Last updated: 28 October 2026
This policy explains how Bajwa Security Solutions Limited ("BSS", "we", "us") collects and uses personal data when you use this website, contact us, apply for a job or receive our services. We are committed to handling personal data in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who we are
Bajwa Security Solutions Limited is the data controller for the personal data described in this policy. We are a company registered in England and Wales under company number 13960389. Our registered office is 6 Hawkins Avenue, Gravesend, Kent DA12 5NH.
Contact for data protection matters: info@bajwass.co.uk, or write to us at the address above.
2. The data we collect
| Who | Data |
|---|---|
| Enquirers and clients | Name, company, email address, phone number, site address or postcode, details of your security requirements and our correspondence with you. |
| Job applicants | Name, contact details, postcode, SIA licence number, employment history, right-to-work information and the information needed for BS 7858 security screening. |
| Website visitors | Technical data such as IP address, browser type and pages viewed, collected through server logs and, only if you consent, analytics cookies. |
| People on client sites | Visitor logs, incident reports, body-worn video and CCTV images where these form part of a service we provide to a client. |
3. How we use it and our lawful basis
| Purpose | Lawful basis (UK GDPR Article 6) |
|---|---|
| Responding to enquiries and preparing quotes | Steps taken at your request before entering into a contract; legitimate interests |
| Providing security services to clients | Performance of a contract; legitimate interests in protecting people and property |
| Recruitment and pre-employment screening | Steps before entering into a contract; legal obligation (right-to-work and SIA requirements) |
| Keeping business, tax and insurance records | Legal obligation |
| Website security and improvement | Legitimate interests; consent for analytics cookies |
Where we process criminal offence data for screening, we do so as permitted by the Data Protection Act 2018, Schedule 1, and in line with our appropriate policy document. We do not use personal data for automated decision-making that has legal or similarly significant effects.
4. Who we share it with
We never sell your personal data. We share it only where necessary with:
- Service providers who host our website and email and support our IT, under written contracts;
- Screening and referencing providers, and the Security Industry Authority, for recruitment;
- Our clients, where reports relate to the services we provide them;
- The police, courts or regulators where we are required or permitted by law;
- Our insurers and professional advisers.
5. International transfers
We aim to keep data in the UK. If a provider processes data outside the UK, we make sure appropriate safeguards are in place, such as UK adequacy regulations or the International Data Transfer Agreement.
6. How long we keep it
- Enquiries that do not lead to a contract: up to 2 years.
- Client and contract records: 6 years after the contract ends.
- Unsuccessful job applications: 6 months after the decision.
- Employee screening records: for the duration of employment plus at least 5 years, in line with BS 7858.
- CCTV and body-worn video: normally no more than 31 days unless needed for an investigation.
7. Your rights
Under UK data protection law you have the right to:
- access the personal data we hold about you;
- ask us to correct inaccurate data or complete incomplete data;
- ask us to erase your data in certain circumstances;
- ask us to restrict or object to processing;
- data portability, where processing is based on consent or contract and carried out automatically;
- withdraw consent at any time, where we rely on consent.
To exercise these rights, contact us at info@bajwass.co.uk. We will respond within one month.
8. Security
We use appropriate technical and organisational measures to protect personal data, including encrypted connections (HTTPS), access controls and staff confidentiality obligations.
9. Cookies
See our cookie policy for details of the cookies we use and how to control them.
10. Complaints
If you are unhappy with how we have handled your data, please contact us first. You also have the right to complain to the Information Commissioner's Office (ICO), the UK supervisory authority, at ico.org.uk or on 0303 123 1113.
11. Changes to this policy
We may update this policy from time to time. The date at the top shows when it was last revised.