This Privacy Policy explains how Bunjee Platforms Ltd (trading as Smart Alarms) collects, uses, and protects personal data submitted through smart-alarms.co.uk in accordance with the UK General Data Protection Regulation (“UK GDPR”) and the Data Protection Act 2018.
Please read this policy carefully before submitting your details through our website. By submitting an enquiry, you confirm that you have read and understood this policy.
1. Data Controller
The data controller for all personal data collected through smart-alarms.co.uk is Bunjee Platforms Ltd, a company registered in England and Wales under Company Number 14213818, with its registered office at Flat 1, 275 New North Road, London, N1 7AA, United Kingdom (“we”, “us”, “our”, or “Smart Alarms”).
We are registered with the Information Commissioner's Office (“ICO”) under registration number ZB510934. We operate an independent quote facilitation and introduction service that connects property owners and occupiers with certified smart home security installers across the United Kingdom. We are not ourselves a security installer and we do not carry out any installation works.
Any enquiries regarding this Privacy Policy or the exercise of your data protection rights should be directed to: [email protected].
2. Information We Collect
We collect personal data exclusively from you directly, through the property security audit form published at smart-alarms.co.uk/smart-home-security. We do not purchase, source, or acquire personal data from any third-party data broker or list provider. The information we collect comprises:
- Identity data: first name and last name;
- Contact data: email address and telephone number;
- Location data: UK postcode;
- Property data: property type, ownership status, existing security equipment, security systems of interest, and preferred installation timeline;
- Technical data: IP address, browser type and version, operating system, and referral source — collected automatically via server logs and, where you have given explicit consent, via analytics cookies.
Submission of our audit form constitutes your explicit, freely given consent to the collection and processing described in this policy. You are not obliged to provide your details; however, we are unable to connect you with installation quotes without the information requested.
3. Legal Basis for Processing
We process your personal data on the following legal bases under Article 6 of the UK GDPR:
Consent (Article 6(1)(a)). The primary legal basis for processing your form submission data is your explicit, freely given consent. By submitting our audit form, you consent to your personal data being processed, stored in our CRM platform, and disclosed to our network of third-party distribution partners, aggregators, and certified installers for the purpose of generating and delivering security installation quotes. A separate, independent consent is obtained for marketing cookies via our cookie consent banner. Either consent may be withdrawn at any time without affecting the lawfulness of processing prior to withdrawal.
Legitimate interests (Article 6(1)(f)). We process server-side technical data (including IP addresses and access logs) on the basis of our legitimate interests in maintaining the security, integrity, and fraud-resilience of our platform and protecting our distribution partners from abusive or fictitious enquiry submissions, including through automated bot-detection measures. We have assessed that this processing does not override your fundamental rights and freedoms.
4. Third-Party Disclosures
Smart Alarms operates as a commercial quote facilitation and data routing service. Upon submission of your enquiry, your personal data will be transmitted to the following categories of recipients so that they may contact you by telephone or email with relevant security installation quotes and information:
- Third-party distribution partners and aggregators. Specialist quote matching and distribution distribution organisations that receive your enquiry data and further route it to certified installers and security professionals within their respective networks whose geographic coverage and service offering match your stated requirements;
- Certified smart home security installers. Regional and national installation businesses within our own and our partners' networks, who will contact you directly to provide free, no-obligation quotations;
- HubSpot Inc. Our customer relationship management (“CRM”) platform, used to store, manage, and route your enquiry data. HubSpot is certified under the EU-US Data Privacy Framework and processes data under a data processing agreement in compliance with UK GDPR;
- Analytics and advertising platforms. Google Analytics and Meta Pixel — strictly only where you have granted explicit marketing consent via our cookie banner. No personally identifiable data is transmitted to these platforms without your prior consent;
- Cloudflare, Inc. Bot-detection service used to prevent automated form submissions. Processes IP address and browser data for the duration of the session only. Acts as a data processor under a Data Processing Agreement;
- Infrastructure and hosting providers. Cloud service and hosting providers who process data on our behalf as data processors under appropriate contractual safeguards.
We do not sell your personal data to any third party for purposes independent of the referral and quotation activity described in this section. All third-party recipients to whom we disclose personal data are contractually required to handle that data in compliance with applicable UK data protection legislation.
