Privacy & Cookie Policy

How GM Secure Ltd collects, uses and protects your personal data, and how we use cookies on gmsecure.co.uk.

GM Secure Ltd · Company No. 15623450 · ICO Registration ZB687885 · Last updated 1 October 2026

1. Who we are

GM Secure Ltd ("GM Secure", "we", "us", "our") is a private security company registered in England and Wales. We are the data controller for personal data collected through this website and in connection with our security services and recruitment.

GM Secure Ltd
Office 6429, 321-323 High Road, Chadwell Heath, Romford, Essex RM6 6AX
Company No: 15623450 · ICO Registration: ZB687885
Email: info@gmsecure.co.uk · Tel: 0794 782 2002

This policy explains how we collect, use, store and protect personal data in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations 2003 (PECR). It also contains our cookie policy (section 8).

2. What data we collect

2.1 Data you give us

When you contact us, request a quote, apply for work or deal with us as a client or supplier, we may collect:

  • Contact details: name, email address, telephone number, company name and job title
  • Enquiry details: your security requirements, site location, dates and any other information you give us
  • Recruitment data: your CV, SIA licence number and expiry date, availability, work history and any information in your covering message. If you are successful, we may also collect identity and right-to-work documents, references and, where lawful and necessary for the role, criminal record (DBS) check results
  • Communication records: emails, WhatsApp messages and notes of calls with us
  • Client and supplier data: contract, invoicing and payment details

2.2 Data from other sources

We may check an applicant's SIA licence on the SIA public register and obtain references from previous employers named by the applicant.

2.3 Data collected automatically

Our web server and hosting provider record technical data such as your IP address, browser type and the pages requested, for security and to keep the site running. If you accept analytics cookies, Google Analytics also collects usage data such as pages visited, time on site and how you reached us (see section 8).

3. How and why we use your data

We only use personal data where we have a lawful basis under UK GDPR:

  • Responding to enquiries and providing quotes: our legitimate interests in running our business and responding to those who contact us, and steps taken at your request before entering a contract (Article 6(1)(f) and 6(1)(b)).
  • Providing our services, invoicing and managing contracts: performance of a contract (Article 6(1)(b)) and our legitimate interests.
  • Recruitment: our legitimate interests in assessing and selecting suitable staff (Article 6(1)(f)) and steps prior to entering an employment or engagement contract (Article 6(1)(b)). Right-to-work checks are carried out to meet a legal obligation (Article 6(1)(c)). Criminal record checks are carried out only for successful candidates, where the law or industry regulation requires or permits them, and subject to the conditions in Schedule 1 of the Data Protection Act 2018.
  • Legal and regulatory compliance: to meet legal obligations, including company, tax, health and safety and SIA-related requirements (Article 6(1)(c)).
  • Protecting our business: preventing fraud, keeping our systems secure and establishing, exercising or defending legal claims (Article 6(1)(f)).
  • Website analytics: only if you accept analytics cookies (consent, Article 6(1)(a) and PECR). You can withdraw consent at any time (see section 8).
  • Marketing: we only send marketing communications where the law allows, for example with your consent or to business contacts where PECR permits. You can opt out at any time by contacting us.

We do not sell your personal data. We use it only for the purposes above, or for other purposes that are compatible with them and permitted by law.

4. Who we share data with

We share personal data only where necessary and only with:

  • Service providers that help us run the business, such as our website hosting, email and IT providers, who may only use the data on our instructions and under contracts that require them to protect it;
  • Professional advisers and insurers such as accountants, solicitors and our insurer;
  • Vetting and licensing bodies such as DBS check providers and the Security Industry Authority (SIA), where needed for a role;
  • Our clients and contracting security companies, to the extent needed to deliver a contract, for example the names and SIA licence details of officers assigned to a site;
  • Google, for website analytics, if you accept analytics cookies;
  • Regulators, courts, the police and other public authorities where we are required or permitted by law to disclose information;
  • A buyer or successor if our business is sold or restructured, who would be bound to use the data only as described here.

5. Transfers outside the UK

Some of our providers, including Google, may process data outside the UK. Where this happens, we rely on UK adequacy regulations or appropriate safeguards, such as the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, as applicable. You can contact us for more information.

