This Privacy Policy explains how NET-COM SW LTD collects, uses, stores, and protects your personal data when you visit our website, request a quote, or engage us for installation services. We are committed to handling your data responsibly and in line with UK data protection law.
NET-COM SW LTD ("we," "us," "our," "the Company") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains what information we collect, why we collect it, how we use it, and the choices and rights you have in relation to it.
This policy applies to personal data collected through our website (www.netcomsw.co.uk), our contact and quote request forms, telephone and email enquiries, and during the course of providing installation, testing, and certification services at your premises.
In short: we only collect the information we genuinely need to provide a quote, deliver our services, and respond to your enquiries — and we never sell your personal data to third parties.
For the purposes of UK data protection law, NET-COM SW LTD is the data controller responsible for your personal data. Our contact details are:
If you have any questions about how we handle your data, the contact details in Clause 18 below are the quickest way to reach us.
The personal data we collect depends on how you interact with us. This may include:
Special category data: we do not intentionally collect special category data (such as health information) unless directly relevant to a safe installation (for example, site-specific accessibility requirements you choose to disclose).
We collect personal data through a number of channels:
We use your personal data for the following purposes:
Under UK GDPR, we rely on the following legal bases to process your personal data:
| Purpose | Legal Basis |
|---|---|
| Responding to quote requests and enquiries | Legitimate interests / Pre-contractual steps |
| Delivering installation services under a signed quotation | Performance of a contract |
| Invoicing, accounting, and tax records | Legal obligation |
| Website analytics and performance cookies | Consent |
| Marketing communications | Consent (opt-in) |
| Fraud prevention and account security | Legitimate interests |
Where we rely on consent, you have the right to withdraw that consent at any time — see Clause 13, Your Rights.
We do not sell, rent, or trade your personal data. We may share your information with the following categories of trusted third parties, only where necessary:
Any third party processing data on our behalf is required to do so under a data processing agreement consistent with UK GDPR requirements.
As part of our CCTV installation services, our engineers may have incidental access to existing CCTV systems or footage at a client site solely for the purpose of installation, testing, and configuration. We do not access, retain, or use any recorded footage beyond what is strictly necessary to complete the agreed Services.
Where we install a new CCTV system on your behalf, you — as the property owner or operator — become the data controller for any footage subsequently captured by that system. We can advise on best-practice signage and retention settings to support your own compliance obligations, but we are not responsible for your ongoing use of installed CCTV systems.
We retain personal data only for as long as necessary to fulfil the purposes outlined in this policy, including any legal, accounting, or reporting requirements.
| Data Type | Typical Retention Period |
|---|---|
| Quote enquiries (no project proceeds) | 12 months from last contact |
| Client & project records, invoices | 7 years (UK tax & accounting requirements) |
| Certification Packs & warranty records | Duration of warranty period, plus 3 years |
| Marketing consent records | Until you withdraw consent |
| Website analytics (cookies) | Up to 26 months, per cookie settings |
Where data is no longer required, we securely delete or anonymise it in line with our internal data retention procedures.
We take the security of your personal data seriously and have implemented appropriate technical and organisational measures to protect it against unauthorised access, alteration, disclosure, or destruction, including:
While we take all reasonable steps to protect your data, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.
Our website uses cookies and similar technologies to improve your browsing experience, understand how visitors use our site, and — where you consent — support marketing activity. The main categories of cookies we use are:
You can manage or withdraw cookie consent at any time through your browser settings or our cookie banner. Disabling non-essential cookies will not affect your ability to browse our website, though some features may be limited. For more detail, see our separate Cookie Policy.
Your personal data is primarily stored and processed within the UK. Where any of our third-party service providers (such as cloud hosting or software tools) process data outside the UK, we ensure appropriate safeguards are in place, such as the UK's International Data Transfer Agreement (IDTA) or adequacy regulations, to ensure your data continues to receive an equivalent level of protection.
Under UK GDPR, you have a number of rights in relation to your personal data:
Request a copy of the personal data we hold about you.
Ask us to correct any inaccurate or incomplete data.
Request deletion of your data, subject to legal retention requirements.
Ask us to limit how we use your data in certain circumstances.
Request your data in a structured, commonly used, machine-readable format.
Object to processing based on legitimate interests or for direct marketing.
Withdraw consent at any time where processing is based on consent.
Complain to the ICO if you believe we have not handled your data properly.
To exercise any of these rights, please contact us using the details in Clause 18. We will respond within one calendar month, in accordance with UK GDPR requirements. We may need to verify your identity before processing certain requests.
Our website and services are intended for businesses, schools (as organisations), and adult homeowners — not for use directly by children. We do not knowingly collect personal data from children under 13. Where our services are provided on school premises, any data collected relates to the school as the client organisation, not to individual pupils.
We will only send you marketing communications (such as service updates or promotional offers) where you have actively opted in to receive them, or where you are an existing client and we are entitled to do so under the "soft opt-in" provisions of the Privacy and Electronic Communications Regulations (PECR).
You can opt out of marketing communications at any time by clicking the unsubscribe link in any email, or by contacting us directly. Opting out of marketing will not affect service-related communications about an active project.
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. Any updates will be posted on this page with a revised "Last Updated" date. We encourage you to review this policy periodically to stay informed about how we protect your information.
If you have concerns about how we have handled your personal data, we would welcome the opportunity to address them directly — please contact us using the details below in the first instance.
If you remain unsatisfied, you have the right to lodge a complaint with the UK's data protection regulator, the Information Commissioner's Office (ICO):
If you have any questions about this Privacy Policy or how we handle your personal data, please get in touch:
