Privacy Policy
1Who we are
1.1 We are 592Security, a business in Georgetown, Guyana. We decide how and why your personal information is used for the Site and for our services, so we are the organisation responsible for it (the “controller”). “Personal information” means information about a person who can be identified.
1.2 To contact us about your information, email info@592security.com with “Privacy” in the subject, or use the Contact page.
2What this policy covers, and the law
2.1 This policy covers our website (including the free website security scanner, member accounts, the customer portal and the staff area), our messages to you by email, text and WhatsApp, our mobile app when it is released, and the information we collect when we quote, install, support and bill for CCTV, alarm, monitoring and website services. It does not cover other companies’ websites and apps that you reach through us, such as WhatsApp or the camera maker’s app.
2.2 The law. Guyana’s Data Protection Act 2023 was passed in 2023 but, at the date above, has not been brought into force. We already follow its main principles: we use information fairly and lawfully, collect only what we need, keep it accurate, keep it only as long as we need it, keep it secure, and respect your rights. We will comply fully once the Act applies to us. If you use the Site from another country, we apply the same protections to you, and local laws may give you additional rights.
2.3 Our Terms and Conditions and this policy work together.
3Information we collect
3.1 What you give us.
- Website account: your name, email address and password (we keep only a scrambled “hash” of the password, never the password itself), and the version of our Terms and Privacy Policy you agreed to and when.
- Security scans: the website address (and the platform, if you choose one) you enter, and for Threat Intel an IP address or email address if you enter one. We also hold the results of the scan. For a Deep Audit we keep the authorisation form: the company name, your name, job title and email, the domain and your scope notes, with the time, your network (IP) address and browser details.
- Enquiries and quotes: your name, email, phone number, address or location, the package and add-ons you chose, and your message.
- Customers: your name, contact details, address, account number, plan and monthly fee; invoices, payments and balance (including the payment method, the reference and the payer account or number shown on a payment); equipment (model, serial number, location, warranty dates); support tickets and messages; visit dates, technician and notes; notes our team writes about your account; your choices about email, text and WhatsApp, with the date and a note; a record of the messages we sent you; and emergency contacts you ask us to keep (their names, roles and phone numbers).
- Staff: name, email address, role and permissions.
- Phone, WhatsApp and email: what you send us and what we reply.
3.2 What we collect automatically. Your network (IP) address, the type of browser and device, the pages and requests you make, the time, and errors. We also keep a security trail of important actions (such as sign-ins, failed sign-ins, password changes, account creation, agreeing to the Terms and starting scans), with the name or email, the time and the network address. Section 9 covers cookies.
3.3 What we get from other places. Public information about a website you scan (its public pages, DNS records, certificates and headers); results from security-data providers (section 7); payment records from banks and mobile-money services so that we can match a payment to an invoice; and delivery reports from our messaging providers.
3.4 What we do not collect. We do not take card numbers on the Site. We do not record or store your camera footage unless you buy a service that includes it, such as monitoring with a cloud copy (section 12). We do not build advertising profiles. We do not ask for sensitive information such as health, biometric or political information, so please do not send it to us.
3.5 Information about other people. If you give us details about someone else (for example an emergency contact), you must have their permission and must tell them how we will use their details. Our Terms say so too.
3.6 If you do not give it. Some information is needed to give you what you ask for (for example your email for an account, or your address for an installation). Without it we may not be able to help.
4How we use it, and why
4.1 We use personal information for the purposes below, each for the reason shown.
| What we do | Our reason |
|---|---|
| Create and run your account; let you use the scanner and your reports | To carry out our contract with you (the Terms) |
| Answer enquiries; prepare quotes; install, support, bill and collect payment | To carry out, or prepare for, a contract with you |
| Send service messages: visits, billing, security notices, account links | To carry out our contract, and our legitimate interest in serving customers well |
| Send marketing messages | Only with your consent, which you can withdraw (section 14) |
| Keep the Site and our customers safe: stop abuse, fraud and unauthorised scans; enforce the Terms; keep records of agreements and authorisations | Our legitimate interest in running a safe and fair business, and legal duties |
| Improve the Site and our services, using general figures that do not identify you | Our legitimate interest in improving what we offer |
| Keep accounting and tax records; answer authorities and courts | To follow the law |
| Establish, exercise or defend legal claims | Our legitimate interest, and legal duties |
4.2 We do not use your information for anything unrelated to these purposes without telling you first or, where the law requires, asking for your consent.
