Privacy Policy

1. Introduction and Scope

This Privacy Policy explains how we collect, use, disclose, store, protect, and otherwise process your personal data when you interact with us — whether as a client, prospective client, visitor to our website, job applicant, supplier, employee, or other stakeholder. It applies to all personal data processed by 2RS Security, including through our services, website, mobile applications, contracts, communications, and CCTV/surveillance systems where we act as data controller.

2. Information We Collect

We collect various categories of personal data, including but not limited to:

• Identity Data: full name, national ID/passport number, date of birth, gender, nationality, photographs.
• Contact Data: email address, telephone numbers, physical/postal address.
• Professional & Service Data: job title, employer details, service requirements, risk profiles, incident reports, CCTV footage (where you appear incidentally), access logs.
• Financial Data: payment details, bank account information, invoicing records (processed securely via third-party gateways).
• Technical Data: IP address, browser type, device information, location data (derived from IP or GPS in mobile apps), cookies and usage analytics.
• Sensitive Data: criminal record checks (for vetting), health information (in emergency response), biometric data (in access control systems — only with explicit consent).

3. How We Collect Your Data

Directly from you (forms, contracts, emails, calls), automatically (website analytics, CCTV where we control), from third parties (background checks, partners, public sources), or through our security deployments (incident logs, alarm triggers).

4. Purposes and Legal Basis for Processing

We process personal data to:

• Provide, manage, and improve our security services (contract performance / legitimate interests).
• Conduct risk assessments, vetting, and compliance checks (legal obligation / legitimate interests).
• Communicate updates, proposals, invoices (consent / contract).
• Ensure site/personnel safety and respond to incidents (vital interests / legal obligation).
• Comply with Kenyan law, including registration with the Office of the Data Protection Commissioner (ODPC).

5. Data Sharing and International Transfers

We share data only when necessary with:

• Trusted service providers (IT, payment processors, vetting agencies) under strict contracts.
• Law enforcement, regulators, or courts when required.
• Affiliates or partners in expansion regions (with safeguards like standard contractual clauses or adequacy decisions).

No sale of personal data occurs. Cross-border transfers comply with Section 48–50 of the Act.

6. Data Security and Retention

We use encryption, access controls, firewalls, regular audits, and data protection by design. Data is retained only as long as necessary (typically 7 years for contractual/legal purposes, shorter for marketing) and securely deleted thereafter.

7. Your Rights Under the Data Protection Act

You have the right to:

• Access, rectification, erasure (“right to be forgotten”), restriction, portability.
• Object to processing (including direct marketing).
• Withdraw consent at any time (where consent is the basis).
• Lodge a complaint with the ODPC if unsatisfied.

Contact our Data Protection Officer at privacy@2secured.co or +254 700 123 456 to exercise rights.

8. Cookies and Tracking

Our website uses essential, analytics, and marketing cookies. You can manage preferences via our cookie banner.

9. Changes to This Policy

We may update this policy. Changes will be posted here with the updated date. Significant changes will be notified via email or website notice.

10. Contact Us

Data Protection Officer
2RS Security Limited
Nairobi, Kenya
Email: privacy@2secured.co
Phone: +254 700 123 456