Version 2.0 - June 2026
At Banham Security (“we” or “our”), safeguarding your personal information is central to how we operate. We are committed to treating your data with care, transparency, and respect.
This notice explains:
What personal data we collect and why
The legal bases we rely on
How long we keep your data
Who we share it with and why
Your rights under UK data protection law
How we protect your information
How cookies are used
How to raise concerns or complaints.
1. Company Information
Banham Patent Locks Ltd, registered in England (No. 0457812).
Address: 20 Thornsett Road, London, SW18 4EF.
ICO Registration: ZA623239
Contact: security@banham.com
Data Protection Officer: dpo@ig-smart.com
2. Types of data collected:
Name, email address, contact details.
Service and installation records.
Payment and transaction details.
Special category data (only with explicit consent).
3. Legal Bases for Processing
We process your personal data for the following purposes and under the following legal bases:
Processing Activity | Legal Basis | Example |
Installation & servicing | Contractual necessity | Scheduling visits, maintaining systems, booking appointments, customer management |
Financial records | Legal obligation | Tax compliance, invoicing |
Marketing (opt-in) | Consent | Newsletters, product updates |
Related product offers | Legitimate interests | Informing you of relevant products and services |
Regulatory disclosures | Legal obligation | Sharing with law enforcement if required |
You may with draw consent or object to legitimate interest processing at any time.
4. Data Retention
As we collect data for a wide range of purposes, there is no single retention period that applies to all information. Instead, we determine a carefully assessed retention timeframe for each individual product and service. For example, legislation requires us to retain details of financial transactions for seven years. Under NSI regulations, where we monitor your security system, certain information must be retained for up to three years. Some examples are below:
Financial records – 7 years (legal obligation).
Monitoring logs – 3 years (NSI regulations).
Marketing preferences – until consent is withdrawn.
Service records – retained while contract is active, then securely deleted or anonymised.
After retention periods pass, data is either erased, anonymised, or placed on a suppression list to prevent unwanted contact.
5. How we share personal information
No Selling or Sharing for Marketing
We do not, and will never, sell or share your personal information with third parties for their marketing purposes.
General Approach
As a rule, we do not share your information with anyone outside Banham Security. Protecting your data and maintaining customer confidentiality are fundamental to our business. If we ever need to share your information, we will inform you in advance unless we are legally prevented from doing so.
Service Providers and Contractors
Occasionally, other organisations may need access to your information in order to provide services on our behalf (for example, IT support or maintenance partners).
These providers are bound by strict contractual obligations.
They must comply with all applicable data protection and privacy laws.
We may also carry out independent audits to ensure they meet our standards.
Legal and Regulatory Requirements
In certain circumstances, we may be required to disclose information to regulators, law enforcement, or other authorities. Where this happens, we will only share what is strictly necessary and permitted by law.
6. International Transfers
We may use service providers to help us run these sites (or services available on the sites), some of whom may be based outside the UK and / or EEA. If data is transferred outside the UK/EEA, we use:
UK adequacy regulations (where applicable).
International Data Transfer Agreements (IDTAs).
Standard Contractual Clauses (SCCs).
7. Your Rights
You have the following rights under UK GDPR and the Data Protection Act 2018:
Access – request a copy of your data.
Rectification – correct inaccurate information.
Erasure – request deletion (subject to legal obligations).
Restriction – limit processing in certain cases.
Portability – receive data in a machine-readable format.
Object – stop processing based on legitimate interests or direct marketing.
Automated decisions – you will not be subject to decisions made solely by automated means.
We respond within one month of verified requests. Please email privacy@banham.com or write to our postal address.
8. Children’s Data
We do not knowingly collect data from children under 13 without parental consent. If discovered, such data will be deleted immediately.
9. Cookies & Analytics
Cookies are packets of data that sit on our website, in some cases to make it work, and in some cases to add additional services. For more information about cookies, how to look after them, even how to turn them off, please visit our privacy preference centre.
We use Hotjar to understand how visitors interact with our website so we can improve user experience. It collects limited technical and usage data, such as anonymised IP address, device type, screen size, browser information, and country-level location, through cookies and similar technologies. The data is stored in a pseudonymised profile and is not used to identify individual users. Please find more information about this in our privacy preference centre.
10. How We Protect Your Data
At Banham Security, the protection of your personal data is integral to our operations. We apply a layered approach to security, combining technology, processes, and people to reduce risks and safeguard your information against accidental loss, misuse, or unauthorised access.
Our measures include:
Network and perimeter protection through advanced firewalls and monitoring tools.
Encryption protocols to secure data both when stored and when transmitted.
Strict access controls, ensuring only authorised staff can view or handle personal data.
Routine system maintenance, including timely updates and security patches.
Malware detection and prevention tools to guard against external threats.
Staff training and awareness programmes so that everyone understands their role in protecting your information.
11. Job Applicant Privacy Notice
Our job applicant privacy notice is available here.
12. Communication and Complaints
If you have any concerns regarding your data, you have the right to lodge a complaint with us by contacting security@banham.com or contact us by telephone on 020 7622 5151.
If you remain dissatisfied with our response to your complaint or how we handle your personal data, you have the right to lodge a complaint with the supervisory authority – details of which are given below:
Information Commissioner’s Office https://ico.org.uk/concerns /Telephone: +44 303 123 1113.
13. Changes to This Notice
If we make changes to this document, we will show you what they are here. If these changes are significant, we may also choose to email relevant individuals with new details. If we are required by law, we will obtain your consent to make these changes.
Changes to this policy by date
May 2018 – New company privacy promise created.
August 2019 – Privacy promise updated.
February 2020 – Privacy promise updated.
March 2021 - Job Applicant Privacy Notice added.