Privacy Policy

1. Who we are

SureRedact is a video redaction service for schools and multi-academy trusts in the United Kingdom. SureRedact is provided by Vanguard EdTech Ltd trading as SureRedact.

Email: support@sureredact.co.uk

For data protection queries contact: support@sureredact.co.uk.

2. How we operate

SureRedact works with two data protection roles:

• Processor When a school or trust uploads footage for redaction we act as a processor for that customer who is the controller. We process footage only on their written instructions as set out in our order form and terms.
• Controller For our website, billing, customer communications and service logs we act as the controller.

3. Personal data we process

3.1 Footage and project content Processor

• Uploaded video and audio from your CCTV or device, including any individuals captured.
• Selections and instructions such as time ranges to redact, areas to blur, and notes for our editors.
• Derived redacted output which replaces or obfuscates selected areas.
• Technical metadata for processing such as file names, sizes, codecs and checksums.

Special category data may appear incidentally in footage. We do not seek to identify individuals. We apply redaction to reduce identifiability at your instruction.

3.2 Service and account data Controller

• Contact and organisation details such as name, role, email, phone, school or trust.
• Billing information and payment references. Card data is handled by our payment provider (Stripe) and is not stored by us.
• Support communications including emails and call notes.
• Technical logs such as IP address, browser and request timestamps for security and troubleshooting.

4. Lawful bases and purposes

For special category data that may appear in footage, the controller should identify an Article 9 condition that applies, for example substantial public interest for safeguarding or legal claims where relevant. We do not decide this on your behalf.

5. Retention and deletion

• Uploaded footage is stored in the UK and deleted when your project is complete. By default we remove source files and working copies immediately after the redacted version has been delivered and accepted. If an order is created but unpaid we delete uploads after 12 hours.
• Redacted outputs are retained only until you have successfully downloaded them or the delivery window expires. We then remove them from our storage.
• Service logs and invoices are kept for up to 7 years to meet accounting and audit requirements.
• On request we can perform earlier deletion of project data. Email support@sureredact.co.uk with your order reference.

6. Sharing, processors and locations

We do not sell your data. We use trusted providers that act on our instructions:

Where a provider is outside the UK or EEA we use appropriate safeguards such as the ICO approved International Data Transfer Addendum or EU Standard Contractual Clauses.

7. Security

• All transfers use HTTPS with modern TLS.
• Storage is encrypted at rest. Access is limited to UK staff who are trained in data protection and safeguarding.
• Role-based access controls, least privilege and multi-factor authentication are in place.
• We maintain audit logs and monitor for unusual activity.
• We never use customer footage to train AI models.

8. Your rights

Under UK GDPR you have rights including access, rectification, erasure, restriction, portability and objection.

• If you are a school or trust customer contact us and we will assist as a processor.
• If you appear in footage contact the controller which is the school or trust that collected the footage. We will support them with your request.
• For our website and billing data contact us at support@sureredact.co.uk.

You can complain to the UK Information Commissioner if you are unhappy with how we handle your data: ico.org.uk.

9. Children and CCTV footage

Our service frequently processes footage from school environments which may include children. The controller is responsible for identifying a suitable lawful basis, setting retention, and meeting transparency duties. We apply redaction strictly on instruction and do not repurpose footage.

10. Cookies and analytics

• Essential cookies may be used to keep your session secure and to deliver the service.
• Analytics is provided by Plausible which focuses on privacy and does not set identifying cookies by default.
• You can block non-essential cookies in your browser. The service will continue to function for uploads and orders.

11. Contact

Vanguard EdTech Ltd t/a SureRedact

Email: support@sureredact.co.uk

Data protection: support@sureredact.co.uk

12. Changes to this notice

We may update this privacy policy to reflect changes to our service or the law. We will post the new version here and update the date at the top.