmitted over encrypted connections, and access to our inbox is restricted to staff who need it. No transmission over the internet can be guaranteed completely secure, but we take appropriate technical and organisational measures proportionate to the risk.

Please do not send sensitive operational security information — such as alarm codes, key locations or vulnerability details — through the enquiry form. We will arrange a secure channel for that once we are engaged.

Complaints

If you are unhappy with how we have handled your personal data, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner's Office, the UK supervisory authority for data protection.

Website
ico.org.uk
Helpline
0303 123 1113

Changes to this policy

We may update this policy to reflect changes in how we operate or in the law. The date at the top of this page shows when it was last revised. This version was published on 3 September 2026.