Privacy Policy

Last Updated: September 14, 2026

On this page

1. Our Privacy Policy
2. Information We May Collect
3. Information Received From Other Sources
4. How Rsg Security Uses Information
5. Our Role As A Security Service Provider
6. How Information May Be Disclosed
7. Sale And Sharing Of Personal Information
8. Text Messaging And Sms Communications
9. Email Communications
10. Cookies And Tracking Technologies
11. Website Analytics And Advertising
12. Global Privacy Control And Do-Not-Track
13. Data Security
14. Data Retention
15. De-Identified And Aggregated Information
16. Third-Party Websites And Services
17. Information Concerning Children
18. U.S.-Based Operations And International Visitors
19. State Privacy Rights
20. California Privacy Notice
21. Sources Of California Personal Information
22. Purposes For California Personal Information
23. California Disclosures
24. California Consumer Rights
25. Verifying Privacy Requests
26. Exceptions To Privacy Requests
27. Florida Privacy Rights
28. Privacy Requests
29. Privacy Of Security-Sensitive Information
30. Confidential Client And Property Information
31. Privacy Policy Does Not Create A Security Guarantee
32. Relationship To Rsg Security Service Agreements
33. Changes To This Privacy Policy
34. Contact Rsg Security

1. Our Privacy Policy

Refuge Services Group Inc., doing business as RSG Security Inc. (“RSG Security,” “RSG,” “Company,” “we,” “us,” or “our”), respects the privacy and confidentiality of the individuals, businesses, clients, prospective clients, applicants, employees, contractors, visitors, residents, vendors, and other persons with whom we interact.

This Privacy Policy explains how RSG Security may collect, receive, access, use, process, retain, disclose, and otherwise handle personal information in connection with our websites, online forms, customer communications, employment and recruiting activities, security operations, client engagements, technology platforms, mobile services, access-control services, incident reporting, security monitoring, and other business activities.

This Privacy Policy applies to information collected:

• Through RSG Security websites and webpages where this Privacy Policy is posted;
• Through contact forms, quote requests, consultation requests, assessments, and other online forms;
• Through telephone, email, SMS/text message, social media, and other electronic communications;
• Through customer portals and security-management platforms;
• Through employment applications and recruiting processes;
• At client locations and properties where RSG Security provides services;
• Through access-control, visitor-management, security-reporting, monitoring, camera, alarm, patrol, and related systems;
• During business development, account management, customer service, billing, investigations, incident response, and other business operations; and
• Through offline interactions with RSG Security.

This Privacy Policy does not necessarily apply to information RSG Security processes solely on behalf of a client when the client controls the purpose and means of processing. In those situations, RSG Security may act as a service provider, contractor, or processor to the client, and the applicable client's privacy practices may govern the information.

By accessing or using our websites, submitting information to us, communicating with us, requesting services, applying for employment, or otherwise interacting with RSG Security, you acknowledge the practices described in this Privacy Policy.

This Privacy Policy does not create contractual rights beyond those required by applicable law and does not modify, replace, expand, or supersede any service agreement, employment agreement, confidentiality agreement, client contract, post orders, site policies, or other written agreement between RSG Security and another party.

Where another written agreement imposes additional confidentiality, privacy, security, or data-handling requirements, RSG Security will address those requirements in accordance with the applicable agreement and law.

We may amend this Privacy Policy periodically. The date appearing at the top identifies the most recent revision. Where required by law, we will provide additional notice of material changes.

2. Information We May Collect

The information collected by RSG Security depends on the nature of your relationship with us and the manner in which you interact with our Company.

A. Contact And Identification Information

We may collect:

• Name;
• Company or organization;
• Job title;
• Mailing address;
• Business address;
• Email address;
• Telephone number;
• Mobile number;
• Usernames or account identifiers;
• Electronic signatures;
• IP addresses;
• Device identifiers; and
• Other information used to identify or communicate with you.

B. Prospective Client And Customer Information

When you contact RSG Security regarding security services, request a quote, request an assessment, submit a contact form, schedule a consultation, communicate with our sales team, or become a client, we may collect information such as:

• Contact information;
• Company information;
• Property or facility information;
• Property address;
• Industry;
• Type of security services requested;
• Security concerns;
• Incidents or threats previously experienced;
• Desired hours of coverage;
• Desired deployment dates;
• Estimated staffing requirements;
• Access-control requirements;
• Property-management information;
• Emergency contacts;
• Billing contacts;
• Authorized representatives;
• Contract information;
• Payment information;
• Account history;
• Service history;
• Communications with our personnel; and
• Other information voluntarily provided to us.