6. How long we keep your data

We keep personal data only as long as we need it for the purposes above, and then delete or anonymise it. Our usual periods are:

  • Enquiries and quote requests: up to 2 years from the date of enquiry
  • Client and contract records: up to 6 years after the end of the contract, for legal and accounting purposes
  • Unsuccessful job applications: up to 6 months after the recruitment decision, longer only if you ask us to keep your details for future roles
  • Successful applicants: in line with our employment and engagement records, for as long as the relationship lasts and for the period required by law afterwards
  • Email and correspondence: up to 2 years from the last contact, unless needed for a contract or a legal claim
  • Analytics data: for the period set in our Google Analytics account, which is no longer than 14 months

We may keep information for longer where it is needed to establish, exercise or defend legal claims or to comply with the law.

7. Your rights

Under UK GDPR you have the right to:

  • Access: ask for a copy of the personal data we hold about you
  • Rectification: ask us to correct inaccurate or incomplete data
  • Erasure: ask us to delete your data in certain circumstances
  • Restriction: ask us to limit how we use your data in certain circumstances
  • Portability: receive certain data in a structured, machine-readable format
  • Object: object to processing based on legitimate interests or for direct marketing
  • Withdraw consent: where we rely on consent, withdraw it at any time. This does not affect processing already carried out

To use any of these rights, email info@gmsecure.co.uk or write to our registered address. We may need to verify your identity first. We respond within one month, which we may extend by up to two further months for complex or numerous requests, and we will tell you if we do. There is normally no charge, but we may charge a reasonable fee or refuse a request that is manifestly unfounded or excessive. Some rights are limited by law, for example where we must keep data to comply with a legal obligation or to defend a legal claim.

If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113. We would appreciate the chance to put things right first.

8. Cookie policy

Cookies are small text files stored on your device when you visit a website. Under PECR, we only set cookies that are not strictly necessary if you agree to them.

8.1 Cookies we use

  • Strictly necessary: our website does not set any cookies that are strictly necessary for it to work. We store your cookie choice in your browser's local storage so that we do not ask you again on every page.
  • Analytics (Google Analytics), only if you accept: these help us understand how the site is used, for example which pages are viewed. They set the cookies _ga and _ga_G-GBHLRX01R2, which normally last up to 2 years. The data is pseudonymised and used only for our own analysis.

8.2 Your choices

When you first visit, you can choose Accept or Reject on the cookie notice. Analytics are off unless you accept. You can change your choice at any time with the "Cookie settings" link in the footer of every page. You can also delete or block cookies in your browser settings, or use Google's opt-out add-on at tools.google.com/dlpage/gaoptout. Blocking cookies does not stop the website from working.

8.3 Third-party content

Our pages load fonts and icons from Google Fonts and Cloudflare (cdnjs). When your browser loads them, your IP address is sent to those providers. Our contact page offers a Google Map that loads only if you click to show it. Once loaded, Google may set its own cookies, and we do not control them. WhatsApp and social media links take you to third-party services with their own privacy policies.

9. Data security

We use appropriate technical and organisational measures to protect personal data, including HTTPS encryption on our website, restricted access to personal data on a need-to-know basis, and secure deletion at the end of the retention period. No system can be completely secure. If a personal data breach is likely to result in a risk to people's rights and freedoms, we will notify the ICO within 72 hours of becoming aware of it and, where required, tell the people affected.

10. Children and external links

Our website and services are aimed at businesses and adults. We do not knowingly collect personal data from anyone under 18. If you think a child has given us personal data, please contact us and we will delete it. Our website may link to other websites. We are not responsible for their content or privacy practices.

11. Changes to this policy

We may update this policy from time to time. The latest version is always on this page, with the date it was last updated shown below.

12. Contact and complaints

If you have questions about this policy or want to use your rights, please contact:

GM Secure Ltd
Office 6429, 321-323 High Road, Chadwell Heath, Romford, Essex RM6 6AX
info@gmsecure.co.uk · 0794 782 2002
ICO Registration: ZB687885 · Company No: 15623450 · Registered in England & Wales

This policy was last updated on 1 October 2026.