Privacy Notice
How Advanced Overwatch collects, uses and protects personal data, including the footage from the systems we install.
Contents
This Privacy Notice explains what personal data Advanced Overwatch Limited collects, what we do with it, how you can access it and who it might be shared with.
Last reviewed: 1 September 2026.
Our contact information (data controller)
Advanced Overwatch Limited, registered in Northern Ireland, company number NI644972.
Registered office: 1st Floor, Beresford House, 2 Beresford Road, Coleraine, BT52 1GE, United Kingdom.
Telephone: 028 7087 8077
Email: privacy@advancedoverwatch.com
The law this notice follows
We process personal data under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, both as amended by the Data (Use and Access) Act 2025. Electronic marketing and cookies are also governed by the Privacy and Electronic Communications Regulations 2003 (PECR). The legal bases below refer to Article 6 of the UK GDPR.
What we do with your personal data
We process personal data only for the purpose for which it is collected. The purpose depends on whether you only use our website, or also use our services. If you use our services, we collect the personal data we need to provide the service or perform the contract. We may use your personal data for other similar purposes, including marketing and communications, but only where we have your consent or another legal justification for doing so. Electronic marketing is only sent where PECR allows it, and every message lets you opt out.
From our customers and clients we process and retain personal data for the following purposes and periods, with the applicable legal basis.
| Processing purpose | Legal basis | Retention period |
|---|---|---|
| Customer support | Article 6(1)(b): we have a contract with you | Until the tax or other retention period expires |
| Sales and installation of products and services | Article 6(1)(b): we have a contract with you | Until the tax or other retention period expires |
| Communications, marketing and intelligence | Article 6(1)(f): it is in our legitimate interest (communications, marketing and intelligence) | 1 year |
From our prospective customers and clients:
| Processing purpose | Legal basis | Retention period |
|---|---|---|
| Communications, marketing and intelligence | Article 6(1)(f): it is in our legitimate interest (communications, marketing and intelligence) | 1 year |
From our successful candidates:
| Processing purpose | Legal basis | Retention period |
|---|---|---|
| Recruitment | Article 6(1)(b): steps are needed before entering a contract with you | 6 years after employment ends |
From our unsuccessful candidates:
| Processing purpose | Legal basis | Retention period |
|---|---|---|
| Recruitment | Article 6(1)(b): steps are needed before entering a contract with you | 6 months after the recruitment campaign |
From our contractors:
| Processing purpose | Legal basis | Retention period |
|---|---|---|
| Service delivery | Article 6(1)(b): we have a contract with you | Until the tax or other retention period expires |
| Health and safety | Article 6(1)(c): we have to comply with a legal obligation | As long as we reasonably need it to comply with our legal and contractual obligations |
| Information, system, network and cyber security | Article 6(1)(c): we have to comply with a legal obligation | 7 years |
CCTV and monitoring: whose data it is
When we install, maintain or monitor a CCTV system for a customer, or handle footage from it, the customer is normally the controller of those images and we act as their processor, following their instructions under our contract. Requests about footage from a customer’s system should go to that customer. If you send one to us, we will pass it on and help the customer respond.
What personal data do we collect?
The personal data we collect depends on whether you just visit our website or use our services. If you visit our website, you do not need to provide us with any personal data. However, your browser transmits some data automatically, such as the date and time of retrieval of one of our web pages, your browser type and settings, your operating system, the last web page you visited, the data transmitted and the access status, and your IP address.
If you contact us through a form on this website, we receive the details you enter, such as your name, telephone number, email address and message. If you accept analytics cookies, we also collect usage statistics, as described in our Cookie Policy.
If you use our services, personal data is required to fulfil the requirements of a contractual or service relationship which may exist between you and our organisation. We collect:
- Qualifications
- Employment history
- Contractor performance data
- Online identifiers
- Visual images
- Bank details
- Contact details
- Location information
Who might we share your personal data with?