Information submitted through security assessments, consultation forms, or similar tools may contain information relating to vulnerabilities, security concerns, staffing, access points, property procedures, incidents, or other operational matters. We may treat such information as confidential business information as appropriate.

C. Client Account And Billing Information

For clients and business customers, we may collect:

• Authorized representatives;
• Billing contacts;
• Accounts-payable information;
• Invoices;
• Payment status;
• Payment method;
• Bank or ACH-related information when provided for payment processing;
• Transaction records;
• Service agreements;
• Change orders;
• Account communications;
• Customer-service records;
• Service locations;
• Account preferences;
• Portal credentials; and
• Other information necessary to administer the relationship.

Payment information may be processed by banks, payment processors, accounting platforms, or other authorized financial-service providers. RSG Security may not directly store complete payment-card information where the transaction is handled by a third-party payment processor.

D. Security Operations And Client-Site Information

Because RSG Security provides professional security services, we may receive or process information relating to persons who enter, occupy, work at, visit, reside at, or otherwise interact with properties where RSG provides services.

Depending on the client's instructions and the services being provided, information may include:

• Visitor names;
• Resident names;
• Tenant information;
• Employee information;
• Vendor information;
• Vehicle information;
• License-plate information;
• Parking information;
• Access credentials;
• Entry and exit information;
• Visitor logs;
• Gate records;
• Access-control records;
• Badge information;
• Delivery information;
• Photographs;
• Video footage;
• Audio recordings where legally permitted;
• CCTV or surveillance information;
• Alarm information;
• Security-system events;
• Incident reports;
• Daily activity reports;
• Patrol records;
• GPS-related patrol information;
• Dispatch records;
• Witness information;
• Statements;
• Photographs of incidents or property conditions;
• Property damage information;
• Safety concerns;
• Emergency information;
• Law-enforcement information; and
• Other security-related records.

The information collected at a client location may be determined by the client, property owner, property manager, homeowners' association, employer, facility operator, or other entity responsible for the property.

RSG Security may process that information as a service provider or contractor to the applicable client.

E. Incident Reports, Investigations And Evidence

RSG Security may collect, create, receive, preserve, review, and disclose information relating to security incidents, accidents, suspected criminal activity, workplace incidents, access violations, trespassing, emergencies, disputes, safety conditions, property damage, injuries, complaints, or other events.

Such information may include written statements, photographs, video, audio, security footage, witness information, officer observations, timestamps, location information, access records, vehicle information, identification information, law-enforcement information, communications, and related evidence.

Information relating to an incident may be retained when reasonably necessary to:

• Document RSG Security's performance;
• Protect a client;
• Protect RSG Security;
• Protect employees, officers, contractors, or members of the public;
• Investigate an incident;
• Cooperate with law enforcement;
• Respond to subpoenas or court orders;
• Establish, exercise, or defend legal rights;
• Address insurance matters;
• Preserve evidence;
• Comply with contractual obligations; or
• Satisfy applicable laws and regulations.

An individual's request to delete information does not require RSG Security to destroy evidence or information that RSG is legally permitted or required to preserve.

F. Employment And Applicant Information

Individuals applying for employment, contractor positions, security-officer positions, management positions, or other opportunities with RSG Security may provide information including:

• Legal name;
• Address;
• Telephone number;
• Email address;
• Date of birth where legally permissible;
• Employment history;
• Education;
• Professional qualifications;
• Security licenses;
• Driver's-license information;
• State-issued identification;
• Employment eligibility information;
• Work authorization information;
• References;
• Emergency-contact information;
• Resume information;
• Availability;
• Desired position;
• Prior work experience;
• Electronic signature;
• Government-issued identification;
• Tax and payroll information after hire;
• Background-screening information where legally authorized;
• Drug-screening information where legally authorized;
• Motor-vehicle information when relevant to the position;
• Professional licensing information; and

Other information necessary for recruiting, onboarding, credentialing, employment, payroll, scheduling, licensing, compliance, and workforce administration.

