The controller of the images and personal information captured using the CCTV covered by this notice is Gold Traders UK Ltd, 29 High Street, Royal Wootton Bassett, SN4 7AA. Our CCTV system captures images and personal information for security, crime detection, public safety, and other legitimate reasons set out in our privacy notice.
If you would like a copy of this privacy notice sent to you, you have any queries or wish to exercise any of your rights in relation to your personal data. Please see the privacy notice for further details.
This notice shows how Gold Traders UK Ltd (we, us, our) uses your personal information, which may be recorded on our CCTV system. It explains how we comply with the law on data protection and what your rights are. For the purposes of data protection, we will be the controller of any of your personal information recorded on our CCTV system.
We have not appointed a Data Protection Officer to oversee our compliance with data protection laws as we are not required to do so, but our GDPR Compliance Manager is responsible for data protection compliance in our organisation. Contact details are set out in the "Contacting us" section at the end of this privacy notice.
What information may we hold / process that will relate to you?
If you are in the field of vision of any of our CCTV systems, we may collect video recordings and still pictures featuring you. This personal information may include your activities, your face, and other visual information about you recorded on our CCTV system. Once you have entered our premises, you will be subject to facial recognition technology.
We utilise both overt and covert CCTV monitoring.
We may also collect personal information about you if you, your representative, or a person authorised by you contact us regarding an enquiry, complaint, or other communication.
What do we do with your personal information?
As the data controller, we will collect personal information on our CCTV system and use it for the following purposes:
- For the prevention and detection of crime
- For evidence in any civil or criminal legal proceedings
- To assist in investigations
- For safety and security
- Dealing with any queries, complaints or enquiries
- Retaining records
These are the purposes for which we use your personal information. All of the above are also legitimate reasons for us to use and store personal information relating to you that is captured on our CCTV system. Legitimate interests are our legal basis for processing your personal information.
Whilst on our premises, we use facial recognition software. This facial recognition software will seek to identify individuals based on their features, i.e. biometric data, and may lead to criminal investigations and/or action against you. The basis for this processing of biometric data, which is a special category of personal information, is that processing is necessary for the establishment, exercise or defence of legal claims, and also processing is necessary for reasons of substantial public interest.
We may anonymise any personal information we hold on our CCTV system (so that it does not directly identify you, for example, by obscuring your face), and it ceases to be your personal information. We may use this anonymised information for any other purposes.
Who we share your personal information with
We share your personal information with the following parties:
- Suppliers and service providers: to manage and operate the CCTV system as our data processor.
- The police and other law enforcement agencies conduct policing, assist investigations, trace missing people and investigate alleged criminal activities.
- People who have been injured, attacked or had property damaged or stolen and their insurance providers assist them with any criminal or civil investigations or legal proceedings.
- People who have been involved in road traffic accidents and their insurance providers: to assist with insurance claims, legal claims and investigations.
- Private and other investigators: to aid their investigations.
- Any relevant regulators: where we are required to do so by law or to assist with their investigations or initiatives, including, but not limited to, the Information Commissioner's Office.
We do not disclose personal information to anyone except as set out above unless we or your consent are legally obliged to do so. We do not sell your data.
Transferring your personal information internationally
The personal information we collect about you is not transferred to or stored in countries outside of the UK or European Union except as set out in this section.
Our directors and other individuals working for us may, in limited circumstances, access personal information outside the UK and European Union if they are on holiday abroad. If they do so, they will be using our security measures and will be subject to their arrangements with us, which are subject to English Law and the same legal protections that would apply to accessing personal data within the UK.
In limited circumstances, the people to whom we may disclose personal information from our CCTV system, as mentioned in section 3 above, may be located outside the UK and European Union. In these cases, we will impose any legally required protections on the personal information before it is disclosed.
If you require more details on the arrangements for any of the above, please use the details in the “Contacting us” section below.
How long do we keep your personal information for
We will keep your personal information for up to approximately thirty days after the recording is made. After this time, the recording stored on the hard drive of our CCTV system will usually be overwritten. However, if we receive an enquiry about a particular recording on our CCTV, we will generally then retain that part of the recording until it is no longer required. This period can vary as it will depend upon the circumstances of the particular case, but for criminal or civil legal proceedings, this could mean that the personal information is retained until after the legal case and any appeals have been concluded, which may be many years. We will delete the personal information as soon as it is no longer required.
Your rights in relation to your personal information
You have the following rights in relation to your personal information:
- the right to be informed about how your personal information is being used;
- the right to access the personal information we hold about you;
- the right to request the correction of inaccurate personal information we hold about you;
- the right to request the erasure of your personal information in certain limited circumstances;
- the right to restrict the processing of your personal information where certain requirements are met;
- the right to object to the processing of your personal information;
- the right to request that we transfer elements of your data either to you or another
- service provider, and
- the right to object to certain automated decision-making processes that use your personal information.
You should note that some of these rights may not always apply as they have specific requirements and exemptions which apply to them and they may not apply to personal information recorded and stored in our CCTV system and also other of these rights will not be relevant to personal information stored in a CCTV system.
There is no legal, contractual or other requirement or obligation for you to provide our CCTV system with your personal information.
We may need to request specific information from you to help us confirm your identity and ensure your right to access the information (or to exercise any of your other rights). This is another appropriate security measure to ensure that personal information is not disclosed to anyone with no right to receive it.
More information about your legal rights can be found on the Information Commissioner’s website at https://ico.org.uk/for-the-public/.
To exercise any of the above rights or if you have any questions about your rights, please use the details in the "Contacting us" section below to contact us.
If you are unhappy with how we use your personal information, you can also complain to the UK Information Commissioner’s Office or your local data protection regulator in the European Union if you are based outside the UK or bring a claim to the courts. However, we are here to help and encourage you to contact us first to resolve your complaint.
Changes to this notice
We may update this privacy notice from time to time. You are encouraged to check for any updated version of this privacy notice regularly.
Contacting us
If you have any queries or complaints about the information we hold about you, please e-mail the GDPR Compliance Manager using the contact form on our website.