Privacy Policy

About this policy

At CCTV Master we take your privacy seriously, whether you’re buying from us or just having a look around. Here’s what personal information we collect, what we do with it and how we keep it safe.

What we collect

When you set up an account, place an order or get in touch, we ask for the details we need. That’s your name, a business name if you have one, your address, email, phone number and payment details.

What we use it for

We use it to process your orders, run your account, help you when you get in touch, send you product updates we think you’ll find useful, and meet our legal obligations.

Who we share it with

We never sell your personal data. We may pass it to the couriers delivering your order and the companies handling your payment, and we’ll share it if the law says we have to.

Keeping it safe

We’ve put sensible technical and organisational safeguards in place so your personal data isn’t accessed without permission, lost or misused.

Your rights

You can ask to see whatever personal data we have on you, and get it corrected or deleted. For some of the ways we use it, you’re also free to object, or to ask us to limit them. Just get in touch if you’d like to do any of these.

Cookies

Cookies help the site work properly and make it nicer to use. Our Cookie Policy has the details.

Our site activity log, question by question

As well as our analytics, we keep a separate log of what happens on this site. Here’s how it works.

Why keep a log at all?

So we can get to the bottom of things when something goes wrong: an order that’s disputed, an account that looks like it’s been taken over, fraud, or bots copying our product list and prices.

What goes into it?

What sort of device you’re on, its operating system and your browser (say, “Safari, iOS, mobile”), plus the IP address you’re connecting from. Which pages you open, and when. What you do while you’re here: asking for a quote, downloading a file, putting something in your basket, going to checkout, placing an order, and signing in or out (a sign-in that fails counts too). And if you’re one of our staff, every change you make to a record, what you changed, and any time you’re refused access to something.

Does it know who I am?

Only when you’re signed in: then entries are tied to your account. If you’re not signed in, they’re tied to nothing but a random code saved in your browser — never your name, address or email. What’s more, nothing gets logged for you at all until you’ve accepted analytics cookies (our Cookie Policy explains how).

What’s never in it?

Anything you type, your keystrokes, or how you scroll and move your mouse. Not your card number, the security code on it or your password either: we strip those out before anything’s saved. And we chop off everything after the ? in a web address, because that bit can contain a link that signs you in or a code for resetting your password.

How long do you keep it?

180 days, then it’s deleted automatically. A few events that matter for security are also copied into a separate audit log. We keep that one for longer, as we might need it to defend or settle a legal claim. Those events are: money being paid back to a customer, one of our team opening a customer’s record, anyone signing in, data being exported, and a change to what an account is allowed to do (its permissions).

Who can see it?

Only CCTV Master staff we’ve named and given access on purpose, whether that’s for security, fraud checks or support. Nobody else on the team can open it. Advertisers never get it, and we never sell it.

What gives you the right to keep it?

If you’re not signed in, it’s your consent, which you give or refuse on the cookie banner. If you haven’t chosen yet, we treat that as a no, and you can always say no.

If you’re signed in, it’s our legitimate interests: keeping accounts and payments safe, stopping fraud, and sorting out any disagreement over what was ordered and who ordered it. We’ve weighed that up against your interests. The log only holds what those jobs need and never what you type. Only staff who’ve been given specific access can search it, it’s wiped after six months, and each time someone searches it, that gets logged too.

What can I do about it?

Want a copy of your log, or want it deleted? Just ask. You can also object to us keeping it when we’re relying on legitimate interests, and take back your consent to the analytics part whenever you like in your browser’s cookie settings. Just email Sales@cctvmaster.co.uk to do any of these. And the ICO (the Information Commissioner’s Office) takes complaints too: ico.org.uk.