Privacy Notice


This privacy notice explains how We’ve Got The Key Ltd uses your data when captured on CCTV.

We’ve Got The Key Ltd has CCTV in operation at various sites, including offices and other premises. CCTV will capture images in real time wherever the cameras are pointed. These cameras may capture footage of you whilst you are on the premises. Cameras have been situated both inside and outside the buildings. There are signs in place to inform you where cameras are in use.

Who will be using your data?

We’ve Got The Key Ltd will be the data controller for the data you provide to us.

We may also contract third party organisations to process your data on our behalf (e.g. suppliers of business systems such as our Business Management System).

What personal data do we use?

  • static and moving images of people
  • vehicle registration numbers

What types of special category personal data do we need from you?

We do not deliberately set out to capture any special category personal data. However, cameras may incidentally record information which falls within these categories. Additionally, footage cameras may be used as evidence regarding criminal offences or related security measures.

Why do we use your data?

  • to ensure the health and safety of employees, service users and visitors to the sites
  • to detect, prevent or reduce the incidence of crime
  • to prevent and respond effectively to all forms of possible harassment and disorder
  • to reduce the fear of crime
  • to create a safer environment
  • to provide emergency services assistance
  • to assist with health and safety and other serious occurrences, including employment issues, for example, disciplinary investigations, where appropriate to do so
  • for the defence of We’ve Got The Key Ltd with regards to legal or insurance claims

What legal reasons allow us to use your data in this way?

Our legal basis for processing your personal data is:

  • that it is necessary to meet a legal obligation
  • that it is necessary to perform tasks in the public interest
  • that we have a legitimate interest in processing this information

Our basis for processing special category persona data is:

  • there is a substantial public interest in processing this information, for the purposes of detecting and preventing crime

Who may we share your data with or receive it from?

Sometimes we need to share your information with others. We will only do this when it is necessary, or if we are required to do so by law. We do not plan to share it with anyone else or use it for anything else. When it is necessary, we may disclose footage to specific partners.

We may be asked to provide footage to assist the police with any criminal damage or their investigations. We may also be asked for footage from insurance companies should there be an incident involving car accidents or damage to cars parked on council premises.

However, there is no planned regular or scheduled sharing of CCTV footage with any external organisation. Should this situation change, this privacy notice will be updated and reissued, to keep you fully aware of how the council plans to use CCTV footage which you may be captured in.

CCTV footage will only be processed internally by council staff who are authorised to do so and any other departments where there is a legitimate and lawful reason for their involvement, such as HR colleagues in the event of an investigation.

From time to time CCTV on entry points to premises may be used for monitoring purposes, to see if there are any issues with security or access. At no time will individuals be the focus of this monitoring.

May personal data be transferred overseas?


How long is your data kept for?

This information is held in accordance with the WGTK Data Retention Policy

Does the service make decisions using fully automated processes?


What rights do you have over this use of your data?

  • to be informed about how we use your data
  • to access a copy of your data that we process
  • to have us rectify or correct your data that we process
  • to restrict our processing of your personal data
  • to object to the use of your data
  • to have your personal data erased
  • to request that we transfer your information to you or another organisation
  • to object to fully automated decision making
  • to withdraw your consent (if it is the legal reason why we use your data)

Some of these rights are subject to exceptions.

Contact the Data Protection Officer:

If you have any concerns about how the council is using your data, you can contact the Data Protection Officer by writing to:

Contact details of the Information Commissioners’s Office:

If you are unhappy with how your data has been processed by the council or you feel your data protection rights have been breached, you have the right to complain to the Information Commissioner’s Office at:


Wycliffe House
Water Lane

Scroll to Top