Cookies & privacy notice

1. Introduction

FTC Safety Solutions Limited (“FTC”, “we”, “our”, “us”) is committed to protecting and respecting your privacy.

This Privacy Notice explains how we collect, use, store, share and protect personal data when:

  • you visit our website;
  • contact us;
  • use our products or services;
  • engage with our fleet, safety or compliance systems;
  • interact with us as a customer, supplier, employee, contractor or website user.

We process personal data in accordance with:

  • the UK General Data Protection Regulation (“UK GDPR”);
  • the Data Protection Act 2018;
  • the Privacy and Electronic Communications Regulations 2003 (“PECR”);
  • applicable EU GDPR requirements where relevant;
  • other applicable privacy and data protection legislation.

Where FTC provides products or services to customers located outside the United Kingdom, including within the United States, we may also process personal data in accordance with applicable international privacy and data protection requirements relevant to those jurisdictions.

This Privacy Notice is intended to provide a general overview of FTC’s data protection and privacy practices and may be supplemented by jurisdiction-specific notices, contractual terms or service-specific privacy disclosures where applicable.

This notice should be read together with our Cookie Policy and any other privacy notices we may provide.

2. Who We Are

FTC Safety Solutions Limited is the data controller responsible for your personal data.

In certain circumstances, FTC Safety Solutions Incorporated and other FTC group entities may jointly support customer, operational, technical, marketing or support functions relating to FTC services within the United States and other jurisdictions.

Where applicable, FTC group entities process personal data in accordance with contractual, legal and regulatory obligations relevant to their activities.

Company Details

FTC Safety Solutions Limited

Registered in England & Wales
Website: https://ftcsafetysolutions.com
Email: info@ftc-ss.com
Telephone: +44 (0)116 278 0391
Registered Address: 1168-1170 Melton Road, Syston, Leicester, Leicestershire, LE7 2HB, UK

FTC Safety Solutions Incorporated

Incorporated in Delaware
Registered in Iowa
Email: ussales@ftc-ss.com
Telephone: +1 319 427 0328
Address: 6942 Competition Court, Bettendorf, IA 52722, USA

3. Contacting Us About Privacy

If you have any questions about this Privacy Notice or how we process your personal data, please contact:

Data Protection Officer Contact

Email: info@ftc-ss.com
Telephone: +44 (0)116 278 0391

4. The Personal Data We Collect

We may collect, use, store and transfer different categories of personal data depending on how you interact with us.

Identity Data

This may include:

  • full name;
  • title;
  • date of birth;
  • username or account identifiers;
  • employee identification numbers.

Contact Data

This may include:

  • billing address;
  • delivery address;
  • email address;
  • telephone numbers;
  • business contact information.

Business & Employment Data

This may include:

  • employer details;
  • job title;
  • training records;
  • compliance records;
  • licences and certification details;
  • fleet management information.

Technical Data

This may include:

  • IP address;
  • browser type and version;
  • operating system;
  • device identifiers;
  • website usage information;
  • cookie identifiers;
  • login information.

Usage Data

This may include:

  • how you use our website;
  • interactions with our systems;
  • services accessed;
  • pages viewed;
  • diagnostic and support information.

Marketing & Communications Data

This may include:

  • your communication preferences;
  • newsletter subscriptions;
  • consent records;
  • event attendance information.

CCTV & Security Data

This may include:

  • CCTV footage;
  • building access records;
  • visitor logs;
  • security monitoring information.

Fleet & Driver Data

Where relevant to our services, we may process:

  • vehicle usage information;
  • telematics data;
  • driver licence information;
  • compliance monitoring information;
  • driver identification information;
  • safety and operational records.

5. How We Collect Personal Data

We collect personal data in several ways including:

Direct Interactions

You may provide data when you:

  • contact us;
  • complete forms;
  • create accounts;
  • purchase products or services;
  • request demonstrations or brochures;
  • subscribe to marketing communications;
  • attend meetings, events or training.

Automated Technologies

When you use our website, we may automatically collect technical and usage data using:

  • cookies;
  • analytics tools;
  • server logs;
  • website tracking technologies.

Please see our Cookie Policy for more information.

Third Parties

We may receive personal data from:

  • customers;
  • employers;
  • fleet operators;
  • distributors;
  • service providers;
  • public sources;
  • analytics providers;
  • technology platforms.

6. How We Use Your Personal Data

We only use personal data where we have a lawful basis to do so.

Contractual Necessity

We may process your personal data where necessary to:

  • provide products or services;
  • manage customer accounts;
  • fulfil contractual obligations;
  • provide support and maintenance;
  • process transactions.

Legitimate Interests

We may process personal data where necessary for our legitimate interests, provided these interests are not overridden by your rights and freedoms.

This may include:

  • improving our services;
  • maintaining system security;
  • fraud prevention;
  • business administration;
  • responding to enquiries;
  • limited business-to-business marketing;
  • website analytics;
  • product development.

Where we rely on legitimate interests, we undertake balancing assessments where required.