Certain applicant and employee information may be processed through third-party recruiting, payroll, background-screening, electronic-signature, training, scheduling, or government-compliance platforms.

Employment-related information may be subject to additional notices, authorizations, disclosures, policies, or agreements.

G. Communications

If you communicate with us by telephone, email, web form, chat, text message, social media, or another method, we may collect:

• Your contact information;
• The date and time of the communication;
• The content of the communication;
• Attachments;
• Information relating to the purpose of the communication; and
• Internal notes regarding the communication.

Telephone calls may be monitored or recorded when permitted by applicable law and after any notice or consent required by law.

H. Automatically Collected Information

When you use our websites or digital services, we or our authorized vendors may automatically collect certain information, including:

• IP address;
• Browser type;
• Device type;
• Operating system;
• Device identifiers;
• Referring webpage;
• Pages viewed;
• Links selected;
• Date and time of visits;
• Approximate geographic location derived from IP address;
• Website-session information;
• Advertising identifiers;
• Cookie identifiers;
• Website interactions; and
• Similar technical and usage information.

3. Information Received From Other Sources

RSG Security may receive information from sources other than directly from you.

These sources may include:

• Our clients;
• Property managers;
• Property owners;
• Homeowners' associations;
• Employers;
• Vendors;
• Contractors;
• Government agencies;
• Law-enforcement agencies;
• Public records;
• Social networks;
• Referral sources;
• Recruiting platforms;
• Background-screening providers;
• Marketing providers;
• Data and analytics providers;
• Business partners;
• Insurance representatives;
• Attorneys and professional advisors;
• Security-management platforms; and
• Other lawful sources.

We may combine information obtained from different sources when reasonably necessary for business, operational, security, employment, compliance, fraud-prevention, or legal purposes.

4. How Rsg Security Uses Information

RSG Security may use personal information for legitimate business, operational, contractual, employment, security, legal, and commercial purposes, including to:

Provide Security Services

Provide, administer, coordinate, supervise, monitor, improve, and document security services.

Respond to Requests

Respond to inquiries, quote requests, security assessments, consultations, service requests, complaints, incidents, and other communications.

Manage Client Relationships

Administer client accounts, service agreements, post orders, schedules, billing, invoicing, payments, account access, operational requests, reporting, and client support.

Conduct Security Operations

Perform access control, patrol, visitor management, incident documentation, dispatching, monitoring, security reporting, camera monitoring, emergency response, alarm response, and related security functions.

Protect People and Property

Detect, prevent, investigate, respond to, or document suspected criminal activity, unauthorized access, fraud, trespassing, threats, security incidents, safety concerns, misconduct, or other potentially unlawful or harmful activities.

Recruiting and Employment

Recruit, evaluate, screen, communicate with, onboard, train, schedule, supervise, compensate, credential, and administer applicants, employees, officers, and contractors.

Communications

Send administrative, transactional, service-related, operational, emergency, staffing, employment, billing, security, or account-related communications.

Marketing

Where permitted by law, communicate with prospective and existing business customers about RSG Security services, security information, company updates, newsletters, case studies, educational materials, promotions, or other content that may be relevant to them.

Website Improvement

Analyze website usage, troubleshoot technical problems, improve website functionality, evaluate marketing performance, and improve user experience.

Analytics

Measure website traffic, advertising performance, lead sources, engagement, service demand, geographic demand, and other business metrics.

Legal and Regulatory Compliance

Comply with licenses, regulations, legal obligations, government requests, court orders, subpoenas, law-enforcement requests, audits, tax requirements, insurance requirements, employment obligations, and contractual obligations.

Claims and Disputes

Establish, exercise, investigate, preserve, protect, or defend the rights and interests of RSG Security, our clients, our employees, our contractors, insurers, or other parties.

Business Administration

Conduct accounting, auditing, insurance administration, corporate governance, risk management, financing, business planning, mergers and acquisitions, vendor management, cybersecurity, recordkeeping, and other legitimate corporate functions.

Other Purposes

Use information for another purpose disclosed at the time the information is collected or with authorization where required by law.

5. Our Role As A Security Service Provider

A substantial portion of the personal information RSG Security encounters may be processed while performing contracted security services for our business clients.

Examples may include:

• Visitor-management records;
• Gate-entry information;
• Employee access information;
• Resident information;
• Parking records;
• CCTV footage;
• Access-control information;
• Security reports;
• Incident reports; and
• Property-specific information.

