Privacy and Cookies Policy

1. Who are we?

1.1 We are FindMySecurity Ltd, trading as FindMySecurity. We are a UK-registered technology platform dedicated to connecting security professionals, companies, training providers, and clients. For privacy-related queries, you can contact us at info@findmysecurity.co.uk. Further contact details are available on our website.

2. What is the purpose of this policy?

2.1 This policy explains what personal data we collect, how we use it, and your rights. Please read it carefully. By using our platform, you agree to the practices outlined.

2.2 This policy covers only data collected through our website, app, or communication channels. If you interact with third-party services (e.g. payment gateways, external training platforms, or affiliated insurance providers), please consult their privacy policies separately.

3. Might this policy change?

3.1 Yes. We may update this policy from time to time. Any changes will be communicated by updating this document on our platform and, where appropriate, through direct notifications.

4. What data do we collect?

4.1 Information you upload or provide:

• Name, contact information, and demographic details;
• Professional documents including SIA licences, CVs, training certificates, proof of right to work, and identification documents;
• Account data such as username and password;
• Payment or transaction records on the platform;
• Profile and job application information, including availability, experience, and posted reviews;
• Communication history with FindMySecurity and other users;
• Newsletter or promotional preferences if you opt in.

4.2 Automated information:

• IP address, browser type and version, operating system, device type and ID;
• Device and connection logs, session time, pages visited, interactions, referral source, and time/date stamps;
• Login activity and usage patterns across the platform.

4.3 Location data (if enabled on the app):

• General geolocation or postcode-based location to assist in job matches.

4.4 Data from third parties:

• Limited billing details from Stripe, PayPal, or App Store (e.g. name, billing address, and email);
• If logging in via Facebook, we may receive your name, email, birthday, and location, if permitted, we may use your Facebook friends list to display relevant network content.

5. Why do we collect this data?

5.1 Contractual necessity – to create, manage, and maintain your account, and provide services requested by you.

5.2 Legitimate interest – to improve our services, monitor performance, prevent fraud, and promote relevant features. We may occasionally contact you for user feedback or to inform you about similar services.

5.3 Consent – if you opt in to marketing emails or allow cookies that track preferences. You can withdraw consent at any time by updating your settings or contacting us.

5.4 Legal obligation – to comply with regulatory requirements related to safety, hiring, identity verification, and record-keeping.

6. Do we use cookies?

6.1 Yes. Our website and partners use cookies and similar tracking tools.

6.2 Cookies are small data files stored on your device. Some cookies are essential for the platform to function. If you block cookies, certain features may not work correctly.

6.3 The cookies we place directly include:

6.4 Third-party cookies:

• Analytics cookies: Track visitor numbers, site interaction, session flow, and improve usability. Provided by:
• Google Analytics: Data practices
• Advertising cookies: Help personalise marketing messages and limit ad repetition. Used by:
• Google (Adsense, DoubleClick): More info
• Microsoft Bing: Privacy control
• Social login cookies: Used when logging in via Facebook, Apple or Google.
• Social media persistent cookies enable seamless login; we set a cookie to prevent automatic login if you sign out manually.

To learn more about managing cookies:

• All About Cookies
• YourOnlineChoices
• Network Advertising Initiative
• AboutAds

7. How long do we retain your information?

7.1 We retain personal documents uploaded by security professionals (such as SIA licences, proof of right to work, or ID documents) for up to 6 months following inactivity or termination of the account. Other personal data (e.g., profile information, communications, transaction logs) may be held for up to six years or until you request deletion via email or our contact form.

7.2 We may retain certain information beyond account closure where required for legal, regulatory, taxation, fraud prevention, dispute resolution, or enforcement purposes (typically for a maximum of six years).

7.3 Where you have consented to receive marketing communications, we will keep your contact details until you unsubscribe or request removal.

7.4 Automated browsing data (e.g. analytics cookies, IP logs) is typically retained for up to 12 months.

7.5 If you’ve posted public reviews on FindMySecurity, we may retain and display them beyond your account closure unless you explicitly request their removal.

8. Who do we share your personal data with?

8.1 Third-party service providers who support our platform operation, such as:

• Hosting, content delivery, and cloud infrastructure providers;
• Communication platforms, review systems, and survey tools;
• Online advertising partners and tracking/analytics providers;
• Payment processors and fraud detection platforms;
• Training/course providers and webinar partners;
• IT and technical support services.

8.2 If you opt into insurance features available on FindMySecurity, we may share your relevant details (e.g., name, contact details, licensing status, employment reference) with our authorised insurance provider.

8.3 Information entered into your public profile or shared in public reviews or messages may be visible to other registered users of the platform. If you upload documents like SIA licences, you control whether they are viewed to hiring businesses or security firms.

8.4 Some profile data may be indexed and shared with job boards or aggregators like Google Jobs to support visibility and recruitment potential.

8.5 We may share personal data with legal or enforcement authorities in cases involving fraud, criminal investigations, or where required to comply with applicable UK law.

8.6 Information may be disclosed to our insurers, solicitors, or professional advisers in connection with legal risk management or claims.

8.7 In the event of a sale, merger, or restructuring of FindMySecurity, we may transfer relevant user data to potential buyers or stakeholders under confidentiality terms.

9. What happens to your payment information?

9.1 Payment details are handled directly by our third-party payment providers (e.g., Stripe, PayPal, Apple Pay). FindMySecurity does not store card numbers or security codes. To safeguard against fraud, these payment providers may share certain information (e.g., billing address, email) with credit reference agencies or verification tools.

10. Do we transfer your data outside the UK?

10.1 Some of our service providers (e.g., hosting, email platforms, analytics tools) operate in countries outside the UK, including the USA. We ensure that transfers comply with UK GDPR standards via approved mechanisms, such as Standard Contractual Clauses (SCCs) or recognised data protection frameworks.

11. What are your rights under data protection law?

11.1 You may exercise the following rights if the legal criteria are met:

• Access your personal data held by us;
• Request corrections to inaccuracies in your data;
• Ask us to delete your data or restrict its use;
• Object to data processing in certain situations (e.g., direct marketing);
• Request data portability where applicable;
• Withdraw consent (e.g., unsubscribe from newsletters).

11.2 You can exercise these rights by contacting support@findmysecurity.co.uk. We aim to respond within 30 days.

11.3 If you are dissatisfied with our handling of your data, you may file a complaint with the Information Commissioner's Office (ICO) at www.ico.org.uk.

11.4 For more information about your rights, visit the ICO's website: www.ico.org.uk.