Privacy Policy
What is the purpose of this notice?
To describe how Northern Security Alarms (NSA) collects and uses personal data about you in accordance with the General Data Protection Regulation (GDPR).
What we need
In the normal course of business NSA may collect and process personal data of individuals acting on their own behalf or those acting on behalf of their employer or other business entity. The personal data may include name, address, e-mail address, telephone number or other information specifically related to the goods and services we provide.
Why we need it
We need to know this personal data to allow us to fulfil our contractual obligations of providing electronic fire and security systems to our customers, and to meet the regulatory and legal requirements associated with the provision of these services. We will not collect any personal data from you which we do not need.
What we do with it
Personal data may be shared with NSA employees and third parties, but only when necessary to do so. These third parties may include NSA’s suppliers, such as Alarm Receiving Centres G4S or EMCS, or stakeholders such as Police Scotland and National Security Inspectorate (NSI).
NSA may use personal data to provide information to customers about current or future products and services which are relevant to them. This may include information on system updates, obsolete product notices, enhanced security products and other relevant information.
The processing of personal data as described in this privacy policy is on the basis of legitimate interest. The commercial interests of NSA and those of our customers require us to process this data in order to manage the delivery and support of services provided. NSA’s commercial interests also require us to process personal data in order to manage marketing campaigns to customers and to potential customers. Personal data will not be used in any way which a customer or potential customer could not reasonably expect, and it will not be used in any way which could cause harm or be found intrusive.
We may process personal information for certain legitimate business purposes, which include some or all of the following:
where the processing enables us to enhance, modify, personalise or otherwise improve our services/communications for the benefit of our customers
to identify and prevent fraud
to enhance the security of our network and information systems
to better understand how people interact with our websites
Whenever we process data for these purposes we will ensure that we always keep your personal data rights in high regard and take account of these rights at all times.
Where we keep it
Our data is stored on secure servers within the UK and also within our paper filing system.
How long we keep it
Personal data will be kept for the duration of the customer contract. Thereafter, personal data will be retained to comply with regulatory and legal requirements. We regularly review what information we hold and delete what is no longer required. We never store payment card information.
CCTV
CCTV is used at NSA offices for maintaining the security of property and premises and for preventing and investigating crime. For these reasons the information processed may include visual images, personal appearance and behaviours. This information may be about staff, customers and clients, offenders and suspected offenders, members of the public and those inside, entering or in the immediate vicinity of the area under surveillance. Where necessary or required this information is shared with the data subjects themselves, employees and agents, services providers, police forces, security organisations and persons making an enquiry.
What are your rights?
We want to ensure that you remain in control of your personal data. Part of this is making sure you understand your legal rights, which are as follows:
the right to confirmation as to whether we have your personal data and, if we do, to obtain a copy of the personal information we hold (this is known as a data subject access request)
the right to have your data erased (though this will not apply where it is necessary for us to continue to use the data for a lawful reason)
the right to have inaccurate data rectified
You can withdraw your consent to our storage or use of some or any of your personal data at any time. This can be done by emailing gdpr@northernsecurityalarms.co.uk or in writing to Data Privacy Representative, Northern Security Alarms, 15 Henderson Drive, Longman Industrial Estate, Inverness, IV1 1TR. Please be aware that withdrawal of consent will adversely affect our ability to provide you with goods and services.
If you wish to raise a complaint on how we have handled your personal data, you can contact our Data Privacy Representative (gdpr@northernsecurityalarms.co.uk) who will investigate the matter. If you are not satisfied with our response or believe we are processing your personal data not in accordance with the law you can complain to the Information Commissioner’s Office, the UK supervisory authority for data protection issues.