Privacy Policy

1. Introduction

ACES Security Agency ("we," "us," or "our") respects your privacy and is committed to protecting the personal information you share with us. This Privacy Policy explains what information we collect through our website at acessecurityagency.com (the "Site"), how we use it, and your rights regarding that information.

By using the Site, you consent to the practices described in this Privacy Policy. If you do not agree with this policy, please do not use the Site.

2. Information We Collect

We collect information in the following ways:

a) Quote Requests

When you submit a security services quote request, we collect:

• Full name
• Email address
• Phone number
• Company or organization name
• Type of security service requested
• Location and event/site details
• Any additional information you provide in the message field

b) Job Applications

When you apply for a position through the Site's Careers page, we collect:

• Full name, email address, and phone number
• Experience level and relevant qualifications
• Uploaded resume and cover letter (PDF, DOC, or DOCX format)
• Any other information voluntarily provided in your application

c) Employee Portal

Authorized employees who access the internal portal ("Dashboard") have a profile that may include:

• Full name, username, and job title
• Role permissions and employment status
• Personal documents uploaded by authorized administrators
• Session activity and login history for security audit purposes

d) Automatically Collected Information

When you visit the Site, we may automatically collect technical information, including:

• IP address and browser type
• Pages visited and time spent on the Site
• Referring URL
• Session cookie data (used to maintain your login state)

3. How We Use Your Information

We use the information we collect to:

• Respond to quote requests and provide security service proposals
• Review and process job applications
• Manage employee accounts and portal access
• Maintain security audit logs to detect and prevent unauthorized access
• Communicate with you regarding your inquiry, application, or engagement
• Comply with applicable legal obligations
• Improve the functionality and security of the Site

We do not use your information for automated decision-making or profiling for marketing purposes.

4. Cookies and Session Data

We use session cookies to maintain login state for authorized employees accessing the portal. These cookies are:

• HTTP-only (not accessible via JavaScript)
• Scoped to our domain
• Automatically expired after 8 hours of inactivity

We also use a CSRF (Cross-Site Request Forgery) protection cookie as a security measure. This cookie does not track you or store personal information.

We do not use advertising cookies, analytics cookies, or third-party tracking technologies.

5. File Uploads

Resumes, cover letters, and other documents uploaded through the Site are stored securely on our server. Access to uploaded files is restricted to authorized employees with appropriate permissions. Files are validated for type and size before storage.

We retain uploaded application documents for a reasonable period to facilitate hiring decisions and to consider applicants for future openings. Employees may request deletion of their personal documents by contacting us.

6. How We Share Your Information

We do not sell, trade, or rent your personal information to third parties. We may share information only in the following limited circumstances:

• Service Providers: We may engage trusted service providers (e.g., web hosting, database services) who process data on our behalf under confidentiality obligations.
• Legal Compliance: We may disclose information if required to do so by law, court order, or governmental authority, or to protect the rights, property, or safety of ACES Security Agency, its employees, or the public.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will provide notice before your information is transferred and becomes subject to a different privacy policy.

7. Data Retention

We retain your personal information only as long as necessary for the purposes described in this policy or as required by law:

• Quote requests: Retained for the duration of any active engagement plus a reasonable period thereafter.
• Job applications: Retained for up to 12 months after submission, or longer if required for an active hiring process.
• Employee records: Retained for the duration of employment and as required by applicable employment law thereafter.
• Security audit logs: Retained for up to 12 months to support security investigations.

8. Data Security

We implement industry-standard security measures to protect your information, including:

• HTTPS encryption for all data transmitted to and from the Site
• Hashed passwords (bcrypt) for employee accounts - we never store passwords in plain text
• Account lockout protections after repeated failed login attempts
• Role-based access control limiting data access to authorized personnel
• Security audit logging for all sensitive portal actions
• HTTP security headers (HSTS, Content Security Policy, etc.)

Despite these measures, no method of transmission or storage is 100% secure. We cannot guarantee absolute security of your information.

9. Children's Privacy

This Site is not directed to individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe we have inadvertently collected information from a minor, please contact us immediately and we will take steps to delete it.

10. Your Rights

Depending on your location, you may have certain rights regarding your personal information, including the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your information (subject to legal retention requirements)
• Withdraw consent where processing is based on consent
• Lodge a complaint with an applicable data protection authority

To exercise any of these rights, please contact us using the information below. We will respond to verifiable requests within 30 days.

11. Washington State Residents

ACES Security Agency operates in the State of Washington. Washington residents may have additional rights under the Washington My Health MY Data Act and other applicable state laws. For questions about your rights as a Washington resident, please contact us directly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date. We encourage you to review this policy periodically. Your continued use of the Site after changes are posted constitutes your acceptance of the updated policy.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: