3.2 Cookies

​

Our Site uses cookies and similar tracking technologies. Strictly necessary cookies, needed to make the Site function (for example, to remember your session), are set on the basis of our legitimate interest and do not require your consent. Analytics, performance and marketing cookies are not strictly necessary and are only set where you have given your consent through our cookie banner.

You can change or withdraw your cookie consent at any time through the cookie settings tool on our Site, or through your browser settings.

​

   3.3 Marketing and Content Updates

​​

You will receive marketing and new content communications from us if you have created an account and chosen to opt in to receiving those communications. From time to time we may make suggestions and recommendations to you about goods or services that may be of interest to you.

​

   3.4 Change of Purpose

​

We will only use your Personal Data for the purposes for which we collected it, unless we reasonably consider we need to use it for another reason that is compatible with the original purpose. If you would like an explanation of how the processing for a new purpose is compatible with the original purpose, please contact us.

If we need to use your Personal Data for an unrelated purpose, we will notify you and explain the legal basis that allows us to do so.

We may process your Personal Data without your knowledge or consent, in compliance with the above rules, only where this is required or permitted by law.

 

4. YOUR RIGHTS AND HOW YOU ARE PROTECTED BY US

​

   4.1 Your Rights Under the UK GDPR

​

Subject to certain conditions and exemptions set out in law, you have the following rights in relation to your Personal Data:

•    Right of access — to request a copy of the Personal Data we hold about you.
•    Right to rectification — to have inaccurate or incomplete Personal Data corrected.
•    Right to erasure — to request deletion of your Personal Data in certain circumstances.
•    Right to restrict processing — to request that we limit the way we use your Personal Data in certain circumstances.
•    Right to data portability — to receive certain Personal Data you have provided to us in a structured, commonly used,         machine-readable format, and to have it transmitted to another controller.
•    Right to object — to object to processing based on legitimate interest, or to direct marketing at any time.
•    Right to withdraw consent — where processing is based on consent, to withdraw that consent at any time, without             affecting the lawfulness of processing before withdrawal.
•    Right to lodge a complaint — with the Information Commissioner's Office (www.ico.org.uk) or another competent               supervisory authority.
•    Rights related to significant automated decisions — where a significant decision about you is based solely on                       automated processing, including profiling, the right to be informed of this, to request meaningful human review, and         to make representations and contest the decision, under the safeguards regime in Articles 22A to 22D UK GDPR. See           section 5 below.

To exercise any of these rights, please contact us at info@slink-tech.co.uk or by letter to the address in section 1.2.

​

    4.2 How Does SLiNK-TECH Ltd Protect Your Personal Data?

​

We are concerned with keeping your data secure and protecting it from inappropriate disclosure. Personal Data collected by us is only accessible by a limited number of employees who have special access rights to such systems and are bound by obligations of confidentiality. If and when we use subcontractors to store your data, we will not relinquish control of your Personal Data or expose it to security risks that would not have arisen had the data remained in our possession.

However, no transmission of data over the internet is guaranteed to be completely secure. It may be possible for third parties not under our control to intercept or access transmissions or private communications unlawfully. While we strive to protect your Personal Data, we cannot guarantee the security of data you transmit to us; any such transmission is at your own risk. If you believe your interaction with us is no longer secure, please contact us immediately.

​​

   4.3 Opting Out of Marketing Promotions

​​

You can ask us to stop sending you marketing messages at any time by contacting info@slink-tech.co.uk, or by using the unsubscribe link in any marketing email.

Where you opt out of receiving marketing messages, we will continue to retain other Personal Data provided to us as a result of interactions with us that are not related to your marketing preferences.

 

   4.4 How to Request Your Data and the Process for Obtaining It

You will not have to pay a fee to access your Personal Data or to exercise any of your other rights. However, if your request is clearly unfounded or excessive, we may charge a reasonable fee or refuse to comply.

We may need to request specific information from you to confirm your identity and your right to access the Personal Data (or exercise any other right). This is a security measure to ensure Personal Data is not disclosed to anyone who has no right to receive it. We aim to respond to all legitimate requests within one month; if a request is particularly complex, or you have made multiple requests, we may extend this by a further two months and will notify you if this is the case.
 

​

5. AUTOMATED DECISION-MAKING AND PROFILING 

​

Since 5 February 2026, Articles 22 to 22D UK GDPR (as substituted by section 80 of the Data (Use and Access) Act 2025) govern “significant decisions” based solely on automated processing, including profiling, that is, decisions with a legal or similarly significant effect on an individual, taken with no meaningful human involvement. Under the current regime, such decisions are generally permitted for ordinary Personal Data, provided the required safeguards are in place; additional restrictions continue to apply where the decision is based entirely or partly on Special Category Personal Data.

