Data Protection & Privacy Notice

1. Regulatory Framework & Data Controller

TFTS — Tactical Field Intelligence Service operates as a registered data controller under the Data Protection Act 2018 (DPA 2018) and the UK General Data Protection Regulation (UK GDPR). We are registered with the Information Commissioner's Office (ICO).

2. Lawful Basis for Processing (Article 6 UK GDPR)

Investigative and intelligence processing is conducted primarily under the lawful basis of:

• Legitimate Interests (Article 6(1)(f)): Processing is necessary for the purposes of legitimate commercial, legal, or fraud-prevention interests pursued by our instructing clients or a third party, where such interests are not overridden by the fundamental rights of the data subject.
• Legal Obligation & Legal Claims (Article 9(2)(f)): Processing necessary for the establishment, exercise, or defense of legal claims, whether in court proceedings or in an administrative or out-of-court procedure.

3. Legitimate Interests Assessment (LIA)

Prior to commencing any investigation, a formal Legitimate Interests Assessment is documented. This assessment rigorously balances the necessity and proportionality of the proposed inquiry against the subject's reasonable expectations of privacy.

4. Data Security & Cryptographic Handling

All client communications and investigative materials are held on encrypted, access-controlled systems. Physical and digital evidence is isolated, hashed using SHA-256 algorithms, and archived in accordance with ISO/IEC 27037 digital forensic standards.

5. Enquiries

For any regulatory inquiries regarding data processing, contact our Data Protection Officer at: dpo@tfts.co.uk.