PRIVACY POLICY

Last Updated: 23 September 2026

ARK Guarding Solutions ("ARK", "we", "us", or "our") respects your privacy and is committed to protecting your personal information.

This Privacy Policy explains how we collect, use, store and protect personal information when you visit our website, contact us, enquire about our services, apply for work, work with us as a client, supplier or contractor, or otherwise interact with ARK Guarding Solutions.

We process personal information in accordance with applicable UK data protection legislation, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. WHO WE ARE

ARK Guarding Solutions is a provider of professional security and guarding services.

For the purposes of applicable data protection legislation, ARK Guarding Solutions may act as the data controller for personal information that we collect and process.

If you have any questions regarding this Privacy Policy or how your personal information is handled, please contact us:

ARK Guarding Solutions

Email: Support@arkguardingsolution.co.uk

2. INFORMATION WE COLLECT

Depending on how you interact with ARK, we may collect different categories of personal information.

This may include:

Contact Information

• Full name

• Email address

• Telephone number

• Postal address

• Business address

• Company or organisation name

• Job title or position

Enquiry Information

When you contact us regarding our services, we may collect information about:

• The service you are interested in;

• Your business or organisation;

• Your security requirements;

• Event or venue information;

• Site information;

• Dates and times;

• Staffing requirements;

• Operational requirements;

• Other information you voluntarily provide.

Recruitment and Personnel Information

If you apply for employment, subcontractor work or security assignments with ARK, we may collect information including:

• Name and contact details;

• Date of birth;

• Address;

• Right-to-work information;

• Employment history;

• Qualifications;

• Training records;

• SIA licence information;

• References;

• Vetting information;

• Identity documentation;

• Bank and payroll information where required;

• Emergency contact information;

• Availability;

• Relevant compliance information.

Some recruitment and vetting information may constitute more sensitive personal data. Where this occurs, we will process it only where we have an appropriate lawful basis and where permitted by applicable law.

3. INFORMATION COLLECTED AUTOMATICALLY

When you visit our website, certain technical information may be collected automatically.

This may include:

• IP address;

• Browser type;

• Device type;

• Operating system;

• Approximate geographical location;

• Pages visited;

• Time and date of visits;

• Referring website;

• Website interaction information;

• Technical and diagnostic information.

This information may be collected through cookies, analytics services, server logs and similar technologies.

4. HOW WE USE YOUR INFORMATION

We may use personal information for purposes including:

• Responding to enquiries;

• Providing quotations;

• Providing security services;

• Managing client relationships;

• Communicating with clients;

• Managing bookings and assignments;

• Recruiting personnel;

• Managing employees and subcontractors;

• Conducting appropriate security vetting;

• Verifying qualifications and licences;

• Managing payroll and payments;

• Managing suppliers;

• Maintaining operational records;

• Managing incidents;

• Producing reports;

• Maintaining security and compliance records;

• Improving our website and services;

• Preventing fraud and misuse;

• Maintaining website and information security;

• Complying with legal and regulatory requirements;

• Protecting people, property and our legitimate business interests;

• Responding to legal requests or law enforcement enquiries where legally required or permitted.

5. LAWFUL BASIS FOR PROCESSING

Under UK data protection law, we must have a lawful basis for processing personal information.

Depending on the circumstances, we may rely on one or more of the following:

Consent

Where you have provided consent for us to use your information for a specific purpose.

You may withdraw consent at any time where processing is based on consent.

Contract

Where processing is necessary to enter into or perform a contract with you.

For example, where you engage ARK to provide security services.

Legal Obligation

Where processing is necessary for us to comply with a legal or regulatory obligation.

Legitimate Interests

Where processing is necessary for our legitimate business interests, provided that those interests are not overridden by your rights and interests.

This may include:

• Managing business relationships;

• Providing and improving services;

• Maintaining operational security;

• Preventing fraud;

• Protecting our systems;

• Managing enquiries;

• Marketing our services where permitted;

• Managing business administration.

Vital Interests

In limited circumstances, information may be processed where necessary to protect someone's vital interests.

Public Task

Where applicable, information may be processed where necessary for a task carried out in the public interest or under official authority.

6. SPECIAL CATEGORY DATA

Certain types of personal information are considered "special category data" under UK GDPR.

This may include information relating to:

• Health;

• Biometric data where used for identification;

• Racial or ethnic origin;

• Religious or philosophical beliefs;

• Trade union membership;

• Genetic information;

• Sexual orientation.

