Privacy Policy

ZN Security Systems Ltd (“we”, “us”) installs and maintains CCTV, intruder alarms and access control. This notice explains what personal information we collect, why we use it, who we share it with and your rights.

Who we are

ZN Security Systems Ltd, company number 17222219, 44 Higher Ardwick, Manchester M12 6DA. Email enquiries@znss.co.uk or phone 0161 490 9090. We are the data controller for the information in this notice, registered with the Information Commissioner’s Office under reference ZC246750.

What we collect

• Contact details: your name, phone number, email address, and the address of the property or business we work on.
• Details about your job: what you’ve asked for, survey notes, photos of the site and the finished installation, and our job reports.
• Details of your system: the equipment we fit, its settings, and the access details we need to maintain it.
• Messages: what you send us by phone, WhatsApp, email, Facebook, Instagram or our website forms, and our replies.
• Quotes, invoices and payments. Card payments and online bank payments are handled by Stripe. We never see your full card details or your bank login.
• If you take a maintenance plan: your plan, your signed agreement and your visit history.
• If your alarm is monitored: the keyholder names and phone numbers you give us.
• How you use our website, through cookies (see Cookies below).

Why we use it, and our lawful basis

• To give you a quote, carry out the work, run your maintenance plan and invoice you. This is to take steps you ask for before a contract and to perform our contract with you.
• To follow up on a quote, ask for a review after a job and keep our business records. This is in our legitimate interests in running and improving the business. You can ask us to stop at any time.
• To keep accounting and tax records, because the law requires it.
• To send you marketing, but only if you’ve agreed. You can withdraw your agreement at any time.

We need your contact details and the details of the job to quote for it and carry it out. Without them we can’t help. We don’t make any decisions about you by automated means.

Your CCTV system and recordings

Your system and its recordings belong to you, and you’re responsible for how you use them. We only see your cameras or recordings when we need to install, test, maintain or repair your system, or when you ask us to help, for example to find or export footage. If your plan includes remote maintenance, we can connect to your system remotely to check and fix it. We don’t keep copies of your recordings unless you ask us to, and we delete any copies we make for you within 30 days of handing them over.

For the recordings and logs on your system, you’re the controller and we act as your processor, under section 16.3 of our installation terms and section 10.3 of our maintenance terms (see our customer terms).

Who we share it with

We only share your information with organisations that help us run the business or check our work, under contract, and only as much as they need:

• Our customer management system, GoHighLevel (LeadConnector), and ZYS Vision Ltd, the agency that manages it for us. Emails from it are sent through Mailgun.
• Microsoft 365 for email and documents, Xero and Hubdoc for invoices, receipts and accounts, Stripe for payments, and our accountant.
• Meta for WhatsApp, Facebook and Instagram, and Google for file storage, our Business Profile and website analytics.
• Keeper, the password manager where we keep system codes and logins.
• Toffoo (XL Telecom), which provides our business phone line, 0161 490 9090.
• Chaty, which runs the WhatsApp and call buttons on our website.
• Anthropic, whose AI assistant (Claude) helps us with admin, such as drafting replies and keeping our records up to date. It can see the emails and customer records it works on.
• Aspire Monitoring, the alarm receiving centre we use, and the signalling services it needs, if your alarm is monitored, so they can respond to alarms.
• Hikvision’s Hik-Partner Pro and Hik-Connect, and Dahua’s DMSS and Dahua cloud, used for remote access to your system when you agree to it. Texecom’s and Pyronix’s cloud services, for alarm apps and remote servicing.
• A partner security firm that covers fault calls when we’re unavailable (name available on request).
• SSAIB, the inspection body for security installers. Once we apply for registration, SSAIB’s auditors may see customer and job records when they audit our work.
• Hostinger, which hosts our website.
• Our suppliers and trusted subcontractors, when they deliver equipment for your job or help us carry it out.

The remote access services and the partner security firm above are the companies that may handle data from your system for us, as our customer terms explain. We’ll tell you before we add or change one, so you can object.

Some of these providers are based outside the UK or process information outside it. GoHighLevel (LeadConnector), Mailgun, Meta, Google, Stripe, Anthropic and Keeper are US companies, and Hikvision and Dahua are Chinese companies, so information handled by their cloud and support services may be processed outside the UK, including in the USA and China. When information leaves the UK it is protected in the way UK law requires: through the UK-US data bridge where the US company has signed up to it, or otherwise through the International Data Transfer Agreement or the UK Addendum to the EU standard contractual clauses. We never sell your information.

How long we keep it

• Customer and system records: for the life of your system plus 7 years. This covers your guarantee and maintenance, the standards we work to, and tax and accounting rules.
• Maintenance, fault and complaint records: 7 years.
• Copies of footage we make for you: deleted within 30 days of handing them over.
• Enquiries that don’t go ahead: up to 2 years, so we can follow up and answer questions, then we delete them.
• Website analytics: for the periods set in Google’s and Meta’s services.

Cookies

The first time you visit our website, a banner asks which cookies you’re happy for us to use. We only set analytics or marketing cookies if you say yes.

• Essential: these keep the site working. Cookies starting with cmplz_ remember your cookie choice, so we don’t ask on every page. They last 12 months.
• Analytics, only if you say yes: Google Analytics (through Google Site Kit) sets _ga and _ga_NMFREHYKT7, so we can see how people find and use the site. They last up to 2 years.
• Marketing, only if you say yes: the Meta pixel sets _fbp, and _fbc if you’ve clicked one of our adverts, so we can see whether our Facebook and Instagram adverts work. Meta may also use them to show you our adverts. They last up to 3 months.

You can change your mind at any time with the Cookie settings button at the bottom of the screen, or change your cookie settings here. You can also block or delete cookies in your browser settings.

Your rights

You can ask for a copy of your information, ask us to correct or delete it, object to or restrict how we use it, or ask for it in a portable format. Email enquiries@znss.co.uk or phone 0161 490 9090. We’ll reply within one month.

If you’re unhappy with how we’ve handled your information, please tell us first so we can put it right. You can also complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113.

Last updated 15 October 2026.