Purpose of this policy
This policy explains how CCTV Traders collects, uses and protects the personal information of its customers, retail and trade, and of visitors to its website.
Personal information we collect
We collect the information you provide when you open an account, apply for trade pricing, place an order or contact us. The information concerned is your name and, where relevant, your business name, together with your postal and email addresses, your telephone number and your payment details.
How we use personal information
We use it to process and fulfil orders, to administer accounts and trade pricing, to provide customer support, to send relevant product information and to meet our legal obligations.
Disclosure to third parties
Personal data is never sold. We disclose it only to delivery partners and payment processors, to the extent needed to fulfil and pay for an order, and where we are required by law to do so.
Safeguards
Appropriate technical and organisational controls are in place to prevent the loss or misuse of personal data, or access to it without permission.
Your rights
You are entitled to request access to your personal data and its correction or erasure, and to object to, or request restriction of, certain processing. Any of these rights may be exercised by contacting us.
Cookies
Cookies are used to operate the website correctly and to improve its use; our Cookie Policy gives full details.
Website activity records
Purpose of the record
Separately from analytics, we maintain a record of activity on this website. Its purpose is to provide evidence in four situations: where an order is challenged, where an account may have been taken over, where fraud is suspected, and where our catalogue and prices are copied by automated means.
Lawful basis
For customers who are signed in, our legitimate interests are the basis: protecting accounts and payments from misuse, preventing fraud and resolving disputes over orders. We have balanced those interests against yours: the record contains only what those purposes require, excludes anything typed into the site, may be searched only by staff granted specific access, and is deleted after six months, with each search itself recorded.
Where a visitor is not signed in, the basis is consent, given or withheld on the cookie banner; consent is treated as refused until a choice is made, and may be refused at any time.
Scope of the record
The record captures pages viewed and the time of each view; sign-ins, sign-outs and unsuccessful sign-in attempts; items added to the basket, checkouts started, orders placed, quotes requested and files downloaded; the IP address used; and the device type, browser and operating system in use (for example “laptop, Safari, macOS”). For staff accounts, it also records every edit to a record and what the edit was, together with any refused attempt at access.
It does not capture security codes, payment card numbers or passwords, all of which are removed before storage; the query string of a web address (anything after the ?), since sign-in links and password reset tokens may appear there; or any keystrokes, scrolling, mouse movement or content typed into forms.
Entries made while you are signed in are associated with your account; otherwise, they are associated only with a random identifier stored by the browser, never with your name or your email or postal address, and nothing at all is recorded until analytics cookies are accepted. Our Cookie Policy describes this.
Retention and access
- Entries are deleted automatically once they are 180 days old.
- A defined set of security events is also written to an audit log and retained for longer, as evidence in the event of a legal claim that must be defended or resolved: refunds processed, exports of data, sign-ins, changes to user permissions and staff access to customer records.
- Only CCTV Traders staff who are expressly named, and who need it for security, fraud or support work, may open the record; it is closed to all other staff, is never made available to advertisers and is not sold.
Your rights
On request, we will send you a copy of the record we hold on you, or delete it. Where our basis is legitimate interests, you may also object to its retention. Consent to the analytics element may be withdrawn whenever you wish, by changing your browser’s cookie settings. Requests should be sent to [email protected].
A complaint may also be made to the Information Commissioner’s Office, which can be reached at ico.org.uk.