Privacy Policy

Introduction

CCTV Master is committed to protecting the privacy of our customers and website visitors. This policy explains how we collect, use, and safeguard your personal information.

Information we collect

We collect information you provide when creating a trade account, placing orders, or contacting us. This includes your name, business name, address, email, phone number, and payment details.

How we use your information

We use your information to process orders, manage your trade account, provide customer support, send relevant product updates, and comply with legal obligations.

Data sharing

We do not sell your personal data. We may share information with delivery partners, payment processors, and where required by law.

Data security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse.

Your rights

You have the right to access, correct, or delete your personal data. You may also object to or restrict certain processing. Contact us to exercise these rights.

Cookies

We use cookies to ensure our website functions correctly and to improve your experience. See our Cookie Policy for more details.

Records of Activity on Our Website

We keep a record of activity on our website. This is separate from analytics: it exists so that we can investigate a disputed order, a suspected account takeover, fraud, or automated scraping of our catalogue and pricing.

What we record

• Pages visited, and when
• Actions taken — signing in and out, failed sign-in attempts, adding to basket, starting checkout, placing an order, requesting a quote, and downloading files
• Your IP address
• Your browser, operating system and device type (for example “Chrome, Windows, desktop”)
• For staff accounts, changes made to records, along with what changed, and any refused attempt to access something

Where you are signed in, this is linked to your account. Where you are not signed in, it is linked only to a random identifier stored in your browser — not to your name, email or address — and, as explained in our Cookie Policy, it is only recorded at all if you accept analytics cookies.

What we deliberately do not record

• Passwords, payment card numbers, or security codes — these are stripped before storage
• The contents of web addresses after the ? — these can contain sign-in links and reset tokens, so they are removed
• Keystrokes, mouse movement, scrolling, or the contents of what you type

How long we keep it

Activity records are held for 180 days and then deleted automatically. A smaller set of security-significant events — signing in, permission changes, staff accessing customer records, refunds and exports — is also written to our audit log, which we keep for longer because we may need it to defend or resolve a legal claim.

Why we are allowed to do this

For visitors who are not signed in, we rely on your consent, given through the cookie banner. You can refuse, and refusing is the default until you choose.

For signed-in accounts, we rely on our legitimate interests in keeping accounts and payments secure, preventing fraud, and being able to resolve disputes about what was ordered and by whom. We have weighed this against your interests: the record is limited to what is needed for those purposes, excludes the contents of what you type, is access-controlled so only specifically authorised staff can search it, and expires after six months. Every search of it is itself logged.

Who can see it

Access is restricted to named CCTV Master staff who have been granted it explicitly for support, security or fraud investigation. It is not available to staff generally, is not shared with advertisers, and is not sold.

Your rights

You can ask for a copy of your activity record, ask us to delete it, or object to it being kept where we rely on legitimate interests. You can withdraw consent for the analytics portion at any time through your browser's cookie settings. To exercise any of these rights, contact us at Sales@cctvmaster.co.uk. You also have the right to complain to the Information Commissioner's Office at ico.org.uk.