Legal Obligations

We may process personal data where necessary to comply with:

  • health and safety obligations;
  • employment obligations;
  • tax obligations;
  • regulatory requirements;
  • law enforcement requests.

Consent

We will seek your consent where required by law, including for:

  • certain marketing communications;
  • non-essential cookies and tracking technologies;
  • specific optional processing activities.

You may withdraw consent at any time.

7. Marketing Communications

We may send you marketing communications where:

  • you have consented;
  • you have requested information from us;
  • you are an existing customer and applicable laws permit us to rely on a “soft opt-in”; or
  • we otherwise have a lawful basis to do so.

We do not send unsolicited electronic marketing communications where consent is required under PECR.

You can unsubscribe or opt out at any time by:

  • clicking the unsubscribe link in our emails;
  • contacting us directly;
  • updating your communication preferences.

We maintain records of marketing preferences and consent where required.

8. Cookies & Tracking Technologies

Our website uses cookies and similar technologies to:

  • operate the website;
  • remember preferences;
  • improve performance;
  • analyse website traffic;
  • enhance user experience;
  • support website security.

Types of Cookies We Use:

Strictly Necessary Cookies

These cookies are required for the website to function and cannot normally be switched off.

Analytics Cookies

These cookies help us understand how visitors use our website.

Functional Cookies

These cookies enable enhanced website functionality and personalisation.

Marketing Cookies

These cookies may be used to measure advertising effectiveness or support marketing activity.

Non-essential cookies will only be placed on your device where legally required consent has been obtained.

You may manage cookie preferences using our cookie consent tool.

Further information is available in our Cookie Policy.

Some cookies and tracking technologies used on our website may be provided by third-party analytics, advertising or technology providers located outside the United Kingdom, including providers operating in the United States.

Where applicable under certain US state privacy laws, some analytics or advertising-related processing may constitute “sharing” of personal information for advertising or analytics purposes. FTC seeks to minimise such processing and provides users with cookie preference controls where legally required.

FTC may use analytics, advertising, infrastructure and website optimisation technologies provided by third-party vendors operating within the United States and other international jurisdictions.

Certain website analytics and advertising technologies may involve limited processing of device identifiers, technical data and online activity information.

FTC does not sell personal data or personal information to third parties. We do not use personal data for third-party data brokerage purposes.

9. CCTV Monitoring

FTC may use CCTV systems at its premises and operational locations for:

  • crime prevention;
  • safety monitoring;
  • security purposes;
  • incident investigation;
  • protection of staff, visitors and property.

CCTV footage is processed in accordance with applicable law and retained only for as long as reasonably necessary.

Access to CCTV footage is restricted to authorised personnel.

Appropriate signage is displayed where CCTV monitoring operates.

10. Fleet, Telematics & Compliance Monitoring

Where relevant to our products and services, FTC may process data relating to:

  • fleet management;
  • vehicle compliance;
  • driver safety;
  • operational monitoring;
  • telematics systems;
  • vehicle inspections and reporting.

This processing may include:

  • location information;
  • driver identification;
  • compliance records;
  • system usage information;
  • operational logs.

Such processing is carried out for legitimate operational, contractual, safety and legal compliance purposes.

Where required, additional privacy notices may be provided to drivers, employees or operators.

11. Sharing Your Personal Data

We may share personal data with trusted third parties where necessary for legitimate business purposes.

This may include:

  • IT service providers;
  • cloud hosting providers;
  • CRM providers;
  • analytics providers;
  • payment providers;
  • distributors and partners;
  • professional advisers;
  • insurers;
  • auditors;
  • regulators or law enforcement authorities.

All third parties are required to:

  • respect the security of personal data;
  • process personal data lawfully;
  • act only on documented instructions where acting as processors.

We do not sell personal data.

FTC does not:

  • sell personal information;
  • trade personal data;
  • or disclose personal data to third parties for independent commercial exploitation.

Personal data may, however, be shared within the FTC corporate group and processed by authorised service providers, infrastructure providers and technology partners acting on FTC’s behalf under contractual, confidentiality and security obligations.

This may include processing within:

  • the United Kingdom;
  • the European Economic Area;
  • the United States;
  • and other jurisdictions relevant to FTC’s international operations.

Such providers may include:

  • cloud hosting providers;
  • fleet management infrastructure providers;
  • telematics and compliance platforms;
  • cybersecurity providers;
  • analytics providers;
  • communication and support systems;
  • CRM and operational service providers.

FTC implements contractual and organisational safeguards designed to ensure that personal data remains appropriately protected when processed internationally.

12. International Transfers

FTC operates internationally, including through affiliated operations and customers within the United States.

Personal data may therefore be transferred to, accessed from, stored within, or processed in jurisdictions outside the United Kingdom, including:

  • the European Economic Area (“EEA”);
  • the United States;
  • and other jurisdictions relevant to FTC’s international business operations.

Where international transfers occur, FTC implements safeguards designed to protect personal data in accordance with applicable data protection laws and recognised industry standards.

