Privacy Notice

Data protection framework

We process personal data in accordance with applicable United Kingdom data-protection law, including the UK GDPR and the Data Protection Act 2018. Blackstone acts as controller where it determines why and how personal data is processed.

Information we may process

Depending on your relationship with us, this may include identity and contact details, correspondence, client and supplier information, recruitment and employment information, work history, right-to-work evidence, SIA licence information, vetting information, attendance and assignment records, payroll and payment information, incident information, CCTV or body-worn-video information where applicable, device and website information and other information reasonably required to operate security assignments.

Where lawful and necessary we may process special-category data or criminal offence data. Such processing requires an additional lawful condition and appropriate safeguards.

Lawful bases

We rely on one or more lawful bases depending on the processing activity. These may include performance of a contract or steps requested before entering a contract; compliance with a legal obligation; legitimate interests pursued by Blackstone or another person where those interests are not overridden by your rights; and consent where consent is the appropriate basis.

Security, licensing and vetting

Security-sector recruitment and deployment may require identity, right-to-work, licensing, training, qualification, reference, screening and vetting checks. Where a role requires an SIA licence, deployment will be subject to the applicable licensing requirements.

Sharing information

We may share information with clients, professional advisers, insurers, screening and vetting providers, payroll and accounting providers, technology providers, regulators, law-enforcement bodies, government authorities and other recipients where there is a lawful and proportionate reason to do so. We do not sell personal information.

International transfers

Where personal data is transferred outside the United Kingdom, we will use an appropriate lawful transfer mechanism and safeguards where required.

Retention

We retain information only for as long as reasonably necessary for the purpose for which it was collected and for applicable legal, regulatory, contractual, insurance, accounting, tax, employment, security and dispute-resolution requirements. Different categories therefore have different retention periods.

Your rights

Subject to applicable law, you may have rights of access, rectification, erasure, restriction, objection and data portability and rights concerning certain automated decision-making. Where processing relies on consent, consent may normally be withdrawn without affecting earlier lawful processing.

Requests may be sent to enquiries@bprotective.co.uk. We may need to verify identity before acting on a request.

Complaints

Please contact us first if you have a data-protection concern so that we can investigate it. You also have the right to complain to the Information Commissioner's Office where applicable.

Cookies and online services

Our website may use strictly necessary technologies and, where implemented, analytics or other optional technologies. Our Cookies Notice explains the relevant categories and controls.