Privacy Policy & Data Protection

1. Introduction & Overview

Shahual Group Limited ("we", "our", or "us") is committed to protecting the privacy and security of personal data collected from clients, site visitors, security personnel, and logistics customers in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Data We Collect

We may collect, store, and process the following categories of personal data:

• Identity & Contact Data: Name, business name, job title, email address, phone number, and physical property or delivery addresses.
• Security Operational Data: Visitor access logs, keyholding records, body-worn camera footage, and CCTV surveillance images captured at client premises.
• Logistics Consignment Data: Sender/recipient details, electronic proof of delivery (ePOD) signatures, and real-time vehicle GPS telemetry.
• Employment Screening Data: For security guards and drivers, BS 7858 vetting records including 5-year employment checks, DBS criminal record clearances, and identity documents.

3. Lawful Basis & Purposes for Processing

We process your personal data under the following lawful bases:

• Contract Performance: To fulfill contracts for security guarding, alarm response, and express courier logistics.
• Legal Obligation: To comply with SIA licensing rules, UK transport regulations, and health & safety legislation.
• Legitimate Interests: To prevent crime, protect physical property assets, and ensure driver/guard safety.

4. Data Sharing & Third Parties

We do not sell personal data. Data may be shared with trusted third parties strictly necessary to deliver our services, including emergency services (Police, Fire), SIA audit bodies, NSI monitoring centers, and encrypted cloud infrastructure providers.

5. CCTV & Body-Worn Camera Retention

CCTV and body-worn camera footage captured by Shahual Group security personnel is retained for a maximum of 30 days unless required for active police investigations or legal proceedings.

6. Your Data Rights

Under UK GDPR, you have the right to request access to your personal data (Subject Access Request), request rectification or deletion, object to processing, and lodge a complaint with the Information Commissioner's Office (ICO).

7. Data Protection Officer Contact

For data protection inquiries, contact our compliance desk at +44 (0) 7405 983723 or write to: Data Protection Lead, 9 Hounslow Avenue, Hounslow, London, TW3 2DZ, United Kingdom.