Privacy notice
Last updated: November 2026
This notice explains how Black Dragon Security Limited uses your personal data when you use this website, send us an enquiry or register your interest in working with us.
Who we are
Black Dragon Security Limited is the data controller for the personal data described in this notice. This means we decide how and why it is used.
- Registered in England and Wales, company number 15500589
- Registered office: 164 Lokma Shawarma, Evington Road, Leicester, England, LE2 1HL
- Email: control@blackdragonsecurity.co.uk
- Phone: +44 7361 802946
What we collect and why
| Why we use it | What we collect | Our lawful basis | How long we keep it |
|---|---|---|---|
| To respond to a quote request and prepare a proposal | Your name, organisation, phone number, email address, site address and postcode, site type, services needed, timescale and anything else you tell us | Taking steps at your request before a contract, and our legitimate interest in responding to business enquiries | 12 months from our last contact, unless you become a customer |
| To respond to a contact form message or email | Your name, email address, phone number if you give it, and your message | Our legitimate interest in responding to people who contact us | 12 months from our last contact |
| To consider you for security work if you register your interest | Your name, phone number, email address, general location, the roles and hours you are interested in, whether you hold an SIA licence and which type, whether you hold a driving licence, and what you tell us about your experience | Our legitimate interest in finding suitable people, and taking steps at your request before a contract | 12 months from when you register, unless you ask us to keep it for longer or delete it sooner |
| To manage customer contracts | The details above, plus contract and billing records | Performing our contract, and meeting our legal obligations | 6 years after the contract ends |
| To deal with data protection requests and complaints | Your details and the content of the request or complaint | Legal obligation | 3 years after the matter is closed |
| To run and protect this website | Technical data such as IP address, browser type and pages requested, held in hosting logs | Our legitimate interest in keeping the website working and secure | Up to 30 days |
Our legitimate interests are running our business, replying to people who contact us and keeping our website secure. We have considered these against your interests, and we do not think they override them. You have the right to object: see below.
What we do not do
- We do not sell your personal data.
- We do not use your enquiry details to send you marketing.
- We do not make decisions about you by automated means alone.
- We do not ask for sensitive information through our website forms. Please do not include any. This includes details of health, ethnicity, religion or criminal records.
Do you have to give us this information?
No, but we need the fields marked as required in order to reply. Without them, we cannot deal with your request.
Who we share it with
Your data is handled by our email and hosting providers, who act on our instructions:
- Email: IONOS, which delivers website form messages to us and hosts our mailbox.
- Hosting: Vercel, which hosts this website and processes form submissions on their way to us.
We may also share data with:
- professional advisers, such as accountants and solicitors, where needed
- the police, regulators, courts or other authorities, where the law requires it or where it is needed to prevent or detect crime
If our business is reorganised or sold, data may pass to the new owner.
Transfers outside the UK
Vercel is based in the United States, and IONOS is part of a group based in Germany. Your data may therefore be processed outside the UK. Where this happens, it is protected by UK adequacy regulations or by the safeguards in our providers' data processing terms, such as the UK International Data Transfer Addendum. Contact us if you want more information.
Your rights
You have the right to:
- ask for a copy of your personal data
- ask us to correct data that is wrong
- ask us to delete your data
- ask us to limit how we use your data
- object to our use of your data where we rely on legitimate interests
- ask us to transfer data you gave us to another organisation, in certain cases
These rights do not apply in every case. To use any of them, email control@blackdragonsecurity.co.uk or use our contact form. It is free, and we will normally respond within one month.
How to complain
If you are unhappy with how we have used your data, please tell us first, using the email address above or our contact form, choosing "Data protection request or complaint". We will acknowledge your complaint within 30 days, look into it, and tell you the outcome without undue delay.
You also have the right to complain to the UK's data protection regulator, the Information Commission. It replaced the Information Commissioner's Office (ICO) on 30 September 2026.
- Website: ico.org.uk/make-a-complaint
- Helpline: 0303 123 1113
- Post: Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
CCTV at sites we work on
This notice covers our website. If you have been recorded by CCTV at a business or site, the organisation that runs that site is normally the controller of the footage. Signs at the site should tell you who to contact.
Cookies
See our cookie policy.
Changes to this notice
We will update this notice when our practices change. The "Last updated" date shows when it last changed.