Privacy Notice
​
Effective date: 01/01/2016
Last updated: 01/08/2025
1. Who We Are
3Sixty Protect Ltd ("we", "our", or "us") is a UK-registered company specialising in security services and accredited training, including SIA-licensed programmes, Close Protection, First Aid, and Conflict Management.
Our registered office is:
3Sixty Protect Ltd
20-22 Wenlock Road, London N1 7GU
Company Number: 09387400
Email: info@3sixtyprotect.com
Phone: 02039897024
We are the data controller of personal data we collect and process.
​
2. What This Privacy Notice Covers
This notice explains:
-
What personal data we collect
-
How we collect it
-
Why we collect and use it
-
Who we share it with
-
How long we keep it
-
Your data rights
-
How to contact us
We are committed to handling your personal data lawfully, fairly, and transparently.
​
3. Personal Data We Collect
We may collect the following categories of personal data depending on your relationship with us:
A. For Clients and Business Contacts:
-
Full name
-
Contact details (email, phone, address)
-
Job title and organisation
-
Contractual and financial details (invoices, purchase orders)
-
Communication records
B. For Security Personnel / Job Applicants:
-
Name, address, email, phone number
-
Date of birth
-
National Insurance number
-
SIA license and certification details
-
Training records
-
Employment history
-
Criminal record disclosures (if required)
-
ID documentation (passport, driver’s licence)
-
Right to work evidence
C. For Training Delegates:
-
Name and contact information
-
Course enrolment details
-
Assessment and certification outcomes
-
Emergency contact details
-
Special requirements (e.g. health, access needs)
D. Automatically Collected Data:
-
Website usage data (cookies, IP address, browser type)
-
Device identifiers
​
4. How We Collect Your Data
We collect personal data:
-
Directly from you (e.g. enquiry forms, job applications, training enrolment)
-
From your employer or organisation (when they contract training or services)
-
From public sources (e.g. Companies House, LinkedIn)
-
From third-party background check providers (where applicable)
-
Automatically via our website or learning platforms
​
5. Why We Use Your Data (Purpose & Legal Basis)
Purpose
Lawful Basis
To provide security services
Contractual necessity / Legitimate interest
To deliver accredited training
Legal obligation / Contractual necessity
Recruitment and onboarding of staff
Contractual necessity / Legal obligation
Verifying identity, qualifications, and eligibility
Legal obligation / Legitimate interest
Health & safety compliance
Legal obligation
Certification and licensing with awarding bodies
Legal obligation
Marketing communications (where opted in)
Consent
Managing client and supplier relationships
Contractual necessity / Legitimate interest
Website analytics and performance monitoring
Legitimate interest / Consent (for cookies)
We only collect and use the minimum necessary data for each purpose.
​
​
6. Sharing Your Personal Data
We may share your data with:
-
Awarding bodies (e.g. Highfield, SIA)
-
Employers or contractors (where required)
-
Payment processors and accounting providers
-
DBS (Disclosure & Barring Service) if required
-
IT service providers and secure cloud platforms
-
Law enforcement or government agencies (where legally required)
-
Our legal or professional advisors
We never sell your data and will only share it when necessary, with appropriate safeguards in place.
7. International Transfers
Your data is generally stored and processed in the UK or EEA. If we ever transfer data outside of the UK/EEA, we ensure appropriate safeguards are in place (e.g. UK adequacy decisions, standard contractual clauses).
8. Data Retention
We retain personal data only as long as necessary for the purpose it was collected and in line with legal or regulatory requirements.
Data Type
Retention Period
Training records
3–7 years (depending on awarding body)
Employment applications
12 months (unsuccessful)
Staff records
6 years after employment ends
Financial records
6 years for tax and accounting
CCTV footage (if applicable)
30 days (unless required for an incident)
9. Your Rights Under UK GDPR
You have the following rights:
-
Right to be informed – via this privacy notice
-
Right of access – request a copy of your data
-
Right to rectification – correct incomplete or inaccurate data
-
Right to erasure – request deletion of your data (in certain cases)
-
Right to restrict processing – limit how we use your data
-
Right to data portability – transfer your data elsewhere
-
Right to object – to processing based on legitimate interests or marketing
-
Rights in relation to automated decision-making – we do not use automated profiling
You can make a request by emailing [Insert DPO/Contact Email]. We will respond within one month.
10. How We Protect Your Data
We use appropriate technical and organisational measures to protect your data, including:
-
Encrypted storage and secure backups
-
Role-based access controls
-
Staff training on data protection
-
Policies for device and access management
11. Complaints and Concerns
If you’re unhappy with how we’ve handled your data, please contact us first.
You also have the right to complain to the Information Commissioner's Office (ICO):
www.ico.org.uk
ICO Helpline: 0303 123 1113
12. Updates to This Notice
We may update this notice from time to time to reflect changes in law or our practices. The latest version will always be available on our website or on request.