Apparently it goes from the date of the security check itself, rather than when the card arrives at your place, so there's been some fairly major variation in validity times.
I was a bit lucky, in a strange twist of events - they stuffed up and lost my application, so after a re-submit, I got a timely security check and a good long validity time.
Don't think the stuffing around beforehand was worth it, though...