5Automated tools and AI
5.1 Scan reports are produced by automated tools. Where this is switched on, we send the website address and the technical findings to an AI service (Anthropic) so that it can write a plain-English explanation. What it receives is the website address, the platform and the titles of the main findings. We do not send your name, email address or password for this purpose.
5.2 We use automatic limits to protect the Site: for example we slow or refuse repeated requests, and we lock an account for a while after repeated failed sign-ins. We do not make decisions about you with legal or similarly significant effect by automated means alone.
6Who we share it with
6.1 We do not sell personal information and we do not share it for advertising.
6.2 Companies that help us run the Site, who act on our instructions:
- Hosting: Render, which runs the website, in the United States (Oregon).
- Database: Supabase, which stores accounts and customer records, in the United States (North Virginia).
- Email: an email delivery service (such as Resend or Brevo), when switched on.
- Text and WhatsApp: our messaging provider (Twilio), Meta/WhatsApp when we message you there, and your phone company.
- AI summaries: Anthropic, when switched on (section 5).
- Fonts: Google Fonts (section 9).
6.3 Payments. If you pay by MMG or bank transfer, those providers handle the payment under their own policies. We receive a reference and the payer details they show.
6.4 Advisers. Accountants, lawyers and insurers, who must keep it confidential.
6.5 Authorities and the law. The police, courts and other authorities, if the law requires it, or to prevent or investigate crime (including unauthorised scanning), or to protect rights, safety or property.
6.6 If our business changes. If we sell or merge our business, your information may pass to the new owner, who must protect it as this policy does.
6.7 When you ask us to. For example when you ask us to give footage details or a report to your insurer or landlord.
6.8 Report links. A scan report is not protected by a password. Anyone who has the link can open it while it exists, so share it carefully. We do not publish reports.
7The scanner and outside data sources
7.1 When you run a scan, the scanner (or the tools behind it) may send the website address or domain, IP addresses it finds, and, only if you type one into Threat Intel, the email address you enter to these providers, whenever we have connected them: VirusTotal, AbuseIPDB, Google Safe Browsing, URLhaus (abuse.ch), Have I Been Pwned (to see whether an email address appears in known data breaches), Shodan, and public vulnerability lists: the US National Vulnerability Database, CISA’s list of known-exploited vulnerabilities and FIRST’s scoring service (these only receive vulnerability numbers).
7.2 Some of these providers keep what they receive and may show it to their other users (for example, VirusTotal keeps submitted web addresses). Their own privacy policies apply to what they hold.
7.3 Only enter an email address that is yours or that you have permission to check, and only scan websites you are allowed to test (see our Terms).
8Moving information outside Guyana
8.1 Our website and our database are hosted in the United States. Our email, messaging and AI providers may also process information in the United States and in other countries. Those countries may have different data protection laws from Guyana.
8.2 We take reasonable steps so that your information keeps reasonable protection: we choose established providers, we use encrypted connections, and we limit who can see the data. By using the Site you understand that your information is handled in this way. Where the law requires your consent for a transfer, we ask for it.
9Cookies and similar technology
9.1 We use one essential cookie. It keeps you signed in and holds a security code that protects our forms from forgery. It is only sent to our own site, it is marked Secure and HttpOnly, and it is limited to the same site (SameSite=Lax).
| Name | What it does | How long |
|---|---|---|
__Host-session | Keeps you signed in; holds the security code for forms | Set when you open a page with a form or a sign-in (for example the home, contact, CCTV and sign-in pages); lasts up to 30 days |
9.2 We do not use advertising, analytics or social-media tracking cookies, pixels or similar tools. Because the cookie above is strictly necessary for the Site to work, we do not ask for consent for it. If your browser blocks it, signing in will not work. If we ever add other tools, we will update this policy and ask for consent where the law requires.
9.3 Google Fonts. Our pages load their typefaces from Google. When that happens, your browser contacts Google’s servers, which receive your network (IP) address and browser details.