For our own website, marketing and business activities, we do not currently make significant decisions based solely on automated processing within the meaning of Articles 22A to 22D.

Where our computer vision products generate alerts, analytics or classifications for a customer, and the customer uses those outputs to make a significant decision about an individual without meaningful human involvement, Articles 22A to 22D will apply. The customer, as Data Controller, is responsible for putting in place the required safeguards, which include: informing the individual that a significant decision has been taken by automated means, providing meaningful information about the processing, enabling the individual to request human review of the decision, and allowing them to make representations and contest it. As noted elsewhere in this Policy, our computer vision systems do not process Special Category Personal Data, so the additional Article 22B restrictions for special category data should not be engaged by our systems. SLiNK-TECH Ltd will provide reasonable technical assistance to customers to help them meet these obligations.

​

6. YOUR DATA AND THIRD PARTIES

 

   6.1 Categories of Recipients

 

We may share your Personal Data with the following categories of recipients, where necessary for the purposes set out in section 3.1:

•    Cloud hosting and IT infrastructure providers, who store data on our behalf
•    Customer relationship management (CRM) and email marketing platform providers, used to manage enquiries and            marketing communications
•    Professional advisers, including auditors, lawyers and insurers, where necessary for their services to us
•    Regulators, law enforcement or other authorities, where required by law
 

We do not sell your Personal Data to third parties. Any third-party service provider that processes Personal Data on our behalf does so under a data processing agreement requiring safeguards equivalent to those in the UK GDPR.
 

   6.2 Will We Share Your Data With Third Parties?

 

We may share Personal Data with interested parties in the event that SLiNK-TECH Ltd anticipates a change in control, or the acquisition of all or part of our business or assets, or in connection with the licensing of our technology.

If SLiNK-TECH Ltd is sold, or makes a sale or transfer of assets, we may transfer, sell or assign your Personal Data to a third party as part of that transaction, subject to that party using it for purposes consistent with this Privacy Policy or notifying you of any change. Upon such transfer, the Privacy Policy of the acquiring entity may govern the further use of your Personal Data. Any third-party processors of any data will be vetted for security and will not be permitted to provide third-party marketing. In all other situations, your data will remain protected in accordance with this Privacy Policy (as amended from time to time).

We may share your Personal Data if required for legal reasons or to enforce our terms or this Privacy Policy.

​

   6.3 Third-Party Links

 

Our Site may include links to third-party websites, plug-ins and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements. When you leave our Site, we encourage you to read the privacy policy of every website you visit.

​

7. HOW LONG WILL WE RETAIN YOUR DATA FOR? 

​

We only retain Personal Data for as long as reasonably necessary to fulfil the purposes for which it was collected, taking into account:

•    the amount, nature and sensitivity of the Personal Data;
•    the purpose for which it was collected and whether that purpose can still be achieved;
•    any legal, tax, accounting or regulatory retention requirement; and
•    the existence of any complaint, dispute or reasonably foreseeable prospect of litigation.
 

As a general guide: 

•    24 months for marketing and mailing-list data, measured from your last interaction with us or until you withdraw                consent, whichever is sooner; 
•    12 months for enquiry and demo-request records; and 
•    12 months for website usage/analytics data. We may retain your Personal Data for a longer period in the event of a            complaint, or if we reasonably believe there is a prospect of litigation in respect of our relationship with you. 

Retention periods for customer CCTV footage are set out separately in section 5 of the “CCTV on Third Party Sites” section below.

​

8. INTERNATIONAL TRANSFER OF DATA

​

Where Personal Data is transferred outside the UK, SLiNK-TECH Ltd will ensure the transfer complies with UK GDPR international transfer requirements. This may include reliance on UK adequacy regulations, the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, binding corporate rules, or another lawful transfer mechanism or exception where applicable.

Where SLiNK-TECH Ltd acts as a Data Processor, any restricted transfer of customer Personal Data will be made only in accordance with the customer's documented instructions and the applicable data processing agreement.

​

9. DATA PROTECTION CONTACT AND GOVERNANCE

​

SLiNK-TECH Ltd has assessed whether the appointment of a Data Protection Officer is required under Article 37 of the UK GDPR, taking into account the nature, scope and scale of our processing activities, including our use of CCTV and computer vision technologies. We have determined that we are not currently required to appoint a Data Protection Officer.

SLiNK-TECH Ltd remains responsible for ensuring compliance with applicable data protection legislation. For all data protection queries, including questions about this Privacy Policy, the exercise of your data protection rights, or how we process your personal data, please contact us at info@slink-tech.co.uk.

