Blackout Intelligence & Surveillance
Privacy Policy
PRIVACY POLICY
Effective Date: 02/05/2025 Last Updated: 22/01/2026
Blackout Intelligence & Surveillance (“Blackout”, “we”, “us”, “our”) operates under strict confidentiality, intelligence‑grade security, and full compliance with UK law. All communications are encrypted and handled under controlled operational protocols.
“All communications with Blackout Intelligence are encrypted and handled under strict confidentiality protocols.”
We are committed to protecting your personal data and ensuring transparency in how it is collected, used, and safeguarded.
1. Who We Are
Blackout Intelligence & Surveillance provides intelligence analysis, risk assessment, and lawful surveillance support services. We act as the Data Controller for the personal data we process.
Contact: dan@blackoutintelligence.co.uk
2. Regulatory Compliance
We comply with all relevant UK legislation, including:
- UK General Data Protection Regulation (UK GDPR)
- Data Protection Act 2018
- Human Rights Act 1998
- Applicable UK criminal and surveillance laws
- ICO registration and accountability requirements
“Blackout Intelligence & Surveillance is registered with the UK Information Commissioner’s Office (ICO) as a data controller.”
3. Lawful Basis for Processing
We process personal data only where a lawful basis exists under Article 6 UK GDPR, including:
- Contract performance
- Legal obligation
- Legitimate interests
- Consent (where required)
- Protection of vital interests
Where special category data is processed, we rely on Article 9 UK GDPR and Schedule 1 DPA 2018.
4. Data We Collect
We may collect:
- Identity information
- Contact details
- Client due diligence data
- Communication records
- Website usage and technical data
- Intelligence material lawfully obtained
- CCTV or surveillance data collected in accordance with UK law
“We may collect and process… intelligence and investigative material lawfully obtained.”
We do not knowingly collect data unlawfully.
5. How Data Is Collected
Data may be collected through:
- Direct client engagement
- Website forms
- Lawful third‑party sources
- Publicly available information
- Lawfully authorised surveillance activities
All collection methods undergo legal and ethical review.
6. Commitment to Lawful Surveillance
Blackout operates under a zero‑tolerance policy for unlawful surveillance.
We strictly prohibit:
- Illegal interception of communications
- Unauthorised system access or hacking
- Trespass for surveillance
- Covert monitoring without lawful basis
- Any breach of the Human Rights Act 1998
“Blackout strictly prohibits hacking or unauthorised system access… trespass for surveillance purposes.”
All surveillance must be:
- Necessary
- Proportionate
- Legally justified
- Supported by documented authority
7. How We Use Personal Data
We use personal data to:
- Deliver contracted intelligence and risk services
- Conduct lawful investigations
- Perform due diligence
- Maintain security and prevent fraud
- Comply with legal obligations
- Improve our services
We do not sell personal data.
8. Data Sharing
We may share data with:
- Authorised employees and vetted contractors
- Legal or regulatory authorities
- Professional advisers
- Secure technology providers
All third parties are bound by confidentiality and data protection obligations.
9. International Transfers
Where data is transferred outside the UK, we ensure lawful safeguards such as:
- UK adequacy regulations
- Standard Contractual Clauses
- Equivalent transfer mechanisms
10. Data Retention
We retain data only as long as necessary for:
- Contractual obligations
- Legal compliance
- Legitimate business needs
Data is securely deleted when no longer required.
11. Your Rights
Under UK GDPR, you may:
- Access your data
- Request rectification
- Request erasure
- Restrict processing
- Object to processing
- Request data portability
- Withdraw consent
- Lodge a complaint with the ICO
12. Security Measures
We implement:
- Encryption
- Access controls
- Secure storage
- Staff confidentiality agreements
- Regular compliance reviews
“We implement robust technical and organisational security measures, including access controls and encryption.”
13. Human Rights Compliance
All operations respect Article 8 (Right to Privacy) of the Human Rights Act 1998. Every activity undergoes a necessity and proportionality assessment.
14. Cookies
Our website may use cookies. Details are provided in our Cookie Policy.
15. Policy Updates
We may update this policy periodically. The latest version will always be available on our website.
TERMS & CONDITIONS
1. Introduction
These Terms govern all services provided by Blackout Intelligence & Surveillance.
