Last updated: September 2026. This policy explains how Sarum Systems Ltd collects, uses and protects your personal information.
Sarum Systems Ltd ("we", "us", "our") is a fire safety, security, CCTV and access control installation company based in East Anglia. We are the data controller for the personal information you share with us. This policy explains what we collect, why we collect it, and the rights you have over your data.
We collect the personal details you give us when you enquire, request a quote, book a survey or installation, or become a customer. This typically includes your name, address, phone number, email address and postcode, along with details of your property and the services you are interested in. If you become a customer we also keep records of the systems we install, service dates, invoices and any correspondence.
We use your information to respond to enquiries, prepare quotes and estimates, schedule surveys and installations, carry out and service work, issue invoices and chase payment, send service and safety reminders, and fulfil our legal and contractual obligations. Where you have given consent, we may also contact you about related products and services; you can withdraw that consent at any time.
We rely on the following lawful bases under the UK GDPR: performance of a contract (to deliver the services you have requested), legitimate interests (to run our business, maintain records, and send relevant reminders), legal obligation (to meet accounting, health and safety and regulatory requirements), and consent (for any optional marketing).
We do not sell your data. We share it only with trusted third parties who help us deliver our services — for example payment providers, accounting software, suppliers of equipment, and subcontractors working on your installation — and only to the extent necessary. All such parties act under appropriate confidentiality and data-protection terms. We may also disclose information where required by law.
We keep personal data only for as long as we need it for the purposes set out in this policy or as required by law. Customer records and accounting documents are typically retained for the duration of our business relationship and for a period afterwards to meet tax and regulatory requirements, then securely deleted or anonymised.
Under UK data-protection law you have the right to access, correct, erase, restrict, object to or port your personal data, and to withdraw consent where processing relies on it. You also have the right to complain to the Information Commissioner’s Office (ico.org.uk) if you have concerns about how we handle your data.
We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss or misuse, including access controls, encryption where appropriate, and secure storage of records.
Our website may use essential cookies and similar technologies to function correctly, and analytics tools to understand how the site is used. You can control cookies through your browser settings; disabling some may affect site functionality.
We may update this policy from time to time to reflect changes in our practices or legal requirements. We will publish the latest version on this page with an updated revision date.
If you have any questions about this policy or how we use your personal data, please contact Sarum Systems Ltd via our website contact page or by post. We will respond to your request promptly and within the timescales required by data-protection law.