Privacy Policy

Mahdi313 Security Limited ("we", "us", "our") respects your privacy and is committed to protecting your personal data. This privacy policy explains how we collect, process and protect your personal information when you visit our website (www.mahdi313.co.uk) or utilise our security services.

1. Who We Are (Data Controller)

Mahdi313 Security Limited is a registered company in England & Wales with its registered office situated at 167 Ilford Lane, Ilford, IG1 2RT, United Kingdom. We operate in compliance with the Information Commissioner's Office (ICO) guidelines.

Contact: Data Protection Lead, Mahdi313 Security Limited · Email: info@mahdi313.co.uk · Phone: 07507 744012.

2. Personal Information We Collect

• Enquiries & Quote Requests: Full name, company name, email address, phone number, site postcode and security requirements.
• Job Applicants & Security Personnel: Curriculum vitae, contact details, SIA licence number and expiry date, right-to-work verification and 5-year BS 7858 vetting records.
• Client Representatives: Business contact details, assignment instructions, key holding authorization records and billing details.
• Website Analytics & Cookies: Technical IP address, browser type, device information and page engagement data (see our Cookie Policy).
• CCTV & Incident Footage: Video recordings captured by static cameras, mobile patrol vehicles or CCTV towers operated on behalf of clients.

3. How We Use Your Data

We process your personal information for the following legitimate business purposes:

• To evaluate site security risks and provide accurate, itemised commercial quotes.
• To deploy and deliver contracted security guarding, patrols and alarm response.
• To process employment applications and perform mandatory BS 7858 background screening.
• To maintain statutory logs required by the Security Industry Authority (SIA), police services and insurers.
• To monitor website functionality and protect against unauthorised intrusions.

4. Legal Bases for Processing

Under UK GDPR, we rely on the following lawful grounds: Contractual performance, Legitimate interests, Legal compliance with UK statutory security regulations, and explicit Consent (e.g. for marketing contact or non-essential cookies).

5. Data Sharing & Third Parties

We do not sell, rent or trade your personal information. We only share details where legally required or operationally essential with: accredited BS 7858 background screening partners, emergency services (police, fire, ambulance) during verified incidents, licensed Alarm Receiving Centres (ARCs), and statutory regulatory bodies.

6. Data Retention Periods

• General commercial enquiries: Retained for up to 2 years.
• Active client service and incident logs: Retained for 6 years following contract conclusion in accordance with UK limitation laws.
• Unsuccessful job applications: Retained for 6 months unless consent is granted for future recruitment pools.
• Security vetting files (BS 7858): Retained for statutory audit periods.

7. Security Safeguards

We enforce robust technical and organisational security controls, including encrypted digital storage, firewalls, role-based access restrictions and physically secure key safes.

8. Your Rights Under UK GDPR

You have the right to request access to your personal data, rectify inaccuracies, request erasure ("right to be forgotten"), restrict processing, or object to direct marketing. To exercise these rights, please contact info@mahdi313.co.uk. You also have the right to lodge a complaint with the UK Information Commissioner's Office (ico.org.uk).

9. Policy Updates

We periodically review and update this privacy policy. The current version will always be published on this page.