To maintain and improve our services, your personal data may need to be shared with or disclosed to service providers, other controllers or, in some cases, public authorities. We may be required to disclose your personal data in response to requests from a court, police services or other regulatory bodies. Where feasible, we will consult you before making such a disclosure and, to protect your privacy, we will disclose only the minimum information necessary for the required purpose.
We transfer personal data to the following organisations and countries:
| Data subject type | Organisation | Role | Country |
|---|---|---|---|
| Prospective customers and clients | Google Workspace | Processor | United Kingdom |
| Prospective customers and clients | Microsoft 365 | Processor | United Kingdom |
| Prospective customers and clients | simPRO Software Ltd | Processor | United Kingdom |
| Successful candidates | Google Workspace | Processor | United Kingdom |
| Unsuccessful candidates | Google Workspace | Processor | United Kingdom |
| Contractors | Google Workspace | Processor | United Kingdom |
| Contractors | Xero | Processor | United States |
| Contractors | simPRO Software Ltd | Processor | United Kingdom |
| Customers and clients | Google Workspace | Processor | United Kingdom |
| Customers and clients | GoCardless | Controller | United Kingdom |
| Customers and clients | Microsoft 365 | Processor | United Kingdom |
| Customers and clients | PayPal | Controller | United Kingdom |
| Customers and clients | Square | Controller | United Kingdom |
| Customers and clients | Stripe | Controller | United Kingdom |
| Customers and clients | Xero | Processor | United States |
| Customers and clients | iomart | Processor | United Kingdom |
| Customers and clients | simPRO Software Ltd | Processor | United Kingdom |
When a processor or controller is outside the UK, we make sure the transfer is protected by an appropriate safeguard, such as UK adequacy regulations for that country (including the UK Extension to the EU-US Data Privacy Framework where the recipient is certified), or the International Data Transfer Agreement or UK Addendum to the EU standard contractual clauses approved under UK law. Details of these safeguards may be obtained by contacting us directly.
How do we look after personal data?
We limit the personal data collected to what is fit for the purpose, as described above. We restrict, secure and control all of our information assets against unauthorised access, damage, loss or destruction, whether physical or electronic. We retain personal data only for as long as described above, to respond to your requests, or longer if required by law. If we retain personal data for historical or statistical purposes, we ensure that it cannot be used further. While it is in our possession, together with your assistance, we try to keep your personal data accurate.
How can you access your personal data?
You have the right to request access to any personal data we hold about you. If any of it is incorrect, you may ask us to correct it. If we are using your information improperly, you may ask us to stop using it, to restrict how we use it, or to delete it completely. You may object to processing based on our legitimate interests, and you can object to direct marketing at any time.
To make a request, contact us by email at privacy@advancedoverwatch.com, by telephone on 028 7087 8077, or by post to our registered office. We will respond within one month, and there is normally no charge.
Where we process your personal data with your consent or under a contract, you also have the right to ask us to port or transfer it to a different service provider or to yourself.
Where we rely on your consent to use your personal data, you have the right to withdraw that consent at any time. If you withdraw your consent, we will stop using your personal data for that purpose, without affecting the lawfulness of processing based on consent before your withdrawal.
Our Data Protection Officer
Paul McKendry
Email: privacy@advancedoverwatch.com
Telephone: 028 7087 8077
Complaints
If you are unhappy with how we have handled your personal data, please tell us first, using the contact details above. We will acknowledge your complaint within 30 days and respond without undue delay.
You also have the right to complain to the UK supervisory authority, the Information Commissioner’s Office (ICO):
Information Commissioner’s Office
Wycliffe House, Water Lane
Wilmslow, Cheshire, SK9 5AF
Telephone: 0303 123 1113
ico.org.uk/make-a-complaint
Cookies
Cookies and similar technologies are covered in our Cookie Policy, which lists what we set and how to change your choices.
Changes to this notice
We review this notice regularly and update it when what we do, or the law, changes. This version was last reviewed on 1 September 2026.