When RSG Security processes information solely at the direction of a client, the client may determine what information is collected, why it is collected, how long it is retained, and how requests concerning the information are handled.

If you submit a privacy request to RSG Security concerning information controlled by one of our clients, we may refer you to the applicable client or otherwise respond as permitted or required by law and contract.

Nothing in this Privacy Policy transfers ownership or control of client-owned records to RSG Security.

6. How Information May Be Disclosed

RSG Security does not disclose personal information indiscriminately.

We may disclose information in the following circumstances.

A. Service Providers And Contractors

We may disclose information to authorized vendors and contractors that provide services such as:

• Website hosting;
• Cloud storage;
• Cybersecurity;
• Email;
• Customer relationship management;
• Scheduling;
• Security-management software;
• Electronic signatures;
• Payroll;
• Accounting;
• Payment processing;
• Background screening;
• Recruiting;
• Licensing;
• Communications;
• SMS delivery;
• Analytics;
• Advertising;
• Document management;
• Insurance;
• Data hosting;
• Legal services;
• Consulting; and
• Other business services.

We may require service providers to process information subject to applicable contractual and legal obligations.

B. Clients

Information collected while providing services to a client may be disclosed to that client, including security reports, access information, visitor information, photographs, surveillance information, incident documentation, and related operational records when appropriate.

C. Law Enforcement, Government And Legal Proceedings

We may disclose information when we reasonably believe disclosure is necessary or appropriate to:

• Comply with applicable law;
• Respond to a subpoena;
• Respond to a court order;
• Respond to a warrant;
• Respond to legal process;
• Cooperate with law enforcement;
• Respond to regulatory authorities;
• Investigate suspected unlawful activity;
• Protect life, safety, property, or security;
• Preserve evidence;
• Enforce an agreement; or
• Establish, exercise, or defend legal claims.

RSG Security reserves the right, to the fullest extent permitted by law, to determine whether a request for information is legally sufficient before providing information.

D. Attorneys, Insurers And Professional Advisors

We may provide information to attorneys, accountants, auditors, insurance carriers, brokers, investigators, consultants, and other professional advisors when reasonably necessary to protect RSG Security or conduct our operations.

E. Business Transactions

If RSG Security is involved in a merger, acquisition, financing, restructuring, sale of assets, investment transaction, transfer of ownership, bankruptcy, reorganization, or similar corporate transaction, information may be reviewed or transferred in connection with that transaction subject to applicable law.

F. Protecting Rsg Security And Others

We may disclose information when reasonably necessary to investigate, prevent, respond to, or take action concerning:

• Fraud;
• Theft;
• Security threats;
• Cybersecurity incidents;
• Misconduct;
• Criminal activity;
• Threats to personal safety;
• Property damage;
• Unauthorized access;
• Violations of law;
• Violations of contracts;
• Violations of company policies; or

Other circumstances that could expose RSG Security, a client, an employee, or another person to harm or liability.

G. With Authorization

We may disclose information when you direct, authorize, or consent to the disclosure.

7. Sale And Sharing Of Personal Information

RSG Security does not sell personal information to third parties in exchange for cash compensation as part of its ordinary business model.

However, certain privacy laws define the terms “sale,” “sell,” “share,” or similar concepts broadly.

For example, the operation of advertising, analytics, social-media, or website-tracking technology may under certain laws constitute a “sale” or “sharing” of information even where no money is paid for the information.

Where required by applicable law, RSG Security will provide legally required mechanisms to opt out of qualifying sales, sharing, or targeted advertising.

RSG Security does not knowingly sell or share personal information of individuals under sixteen years of age in circumstances requiring affirmative authorization under applicable law.

8. Text Messaging And Sms Communications

RSG Security may use telephone numbers to send:

• Service notifications;
• Scheduling information;
• Employment communications;
• Staffing messages;
• Operational notices;
• Security notifications;
• Appointment confirmations;
• Account messages;
• Billing communications; and
• Other business-related communications.

Where legally required, we will obtain the appropriate consent before sending SMS or automated text communications.

Marketing text-message consent, where requested, is voluntary and is not a condition of purchasing RSG Security services unless otherwise permitted by law.

Message and data rates may apply.

Message frequency may vary.

