Privacy Policy

1. Regulatory Compliance and Data Protection Commitment

At Lockstead Locksmith, operated under the lead direction of Cornel Lockstead, we are committed to maintaining the absolute confidentiality, security, and integrity of the personal data collected from our clients across Sutton and South London. This Privacy Policy details our operational practices in strict compliance with the General Data Protection Regulation (GDPR) as implemented in the United Kingdom under the Data Protection Act 2018. As a provider of security-sensitive physical locksmithing services, we recognize that the data we collect is highly sensitive, and we manage it with the highest standards of professional care.

We act as both a data controller and data processor for the information you provide when requesting domestic locksmithing, commercial security installations, or automotive transponder coding services. By accessing our website, communicating with our dispatch desk on our secure phone hotline or WhatsApp channel, or authorizing our DBS checked engineers to perform physical work on your property, you acknowledge and agree to the data collection, storage, and processing protocols detailed in this policy document.

2. Categorization of Data Collected and Processing Rationale

To deliver professional locksmithing and automotive key replacement services, we must collect specific personal, geographical, and security credentials. We strictly limit our collection to data points that are legally necessary to verify property authorization, perform technical work, and process transparent financial billing. We gather the following categories of information:

• Geographical Location and Contact Coordinates: We collect your full name, telephone number, residential or business dispatch address, and email coordinates. This data is processed solely to navigate our mobile locksmith vans to your exact location and communicate arrival estimates.
• Property Authorization Credentials: In emergency lockout scenarios or vehicle key generation procedures, we are legally required to verify that you are the authorized owner or tenant of the property. We collect and inspect photo identification (such as a UK driving licence or passport) and proof of occupancy or vehicle ownership (such as a utility bill, tenancy agreement, or V5C registration document).
• Technical Security Specifications: We collect photos of your locks, keys, or door configurations sent to us on WhatsApp. This allows us to identify the mechanical manufacturer (e.g., Yale, Chubb, Union, ERA) and specify the precise replacement parts required prior to our mobile unit dispatch.
• Financial Billing and Transaction Records: We collect billing details, credit or debit card details, and transaction histories. All digital card payments are processed securely through accredited UK merchant processors; we do not store raw cardholder details on our local database systems.

3. Data Storage Protocols, Retention Periods, and Security Measures

All personal data and security credentials gathered by Lockstead Locksmith are stored within highly secure, encrypted digital environments. We employ industry-standard Secure Sockets Layer (SSL) encryption protocols on our website and utilize advanced endpoint security on all mobile dispatch devices. Our local database is protected by firewalls, access-control restrictions, and multi-factor authentication systems. Access to customer records is strictly limited to authorized engineers who require the information to perform their duties on site.

We retain your personal information only for as long as is legally required to fulfill the purposes for which it was collected, including satisfying any legal, accounting, tax, or warranty reporting requirements. Under standard UK tax regulations, we must retain financial transaction records and invoice copies for a minimum of six years. Technical property details and security specifications are purged from our active databases within twelve months of task completion, ensuring that your long-term security profile remains completely private.

4. Third-Party Disclosures and Subcontracting Restrictions

We maintain a strict policy against selling, renting, or trading customer personal data to third-party marketing networks or corporate brokers. We share information only with trusted third-party service providers who assist us in operating our business and delivering our services, subject to strict confidentiality agreements. These include cloud database providers, payment terminal operators, and accounting professionals. We ensure that all our partners adhere strictly to the same GDPR compliance levels that we maintain internally.

In rare circumstances, we may be legally required to disclose personal data to law enforcement agencies or regulatory bodies in the United Kingdom. This includes scenarios where we must assist in verifying vehicle ownership for suspicious lock bypass requests, reporting suspected fraudulent activity, or complying with court orders. In all such cases, we verify the legal credentials of the requesting agency and disclose only the narrowest possible scope of data required.

5. Data Subjects' Legal Rights and Contact Details

Under the Data Protection Act 2018 and the UK GDPR, you possess several key statutory rights regarding the management of your personal information. These include the right to access, rectify, or erase your data, and the right to object to or restrict processing:

• Right of Access (Subject Access Request): You have the right to request a complete copy of the personal data we hold about you. We will provide this information free of charge within thirty calendar days of receiving a verified request.
• Right to Rectification: If you identify any inaccuracies in the contact details, address records, or financial information we hold, you have the right to demand immediate correction.
• Right to Erasure (The Right to be Forgotten): You may request that we erase all your personal data from our active storage systems, provided the data is no longer required for active warranty contracts, tax reporting compliance, or ongoing legal proceedings.
• Right to Restrict or Object to Processing: You have the right to object to our processing of your data based on legitimate interests or direct communications. We will halt processing immediately unless we can demonstrate compelling legal grounds that override your interests.

To exercise any of these statutory data rights, or if you have any questions or complaints regarding our data privacy operations, please contact our dedicated Data Compliance Officer directly. You can reach our Sutton dispatch office by emailing info@lockstead.co.uk or calling 0333 358 2332. If you believe we have handled your data unlawfully, you have the right to lodge a formal complaint with the Information Commissioner's Office (ICO), the UK's independent supervisory authority for data protection.