Skip to main content

Federal Services Bureau

Menu
Linkedin Facebook Instagram X-twitter

GDPR Compliance Statement

GDPR Compliance Statement

Last updated 12 July 2025

1. Purpose of this document

This statement sets out how Federal Services Bureau Ltd trading as FSB London (“we”, “us”, “our”) complies with the UK General Data Protection Regulation (UK GDPR) and, where applicable, the EU GDPR. It should be read in conjunction with our Privacy Policy, Cookie Policy and Website Terms.

2. Data protection principles

We process personal data lawfully, fairly and transparently; collect data for specified, explicit and legitimate purposes; keep data adequate, relevant and limited to what is necessary; maintain accurate data; store data no longer than necessary; and ensure appropriate security.

3. Lawful bases for processing

  • Contract – to deliver quoted security services.
  • Legitimate interests – to operate CCTV, update clients and improve our services.
  • Consent – for optional marketing communications.
  • Legal obligation – to meet SIA, tax and accounting requirements.

4. Data subject rights

Individuals may request access, rectification, erasure, restriction, data portability or object to processing. Requests can be made by email to info@fsb.london or via our contact form. We respond within one calendar month.

5. Data controller details

Federal Services Bureau Ltd
14a Mary Rose Mall, London E6 5LX
Companies House No. 147 000 01
Phone +44 (0)20 3713 5893
Email info@fsb.london

We have not appointed a statutory Data Protection Officer; privacy matters are overseen by a senior manager.

6. Security measures

We employ TLS encryption, firewalls, MFA, role-based access controls, encrypted storage and ISO 27001-certified data centres. Staff receive annual data-protection training.

7. Data retention

Personal data are retained only as long as necessary for the purpose collected, in line with the retention schedule set out in our Privacy Policy.

8. International transfers

We do not routinely transfer data outside the UK/EEA. Any exceptional transfer will use an approved safeguard such as the UK IDTA or EU SCCs.

9. Data breach response

We maintain an incident-response plan. In the event of a personal-data breach we will assess risk, notify the ICO within 72 hours if required, and inform affected individuals without undue delay where there is a high risk to their rights and freedoms.

10. Complaints

If you believe your data have been mishandled, please contact us first. You may also complain to the Information Commissioner’s Office at ico.org.uk or by calling 0303 123 1113.