Recipients may generally reply STOP to opt out of eligible SMS communications and HELP for assistance, subject to the specific instructions contained in the applicable messaging program.

Certain essential employment, emergency, security, or transactional communications may be handled separately as permitted by law.

Mobile information collected for SMS consent will not be sold to third parties for their independent marketing purposes.

We may provide telephone numbers and related information to telecommunications providers and technology vendors solely as necessary to provide messaging services or otherwise operate our business.

9. Email Communications

RSG Security may send business, operational, transactional, employment, informational, and marketing communications by email.

You may unsubscribe from promotional marketing emails using the unsubscribe instructions contained in the applicable communication.

Opting out of marketing communications does not prevent RSG Security from sending non-marketing communications, including:

• Contract communications;
• Billing notices;
• Security notices;
• Service updates;
• Employment information;
• Account information;
• Incident communications;
• Legal notices; and
• Other transactional or operational communications.

10. Cookies And Tracking Technologies

RSG Security and authorized technology providers may use cookies, pixels, tags, analytics tools, local storage, web beacons, and similar technologies.

These technologies may be used to:

• Operate our websites;
• Maintain website functionality;
• Remember preferences;
• Analyze website traffic;
• Understand visitor behavior;
• Identify technical problems;
• Improve content;
• Measure advertising;
• Attribute leads;
• Prevent fraud;
• Improve cybersecurity;
• Personalize website experiences; and
• Deliver or measure advertising where permitted by law.

Session Cookies

Session cookies generally expire when a browser session ends.

Persistent Cookies

Persistent cookies may remain on a device for a defined period unless deleted earlier.

Browser Controls

Most browsers allow users to delete or restrict cookies.

Blocking certain cookies may prevent portions of our websites from operating properly.

Where legally required, RSG Security may provide a cookie-consent or cookie-preference mechanism.

11. Website Analytics And Advertising

RSG Security may use third-party analytics, advertising, search-engine, social-media, customer-relationship-management, and marketing technologies.

These services may collect information about website activity using cookies, pixels, browser information, or similar technologies.

Depending on the services being used, providers may include platforms such as Google, Microsoft, Meta, LinkedIn, HubSpot, or similar vendors.

Each provider may process information subject to its own privacy terms.

RSG Security does not control the independent privacy practices of third-party platforms.

Where applicable law provides a right to opt out of targeted advertising, sale, or sharing, RSG Security will honor qualifying requests as required by law.

12. Global Privacy Control And Do-Not-Track

Certain browsers and browser extensions may communicate privacy-preference signals, including Global Privacy Control (“GPC”).

Where applicable law requires RSG Security to recognize a qualifying browser-based opt-out preference signal, we will process such signals as legally required.

Because there is no universal standard governing all forms of “Do Not Track” browser signals, our response to other Do Not Track signals may vary unless required by applicable law.

13. Data Security

RSG Security takes reasonable administrative, physical, and technical measures designed to protect personal information appropriate to the nature of the information and our operations.

These measures may include access controls, authentication procedures, restricted permissions, technology controls, vendor-management procedures, workforce policies, physical security, monitoring, and other safeguards.

However, no website, computer network, mobile device, database, cloud service, wireless transmission, email system, internet transmission, physical file, or storage system can be guaranteed to be completely secure.

Accordingly, RSG Security does not warrant or guarantee that unauthorized persons will never be able to defeat security measures or access, acquire, alter, disclose, destroy, or misuse information.

To the fullest extent permitted by law, users provide information and use electronic systems with the understanding that no method of electronic transmission or storage is completely risk-free.

Nothing in this section limits any rights or responsibilities that cannot legally be limited or waived.

14. Data Retention

RSG Security retains personal information for the period reasonably necessary to fulfill the purpose for which it was collected and for legitimate business, security, contractual, regulatory, employment, insurance, tax, recordkeeping, dispute-resolution, and legal purposes.

Retention periods may vary depending on:

• Type of information;
• Client requirements;
• Contractual requirements;
• Operational needs;
• Applicable statutes of limitation;
• Security considerations;
• Insurance requirements;
• Pending or reasonably anticipated disputes;
• Investigations;
• Litigation;
• Government requirements; and
• Applicable laws.

RSG Security may preserve information beyond its normal retention period when reasonably necessary for litigation holds, claims, investigations, law-enforcement matters, insurance matters, regulatory obligations, security incidents, or protection of legal rights.

