Data Protection & Privacy Policy

1. Introduction
Lionheart Protection, in this document known as ‘the Company’ is committed to protecting and respecting your privacy.
This Policy is written in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. It explains when and why we collect personal information about our contracted personnel, clients, and potential clients; how we use that information; the conditions under which we may disclose it to others, and how we keep it secure. The Company is registered with the Information Commissioner’s Office (ICO).
ICO Registration Number: ZC035442

We may update this Policy periodically, so please ensure you have the most current version. By engaging with us or using our website, you agree to be bound by this Policy. For any questions or concerns regarding this Policy, please contact:
Email: info@lionheartprotection.co.uk
Address: LIONHEART PROTECTION, SUITE 2A, 6th FLOOR, COBALT SQUARE,
83-85 HAGLEY ROAD, BIRMINGHAM, B16 8QG

2. Who We Are
Lionheart Protection provides professional manned guarding and specialist security services to commercial and private clients across the UK.

3. How We Collect Information
We obtain personal information from:

1. Contracted personnel – during recruitment, vetting, and throughout their period of engagement for administrative, compliance, and operational purposes.

2. Clients and potential clients – when they make enquiries, request quotations, or during the provision and management of contracted services.
    

4. Types of Information We Collect
The personal information we collect may, will be through your application for contract, from the SIA or through dealings with our clients. The information we may collect includes:
          -Full name
          -Postal address
          -Email address
          -Contact telephone numbers
          -Emergency contacts
          -Vetting and screening information (for contracted personnel)

5. How We Use Your Information
We may use your information to:
          -Process applications and pre-engagement screening (in accordance with BS7858).
          -Manage payroll for contracted personnel.
          -Process client enquiries and deliver contractual services.
          -Communicate with clients and contracted personnel.
          -Fulfil legal and regulatory obligations.
          -Notify you of changes to our services or other company information
          -Maintain security and operational efficiency.

We will never use your data for marketing or other commercial purposes. We, with your consent may obtain images of you in the workplace for company media. By signing your contract, you will agree to allow Lionheart Protection to use your data/media for the enhancement of the company and to drive the business forward.

6. Data Retention
We regularly review our data retention periods. Some types of data must be kept for legal or regulatory reasons (eg. security screening records retained for the duration of engagement plus 7 years; CCTV footage retained for 28 days unless required for evidential purposes).
Personal data will be retained only for as long as necessary for the relevant purpose as defined in section 5 or as required by law.

7. Access to Information
We will not sell or disclose your personal information to third parties except:

• Emergency services and law enforcement agencies when required.

• HMRC or other relevant authorities for administrative or legal purposes.

• Approved subcontractors or service partners (e.g., for vetting and screening, potential client etc.) who have signed confidentiality agreements.

We ensure all third-party processors meet GDPR compliance and only use information for the specific purpose provided.

8. Security Measures
We take the security of your personal data seriously and have implemented physical, electronic, and managerial safeguards to prevent loss, misuse, or unauthorised access. These safeguards are:

• Digital data is stored securely within password-protected systems.

• Physical records are held in locked storage within secure premises.

• Transmission of non-sensitive information (e.g., email) over the internet is at your own risk, though we take reasonable precautions to ensure security upon receipt.

• Where passwords or access codes are provided, you are responsible for keeping them confidential.
   

9. Your Rights
Under data protection law, you have the right to:
          -Request access to the information we hold about you (subject access request).
          -Request correction of inaccurate or incomplete data.
          -Request deletion of your personal data where legally permissible.
          -Restrict or object to certain processing activities.
          -Request data portability (where applicable).
All requests should be made in writing to LIONHEART PROTECTION, SUITE 2A, 6th FLOOR, COBALT SQUARE, 83-85 HAGLEY ROAD, BIRMINGHAM, B16 8QG or by email to info@lionheartprotection.co.uk A small administrative fee, currently £49, may apply where the business deems it unnecessary, repeated or manifestly unfounded requests.

10. Data Transfers Outside the UK
If we need to transfer your personal information outside of the United Kingdom (UK) or the European Economic Area (EEA), we will ensure appropriate safeguards are in place to maintain equivalent protection under UK GDPR standards.
We will always take steps to obtain your consent before any such transfer takes place, ensuring you are fully informed of where and how your data may be processed, and that adequate protection is maintained at all times.

11. Cookies and Website Links
Our website may use cookies to improve user experience. We may provide links to partner or accreditation websites (e.g., SIA, NSI, or SSAIB). Please note that we are not responsible for the privacy policies or content of external sites. You may refuse to accept cookies by activating the setting on your browser which allows you to refuse the setting of cookies. However, if you select this setting, you may be unable to access certain parts of our site.

12. Children and Under-18s
We are committed to protecting the privacy and welfare of individuals under 18 years of age. We do not knowingly collect personal data from individuals under 18, and no person under the age of 18 will be contracted, employed, or directly involved with Lionheart Protection in any capacity.
If it is discovered that personal data has been collected from a person under 18 without appropriate consent, it will be securely deleted as soon as possible, and a letter will be written for the attention of the child and their guardian to inform them of this.

13. Policy Review
This Policy is reviewed regularly and updated as required to reflect changes in law, operations, or best practice.


Lionheart Protection
15/11/25