2. Services
We provide lawful intelligence, risk assessment, and surveillance support services. All services are subject to:
- UK law
- Legality and risk assessment
- UK GDPR and DPA 2018 compliance
We reserve the right to refuse unlawful or unethical instructions.
3. Client Responsibilities
Clients must ensure:
- Instructions are lawful
- They have authority to request services
- Information provided is accurate
- Services are not used unlawfully
Clients must not request:
- Illegal surveillance
- Unauthorised system access
- Harassment or intimidation
- Trespass or unlawful entry
4. Legal Compliance
We comply with:
- UK GDPR
- Data Protection Act 2018
- Human Rights Act 1998
- Computer Misuse Act 1990
- Protection from Harassment Act 1997
- Relevant surveillance laws
We may terminate engagements that risk breaching UK law.
5. Fees & Payment
- Fees are outlined in the Service Proposal
- Invoices payable within 14/30 days
- Late payments may incur statutory interest
- Deposits may be required
6. Confidentiality
Both parties must maintain strict confidentiality regarding:
- Operational methods
- Intelligence gathered
- Client identity
- Commercial information
Confidentiality survives termination.
7. Data Protection
Both parties must comply with UK GDPR. Blackout processes data in accordance with this Privacy Policy and any applicable DPA.
8. Limitation of Liability
To the fullest extent permitted by law:
- We are not liable for indirect or consequential loss
- Liability is limited to fees paid
- Nothing excludes liability for death, injury, or fraud
9. Termination
We may terminate services immediately if:
- Instructions are unlawful
- Payment is overdue
- Trust breaks down
- Legal or regulatory risk arises
10. Governing Law
These Terms are governed by the laws of England & Wales.
SURVEILLANCE LAWFUL USE POLICY
1. Purpose
To ensure all surveillance and intelligence activities are lawful, proportionate, and ethically justified.
2. Legal Framework
We comply with:
- UK GDPR
- Data Protection Act 2018
- Human Rights Act 1998
- Computer Misuse Act 1990
- Protection from Harassment Act 1997
- RIPA 2000 (where applicable)
- Investigatory Powers Act 2016 (where applicable)
3. Absolute Prohibitions
We strictly prohibit:
- Hacking
- Unauthorised system access
- Illegal interception of communications
- Trespass
- Unlawful tracking devices
- Unlawful covert audio recording
- Harassment or intimidation
“Any staff member breaching this policy faces immediate dismissal and possible referral to law enforcement.”
4. Lawful Basis Requirement
Before any surveillance begins, we document:
- Legitimate purpose
- Lawful basis
- Necessity & proportionality
- Client authority
- Risk assessment
5. Human Rights Assessment
We consider:
- Reasonable expectation of privacy
- Intrusiveness
- Less intrusive alternatives
- Duration
Operations failing proportionality tests do not proceed.
6. Authorisation Process
Every task requires:
- Internal compliance review
- Written approval
- Defined scope
- Legal basis record
- Senior sign‑off for high‑risk operations
7. Record Keeping
We maintain:
- Audit trails
- Decision logs
- Lawful basis records
- Retention schedules
DATA PROCESSING AGREEMENT (DPA)
(UK GDPR Article 28 Compliant)
1. Subject Matter & Duration
Blackout processes personal data only:
- On documented instructions
- For the duration of the service agreement
2. Nature & Purpose
Processing may include:
- Intelligence analysis
- Risk assessment
- Lawful surveillance support
- Reporting
3. Categories of Data Subjects
May include:
- Employees
- Contractors
- Customers
- Persons relevant to investigations
4. Processor Obligations
We shall:
- Process data only on written instructions
- Ensure staff confidentiality
- Implement security measures
- Assist with data subject rights
- Assist with breach notifications
- Delete or return data at contract end
5. Sub‑processors
We will not appoint sub‑processors without:
- Prior written authorisation
- Equivalent contractual obligations
6. Security Measures
We implement:
- Access controls
- Encryption
- Secure storage
- Staff vetting
- Incident response procedures
7. Personal Data Breach
We notify the Controller without undue delay after becoming aware of a breach.
8. Audits
The Controller may request reasonable audit evidence.
9. International Transfers
No transfers occur outside the UK without lawful safeguards.
© Blackout Intelligence & Surveillance. Proprietary & Confidential. Unauthorised duplication or misuse of this material is prohibited by law.