Where appropriate, information may be deleted, anonymized, aggregated, or de-identified after the applicable retention period.

15. De-Identified And Aggregated Information

RSG Security may create and use aggregated, statistical, anonymized, or de-identified information that cannot reasonably be used to identify a particular individual.

We may use such information for:

• Business analysis;
• Service improvement;
• Security analysis;
• Research;
• Market analysis;
• Operational planning;
• Performance measurement;
• Training; and
• Other lawful business purposes.

Where required by law, we will maintain de-identified information in de-identified form and will not attempt to re-identify it except as legally permitted to evaluate whether de-identification methods remain effective.

16. Third-Party Websites And Services

Our websites may contain links to websites, social-media platforms, employment platforms, payment providers, scheduling systems, maps, or other digital services operated by third parties.

RSG Security does not control the privacy, security, content, or data practices of unaffiliated third-party websites or platforms.

Accessing a third-party service is subject to that third party's terms, privacy policy, and security practices.

A link from an RSG Security website does not constitute an endorsement of the third party's privacy practices.

17. Information Concerning Children

RSG Security's websites and commercial security services are not directed toward children under thirteen years of age.

We do not knowingly collect personal information directly online from children under thirteen for commercial marketing purposes without authorization required by applicable law.

This restriction does not prevent RSG Security from processing information involving minors when reasonably necessary in connection with legitimate security operations, client-site activities, emergencies, incident reports, investigations, law enforcement, access-control functions, employment-related dependency information, or another lawful purpose.

If you believe a child submitted information to RSG Security improperly through our website, contact us using the information listed below.

18. U.S.-Based Operations And International Visitors

RSG Security primarily operates in the United States.

Our websites may be accessible from outside the United States.

If you access our services from another country, information may be transferred to, stored in, or processed in the United States or other jurisdictions where our service providers operate.

Privacy and data-protection laws in those jurisdictions may differ from the laws of your country.

To the extent required by applicable law, RSG Security will implement legally required protections for applicable cross-border processing.

19. State Privacy Rights

Residents of certain U.S. states may have privacy rights under applicable state privacy laws.

Depending on the jurisdiction and whether the law applies to RSG Security, those rights may include the right to:

• Confirm whether personal information is being processed;
• Access personal information;
• Request correction;
• Request deletion;
• Obtain a portable copy of certain information;
• Opt out of qualifying sales of personal information;
• Opt out of qualifying sharing or targeted advertising;
• Limit certain uses of sensitive personal information;
• Appeal certain privacy-request decisions; and
• Exercise privacy rights without unlawful discrimination.

These rights are subject to applicable definitions, exemptions, exceptions, verification requirements, and limitations.

Submitting a request does not necessarily require RSG Security to delete information that we are lawfully permitted or required to retain, including information necessary for security, fraud prevention, investigations, contracts, legal obligations, litigation, insurance, employment administration, or protection of legal rights.

20. California Privacy Notice

This section provides additional information for California residents where the California Consumer Privacy Act, as amended (“CCPA”), applies to RSG Security's processing activities.

Nothing in this section constitutes an admission that every RSG Security entity, activity, transaction, or category of information is subject to the CCPA.

Where the CCPA applies, California residents may have the rights described below subject to statutory exceptions.

Categories of Personal Information

During the preceding twelve months, depending upon an individual's relationship with RSG Security, we may have collected the following categories of information:

Identifiers

Examples include names, addresses, email addresses, telephone numbers, IP addresses, government identifiers, account identifiers, driver's-license information, and similar identifying information.

Customer Records

Examples include contact information, account information, financial information, payment information, employment information, and service records.

Characteristics of Protected Classifications

Employment or workforce records may contain information protected under state or federal law where lawfully collected.

Commercial Information

Examples include security services requested, purchased, considered, or received and related customer-service records.

Internet or Electronic Activity

Examples include browsing history, website activity, device information, interactions with advertisements, and access logs.

Geolocation Information

Approximate location may be derived from IP addresses. Security and workforce technologies may also process location-related information where legally permitted and operationally necessary.

Audio, Electronic, Visual and Similar Information

Examples include security-camera footage, photographs, audio recordings where legally permitted, telephone-call recordings where legally permitted, and incident documentation.

