CCTV Policy

Last updated: 15 February 2026

Purpose of CCTV

CCTV operates at Croydon Workspace for the purposes of crime prevention and detection, ensuring the safety and security of members and visitors, protecting property and assets, and investigating incidents or breaches of membership terms.

The system is not used for routine monitoring of member productivity or behaviour beyond security purposes.

Data Controller

CCTV at Croydon Workspace is operated by MY Backyard Limited, registered in England and Wales (Company No. 14604760). MY Backyard Limited is the data controller for the purposes of UK data protection law.

Operational management of the premises is carried out by MY Facilities Management acting as a data processor on behalf of MY Backyard Limited.

If you have any questions regarding CCTV or your personal data, please contact:
info@croydonworkspace.com

Location of Cameras

Cameras are positioned in common areas of the premises where necessary for security purposes. Cameras are not installed in toilets or other private areas.

Clear signage is displayed on site to inform individuals that CCTV is in operation.

Lawful Basis for Processing

CCTV footage is processed under the lawful basis of legitimate interests. The legitimate interests pursued are the safety of members and visitors, the prevention and detection of crime, and the protection of property.

We have assessed that these interests are not overridden by the rights and freedoms of individuals.

Recording and Retention

CCTV footage is recorded digitally and stored securely.

Footage is normally retained for thirty days and then automatically deleted, unless it is required for investigation, insurance claims, legal proceedings or law enforcement purposes, in which case it may be retained for longer as necessary.

Access to Footage

Access to CCTV footage is strictly limited to authorised personnel for legitimate security or investigative purposes.

Footage may be reviewed in the event of a reported incident, suspected criminal activity, a breach of membership terms, a health and safety concern, or a lawful request from police or regulatory authorities.

Some CCTV data may be accessed remotely by MY Facilities Management from Jordan for operational and security purposes. Appropriate contractual safeguards are in place for international data access.

Disclosure of Footage

CCTV footage may be disclosed to law enforcement agencies, insurers, legal advisers and regulatory bodies where necessary.

We do not share CCTV footage for marketing or commercial purposes.

Your Rights

Individuals recorded by CCTV have the right to request access to their personal data under UK GDPR.

Requests must be made in writing, provide sufficient detail to identify the relevant footage and include proof of identity. We may redact footage to protect the rights of other individuals.

Requests should be sent to:
info@croydonworkspace.com

We may refuse or restrict requests where exemptions under data protection law apply.

Security Measures

CCTV systems are secured with appropriate technical and organisational measures, including restricted access controls and password protection. Only authorised individuals may access or export footage.

Review of Policy

This policy is reviewed periodically to ensure compliance with legal requirements and operational needs. The most current version is available on our website.