Privacy Policy

This Privacy Policy is published for users of the SPCX platform and is hosted at a publicly accessible URL in compliance with Apple App Store and Google Play Store requirements.

1. Who We Are

SPCX (Security Professional Credentialing Exchange) is a professional credentialing and compliance platform for the private security industry.

SPCX acts as the data controller for personal data collected through the SPCX mobile application and associated web services.

For all privacy-related enquiries, contact us at:support@spcx.com

2. What This Policy Covers

This Privacy Policy explains how SPCX collects, uses, stores, shares, and protects personal data when you use the SPCX mobile application and associated web services.

This policy applies to all SPCX users, including:

  • Security professionals maintaining professional profiles
  • Employers and security companies managing workforce compliance
  • Clients searching and verifying security professionals
  • Organisation administrators using the platform

3. Data We Collect

3.1 Information You Provide Directly

We may collect the following information directly from you:

  • Full name
  • Email address
  • Phone number
  • Professional licence numbers (including SIA licence numbers where applicable)
  • Qualifications, certifications, and training records
  • Employment history within the private security industry
  • Profile photograph (optional)
  • Reviews, ratings, and other user-generated content
  • CPD records and compliance documentation
  • Communications sent through the SPCX platform

3.2 Information We Collect Automatically

When you use SPCX, we may automatically collect:

  • Device identifiers
  • Operating system and app version
  • IP address and approximate location
  • Usage analytics and session activity
  • Error and crash logs
  • Push notification tokens for compliance alerts and updates

3.3 Information From Third Parties

We may receive information from:

  • Security Industry Authority (SIA) verification services
  • Employers or organisations confirming completed engagements
  • Regulatory or credential verification providers connected to SPCX

4. How We Use Your Data

We use your personal data to:

  • Create and manage your SPCX profile
  • Verify licences, qualifications, and credentials
  • Enable employers and clients to search and verify professionals
  • Provide compliance alerts and reminders
  • Process reviews and engagement records
  • Improve platform functionality and security
  • Prevent fraud, abuse, and unauthorised activity
  • Comply with legal and regulatory obligations
  • Communicate important service updates

5. Who We Share Your Data With

SPCX does not sell personal data.

We may share your information in the following situations:

5.1 Other Platform Users

Your professional profile information, including credentials, licence status, ratings, and reviews, may be visible to verified SPCX users depending on your account privacy settings.

5.2 Service Providers

We may share data with trusted third-party providers that support the operation of SPCX, including:

  • Cloud hosting providers
  • Analytics services
  • Communication and notification services
  • Security and infrastructure providers

All service providers are required to protect your data and process it only for authorised purposes.

5.3 Legal and Regulatory Requirements

We may disclose information where required by law or where necessary to:

  • Comply with legal obligations
  • Respond to lawful requests from authorities
  • Protect the safety, rights, or integrity of SPCX and its users

5.4 Business Transfers

If SPCX undergoes a merger, acquisition, restructuring, or sale, user data may be transferred as part of that transaction.

6. Data Retention

We retain personal data only for as long as necessary to provide services and meet legal obligations.

Typical retention periods include:

  • Active account information: During account activity and up to 3 years after closure
  • Compliance and licence records: Up to 6 years
  • Security and audit logs: Up to 12 months
  • Reviews and ratings: Until removed or disputed under platform policy

7. Data Security

SPCX implements appropriate technical and organisational security measures, including:

  • HTTPS/TLS encryption for data transmission
  • Encryption of sensitive data at rest
  • Role-based access controls
  • Security monitoring and testing
  • Incident response procedures

In the event of a serious data breach, affected users and relevant authorities will be notified where legally required.

8. International Data Transfers

SPCX primarily operates from the United Kingdom.

Where data is transferred internationally, appropriate safeguards are implemented in accordance with applicable data protection laws.

9. Your Rights

Depending on applicable law, you may have the following rights regarding your personal data:

  • Right to access your personal data
  • Right to correct inaccurate information
  • Right to request deletion of your data
  • Right to restrict processing
  • Right to data portability
  • Right to object to certain processing activities
  • Right to withdraw consent where applicable

To exercise your rights, contact:support@spcx.com

10. Account Deletion

You may request deletion of your SPCX account at any time by:

  • Using the account deletion feature within the SPCX app.
  • Contacting support at support@spcx.com

Deletion requests are generally processed within 30 days, subject to legal retention requirements.

11. Children's Privacy

SPCX is intended only for individuals aged 18 years or older.

We do not knowingly collect personal data from individuals under 18 years of age. If such data is identified, it will be removed promptly.

12. Cookies and Tracking

The SPCX mobile application does not use traditional browser cookies.

SPCX may use analytics tools and device identifiers for:

  • Performance monitoring
  • Security protection
  • Crash reporting
  • Service improvement

These technologies are not used for advertising or behavioural profiling.

13. Changes to This Policy

We may update this Privacy Policy periodically.

Where significant changes are made, users will be notified through the SPCX platform and the updated Effective Date will be displayed at the top of this document.

Continued use of SPCX after updates constitutes acceptance of the revised Privacy Policy.

14. Contact Us

Platform: SPCX (Security Professional Credentialing Exchange)

Support & Privacy Enquiries: support@spcx.com

Website: https://development.shrinkcom.com/spcx-backend-copy/public

SPCX Privacy Policy | May 2026

© 2026 SPCX (Security Professional Credentialing Exchange). All rights reserved.

This Privacy Policy is published at a publicly accessible URL in compliance with Apple App Store and Google Play Store requirements.