Professional or Employment Information

Examples include employment history, qualifications, security licenses, job applications, work history, employer information, and professional contact information.

Sensitive Personal Information

Depending upon the relationship and lawful purpose, RSG Security may process certain sensitive information, such as government identifiers, financial information, account credentials, precise location information where applicable, and employment-related information.

Inferences

RSG Security or its service providers may derive limited business, security, marketing, employment, or operational inferences from other information.

21. Sources Of California Personal Information

Where applicable, RSG Security may collect personal information from:

• Individuals directly;
• Clients;
• Employers;
• Property owners;
• Property managers;
• Homeowners' associations;
• Security systems;
• Access-control systems;
• Public records;
• Law enforcement;
• Government agencies;
• Social networks;
• Analytics providers;
• Advertising providers;
• Recruiting providers;
• Background-screening providers;
• Vendors;
• Referral sources;
• Business partners; and
• Other lawful sources.

22. Purposes For California Personal Information

We may use the categories described above for:

• Providing security services;
• Account management;
• Access control;
• Visitor management;
• Security monitoring;
• Incident response;
• Investigations;
• Customer service;
• Billing;
• Recruiting;
• Employment administration;
• Communications;
• Marketing;
• Analytics;
• Fraud prevention;
• Cybersecurity;
• Legal compliance;
• Insurance;
• Contract administration;
• Protection of rights and property;
• Corporate transactions; and
• Other purposes described in this Privacy Policy.

23. California Disclosures

Depending on the information and purpose, RSG Security may disclose personal information to:

• Service providers;
• Contractors;
• Clients;
• Affiliates;
• Payment processors;
• Professional advisors;
• Insurers;
• Analytics providers;
• Advertising providers;
• Social-media providers;
• Technology providers;
• Government authorities;
• Regulators;
• Law enforcement; and
• Other parties where authorized or required by law.
• RSG Security does not sell personal information for cash as part of its ordinary business model.

Certain advertising or analytics activities may potentially constitute “selling” or “sharing” under the CCPA's broad definitions. Where RSG Security engages in activities legally classified as selling or sharing, eligible California residents may exercise applicable opt-out rights.

RSG Security does not use sensitive personal information for the purpose of inferring characteristics about consumers except as permitted by applicable law.

24. California Consumer Rights

Where applicable under the CCPA, California residents may have the following rights:

Right to Know and Access

You may request information concerning the categories or specific pieces of personal information RSG Security has collected, subject to applicable limitations.

Right to Delete

You may request deletion of certain personal information, subject to statutory exceptions.

Right to Correct

You may request correction of inaccurate personal information.

Right to Opt Out of Sale or Sharing

Where RSG Security engages in activities legally defined as selling or sharing personal information, you may request to opt out.

Right to Limit Certain Uses of Sensitive Personal Information

Where applicable, you may have the right to limit certain uses and disclosures of sensitive personal information.

Right to Non-Discrimination

RSG Security will not unlawfully discriminate against an individual for exercising applicable privacy rights.

25. Verifying Privacy Requests

To protect personal information from unauthorized disclosure, RSG Security may verify the identity and authority of persons submitting privacy requests.

Verification may include matching information contained in the request with information in our records or requesting additional information reasonably necessary to verify identity.

Information collected specifically to verify a request will be used for verification, fraud prevention, security, legal compliance, or other purposes permitted by law.

If we cannot reasonably verify a request, we may be unable to fulfill it.

Authorized agents may submit requests where permitted by law, but RSG Security may require appropriate evidence of the agent's authority and may directly verify the identity of the person whose information is involved.

26. Exceptions To Privacy Requests

Privacy rights are not absolute.

RSG Security may deny, restrict, or partially fulfill a request when permitted by law, including where information is reasonably necessary to:

• Complete a transaction;
• Provide requested services;
• Perform a contract;
• Detect or prevent security incidents;
• Protect against malicious, deceptive, fraudulent, or illegal activity;
• Investigate or prosecute unlawful activity;
• Maintain access-control or security records;
• Preserve evidence;
• Exercise free-speech rights where applicable;
• Comply with legal obligations;
• Establish, exercise, or defend legal claims;
• Maintain employment records;
• Maintain records required by a client agreement;
• Cooperate with law enforcement;
• Address insurance or litigation matters; or
• Conduct other internal uses permitted by law.

