Privacy Policy

Who we are

This website is operated by Crusader Vehicles Limited, trading as School Minibus Cameras. We supply, install, and maintain CCTV camera systems for school minibuses and other pupil transport vehicles.

We are registered with the Information Commissioner's Office (ICO) as a data controller. Our ICO registration number is Z2007710. Our registered address is: Crusader House, High Street, Buxted, East Sussex, TN22 4LA.

If you have any questions about this policy or how we handle your personal data, please contact us using the details at the bottom of this page.

What data we collect

We collect personal data in the following circumstances:

When you submit a quote request or contact form

• Your name and job title or role
• Your school or organisation name
• Your email address and telephone number
• Details about your vehicle fleet and requirements

When you download our GDPR guidance document

• Your name, email address, and organisation name

When you contact us directly by phone or email

• Any personal information you include in your communication

Website usage data

• Standard server logs including IP address, browser type, and pages visited
• Cookie data — see our Cookies section below

How we use your data

We use the personal data we collect for the following purposes:

• To respond to your enquiry or quote request and provide you with information about our services
• To arrange and carry out site surveys and installations
• To manage your account if you become a customer — including invoicing, maintenance scheduling, and support
• To send you the GDPR guidance document you requested
• To follow up on enquiries where you have not yet made a decision
• To improve our website and services based on how visitors use them
• To comply with our legal and regulatory obligations

We do not use your data for automated decision-making or profiling. We do not sell your data to third parties. We do not use your data for advertising purposes.

Lawful basis for processing

Under UK GDPR, we rely on the following lawful bases for processing your personal data:

Legitimate interests

For responding to enquiries, following up with prospective customers, and improving our services — where our legitimate business interests are not overridden by your rights and interests.

Contract performance

For processing data necessary to fulfil a contract with you, or to take steps at your request before entering into a contract — such as providing a quote, arranging a survey, or carrying out an installation.

Legal obligation

Where we are required to process or retain data to comply with a legal obligation, such as maintaining financial records.

Consent

Where you have explicitly opted in to receive marketing communications from us. You can withdraw consent at any time by contacting us.

Sharing your data

We do not sell, rent, or trade your personal data. We may share it in limited circumstances:

• Service providers: We may share data with trusted third parties who help us operate our business — such as email providers, accounting software, or CRM systems. These parties process data only on our instructions and are bound by data processing agreements.
• Legal requirements: We may disclose data if required to do so by law, or in response to a valid request from a public authority.
• Business transfer: In the event of a merger, acquisition, or sale of the business, personal data may be transferred to the new owner. We will notify affected individuals in advance.

We do not transfer your data outside the UK or European Economic Area.

How long we keep your data

We retain personal data only for as long as necessary for the purpose it was collected, or as required by law:

• Enquiries that do not proceed: Up to 12 months from last contact
• Customer records: For the duration of the contract and up to 7 years after its end, in line with HMRC requirements for financial records
• Installation and maintenance records: For the duration of the relationship and 3 years thereafter
• Website server logs: Up to 90 days

After the applicable retention period, data is securely deleted or anonymised.

Your rights

Under UK GDPR, you have the following rights in relation to your personal data:

• Right of access: You can request a copy of the personal data we hold about you
• Right to rectification: You can ask us to correct inaccurate or incomplete data
• Right to erasure: You can ask us to delete your data in certain circumstances
• Right to restrict processing: You can ask us to limit how we use your data
• Right to data portability: You can request your data in a machine-readable format
• Right to object: You can object to processing based on legitimate interests or for direct marketing
• Right to withdraw consent: Where processing is based on consent, you can withdraw it at any time

To exercise any of these rights, please contact us using the details below. We will respond within one month. There is no charge for making a request.

If you are unhappy with how we have handled your data, you have the right to lodge a complaint with the Information Commissioner's Office at ico.org.uk or by calling 0303 123 1113.

Cookies

Our website uses cookies — small text files stored on your device — to help the site function correctly and to understand how it is being used.

Essential cookies

These are necessary for the website to function and cannot be disabled. They do not store any personally identifiable information.

Analytics cookies

If we use analytics tools (such as Google Analytics), these may set cookies to help us understand visitor behaviour in aggregate — pages viewed, time on site, and so on. No personally identifiable information is collected. You can opt out of analytics cookies using your browser settings or a cookie management tool.

You can control and delete cookies through your browser settings. Disabling cookies may affect the functionality of some parts of this website.

Vehicle CCTV systems

An important clarification regarding the camera systems we supply and install:

Footage captured by installed camera systems is stored locally on the SD card within the DVR unit on your vehicle. Your school or organisation is the data controller for that footage and is responsible for its management, access controls, and retention in accordance with UK GDPR.

Our GDPR page provides detailed guidance on your obligations as data controller for vehicle CCTV footage. We also provide a written GDPR guidance document at every installation.

The only exception is Live Feed systems, where footage may be transmitted remotely. We provide specific GDPR guidance for Live Feed deployments at the point of installation.

Contact us

If you have any questions about this Privacy Policy, wish to exercise your rights, or want to raise a concern about how we handle your data, please get in touch:

This policy was last updated in January 2025. We may update it from time to time — any significant changes will be noted at the top of this page with a revised date.