5. Automated Decision-Making
When you submit your postcode and property details through our audit form, our platform uses automated logic to route your enquiry to the most appropriate third-party distribution partners and certified installers operating within your region. This routing process takes place without manual human intervention and is determined by factors including your stated postcode, property type, systems of interest, and the geographic coverage and acceptance criteria of available partners at the time of submission.
The outcome of this automated routing — namely, the selection of which distribution partners and installers receive your enquiry data — does not produce any legal effect upon you, nor does it otherwise significantly affect you beyond determining which companies will make contact with you. Accordingly, this processing falls outside the scope of Article 22(1) UK GDPR (which applies only to decisions that produce legal or similarly significant effects). We nonetheless disclose this processing in the interests of full transparency.
Should you wish to request human review of any routing decision, or to raise any concern regarding automated processing of your data, please contact us at [email protected].
7. Data Retention
We retain personal data only for as long as is necessary to fulfil the purposes for which it was collected and to comply with our legal obligations. Our retention periods are as follows:
- Personal data submitted via our audit form (including identity, contact, location, and property data) is retained in our CRM for a maximum of 90 days from the date of submission for operational, dispute resolution, and audit purposes, after which it is securely and permanently purged;
- Server access and security logs are retained for a maximum of 90 days;
- Cookie consent records are retained for a maximum of 12 months.
Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. We do not retain enquiry data beyond the period specified for any long-term marketing or profiling purpose.
You may request deletion of your personal data at any time prior to the expiry of the applicable retention period by contacting us at [email protected].
8. Your Data Protection Rights
Under the UK GDPR and Data Protection Act 2018, you have the following rights in relation to your personal data:
- Right of access (Article 15). You may request a copy of the personal data we hold about you, together with supplementary information about how it is processed;
- Right to rectification (Article 16). You may request that inaccurate or incomplete personal data be corrected;
- Right to erasure (Article 17). You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where processing is otherwise unlawful, subject to any overriding legal obligation to retain it;
- Right to restriction of processing (Article 18). You may request that we restrict processing of your data in certain circumstances, for example while the accuracy of data is contested;
- Right to data portability (Article 20). Where processing is based on consent and carried out by automated means, you may request your data in a structured, commonly used, and machine-readable format;
- Right to withdraw consent (Article 7(3)). Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal;
- Right to object (Article 21). You may object to processing based on our legitimate interests;
- Rights in relation to automated processing (Article 22). You may request human review of any automated routing decision and raise objections to such processing.
9. Exercising Your Rights
To exercise any of the rights set out in Section 8, please submit a written request to [email protected]. We will acknowledge receipt of your request without undue delay and will provide a substantive response within one calendar month of receipt. Where a request is complex or numerous, we may extend this period by a further two months, in which case we will notify you accordingly.
We will not charge a fee for handling a request unless it is manifestly unfounded or excessive, in which case we reserve the right to charge a reasonable fee or refuse to act on the request.
If you are not satisfied with our response, or consider that we are processing your personal data in breach of applicable law, you have the right to lodge a complaint with the Information Commissioner's Office (“ICO”), the supervisory authority for data protection matters in the United Kingdom:
Website: ico.org.uk
Telephone: 0303 123 1113
Address: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, SK9 5AF
10. International Transfers
Certain third-party service providers engaged by us — including HubSpot Inc., Meta Platforms, Inc., and Cloudflare, Inc. — may process your personal data in countries outside the United Kingdom. Where such international transfers occur, we ensure that appropriate safeguards are in place in accordance with Chapter V of the UK GDPR, including reliance on the UK International Data Transfer Agreement (“IDTA”), adequacy regulations, or other lawful transfer mechanisms, so as to ensure that your data receives a standard of protection equivalent to that afforded under UK data protection law.
11. Amendments
We reserve the right to amend this Privacy Policy at any time to reflect changes in our data processing activities, business model, or applicable law. The date on which this policy was most recently revised is stated at the top of this page. We recommend that you review this policy periodically. Continued use of this website following any amendment constitutes your acknowledgement of the revised policy.
12. Contact and Complaints
All data protection enquiries, subject access requests, and complaints should be directed to:
Bunjee Platforms Ltd (trading as Smart Alarms)
Email: [email protected]
Registered Office: Flat 1, 275 New North Road, London, N1 7AA, United Kingdom
Company No.: 14213818 | ICO Registration: ZB510934