​​

10. NOTIFICATION OF CHANGES AND ACCEPTANCE OF POLICY

​

We keep this Privacy Policy under review and will place any updates on this webpage. This version is dated 17/09/2026 and replaces all earlier versions. By using SLiNK-TECH Ltd's services, you acknowledge the collection and use of data by us as set out in this Privacy Policy. Continued access to or use of SLiNK-TECH Ltd's services after changes are published will constitute your acceptance of those changes; where required by law, we will seek your fresh consent before relying on any change (for example, to marketing preferences).

​

11. INTERPRETATION

​

All uses of the word “including” mean “including but not limited to”, and enumerated examples are not intended to limit the term they illustrate. Any email addresses set out in this policy may be used solely for the purpose for which they are stated to be provided; unrelated correspondence will be ignored.

Our staff are not authorised to contract on behalf of SLiNK-TECH Ltd, waive rights, or make representations (whether contractual or otherwise). If anything in an email from a SLiNK-TECH Ltd address contradicts this policy, our terms, or any official public announcement on our website, the policy, terms or announcement will take precedence, except for genuine correspondence expressly from the SLiNK-TECH Ltd legal department.

 

CCTV on Third Party Sites

1. PURPOSE OF CCTV

​​

SLiNK-TECH Ltd supplies CCTV and computer vision systems to customers. The customer determines why the system operates, the lawful basis for processing, the retention period, and how data subject rights requests are handled. For customer CCTV systems, the customer is the Data Controller and SLiNK-TECH Ltd acts solely as a Data Processor under Article 28 UK GDPR, processing footage and related Personal Data only on the customer's documented instructions and under the relevant data processing agreement. 

​

2. THE LEGAL BASIS FOR COLLECTING THAT DATA

​

For customer CCTV systems, SLiNK-TECH Ltd does not determine the lawful basis for processing. The customer, as Data Controller, is responsible for identifying and documenting the lawful basis for operating the CCTV or computer vision system. SLiNK-TECH Ltd processes the relevant Personal Data only as a Data Processor and only on the customer's documented instructions.

Any Legitimate Interests Assessment (LIA), Data Protection Impact Assessment (DPIA), or other assessment required for the customer's use of CCTV or computer vision functionality is normally the responsibility of the customer as Data Controller. Given that CCTV and wide-area monitoring functionality is likely to constitute high-risk processing, we recommend customers complete a DPIA before deployment. SLiNK-TECH Ltd will provide reasonable assistance where required under its contractual and legal obligations, including Article 28 UK GDPR, taking into account the nature of the processing and the information available to us.
 

3. WHAT DATA WE COLLECT

​

Depending on the customer's configuration and documented instructions, the CCTV or computer vision system may capture:

•    Individuals present within the operational areas
•    Date and time of recordings
•    Camera location
•    Vehicle registration numbers, where relevant

Our CCTV and computer vision systems do not carry out facial recognition or other biometric identification, and do not use audio recording.
 

​

4. USE OF THIRD-PARTY SITES

​

​CCTV cameras are installed and configured in accordance with the customer's requirements and documented instructions. The customer is responsible for deciding where cameras are located and ensuring that the use of surveillance is lawful, necessary and proportionate.

SLiNK-TECH Ltd does not decide the purposes for customer CCTV systems and does not control CCTV systems operated independently by the customer, site owner or other tenants, except to the extent SLiNK-TECH Ltd provides agreed processor services under the relevant contract.

Where required, SLiNK-TECH Ltd enters into data processing agreements with customers that set out the subject matter, duration, nature and purpose of the processing, the type of Personal Data, the categories of data subjects, and the obligations and rights of the customer as Data Controller.

​

5. RETENTION OF FOOTAGE

​

UK GDPR does not prescribe a standard retention period for CCTV or computer vision footage; the appropriate period is determined by the purpose of the processing, and it is the customer's responsibility, as Data Controller, to determine and instruct a retention period that is necessary and appropriate for its purposes.

Where the customer uses SLiNK-TECH's standard configuration, the default retention period is 30 days. Footage is retained for the period agreed with, or instructed by, the customer - the default or another period the customer has set - unless preservation for longer is required, such as:

•    It is required for an active investigation
•    It is needed to respond to a legal request
•    Law enforcement agencies ask us to preserve it

At the end of the agreed retention period, footage is deleted or overwritten in accordance with the customer's documented instructions, unless applicable law requires storage for longer.

​

6. ACCESS AND SHARING
 

Access to customer CCTV footage is strictly limited to authorised personnel who need access to provide the contracted services or comply with documented customer instructions.

