Privacy
information.

Last updated: 14 September 2026.

Who is responsible for your information

Rook Security Ltd is the controller of personal information collected through this website.

Registered office: 6th Floor Capital Tower, 91 Waterloo Road, London, SE1 8RT. Company registration number: 17450120.

Privacy questions can be sent to [email protected] or raised by telephone on 0333 050 6813.

Information we may receive

Security enquiries may include your name, organisation or venue, email address, phone number, location, services of interest, proposed start date, approximate personnel requirement and details of the security requirement. Recruitment applications may include your name, email address, phone number, postcode, SIA licence information, professional background, information you choose to provide about yourself and experience, and a CV where supplied.

Why we use your information

We use enquiry information to understand and respond to security requirements, communicate with prospective clients, prepare quotations or proposals, manage follow-up and maintain appropriate business records.

We use applicant information to assess suitability for opportunities with Rook, communicate about recruitment, verify information where appropriate, administer selection and onboarding, and maintain appropriate recruitment records.

We may also use limited information to protect the website and forms against abuse, investigate security issues, meet legal or regulatory obligations, and establish, exercise or defend legal claims.

Lawful basis

Depending on the circumstances, processing may be necessary to take steps at your request before entering into a contract; necessary for Rook’s legitimate interests; or necessary to comply with a legal obligation.

Where Rook relies on legitimate interests, those interests include responding to and managing genuine business enquiries, recruiting and administering suitable personnel, maintaining proportionate business and recruitment records, and protecting Rook’s website, systems and communications from misuse. We consider whether those interests are necessary and balanced against the rights and interests of the individuals concerned.

Is providing information required?

You choose whether to contact or apply to Rook. Fields marked as required are information we need in order to process the particular enquiry or application. If you do not provide required information, we may be unable to respond to the enquiry or assess the application.

Website form processing

Rook’s website enquiry and recruitment forms are provided through Jotform. Rook Security Ltd is the controller of the information collected through those forms and Jotform acts as a service provider/processor.

Rook has configured its Jotform account to use Jotform’s European data centre. Form submissions and uploaded files are therefore handled through the EU environment. Jotform’s processing is governed by its data-processing terms, including safeguards for processing and transfers where applicable.

The forms also use automated anti-spam or human-verification controls. These controls may process technical information needed to distinguish genuine submissions from automated abuse; they do not make recruitment or client contracting decisions.

Recipients and sharing

Rook does not sell personal information. Information may be received or processed by service providers used for website hosting, form delivery, email and IT services. It may also be shared with professional advisers, relevant clients where this is necessary for a genuine recruitment or deployment process, and public authorities where disclosure is required or permitted by law.

International transfers

Rook has configured Jotform to use its European data centre for website form submissions. Other technology providers used by Rook may process limited personal information outside the United Kingdom. Where a restricted international transfer is made, Rook will rely on a lawful mechanism available under UK data protection law, such as adequacy regulations or approved contractual safeguards.

Further information about the safeguards applying to a particular service provider can be requested using the contact details in this notice.

Retention

General enquiry information that does not become a client relationship will normally be retained for up to 12 months and then deleted unless there is a lawful reason to retain it longer. Information relating to unsuccessful recruitment applications will normally be retained for up to 6 months after the recruitment process ends and then securely deleted, unless there is a lawful reason to retain it longer.

Client, employment, incident, contractual and other operational records are retained for the periods reasonably required by law, contract, insurance, dispute management or legitimate operational record-keeping needs.

Automated decision-making

Rook does not currently make recruitment or client decisions that have legal or similarly significant effects solely by automated processing. Anti-spam and security controls may automatically filter or flag form submissions, but those controls do not make hiring or contracting decisions.

Your rights

Depending on the circumstances, you may have rights to request access to, correction or erasure of your personal information; to restrict or object to certain processing; and, where the legal conditions apply, to receive personal information you provided in a portable format. Where processing is based on consent, you may withdraw that consent, although Rook does not generally rely on consent merely to respond to an enquiry or assess a job application.

You can raise a privacy concern with Rook using the contact details above and you also have the right to complain to the UK Information Commissioner’s Office.

Hosting analytics and cookies

Rook Security does not currently load non-essential advertising or client-side marketing analytics on this website. Accordingly, the site does not currently use a consent banner for marketing analytics.

The website is hosted by Sevalla. Sevalla processes normal HTTP request information for hosting, security, diagnostics and server-side site analytics, including request path, device or user-agent information, country, status code and source IP. Sevalla states that static-site analytics data is retained for 30 days.

Contact

For privacy or general enquiries, email [email protected] or call 0333 050 6813.