Such safeguards may include:

  • UK International Data Transfer Agreements (“IDTAs”);
  • International Data Transfer Addendums;
  • Standard Contractual Clauses (“SCCs”);
  • adequacy regulations approved by the UK Government;
  • vendor security and due diligence assessments;
  • access control and encryption measures;
  • supplementary technical and organisational safeguards where appropriate.

FTC also undertakes reasonable steps to ensure that international group entities, service providers and technology partners maintain appropriate security, confidentiality and privacy standards.

13. Data Security

We implement appropriate technical and organisational security measures designed to protect personal data against:

  • accidental loss;
  • unauthorised access;
  • misuse;
  • disclosure;
  • alteration;
  • destruction.

Our security measures may include:

  • encryption;
  • access controls;
  • multi-factor authentication;
  • monitoring and logging;
  • vulnerability management;
  • staff confidentiality obligations;
  • secure hosting environments.

We also maintain procedures to deal with suspected personal data breaches.

14. Data Retention

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected, including:

  • satisfying legal obligations;
  • resolving disputes;
  • maintaining records;
  • enforcing agreements.

Retention periods vary depending on the nature of the data and applicable legal requirements.

Examples may include:

Data Type Typical Retention Period
Customer records
Contract duration + statutory limitation periods
Financial records
6–7 years
Marketing records
Up to 24 months after last engagement
CCTV footage
Typically 30–90 days unless required longer
Fleet compliance records
As required by law or operational necessity

Where data is no longer required, it will be securely deleted or anonymised.

15. Your Rights

Under applicable data protection laws, you may have rights including:

  • the right to access your personal data;
  • the right to correct inaccurate data;
  • the right to request deletion;
  • the right to restrict processing;
  • the right to object to processing;
  • the right to data portability;
  • the right to withdraw consent;
  • rights relating to automated decision-making.

Depending on your jurisdiction and applicable law, you may also have rights relating to:

  • categories of personal data processed;
  • categories of third parties receiving data;
  • restrictions on certain profiling activities;
  • access to information regarding international transfers;
  • and certain rights available under applicable US state privacy laws.

FTC evaluates and responds to applicable rights requests in accordance with relevant legal obligations.

You may exercise your rights by contacting us using the details in this notice.

We may request verification of identity before responding to requests.

We normally respond within one month unless an extension is legally permitted.

15A. US State Privacy Rights

FTC may process personal information relating to individuals located within the United States.

Depending on applicable US state privacy laws, individuals may have rights relating to their personal information, including:

  • the right to know what categories of personal information are collected;
  • the right to request access to personal information;
  • the right to request correction of inaccurate information;
  • the right to request deletion of personal information;
  • the right to opt out of certain profiling or targeted advertising activities;
  • the right to restrict certain uses of sensitive personal information where applicable.

FTC does not sell personal information to third parties.

Where legally required, FTC will respond to verified privacy rights requests in accordance with applicable law.

Certain rights may be subject to verification requirements, legal exemptions, contractual obligations and applicable regulatory limitations.

Privacy requests may be submitted using the contact details provided within this notice.

16. Complaints

If you have concerns about how we process personal data, we encourage you to contact us first.

You also have the right to lodge a complaint with the Information Commissioner’s Office (“ICO”):

Information Commissioner’s Office

Website: https://ico.org.uk
Telephone: 0303 123 1113

17. Automated Decision-Making & Profiling

FTC does not generally make decisions based solely on automated processing that produce legal or similarly significant effects.

Where profiling or automated processing is used, appropriate safeguards will be implemented in accordance with applicable law.

FTC may utilise analytical, monitoring or automated technologies to support fleet management, compliance monitoring, operational reporting and product functionality. Such processing is subject to appropriate safeguards and human oversight where legally required.

18. Children’s Privacy

Our products and services are not directed at children.

We do not knowingly collect personal data from children unless legally authorised and appropriate safeguards are in place.

19. Third-Party Websites

Our website may contain links to third-party websites.

We are not responsible for the privacy practices or content of third-party websites.

We encourage users to read the privacy notices of any external sites they visit.

20. Changes to This Privacy Notice

We may update this Privacy Notice from time to time.

Any changes will be published on this page together with an updated revision date.

We encourage users to review this notice periodically.

21. Cookie Policy

Further information about our use of cookies and tracking technologies can be found in our separate Cookie Policy.

22. Legal & Regulatory References

This Privacy Notice has been prepared with reference to applicable guidance and legislation including:

  • UK GDPR;
  • Data Protection Act 2018;
  • Privacy and Electronic Communications Regulations (PECR);
  • ICO Transparency Guidance;
  • ICO Cookie Guidance;
  • ICO Direct Marketing Guidance;
  • UK Data (Use and Access) Act 2025 reforms;
  • EU GDPR principles where relevant;
  • Applicable US state privacy legislation where relevant to FTC operations and customers;
  • International transfer guidance relating to UK-US data processing arrangements;
  • Industry-standard information security and privacy frameworks;
  • Applicable US state privacy and consumer protection laws where relevant to FTC operations and customers;
  • UK-US and international transfer guidance relating to cross-border processing arrangements.

FTC periodically reviews this notice to reflect legal, operational and regulatory developments.