RSG Security will determine the applicability of legal exceptions based on the circumstances of each request.

27. Florida Privacy Rights

RSG Security is headquartered in Florida.

To the extent Florida privacy laws apply to a particular RSG Security processing activity, RSG Security will provide applicable rights and protections required by those laws.

Nothing in this Privacy Policy is intended to waive rights that cannot lawfully be waived or to voluntarily subject RSG Security to statutory requirements that would not otherwise apply.

28. Privacy Requests

Privacy-related requests may be submitted to:

Refuge Services Group Inc.
d/b/a RSG Security Inc.

Privacy Email: contact@refugeservicesgroup.com

Telephone: 407-985-1000

Mailing Address:
P.O. Box 690725
Orlando, Florida 32869

Please identify your request as a “Privacy Request.”

Where applicable, please provide sufficient information for us to identify the information involved and verify your identity.

Do not send Social Security numbers, complete financial-account credentials, passwords, or other unnecessary sensitive information by unsecured email.

29. Privacy Of Security-Sensitive Information

RSG Security's business involves confidential and security-sensitive information.

Nothing in this Privacy Policy requires RSG Security to disclose information when disclosure would:

• Compromise the security of a client location;
• Expose confidential security procedures;
• Reveal alarm, surveillance, access-control, or response protocols;
• Disclose another person's personal information;
• Violate a contract;
• Interfere with an investigation;
• Compromise cybersecurity;
• Reveal legally privileged information;
• Violate law;
• Create an unreasonable security risk; or
• Otherwise fall within an applicable legal exception.

Requests involving security-sensitive records will be evaluated carefully and may be limited, redacted, denied, or redirected as permitted by law.

30. Confidential Client And Property Information

Information concerning a client's security program, staffing, vulnerabilities, camera locations, alarm information, access procedures, resident information, visitor information, post orders, patrol routes, incident history, security assessments, emergency procedures, credentials, passwords, keys, access codes, or security infrastructure may constitute confidential or security-sensitive information.

RSG Security may restrict disclosure or access to such information to authorized persons.

Nothing in this Privacy Policy authorizes any individual to obtain confidential information belonging to another RSG Security client or to use privacy rights to circumvent reasonable security controls.

31. Privacy Policy Does Not Create A Security Guarantee

This Privacy Policy describes RSG Security's information-handling practices.

It does not constitute a guarantee that:

• Unauthorized access can never occur;
• Technology systems can never fail;
• Cybersecurity incidents can never occur;
• Third parties will never act unlawfully; or
• Information will remain confidential under every conceivable circumstance.

RSG Security will exercise the level of care required by applicable law and applicable contractual obligations.

To the fullest extent permitted by law, nothing contained in this Privacy Policy creates duties, warranties, representations, or obligations beyond those expressly required by applicable law or a separately executed written agreement.

32. Relationship To Rsg Security Service Agreements

Client security services are governed by the applicable written service agreement, proposal, statement of work, amendment, post orders, or other contractual documents.

This Privacy Policy does not:

• Modify security-service obligations;
• Expand the scope of contracted services;
• Create security guarantees;
• Create third-party beneficiary rights;
• Modify limitations of liability contained in an applicable agreement;
• Modify indemnification obligations;
• Modify dispute-resolution provisions; or
• Create obligations inconsistent with an executed client agreement.

To the extent permitted by law, disputes arising primarily from contracted security services remain subject to the governing contract.

33. Changes To This Privacy Policy

RSG Security may modify this Privacy Policy from time to time to reflect:

• Changes in law;
• Changes in technology;
• Changes in our websites;
• Changes in security services;
• Changes in business practices;
• Changes in vendors; or
• Changes in privacy requirements.

The revised Privacy Policy becomes effective when posted unless a different effective date is stated or applicable law requires additional notice.

Continued interaction with RSG Security following an update constitutes acknowledgment of the revised Privacy Policy to the extent permitted by law.

34. Contact Rsg Security

Questions regarding this Privacy Policy may be directed to:

Refuge Services Group Inc.
d/b/a RSG Security Inc.

Privacy Email: contact@refugeservicesgroup.com

Telephone: 407-985-1000

Mail:
P.O. Box 690725
Orlando, Florida 32869

When contacting us regarding privacy matters, please include sufficient information for us to understand the nature of your request without unnecessarily providing sensitive personal information.