Privacy Policy

Who we are

CCTV Line Ltd takes the protection of your privacy and personal data seriously. This policy covers the data we take when you use our website and services, the uses we put it to, and how it is protected.

Comments

Post a comment and we store the comment-form entries, your IP address and the user-agent string your browser sends; the last two help us catch spam.

We may pass Gravatar an anonymised string derived from your email address (known as a hash) to check whether you use the service. Gravatar’s privacy policy: https://automattic.com/privacy/. Once a comment is approved, your profile picture appears publicly next to it.

Media

When uploading images, remove any embedded location data (EXIF GPS) first. Anyone visiting the site can download an image and pull its location data out.

Cookies

Cookies handle sign-in and hold your session open, store your cookie choice and maintain a security log of account activity; with your consent, they also show us how visitors use the site. We set no cookies for advertising and none that track you across other sites, and your browsing is not passed to ad networks.

The Cookie Policy lists each cookie by name, purpose and lifetime, flags the ones set only after you accept, and explains how to change your choice.

Embedded content from other sites

Our articles may carry content embedded from other sites, such as videos, images or other articles. Embedded content behaves exactly as it would if you had gone to the other site directly.

Those sites can collect data on you, set cookies, add their own third-party tracking and monitor how you interact with the embedded content, including when you hold an account with them and are logged in.

Who we share data with

Request a password reset and the reset email will include your IP address. Your business details go to legal entities only where we are required to share them, or to our IT partner where that helps your business and you have consented.

Site activity log

Alongside analytics, we run a separate log of activity on the site. It gives us the evidence for disputed orders, possible account takeovers, fraud and bots scraping our catalogue and prices.

For signed-in customers, entries sit against the account and the basis is our legitimate interests: account and payment security, fraud prevention, and settling any dispute over who ordered what. Your interests have been balanced against that. The log is confined to what those purposes need, leaves typed content out, can be searched only by specifically authorised staff and clears after six months, and every search is logged in turn.

Visitors not signed in are logged on consent only, given on the cookie banner. No answer counts as a refusal, and you are free to refuse. Entries are then tied to a random ID held in your browser instead of your name, postal address or email, and if you have not accepted analytics cookies, nothing is logged at all (see our Cookie Policy).

Log at a glance

• Captured: file downloads, orders placed, checkout starts, basket adds and quote requests; logins, logouts and failed logins; pages viewed, timestamped; IP address; browser, OS and device type (e.g. “Edge, Windows, desktop”).
• Staff logins also: record edits, the change made, and any refused access attempt.
• Never captured: login passwords, security codes and card numbers (stripped before saving); keystrokes, typed content, mouse movement and scrolling; query strings (whatever follows the ? in a URL), as they can hold login links and password-reset tokens.
• Retention: 180 days, then auto-deleted.
• Audit log: staff look-ups of customer records, edits to user permissions, exports, logins and processed refunds are also written to a separate audit log, held longer as evidence for defending or settling any legal claim.
• Access: limited to named CCTV Line staff, each explicitly cleared to do support, security or fraud work. Not open to staff generally, not passed to advertisers, never sold.

Your rights: request a copy of your log, have it deleted, or, where the log rests on our legitimate interests, object to us holding it. Analytics consent can be withdrawn any time from the cookie settings in your browser. Send requests to [email protected]. Complaints can also be taken to the ICO (Information Commissioner’s Office): ico.org.uk.

How long we keep data

Comments and their metadata are kept indefinitely, so follow-up comments can be recognised and approved automatically instead of sitting in a moderation queue.

Where a user registers on the site, we also store the personal details they enter in their profile. Users can view, edit or delete those details at any time, except the username, which cannot be changed. Site administrators can also view and edit them.

Customer personal information is held only as long as we need it to supply our products or service while you are a customer. After that, we keep it only where a legal or regulatory obligation requires it.

Your data rights

Account holders and commenters can ask for an exported file of whatever personal data is held on them, anything they supplied to us included, and can ask for it to be erased. Erasure does not extend to data that administrative, legal or security obligations require us to keep.

Where data is sent

Comments may be screened by an automated spam-checking service.

Security

Keeping your information secure is a priority. Suitable physical, electronic and managerial procedures, backed by encryption, protect the information we collect online from unauthorised access or disclosure.

Contact

Questions about this policy, or about what we do with personal data? Contact us:

Last updated: January 2026