Your privacy
At CCTV Kit Direct we look after the personal details you share with us, whether you are buying a kit or just browsing. This page explains what we collect, why, and how we protect it.
What we ask for
Opening an account, ordering or sending us a message means sharing a few details with us: your name and address, your email and phone number, your payment details, and a business name if you are buying for one.
How we use your details
We use them to get your order to you, look after your account, help when you contact us, send you product news we think is useful, and do what the law asks of us.
Who sees them
We never sell your details. The couriers bringing your order get your address, and our payment providers receive enough to process what you pay. Beyond that, we pass details on only when the law requires it.
How we protect them
We protect your details with suitable technical and organisational measures, so they are not lost, misused or opened by anyone without permission.
Your rights
Want to see the details we hold about you? Just ask. You can also have them corrected or deleted, object to particular uses of them, or ask us to restrict that use. Get in touch to do any of these.
How we keep a record of site activity
Separately from our analytics, we keep a simple record of what happens on this website. It gives us something to check if an order is ever questioned, if an account looks as though someone else has taken it over, if there is fraud, or if automated bots copy our range and prices.
Here is what goes into it, and what never does.
What the record notes
- The pages you visit, and when you visit them
- Signing in and out, including any sign-in that fails
- Shop steps: a basket add, a checkout start, an order placed, a quote asked for, a file downloaded
- Your IP address
- Your browser, its operating system and the kind of device you use (for example “Chrome, Android, phone”)
- For our own staff: every change they make to a record, what they changed, and any time they were refused access
If you are signed in, the record is linked to your account. If you are not, the only thing it is tied to is a random code kept in your browser, which says nothing about who you are (no name, email or address). Nothing is noted at all unless you have said yes to analytics cookies, and the Cookie Policy has more on this.
What it never notes
Your password, card number and security code are removed before anything is saved. Anything that comes after a ? in a web address is cut off too, as that part may carry a password-reset token or a one-click sign-in link. We never record your keystrokes, mouse movements, scrolling or anything you type into a form.
How long we keep it
Each entry stays for 180 days, after which it is deleted automatically. A few security events also go into a separate audit log that we keep for longer, because it could matter if a legal claim ever had to be defended or settled. Those events are refunds we pay out, data exported from the system, anyone signing in, staff looking at a customer’s record, and changes to account permissions.
The legal basis, in plain words
When you are not signed in, the record depends on your consent, and the cookie banner is where you say yes or no. Until you choose, we assume you have said no, and you are free to say no at any time.
For signed-in customers, we rely instead on our legitimate interests: looking after the security of your account and payments, stopping fraud, and putting right any disagreement about an order. We have balanced that against your interests. The record keeps only what those purposes need and leaves out what you type; it can be searched only by staff given specific access; entries are cleared at six months old; and every search leaves its own trace in the log.
Who can look at it
It is open only to CCTV Kit Direct staff we have named for support, security or fraud checks. The rest of our team cannot open it, it is never passed to advertisers, and we would never sell it.
You can ask us for a copy of your record, or ask us to delete it. You are also free to object to the record being kept whenever it rests on our legitimate interests, and you can take back your analytics consent at any time in your browser’s cookie settings. Email [email protected] and we will help with any of these.
Unhappy with how we handle your data? You can raise it with the Information Commissioner’s Office: ico.org.uk.