Privacy Policy & CCTV Data Protection Notice

1. Overview & Company Details

CCTV Live Monitoring, trading from 34 England’s Ln, Hampstead, London NW3 4UE, United Kingdom, provides professional 24/7 live CCTV surveillance, smart video analytics, remote monitoring, and alarm receiving centre (ARC) operations across the United Kingdom.

This Privacy Policy describes our practices regarding the processing, observation, transmission, retention, and deletion of personal data captured via CCTV surveillance systems connected to our monitoring stations, as well as personal data gathered through our website (cctvlivemonitoring.com) and client communication channels.

We strictly comply with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 (DPA 2018), and the Information Commissioner’s Office (ICO) CCTV and Video Surveillance Code of Practice.

2. Roles: Data Controller vs. Data Processor

In accordance with UK GDPR Article 4, our legal role depends upon the nature of the data processing:

• CCTV Monitoring Services for Clients (Data Processor): When we monitor CCTV cameras installed on client premises (e.g. construction sites, warehouses, offices, commercial parks), the client acts as the Data Controller who determines the purpose and necessity of surveillance on their property. CCTV Live Monitoring acts strictly as the Data Processor, processing and reviewing footage exclusively under the client’s written instructions and agreed Monitoring Protocol.
• Website, Enquiries & Direct Business Operations (Data Controller): We act as the Data Controller for personal data collected directly from prospective clients, web visitors, quote request submissions, telephone logs, and billing contacts.

3. Categories of Personal Data Collected

Depending upon your interaction with us, we may collect and process the following categories of data:

• Live Visual Footage: Video streams and recorded clips capturing identifiable human images, physical appearance, gait, activities, clothing, and vehicle registration numbers within the camera field of view.
• Audio Recordings: Where two-way audio horn speakers or intercoms are actively utilized, verbal warnings issued by our operators and any proximate audio responses are recorded for evidentiary and quality assurance purposes.
• Metadata & System Logs: Timestamped trigger logs, AI object detection events (human/vehicle classification), camera online/offline statuses, bandwidth telemetry, and operator audit trail entries recording who reviewed a camera feed and for what duration.
• Client & Keyholder Information: Names, business designations, phone numbers, email addresses, premises access codes, and emergency keyholder hierarchy lists.

4. Lawful Bases for Video Processing under UK GDPR

We only monitor and process video footage where a lawful basis under Article 6 of the UK GDPR exists:

• Article 6(1)(f) – Legitimate Interests: The continuous visual surveillance of private premises is carried out to pursue the legitimate commercial and safety interests of our clients and the public. These interests include the deterrence and detection of crime, theft prevention, asset protection, safeguarding of solitary workers, fire/hazard spotting, and personal safety.
• Article 6(1)(b) – Contractual Performance: Necessary for the fulfilment of live security monitoring contracts, escalation protocols, and alarm verification services requested by our clients.
• Article 6(1)(c) – Legal Obligation: Processing and retaining specific incident records where required to comply with statutory court orders, police production orders, or regulatory mandates under UK law.

5. Security Operations Centre (SOC) Security Standards

The physical and digital security of all video surveillance streams is of paramount importance. We implement strict technical and organisational safeguards:

• SIA Licenced Operators: Every monitoring specialist holds a valid Security Industry Authority (SIA) Public Space Surveillance (CCTV) licence and undergoes BS 7858 security vetting prior to employment.
• Restricted Access ARC: Monitoring desks are situated within a secure, access-controlled Alarm Receiving Centre. Personal smartphones, cameras, and external storage devices are strictly prohibited from operator consoles.
• Encrypted Video Streams: Data transmitted from client recorders to our central monitoring platform is secured using TLS 1.2 / 1.3 protocol and AES-256 encryption.
• Comprehensive Audit Trails: Every operator login, camera switch, live viewing session, and export request is immutably logged with user IDs and timestamps.

6. Retention and Automatic Overwriting of Footage

In accordance with the ICO principle of storage limitation, video surveillance data is not retained for longer than is strictly necessary:

• Routine Footage: Routine continuous CCTV recordings stored on local NVRs or cloud buffers are automatically and irreversibly overwritten on a rolling cycle, typically between 30 calendar days, unless specific client SLA schedules dictate otherwise.
• Incident & Alarm Clips: Where a confirmed security breach, trespassing event, criminal offense, or health & safety incident occurs, the relevant evidentiary video clip is extracted and stored in an isolated, encrypted incident archive until the conclusion of police investigations, insurance claim settlements, or court proceedings.

7. Data Sharing & Third-Party Disclosures

We do not sell, rent, or commercialize surveillance footage. Data is disclosed only in strictly defined circumstances:

• Law Enforcement Agencies: Under Schedule 2, Part 1, Paragraph 2 of the Data Protection Act 2018 (crime prevention and detection exemption), we release relevant footage to UK Police forces upon receipt of a formal Section 29 / Schedule 2 disclosure request form.
• Authorised Client Keyholders: Incident reports and secure video clips are shared with nominated site management and authorised keyholders.
• Insurers and Legal Advisers: Where requested by the client to support an active property loss, liability, or damages claim.

8. Subject Access Requests (SAR) for CCTV Footage

Under UK GDPR Article 15, individuals whose images have been captured by CCTV have the right to request a copy of their personal data (a Subject Access Request):

How to Submit a Request

To request CCTV footage, please email our Data Protection Desk at info@cctvlivemonitoring.com. Because video files contain hundreds of individuals, you must provide:

• Proof of identity (e.g. passport or driving licence).
• A clear recent photograph to verify your likeness.
• The exact date, time window (within a 1–2 hour range), and exact site location.

Protection of Third-Party Privacy (Pixelation)

In line with ICO guidance, when releasing footage to a data subject, all bystander individuals, third-party vehicles, and unrelated license plates are digitally obscured, blurred, or pixelated to prevent infringing upon the privacy rights of other persons.

We respond to all valid Subject Access Requests free of charge within one calendar month of receipt.

9. Signage & Transparency Obligations on Site

Under UK law, transparent notification of CCTV operations is mandatory. While CCTV Live Monitoring provides the remote observation platform, the site owner (Data Controller) is responsible for ensuring that conspicuous, weather-resistant CCTV warning signs are displayed at all site boundaries and entry gates. Signs must clearly state:

• That CCTV live monitoring and recording are in operation.
• The purpose of surveillance (e.g. crime prevention and public safety).
• The contact details of the organization controlling the cameras.

10. Your Rights & Regulatory Recourse

Under the UK GDPR and Data Protection Act 2018, data subjects have the right to:

• Request access to their personal video records (Right of Access).
• Request erasure of footage stored without lawful necessity (Right to Erasure).
• Object to processing under legitimate interest grounds (Right to Object).
• Request restriction of processing pending dispute resolution (Right to Restriction).

If you believe that your video data has been processed unlawfully, you have the statutory right to lodge a complaint with the UK supervisory authority:

11. Contacting Our Data Privacy Team

If you have any questions, Subject Access Requests, or concerns regarding our CCTV data practices, please reach out directly:

• Data Protection Officer: CCTV Live Monitoring Privacy Desk
• Address: 34 England’s Ln, Hampstead, London NW3 4UE, United Kingdom
• Email: info@cctvlivemonitoring.co.uk
• Phone: +44 7759 011228