Privacy Policy

In this Privacy Notice, we, Avisec Ltd., inform you about the processing of your personal
data when using our website, our app, and our products and services.
We are committed to protecting your data and treating it in accordance with data protection
legislation, including the General Data Protection Regulation (GDPR) and the Data
Protection Act 2018. Please read our privacy notice carefully. It contains important
information about how we receive and use your personal information.

Who is responsible for processing your personal data?

The data controller is Avisec Ltd, a company registered in the UK, whose registered office is
Avisec Ltd, Electric Works, Sheffield Digital Campus, Sheffield, United Kingdom, S12BJ.
For questions about this Privacy Notice or our use of your personal data, you can contact us
at dpo@staging.avicoms.co.uk

What Personal Data do we collect?

The personal data we collect about you are personal data you provide us with when you
contact us, request a quote, make enquiries, visit our website, enter into an agreement with us,
complete our survey, or use our services. Such personal data may include:

• Contact Details: First and last name, home address, email address, telephone
  number, mobile number, and contact details of emergency contacts.
• Property and Lifestyle Details: General description of your property and lifestyle
  habits (obtained directly or from third-party aggregators like price comparison
  websites).
• Account and Login Details: Login details (e.g., password) for our website/app, prior
  purchases, and information about how you use our services.
• Order and Payment Details: Title, date of birth, billing and shipping address,
  payment data (such as payment method, bank details).
• System and Usage Data: Call logs and all correspondence, GPS data (if applicable to
  the service), system user logs including alarm and response events, and information
  about the performance and maintenance of your alarm system and cameras.
• Website/App Access Data (Log Files): IP address, date and time of request, address
  of the website and the requesting website, information about the browser, operating
  system and ISP, and online identifiers (e.g., device identifiers, session IDs).

How and Why, We Use Your Personal Data (Purposes and Legal Basis)

We use your personal data for the following purposes, based on the corresponding legal
grounds:

Special Category Personal Data (e.g., Camera Footage)

In the course of providing our services, particularly alarm monitoring, we may process
special category personal data (e.g., images/audio from cameras that may reveal health or
other sensitive information). We will only do so where:

• It is necessary to protect your, or someone else’s, vital interests (e.g., in a life-
  threatening emergency).
• It is necessary for the prevention or detection of an unlawful act.
• We have your explicit consent to do so.
• It is necessary for carrying out our obligations or rights in connection with
  employment (e.g., protecting staff).

Sharing of Personal Data

To fulfil our commitments to you, we may transfer your personal data to trusted third parties,
including:

• Other companies within the Avisec Group (if applicable) for internal administrative
  purposes.
• Sub-contractors and service providers who assist us in providing services (e.g., IT,
  payment processors, installation engineers).
• Emergency services (Police, Fire, Ambulance) in case of an alarm event.
• Debt collection agencies or legal advisors in the event of a dispute.
• Government or regulatory bodies if required by law.
  We never sell your personal data.

International Data Transfers

[Insert details on international transfers if applicable, e.g., If we transfer your personal data
outside the UK/EEA, we ensure a similar degree of protection by ensuring at least one of the
following safeguards is implemented: adequacy decision, Standard Contractual Clauses, or
binding corporate rules.]

How long do we keep your data?

We will only retain your personal data for as long as necessary to fulfil the purposes we
collected it for, including for the purposes of satisfying any legal, accounting, or reporting
requirements.
For example:

• Alarm event data (images/audio) is typically deleted after a maximum of [Insert
  Timeframe, e.g., 4 years] unless required for legal proceedings.
• Cloud recordings (non-alarm events) are generally deleted after a maximum of
  [Insert Timeframe, e.g., 30 days].
• Contract information is retained for the duration of the contract plus a period required
  by law (e.g., 6 years for tax purposes).

Your Data Protection Rights

Under data protection law, you have rights including:

• Your right of access: To ask us for copies of your personal data.
• Your right to rectification: To ask us to rectify data you think is inaccurate or
  complete data you think is incomplete.
• Your right to erasure: To ask us to erase your personal data in certain
  circumstances.
• Your right to restriction of processing: To ask us to restrict the processing of your
  data in certain circumstances.
• Your right to object to processing: To object to the processing of your personal data
  in certain circumstances (e.g., for direct marketing).
• Your right to data portability: To ask that we transfer the data you gave us to
  another organisation, or to you, in certain circumstances.
  To exercise any of these rights, please contact us using the details in Section 1.

Right to Lodge a Complaint

If you have any concerns about our use of your personal information, you can make a
complaint to us. You also have the right to lodge a complaint with the supervisory authority,
the Information Commissioner’s Office (ICO).

• ICO Contact Details: Information Commissioner’s Office, Wycliffe House, Water
  Lane, Wilmslow, Cheshire, SK9 5AF. Helpline: 0303 123 1113. Website:
  www.ico.org.uk.