Last updated: 17 October 2026

Who we are

This website is run by CSCSECURITY LIMITED, trading as CSCS Colindale. CSCSECURITY LIMITED is registered in England and Wales, Company No. 14544446. Our registered office is 167-169 Great Portland Street, 5th Floor, London W1W 5PF, and our trading address is 16 Varley Parade, Colindale, London NW9 6RR.

CSCSECURITY LIMITED is the controller of the personal information described in this policy. We are registered with the Information Commissioner's Office (ICO) under registration number ZC018389.

For questions about this policy or your information, email TBC or write to us at our registered office.

The law

We handle personal information under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

What we collect

When you use our request form, call us, message us on WhatsApp or visit us, we may collect:

your name, phone number and email address;
the card you are interested in, whether you have passed the CITB HS&E test, and your job and qualifications;
anything else you choose to tell us.

Please do not send us health information or copies of identity documents through the form.

How we use it and our lawful basis

To reply to your request and give you information or a quote. Lawful basis: steps you ask us to take before entering into a contract, and our legitimate interests in responding to enquiries.
To provide our service if you go ahead. Lawful basis: performance of a contract.
To keep business and financial records. Lawful basis: legal obligation.

We do not sell your information, and we do not use it for marketing.

How the form works

The request form sends your details to us by email. The website does not keep a copy of your message. To protect the form from abuse, the server briefly keeps a scrambled (hashed) version of your IP address for up to one hour.

Who we share it with

Our service providers: our website host (Krystal Hosting, UK) and our email provider (Google Workspace). If you message us on WhatsApp, WhatsApp (part of Meta) also handles that message under its own terms.
CSCS or CITB, only where you ask us to help with an application or test booking.
Regulators, the police or other authorities where the law requires it.

Google and WhatsApp may process information outside the UK. Where that happens, it is protected by safeguards recognised under UK data protection law, such as the UK International Data Transfer Addendum.

How long we keep it

If your enquiry does not go ahead, we delete it within 12 months. If you use our service, we keep records for as long as we need to provide it, and financial records for six years to meet tax law.

Your rights

You have the right to ask for a copy of your information, to have it corrected or deleted, to restrict or object to how we use it, and to data portability where it applies. To use these rights, contact us using the details above. We will reply within one month.

Cookies

This website does not set cookies and does not use analytics, advertising or tracking tools. If links take you to other websites, such as cscs.uk.com or citb.co.uk, their own policies apply.

Complaints

If you are unhappy with how we have handled your information, please contact us first. You can also complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint or on 0303 123 1113.

Changes

We may update this policy. The date at the top shows when it last changed.

Privacy policy