ARK will only process special category data where there is an appropriate legal basis and additional condition under applicable data protection law.

Where possible, we will minimise the amount of sensitive information collected and only retain it for as long as reasonably necessary.

7. SECURITY VETTING AND SIA INFORMATION

Where required for the provision of security services or recruitment, ARK may process information relating to security licences, qualifications, identity verification, employment history, right-to-work status and relevant vetting requirements.

This information may be used to:

• Verify identity;

• Confirm eligibility to work;

• Confirm relevant licences and qualifications;

• Allocate personnel to suitable assignments;

• Maintain compliance records;

• Meet contractual requirements;

• Meet legal or regulatory requirements.

Information will only be collected and processed where necessary and proportionate to the relevant purpose.

8. CCTV, BODY-WORN VIDEO AND SECURITY RECORDINGS

Where ARK operates or manages CCTV, body-worn cameras, vehicle cameras, access-control systems or other security recording systems as part of a service, personal information may be captured.

This may include images, video, audio, vehicle information or other information relating to identifiable individuals.

Such information may be used for purposes including:

• Preventing and detecting crime;

• Protecting people and property;

• Investigating incidents;

• Supporting security operations;

• Resolving disputes;

• Providing evidence where legally required;

• Supporting law enforcement investigations;

• Meeting contractual or legal obligations.

The use of such systems will be subject to applicable data protection legislation and relevant policies and procedures.

Where ARK processes recordings on behalf of a client, the client may be the data controller and ARK may act as a data processor or otherwise process the information on the client's documented instructions, depending on the circumstances.

9. INCIDENT AND OPERATIONAL RECORDS

As part of providing security services, ARK may create and maintain operational records.

These may include:

• Incident reports;

• Occurrence logs;

• Patrol records;

• Security reports;

• Statements;

• Access records;

• Deployment records;

• Attendance records;

• Assignment information;

• Communications relating to an incident.

Such records may contain personal information where individuals are involved in an incident or assignment.

These records may be retained where necessary for legitimate business, contractual, legal, insurance, regulatory or security purposes.

10. INFORMATION SHARING

We may share personal information where necessary and lawful with selected third parties.

These may include:

• Clients;

• Suppliers;

• Subcontractors;

• Security personnel;

• Payroll providers;

• Accountants;

• Legal advisers;

• Insurance providers;

• IT and technology providers;

• Website hosting providers;

• Email providers;

• Recruitment providers;

• Background screening or vetting providers;

• Professional advisers;

• Regulators;

• Government authorities;

• Law enforcement agencies;

• Emergency services.

We do not sell personal information to third parties.

Where we use service providers to process personal information on our behalf, we take reasonable steps to ensure appropriate contractual and security arrangements are in place.

11. INTERNATIONAL DATA TRANSFERS

Some technology providers or service providers used by ARK may process information outside the United Kingdom.

Where personal information is transferred outside the UK, we will take appropriate steps to ensure that the transfer is lawful and that appropriate safeguards are in place in accordance with applicable data protection legislation.

This may include using:

• UK adequacy regulations;

• Adequacy decisions;

• International Data Transfer Agreements;

• UK Addendums;

• Other lawful transfer mechanisms.

12. DATA SECURITY

ARK takes the security of personal information seriously.

We use appropriate technical and organisational measures designed to protect personal information against:

• Unauthorised access;

• Accidental loss;

• Destruction;

• Alteration;

• Disclosure;

• Misuse.

Security measures may include:

• Access controls;

• Password protection;

• User permissions;

• Secure systems;

• Encryption where appropriate;

• Staff training;

• Physical security;

• Security monitoring;

• Backup procedures;

• Secure disposal procedures.

However, no method of transmitting or storing information electronically can be guaranteed to be completely secure.

13. HOW LONG WE KEEP YOUR INFORMATION

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected.

Retention periods may depend on:

• The nature of the information;

• The reason it was collected;

• Whether we have an ongoing business relationship;

• Contractual requirements;

• Legal and regulatory requirements;

• Insurance requirements;

• Accounting requirements;

• Dispute resolution;

• Security requirements.

When personal information is no longer required, it will be securely deleted, destroyed or anonymised where appropriate.

Different categories of information may therefore have different retention periods.

14. MARKETING

Where permitted by law, we may contact existing clients or business contacts regarding ARK services that may be relevant to their organisation.

We may also send marketing communications where you have provided appropriate consent.

You can opt out of marketing communications at any time by:

• Following the unsubscribe instructions in the communication; or

• Contacting us at Support@arkguardingsolution.co.uk.