Customer CCTV footage may be shared only as instructed or authorised by the customer, or where required by law. This may include sharing with:

•    Police or other law-enforcement agencies
•    Insurers or legal representatives, where necessary
•    Security contractors acting on our behalf
•    The relevant site operator, where required under contractual or operational arrangements

SLiNK-TECH Ltd does not share customer CCTV footage for marketing, non-security purposes, or its own general machine learning development, and does not use customer CCTV footage containing Personal Data to train, develop, test or improve its own machine learning models. Customer CCTV footage is retained only for the agreed retention period and is then deleted or overwritten in accordance with the customer's instructions and applicable law.

Machine learning development is carried out using separate datasets generated from internal testing, controlled demonstrations, controlled trials, synthetic data, and customer-supplied drone imagery that has already been genuinely anonymised before being supplied to SLiNK-TECH Ltd. SLiNK-TECH Ltd does not treat genuinely anonymised data as Personal Data, where individuals are no longer identified or identifiable.

​

7. SECURITY OF FOOTAGE

​

We apply robust technical and organisational measures, including:

•    Encrypted storage
•    Access controls and audit logs
•    Secure transmission when footage is shared
•    Regular system testing and maintenance

All contractors handling footage are bound by confidentiality and data-processing agreements.

​

8. YOUR RIGHTS

​

Individuals have the right to:

•    Request access to CCTV footage in which they appear
•    Request rectification, erasure or restriction of processing, where appropriate
•    Object to processing where our legitimate interests, or the customer's, are not overriding
•    Where a significant decision about you is based solely on automated processing, including profiling, the right to be                        informed of this, to request meaningful human review, and to make representations and contest the decision, under the            safeguards regime in Articles 22A to 22D UK GDPR — see section 9 below
•    Lodge a complaint with the Information Commissioner's Office (www.ico.org.uk) or another competent supervisory                     authority

Individuals should usually exercise their rights in relation to customer CCTV footage by contacting the relevant customer as Data Controller. SLiNK-TECH Ltd will assist the customer, insofar as possible and taking into account the nature of the processing, to respond to rights requests. Requests should include enough information to locate the relevant footage, such as date, time and location. Footage may need to be redacted or withheld where disclosure would adversely affect the rights and freedoms of others, or where another lawful exemption applies.

​

9. AUTOMATED DECISION-MAKING IN COMPUTER VISION SYSTEMS

​

Our computer vision systems may generate alerts, classifications or analytics based on footage (for example, flagging the presence of a person or vehicle in a restricted area). Where a customer uses these outputs to make a “significant decision” about an individual - one with a legal or similarly significant effect - with no meaningful human involvement, this will engage Articles 22A to 22D UK GDPR (as substituted by the Data (Use and Access) Act 2025, in force since 5 February 2026).

Under the current regime, such decisions are generally permitted for ordinary Personal Data provided the required safeguards are in place. The customer, as Data Controller, is responsible for determining whether Articles 22A to 22D apply to their use of the system and for implementing the required safeguards, including informing the affected individual, providing meaningful information about the processing, enabling a request for human review, and allowing the individual to make representations and contest the decision. SLiNK-TECH Ltd will provide reasonable technical information to assist customers in meeting these obligations.

​

10. SIGNAGE AND TRANSPARENCY

​

The customer, as Data Controller for its CCTV or computer vision system, is responsible for ensuring clear and visible signage is displayed in areas covered by the system. In line with ICO guidance, signage should identify the relevant controller or system operator and provide appropriate contact details, particularly where it would not otherwise be obvious to individuals who is responsible for the system, together with:

•    That CCTV or computer vision monitoring is in operation
•    The purpose of the system
•    How to contact the controller/operator for further information

SLiNK-TECH Ltd will assist customers with appropriate technical or wording information for their signage where required under its contractual and legal obligations, but is not itself responsible for placing or maintaining signage at customer sites.

​

11. DATA PROTECTION IMPACT ASSESSMENTS
 

Where a customer's deployment of CCTV or computer vision functionality is likely to result in a high risk to individuals' rights and freedoms - for example, systematic monitoring of a publicly accessible area on a large scale - the customer, as Data Controller, is responsible for carrying out a Data Protection Impact Assessment (DPIA) under Article 35 UK GDPR before processing begins. SLiNK-TECH Ltd will provide reasonable technical assistance to support the customer's DPIA, including information about the processing carried out by our systems, on request and in accordance with the relevant contract.

​

12. CONTACT DETAILS
 

For SLiNK-TECH Ltd's own business activities, SLiNK-TECH Ltd is the Data Controller and responsible for the Personal Data it processes. For customer CCTV and computer vision systems, the customer is normally the Data Controller and SLiNK-TECH Ltd acts as Data Processor. Data subject requests relating to customer CCTV footage should normally be directed to the relevant customer.

General enquiries about SLiNK-TECH Ltd's handling of Personal Data should be sent by email to info@slink-tech.co.uk or by letter to 36 King Street, 3a, Bristol, BS1 4DZ, United Kingdom.