9.4 WhatsApp and ad links. Buttons that open WhatsApp take you to a service run by Meta, whose privacy policy applies. If you reach us from one of our ads, the link carries a campaign tag (for example utm_source=facebook). We add it to the message you send us on WhatsApp so that we know which ad you used. We do not use it to follow you around the web.
10How long we keep it
10.1 We keep personal information only as long as we need it for the reasons in section 4, or as the law requires. After that we delete or anonymise it.
10.2 In practice:
- Scan results are held only in our server’s memory, not in our database. Only the most recent 500 scans are kept, and everything is cleared whenever the service restarts. Save any report you need.
- Website accounts are kept until you ask us to close them.
- Customer records, invoices, payments and messages are kept while you are a customer and afterwards for as long as needed for accounting, tax, warranty and any dispute, usually several years.
- Enquiries and quotes sent through the forms are recorded in our server records and handled by our team. Our hosting provider keeps those records for a limited time. If you become a customer we keep what we need in your customer record.
- The security trail, agreement records and scan authorisations are kept for as long as needed to protect the Site and to show what was agreed, normally several years.
10.3 If you ask us to delete your information, we will, unless we must or may keep some of it (for example invoices, the security trail or evidence we need for a claim).
11How we protect it
11.1 We protect information with measures that include: encrypted (HTTPS) connections; storing passwords only as hashes; locking an account for a while after repeated failed sign-ins; limiting what each member of staff can see and change; keeping our database locked, so that only our server, using private credentials, can read it; and a security trail of important actions.
11.2 No system is completely secure. Please protect your password and your devices. If a breach is likely to harm you, we will tell you and the authorities as the law requires.
12Your camera footage
12.1 We do not receive, store or watch your footage by default. It stays on your recorder and in the camera maker’s app or cloud that you set up (for example ZOSI Smart), under that company’s privacy policy.
12.2 If you ask us to help, or you buy a monitoring service, we may view live or recorded images only for that purpose and as your agreement with us says. If your service includes a cloud copy of video, we keep that copy for the period your agreement states and then delete it. We will not share the images except as you tell us to or as the law requires.
12.3 You decide what your cameras record and who sees it, so you are responsible for using them lawfully (see section 8.5 of our Terms).
13Your rights and choices
13.1 You can ask us to:
- tell you what personal information we hold about you and give you a copy;
- correct information that is wrong or incomplete;
- delete your information (see section 10.3);
- stop or limit how we use it, or object to a use that relies on our legitimate interests;
- give you the information you provided in a common format, where that is practical; and
- stop marketing messages, and withdraw any consent you gave, at any time.
13.2 How. Email info@592security.com with “Privacy” in the subject. We may need to check who you are before we share or change anything. We aim to reply within 30 days. There is normally no charge, unless a request is clearly unfounded or excessive. We may refuse a request where the law allows or requires, and we will say why.
13.3 Customers can also see and update much of their information in the customer portal, and staff-created accounts can be changed or closed by asking us.
14Messages and marketing
14.1 We send service messages (visits, billing, security notices, account links) as part of serving you. We send marketing by email, text or WhatsApp only if you have agreed, and we record what you agreed to and when.
14.2 To stop marketing, use the unsubscribe link in an email, reply STOP where that works, or tell us. This does not stop service messages. Text and WhatsApp messages travel through other companies, whose terms and charges apply.
15Children
15.1 The Site and our services are for adults. Accounts are for people aged 18 or over. We do not knowingly collect information from children. If you think a child has given us information, contact us and we will delete it.
16Links to other websites
16.1 Our pages link to other sites and apps, such as WhatsApp. We do not control them and this policy does not cover them. Read their privacy policies before you share information with them.
17Changes to this policy
17.1 We may update this policy. We will post the new version here with a new version number and date, and, if the change is important and we have your contact details, we will tell you. If you keep using the Site after a change takes effect, that is your acceptance of it, except where the law requires us to ask for your consent again.
18Contact and complaints
18.1 592Security, Georgetown, Guyana. Email info@592security.com, or use the Contact page.
18.2 If you are not happy with how we have handled your information, please contact us first, and we will try to put it right. When Guyana’s Data Protection Act 2023 is in force and the Data Protection Commissioner’s office is open, you may also complain there. If you live in another country, you may complain to the data protection authority there.
Privacy Policy, version 1.1, last updated 4 November 2026. See also our Terms and Conditions.