Opting out of marketing will not affect essential communications relating to services, contracts, payments, security assignments or other legitimate business matters.

15. COOKIES

Our website may use cookies and similar technologies.

Cookies are small files placed on your device that can help websites function correctly and understand how visitors use them.

Cookies may be used for purposes including:

• Website functionality;

• Security;

• Website analytics;

• Performance monitoring;

• Remembering preferences;

• Understanding website usage;

• Marketing, where applicable.

Where required by law, we will ask for consent before placing non-essential cookies on your device.

You can manage or disable cookies through your browser settings and, where provided, our website cookie settings.

For more information, please see our Cookie Policy.

16. THIRD-PARTY SERVICES

Our website may use third-party services such as analytics, website hosting, communications, payment, recruitment, security or marketing platforms.

These providers may process personal information on our behalf or independently, depending on the service.

Where appropriate, we require relevant suppliers to maintain suitable privacy and security protections.

We recommend reviewing the privacy policies of third-party services where relevant.

17. YOUR DATA PROTECTION RIGHTS

Under UK data protection law, you may have rights including:

Right to be informed

You have the right to understand how your personal information is collected and used.

Right of access

You may request a copy of the personal information we hold about you.

Right to rectification

You may request that inaccurate or incomplete personal information is corrected.

Right to erasure

In certain circumstances, you may request that your personal information is deleted.

Right to restrict processing

In certain circumstances, you may request that we restrict how your personal information is processed.

Right to data portability

Where applicable, you may request certain personal information in a structured, commonly used and machine-readable format.

Right to object

You may object to certain types of processing, including processing based on legitimate interests and direct marketing.

Rights relating to automated decision-making

Where applicable, you may have rights relating to decisions made solely through automated processing.

These rights are not absolute and may be subject to legal exceptions.

18. HOW TO EXERCISE YOUR RIGHTS

To exercise any of your data protection rights, please contact:

ARK Guarding Solutions

Email: Support@arkguardingsolution.co.uk

Please provide enough information for us to identify you and understand your request.

We may need to request additional information to verify your identity before releasing or changing personal information.

19. DATA PROTECTION REQUESTS

We aim to respond to valid data protection requests within the time period required by applicable law.

In certain circumstances, we may be entitled to refuse a request or charge a reasonable fee where permitted by law.

If we refuse a request, we will explain the reasons where we are legally permitted to do so.

20. CHILDREN'S INFORMATION

Our website and services are primarily intended for businesses, organisations and adults.

We do not knowingly collect personal information from children through our website unless there is a legitimate reason to do so and appropriate safeguards are in place.

If you believe that a child has provided personal information to us without appropriate consent, please contact us.

21. THIRD-PARTY WEBSITES

Our website may contain links to external websites.

ARK is not responsible for the privacy practices, security or content of third-party websites.

We recommend reviewing the privacy policy of any external website before submitting personal information.

22. DATA BREACHES

If ARK becomes aware of a personal data breach, we will assess the incident and take appropriate action in accordance with applicable data protection law.

Where required, we will notify the Information Commissioner's Office (ICO) and/or affected individuals within the applicable legal timescales.

23. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect:

• Changes to our services;

• Changes to technology;

• Changes to legislation;

• Changes to regulatory requirements;

• Changes to how we process personal information.

The latest version will always be published on our website.

The "Last Updated" date at the top of this policy indicates when it was most recently revised.

24. COMPLAINTS

If you have concerns about how ARK has handled your personal information, we encourage you to contact us first so that we can investigate and attempt to resolve the matter.

You can contact us at:

Support@arkguardingsolution.co.uk

You also have the right to complain to the UK's data protection regulator.

Information Commissioner's Office (ICO)

The ICO regulates data protection and privacy matters in the United Kingdom.

You can find information about making a complaint through the ICO's official website.

25. CONTACT DETAILS

For questions, requests or concerns regarding this Privacy Policy or your personal information, please contact:

ARK Guarding Solutions

Email: Support@arkguardingsolution.co.uk

Website: ARK Guarding Solutions

Last Updated: 23 September 2026

IMPORTANT

This Privacy Policy is intended to explain how ARK Guarding Solutions generally handles personal information.

Where ARK provides services to a client involving the processing of personal information on the client's behalf, additional contractual data protection terms, including appropriate controller/processor arrangements and data processing provisions, may apply.

Where required, ARK will enter into appropriate data processing arrangements with clients.