Privacy Policy

Protecting your privacy is not just a legal requirement for us — it's a fundamental part of our commitment to excellence.

Who we are

Data Security Solutions Limited (“the Company”) is the data controller responsible for the personal data we process.

Registered OfficeUnit 17 Orbital 25 Business Park Dwight Road, Watford, England, WD18 9DA

For the purposes of UK data protection law, we act as a Data Controller in relation to personal data processed in connection with our business activities.

1. What Personal Data We Collect

We collect and process limited personal data in the course of operating our business. This may include:

Business Contacts

  • Name
  • Job title
  • Business email address
  • Business telephone number
  • Company name
  • Meeting notes and correspondence

Commercial & Contractual

  • Signatory names on contracts
  • Professional contact details
  • Proposal and engagement information

Governance & Compliance

  • Director and Company Secretary details (as required by law)
  • Security logs and audit records (where applicable)

We do not intentionally collect special category (sensitive) personal data.

2. Lawful Basis for Processing

We process personal data under the following lawful bases:

Legal Obligation

To comply with statutory and regulatory requirements (e.g. company records, tax and accounting obligations).

Contract

To enter into and perform contracts with clients, suppliers and partners.

Legitimate Interests

To operate and grow our business, manage professional relationships, and maintain records of communications and proposals.

Consent (Where Applicable)

If we rely on consent (e.g. for optional communications), we record and manage that consent and provide clear mechanisms to withdraw it.

Where processing is based on legitimate interests, we conduct and record a Legitimate Interest Assessment (LIA) to ensure that our interests do not override the rights and freedoms of individuals.

3. How we Use Personal Data

Communicate with clients, suppliers and partners
Manage contracts and commercial relationships
Maintain governance and statutory records
Comply with legal and tax obligations
Maintain business security and protect information assets

4. Who Processes the Data

Personal data is processed only by:

The Company Director
The Company Secretary (where applicable)
Approved service providers acting under written contracts (e.g. accountants or IT providers)

All third-party processors are subject to contractual data protection obligations and must implement appropriate technical and organisational measures.

5. Data Sharing

We may share personal data where necessary with:

Professional Advisers

Accountants, legal advisers

Government Authorities

Where required by law

Contracted Providers

Acting under contract

We do not sell personal data.

6. Your Rights

Under UK GDPR, individuals have the following rights:

1
Access their personal data
2
Request rectification of inaccurate data
3
Request erasure (where applicable)
4
Restrict processing
5
Object to processing (including legitimate interests)
6
Data portability (where applicable)
7
Not be subject to automated decision-making

To exercise any of these rights, please contact us using the details below. We will respond within one calendar month, in accordance with legal requirements.

7. Complaints

Contact Us First

If you have concerns about how we handle your personal data, we would appreciate the opportunity to address them directly.

Information Commissioner's Office

You also have the right to lodge a complaint with the ICO, the UK's supervisory authority for data protection issues.

Telephone0303 123 1113

8. Updates to this Notice

This Privacy Notice is reviewed annually or whenever there is a material change to our processing activities. The latest version is always available on our website.

Last Updated: April 2026