Privacy & Cookie Policy

1. Who We Are

GM Secure Ltd (“GM Secure”, “we”, “us”, “our”) is a professional SIA-licensed security company registered in England and Wales. We are the data controller for personal data collected through this website and in connection with our security services.

This policy explains how we collect, use, store and protect your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. What Data We Collect

2.1 Data you provide to us

When you contact us, request a quote or submit a job application, we may collect:

• Contact information — your name, email address, phone number and company name
• Enquiry details — your security requirements, site location, dates and any other information you provide
• Job application data — your CV, SIA licence number, availability and cover letter
• Communication records — emails, WhatsApp messages and call records when you contact us

2.2 Data collected automatically

When you visit our website, we automatically collect:

• Technical data — your IP address, browser type, device type and operating system
• Usage data — pages visited, time spent, links clicked and referring website
• Analytics data — collected via Google Analytics (see Cookie Policy below)

3. How We Use Your Data

We use your personal data for the following purposes:

• To respond to your security service enquiries and provide you with a free quote
• To process and assess job applications for security officer positions
• To provide our security services under a contract
• To send you information about our services where you have given consent
• To improve our website and services using anonymised analytics data
• To comply with our legal obligations including ICO registration requirements
• To prevent fraud and ensure the security of our systems

We will never use your data for purposes incompatible with those stated above, and we will never sell your personal data to third parties.

4. Legal Basis for Processing

Under UK GDPR, we rely on the following legal bases to process your personal data:

• Legitimate interests (Article 6(1)(f)) — responding to enquiries, improving our services and preventing fraud
• Contract (Article 6(1)(b)) — processing data necessary to provide security services you have engaged us for
• Consent (Article 6(1)(a)) — where you have explicitly opted in to receive marketing communications
• Legal obligation (Article 6(1)(c)) — where we are required by law to process your data

For job applications, we process your data on the basis of your consent given at the point of application. You may withdraw this consent at any time by contacting us at info@gmsecure.co.uk.

5. Who We Share Data With

We do not sell, rent or trade your personal data. We may share your data only in the following limited circumstances:

• Service providers — trusted third parties who help us operate our website and business, such as our hosting provider and email service, who are bound by data processing agreements
• Google Analytics — anonymised website usage data to help us understand how our site is used (see Cookie Policy)
• Legal requirements — where we are required to disclose information by law, court order or regulatory authority
• Business transfers — in the unlikely event of a merger or acquisition, your data may be transferred to the new entity under the same privacy protections

All third parties we work with are required to handle your data securely and in accordance with UK GDPR.

6. How Long We Keep Your Data

We retain your personal data only for as long as necessary for the purposes described in this policy:

• Enquiry and quote data — up to 2 years from the date of enquiry
• Contract and client data — up to 6 years after the end of the contract (for legal and accounting purposes)
• Job application data — up to 6 months from the date of application if unsuccessful; retained for the duration of employment if successful
• Website analytics data — retained by Google Analytics for up to 26 months
• Email correspondence — up to 2 years from the date of last contact

After the applicable retention period, your data is securely deleted or anonymised.

7. Your Rights

Under UK GDPR, you have the following rights regarding your personal data:

• Right of access — to request a copy of the personal data we hold about you
• Right to rectification — to request correction of inaccurate or incomplete data
• Right to erasure — to request deletion of your personal data (“right to be forgotten”)
• Right to restrict processing — to request that we limit how we use your data
• Right to data portability — to receive your data in a structured, machine-readable format
• Right to object — to object to processing based on legitimate interests or for direct marketing
• Right to withdraw consent — where processing is based on consent, to withdraw it at any time

To exercise any of these rights, please contact us at info@gmsecure.co.uk or by post to our registered address. We will respond within one calendar month as required by UK GDPR. There is no charge for exercising your rights.

8. Cookie Policy

Our website uses cookies — small text files stored on your device — to help us provide a better experience and understand how our site is used.

8.1 Cookies we use

• Essential cookies — necessary for the website to function correctly. These cannot be disabled.
• Analytics cookies (Google Analytics) — we use Google Analytics (ID: G-GBHLRX01R2) to collect anonymised data about how visitors use our website, including pages viewed, time spent and traffic sources. This data helps us improve our website. Google Analytics uses cookies such as _ga and _gid.

8.2 Managing cookies

You can control and manage cookies through your browser settings. Most browsers allow you to refuse or delete cookies. Please note that disabling cookies may affect the functionality of our website.

For more information about Google Analytics and how to opt out, visit tools.google.com/dlpage/gaoptout.

8.3 Third-party cookies

Our website may include links to third-party websites and embedded content. These third parties may set their own cookies. We do not control these cookies and recommend reviewing the privacy policies of any third-party sites you visit.

9. Data Security

We take the security of your personal data seriously and implement appropriate technical and organisational measures to protect it against unauthorised access, loss, destruction or alteration. These measures include:

• Secure HTTPS encryption on all pages of our website
• Restricted access to personal data on a need-to-know basis
• Regular review of our data handling procedures
• Secure deletion of data at the end of the retention period

While we take all reasonable steps to protect your data, no internet transmission is 100% secure. If you have concerns about the security of your data, please contact us immediately.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the ICO within 72 hours and, where required, notify you directly.

10. Contact & Complaints

If you have any questions about this privacy policy, wish to exercise your rights, or have a concern about how we handle your personal data, please contact us:

This policy was last reviewed and updated on 1 June 2026. We reserve the right to update this policy at any time. Any changes will be posted on this page with an updated revision date.