Privacy Policy

1. Who we are

Knight Security (“we”, “us”) is a UK supplier of CCTV, alarm and access control products to the trade. We are the controller of the personal data described in this policy.

• Manchester: Unit 1C, 116 Broughton Lane, Manchester M7 1UF
• Huddersfield: Unit 10 Leeds Road Minipark, Leeds Rd, Huddersfield HD1 6PA
• Email: info@knightsecurity.uk · Telephone: 0161 505 0562

2. What we collect

• Account and trade application: name, email address, telephone number, company name, business address, VAT number and the details you give to show you trade, plus your password (stored only in protected, hashed form).
• Orders and quotes: billing and delivery addresses, the products and quantities you choose, order and quote history, coupons used, and delivery preferences.
• Payment: card and wallet payments are handled by our payment providers (see section 4). We do not see or store your full card number. We keep the order total, payment status, and a payment reference.
• Enquiries: what you write in the contact form, the quote form, by email, telephone or WhatsApp.
• Lucky wheel and promotions: the email address you enter and the reward you win, linked to a single-use coupon.
• Online assistant: the messages you type, and the product information the assistant looks up to answer you.
• Technical data: IP address, browser and device type, pages viewed, and a security session cookie when you are signed in. At card payment we also create a browser fingerprint used for fraud prevention.

3. Why we use it and our legal basis

• To set up and approve trade accounts, show trade prices, take and deliver orders and quotes, take payment and give after-sales support. Basis: performing a contract with you, or steps you ask us to take before one.
• To prevent fraud and abuse, keep the website secure (captcha, rate limits, fingerprinting at payment) and meet tax and accounting duties. Basis: our legitimate interests, and legal obligation.
• To answer enquiries and operate the online assistant. Basis: our legitimate interests in running and improving a good service.
• To measure how the website is used and improve it. Basis: your consent where required, otherwise our legitimate interests.
• To send marketing emails about products or offers. Basis: your consent, or, for existing trade customers, our legitimate interests in line with the UK soft opt-in rules. You can opt out at any time.

4. Who we share it with

We do not sell personal data. We share it only with providers who help us run the service, under contracts that limit what they can do with it:

• Our web store platform (WordPress / WooCommerce) and hosting providers, which hold accounts, orders and quotes.
• Payment providers: Stripe (card and wallet payments) and PayPal.
• Security providers: Google reCAPTCHA or Cloudflare Turnstile to block automated sign-ups.
• Google Tag Manager, which loads website measurement tools.
• AI model providers (OpenAI or DeepSeek) that process messages you send to the online assistant. Please do not put payment card numbers or passwords into the assistant.
• Couriers and delivery partners, who receive your name, delivery address and telephone number.
• Professional advisers, credit insurers and authorities, where the law or a legitimate business need requires it.

5. International transfers

Some providers above are based outside the UK, notably in the United States. Where personal data leaves the UK we rely on an adequacy decision, the UK International Data Transfer Agreement or Addendum, or another safeguard recognised by UK law.

6. Cookies and similar technologies

• Essential: a secure, HttpOnly session cookie (ks_session) keeps you signed in; a short-lived cookie shows the reason a coupon was refused in your cart. These are needed for the site to work and do not need consent.
• Security: reCAPTCHA or Turnstile set cookies or tokens when a captcha is shown.
• Payment: Stripe and PayPal set cookies and run scripts on the payment step to process payments and prevent fraud.
• Measurement: Google Tag Manager loads analytics and similar tags that may set cookies. You can block or delete cookies in your browser settings, and parts of the site may then not work.

7. How long we keep it

• Order, invoice and payment records: six years after the end of the tax year, to meet tax and accounting law.
• Trade account details: while your account is open and for a reasonable time afterwards.
• Enquiries and quotes: normally up to three years from the last contact.
• Assistant conversations and technical logs: only as long as needed to run, secure and improve the service.

When data is no longer needed we delete it or make it anonymous.

8. Your rights

Under UK data protection law you can ask us to access, correct, delete or restrict the use of your personal data, to move it to another provider, and to object to processing based on our legitimate interests or to direct marketing. Where we rely on your consent you can withdraw it at any time.

To use any of these rights, email info@knightsecurity.uk. We may need to confirm who you are first, and we will answer within one month.

If you are not happy with how we handle your data, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner’s Office (ico.org.uk, 0303 123 1113).

9. How we protect it

We use encrypted connections, hashed passwords, signed HttpOnly session cookies, access limited to those who need it, and bot and abuse controls. No online service is completely secure, so please keep your password private and tell us straight away if you think your account has been misused.

10. Children

Our website and trade accounts are for businesses and are not aimed at anyone under 18. We do not knowingly collect personal data from children.

11. Changes to this policy

We may update this policy as our service or the law changes. The date at the top shows the latest version. If a change significantly affects how we use your data we will tell you by email or on the website.