Last updated: 28 September 2026

1. Who we are

Locks Off Ltd (company number SC821622, registered office 5 New Mill Road, Kilmarnock, KA1 3JG) is the controller of the personal data described in this notice. You can contact us about data protection at operations@locksoffservices.co.uk.

2. What we collect and why

• Website enquiries: your name, email, phone, the course or service you are interested in and your message. We use this to respond to you and to take steps at your request before entering into a contract (UK GDPR Article 6(1)(b)).
• Course bookings and learner records: your name, date of birth, contact details, identity document details, assessment results and certificates. We need this to deliver your course and to register you with the awarding body (Article 6(1)(b)), and to meet awarding body and SIA requirements (Article 6(1)(c) and 6(1)(f)).
• Security services clients: business contact details and contract information, processed to perform our contract with you (Article 6(1)(b)) and for our legitimate business interests (Article 6(1)(f)).
• Cookies: non-essential cookies are only set with your consent. See our Cookie Policy.

3. Who we share it with

• The awarding organisation that certificates your qualification, to register you and issue your certificate
• The Security Industry Authority, where required in connection with licence-linked qualifications
• Our IT and hosting providers (including Fasthosts Internet Limited), who process data on our behalf
• Your employer, where your employer has booked and paid for your training
• Professional advisers, insurers, and law enforcement or regulators where the law requires it

We do not sell your personal data.

4. International transfers

We store data in the UK. If any provider transfers data outside the UK, we make sure appropriate safeguards are in place as required by UK GDPR Chapter V.

5. How long we keep it

We keep enquiry details only for as long as we need them to deal with your enquiry. Learner records are kept for the period required by the awarding organisation, so that certificates can be verified. Financial records are kept for 6 years to meet HMRC requirements.

6. Your rights

Under UK GDPR you have the right to access your data, have it corrected, have it erased, restrict or object to its processing, and data portability, in the circumstances set out in Articles 15 to 21. Where we rely on consent, you can withdraw it at any time. To exercise any right, contact us at operations@locksoffservices.co.uk. We will respond within one month.

7. Complaints

If you are unhappy with how we handle your data, please contact us first. You also have the right to complain to the Information Commissioner’s Office: ico.org.uk/make-a-complaint, 0303 123 1113.