Privacy Policy

Sierra 1 Security Stewarding ("S1SS," "we," "our," "us") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data, in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

By accessing our website or using our services, you agree to the terms outlined in this Privacy Policy.

1. Data Controller Information

Sierra 1 Security Stewarding is the data controller responsible for the processing of your personal data. Our contact details are:

Sierra 1 Security Stewarding

The Old Fire Station, S9 5AF

enquiries@s1ss.co.uk

0114 453 9662

---

2. What Personal Data We Collect

We collect and process the following types of personal data:

2.1 Data You Provide to Us

• Contact Information: Name, email address, phone number, and postal address.
• Employment Information: For job applicants, we may collect CVs, employment history, qualifications, and right-to-work documentation.
• Billing Information: Payment details for processing transactions.

2.2 Data We Collect Automatically

• Website Usage Data: IP address, browser type, pages visited, and time spent on our website.
• Cookies and Tracking Technologies: Data collected through cookies to improve website functionality and user experience (Section 10).

2.3 Data from Third Parties

We may receive personal data about you from third parties, such as:

• Background check providers for employment verification.
• Event organizers for operational requirements.

---

Payment details for processing transactions.

3. How We Use Your Personal Data

We use your personal data for the following purposes:

3.1 Providing Our Services

• Managing security and stewarding operations.
• Ensuring the safety and security of clients, staff, and attendees.
• Processing payments and invoices.

3.2 Recruitment and Employment

• Evaluating job applications.
• Conducting pre-employment background checks.
• Managing payroll and staff administration.

3.3 Communication

• Responding to inquiries submitted through our website or other communication channels.
• Sending operational updates through Email and SMS (with your consent).

3.4 Compliance and Legal Obligations

• Ensuring compliance with UK laws and regulations.
• Assisting law enforcement and regulatory authorities where required.

---

4. Legal Basis for Processing Your Data

We process your personal data under the following legal bases:

• Consent: Where you have explicitly given your consent (e.g., for marketing communications).
• Contractual Necessity: To fulfill a contract with you or take steps prior to entering into a contract.
• Legal Obligation: To comply with UK legal and regulatory requirements.
• Legitimate Interests: For business purposes, such as improving our services, ensuring security, or protecting our business interests, provided that your rights and freedoms are not overridden.

---

5. Who We Share Your Data With

We may share your personal data with the following third parties:

• Service Providers: IT support, payroll processors, and background check providers.
• Event Organizers: For operational purposes where necessary.
• Legal Authorities: In response to lawful requests or to comply with legal obligations. We ensure that any third parties with whom we share data adhere to strict data protection standards.

---

6. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by law. The retention periods are as follows:

• Customer and Operational Data: Retained for the duration of the service relationship and up to seven years thereafter for legal or audit purposes.
• Recruitment Data: Retained for six months for unsuccessful candidates, unless consent is given to retain it longer.
• Financial Data: Retained for seven years to comply with tax and financial regulations.

After the retention period, your data will be securely deleted or anonymized.

---

7. Your Rights Under UK GDPR

You have the following rights regarding your personal data:

• Right to Access: Request a copy of your personal data.
• Right to Rectification: Correct inaccuracies in your personal data.
• Right to Erasure: Request the deletion of your personal data, subject to legal obligations.
• Right to Restriction: Restrict the processing of your data in certain circumstances.
• Right to Data Portability: Request your data in a structured, commonly used, and machine-readable format.
• Right to Object: Object to the processing of your data based on legitimate interests.
• Right to Withdraw Consent: Withdraw your consent at any time for processing based on consent.

To exercise any of these rights, please contact us using the details provided in Section 1.

---

8. Data Security

We implement robust security measures to protect your personal data, including:

• Secure servers and firewalls.
• Data encryption during transmission.
• Access controls and authentication procedures.
• Regular audits and staff training on data protection.

While we strive to safeguard your data, no system is entirely secure. In the event of a data breach, we will notify affected individuals and regulatory authorities as required by law.

---

9. International Data Transfers

We do not transfer your personal data outside the UK. If a transfer becomes necessary, we will ensure appropriate safeguards, such as Standard Contractual Clauses, are in place.

---

10. Cookies and Tracking Technologies

Our website uses cookies to enhance user experience and analyze website traffic. Cookies are small text files stored on your device. We use the following types of cookies:

• Essential Cookies: Necessary for website functionality.
• Analytical Cookies: Track website performance and user behavior.

You can manage your cookie preferences through your browser settings.

---

11. Third-Party Websites

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these websites and encourage you to review their privacy policies before providing any personal data.

---

12. Children’s Data

Our services are not directed at children under the age of 13. We do not knowingly collect personal data from children. If we become aware that we have inadvertently collected such data, we will delete it promptly.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in legal requirements or our operations. The "Last Updated" date at the top of this page indicates the latest revision. We encourage you to review this page periodically to stay informed.

14. Contact Us

If you have any questions or concerns about this Privacy Policy or how we handle your personal data, please contact us:

Sierra 1 Security Stewarding

The Old Fire Station, S9 5AF

enquiries@s1ss.co.uk

0114 453 9662