CCTV Policy
Business name: MK Prom
Premises: 215 Queensway, Bletchley, MK2 2EQ
Policy effective from: [Date]
Policy owner: [Name/Job Title]
Contact: ne**@****om.uk
1. Purpose of this policy
This policy explains how MK Prom uses CCTV at its prom dress shop, why CCTV is used, how footage is handled, and the rights of customers, visitors, staff, contractors, and members of the public whose images may be recorded.
CCTV is used only in public and customer-facing areas of the shop. We do not use CCTV in changing rooms, toilets, staff-only private areas, or any other area where people would reasonably expect privacy.
2. Why we use CCTV
We use CCTV for the following purposes:
To help prevent and detect crime, including theft, fraud, vandalism, and damage to property.
To protect the safety and wellbeing of customers, staff, visitors, and contractors.
To help investigate incidents, complaints, accidents, disputes, abusive behaviour, or suspected criminal activity.
To protect our stock, premises, equipment, and business property.
To assist law enforcement or other relevant authorities where appropriate and lawful.
3. Areas covered by CCTV
CCTV cameras are located only in public areas of the shop, such as:
The shop entrance and exit.
The shop floor and display areas.
Till/payment areas.
Public walkways within the premises.
Stock display areas accessible to customers.
CCTV is not used in changing rooms, toilets, staff-only private areas, or any other area where people would reasonably expect privacy.
Cameras are positioned to avoid recording areas outside the premises as far as reasonably possible, unless this is necessary for security, such as monitoring the shop entrance.
4. Legal basis for using CCTV
We process CCTV footage under our legitimate interests in keeping our shop, staff, customers, visitors, and property safe and secure.
Where CCTV footage is used in connection with a legal claim, investigation, or law enforcement request, we may also process it where necessary for legal obligations or the establishment, exercise, or defence of legal claims.
5. CCTV signage
Clear signs are displayed at the entrance to the shop and within the premises where appropriate.
The signs inform customers and visitors that CCTV is in operation, the purpose of recording, the business responsible for the CCTV, and how to contact us for more information.
6. Audio recording
Our CCTV system does not record audio.
If audio recording is ever introduced, this policy will be updated, clear signage will be displayed, and audio will only be used where it is necessary, proportionate, and lawful.
7. Access to CCTV footage
Access to CCTV footage is restricted to authorised persons only.
Authorised persons may include:
The business owner or manager.
Designated senior staff members.
IT/security providers where necessary for maintenance or technical support.
Law enforcement or other relevant authorities where legally appropriate.
CCTV footage must not be viewed casually, unnecessarily, or for entertainment. Footage should only be accessed where there is a valid business, safety, security, legal, or investigatory reason.
8. Sharing CCTV footage
CCTV footage may be shared where necessary and lawful, including with:
The police or law enforcement agencies.
Insurers.
Legal advisers.
Regulatory authorities.
Other parties where required by law or necessary for a legal claim or investigation.
We will not share CCTV footage publicly, on social media, or with unauthorised individuals.
Staff must not record, photograph, copy, download, or share CCTV footage using personal phones or personal devices.
9. Retention period
CCTV footage is stored securely in the cloud and is normally kept for 7 days.
After 7 days, footage is automatically deleted or overwritten by the CCTV system.
Footage may be kept for longer where it is needed for an investigation, complaint, insurance matter, legal claim, police request, disciplinary matter, or other legitimate reason.
Where footage is retained for longer than 7 days, the reason should be recorded.
10. Security of footage
CCTV footage is stored securely in the cloud and protected against unauthorised access, loss, misuse, or disclosure.
Access to the cloud CCTV system is restricted to authorised persons only. We use appropriate security measures, which may include password protection, two-factor authentication where available, restricted user permissions, and regular review of who has access.
Default passwords must be changed, and login details must not be shared with unauthorised people.
11. Requests to access CCTV footage
Individuals have the right to request access to CCTV footage in which they are identifiable.
Requests should be sent to:
MK Prom
ne**@****om.uk
215 Queensway, Bletchley, MK2 2EQ
We may ask for information to help identify the footage, such as the date, time, location, and description of the person making the request.
We may refuse or limit access where disclosure would affect the rights and freedoms of others, interfere with an investigation, reveal confidential information, or where another legal exemption applies.
Where other people are visible in the footage, we may blur or obscure them before disclosure where reasonably possible.
12. Staff responsibilities
Staff must:
Be aware that CCTV is in use.
Only access CCTV footage if authorised.
Never use CCTV for personal reasons.
Never share CCTV footage or images on social media, messaging apps, or personal devices.
Report any CCTV issues, misuse, security concerns, or access requests to management.
Refer customer or visitor requests about CCTV to the manager or business owner.
13. Use of CCTV involving staff
CCTV is used for safety, security, and crime prevention. It is not used for continuous staff monitoring.
However, footage may be reviewed where there is a specific incident, complaint, accident, suspected misconduct, suspected criminal activity, or legal/security concern.
14. Complaints
Anyone with concerns about how CCTV is used should contact us at:
We will investigate concerns and respond appropriately.
Individuals also have the right to complain to the Information Commissioner’s Office if they are unhappy with how their personal data has been handled.
ICO website: https://ico.org.uk
15. Policy review
This policy will be reviewed regularly, especially if we change our CCTV system, add or move cameras, introduce new recording features, or change how footage is used.
Last reviewed: [Date]
Next review due: [Date]