Legal

Privacy Policy

Last updated: 1 October 2026

Haris360 is ISO 27001 certified. Our information security management system is independently audited to ensure your data is handled to the highest standard.

Haris360 Ltd is committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website haris360.com or engage with our AI-powered security monitoring services.

1. Information We Collect

We collect information you provide directly to us, such as when you submit an enquiry form, request a site survey, or contact us by email or telephone. This may include your name, email address, phone number, company name, and details about your security requirements. We also collect certain technical data automatically when you visit our website, including your IP address, browser type, pages visited, and referring URLs, via standard server logs and analytics tools.

2. How We Use Your Information

We use the information we collect to respond to your enquiries and provide the services you request; to send you information about our products, services, and promotions where you have consented; to improve our website and services; to comply with legal obligations; and to protect the security and integrity of our systems. We do not sell, rent, or trade your personal information to third parties for their marketing purposes.

3. Legal Basis for Processing

Where the UK GDPR or EU GDPR applies, we process your personal data on the following legal bases: (a) Contract — processing necessary to fulfil a contract with you or to take steps at your request before entering into a contract; (b) Legitimate Interests — processing necessary for our legitimate business interests, such as improving our services and preventing fraud, provided those interests are not overridden by your rights; (c) Consent — where you have given us explicit consent to process your data for a specific purpose, such as receiving marketing communications; and (d) Legal Obligation — processing necessary to comply with a legal obligation.

4. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyse site traffic, and support our marketing activities. Essential cookies are required for the website to function and cannot be disabled. Analytics and advertising cookies are only placed with your consent, which you can manage via our cookie consent banner. For full details, please see our Cookie Policy.

5. Data Sharing and Disclosure

We may share your personal information with trusted third-party service providers who assist us in operating our website and delivering our services — for example, cloud hosting providers, email delivery platforms, and analytics services. These providers are contractually obligated to keep your information confidential and to use it only for the purposes we specify. We may also disclose your information where required by law, court order, or regulatory authority, or to protect the rights, property, or safety of Haris360, our clients, or others.

6. CCTV and Video Data

As part of our AI monitoring services, we process video feeds from cameras installed at client premises. This processing is carried out under a Data Processing Agreement with each client, who acts as the data controller for footage captured at their site. Haris360 acts as a data processor in this context. We do not store continuous video footage; our AI platform processes feeds in real time for event detection only. Detected event clips are retained for a defined period agreed with the client and are accessible only to authorised users.

7. International Data Transfers

Haris360 operates globally and your data may be transferred to and processed in countries outside the United Kingdom or European Economic Area. Where such transfers occur, we ensure appropriate safeguards are in place — such as Standard Contractual Clauses approved by the relevant supervisory authority — to protect your personal information in accordance with applicable data protection law.

8. Data Retention

We retain your personal information for as long as necessary to fulfil the purposes for which it was collected, including satisfying any legal, accounting, or reporting requirements. Enquiry and contact data is typically retained for up to 3 years from the date of last contact. Video event clips processed under client contracts are retained for the period specified in the relevant Data Processing Agreement. When data is no longer required, it is securely deleted or anonymised.

9. Your Rights

Subject to applicable law, you have the right to: access the personal data we hold about you; request correction of inaccurate or incomplete data; request erasure of your personal data in certain circumstances; object to or restrict our processing of your data; request a portable copy of your data; and withdraw consent at any time where processing is based on consent. To exercise any of these rights, please contact us at the details below. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) in the UK or your local supervisory authority.

10. Security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, loss, destruction, or alteration. Our infrastructure is ISO 27001 certified. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

11. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of those sites. We encourage you to review the privacy policies of any third-party sites you visit.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will post the revised policy on this page with an updated effective date. We encourage you to review this policy periodically.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at: Haris360 Ltd, Email: [email protected], Website: haris360.com. We aim to respond to all privacy-related enquiries within 5 business days.

Questions about your privacy?