Last updated [date]
RootGuard Security, a company registered in Jamaica (company number [number]), is the data controller for personal data collected through rootguardsecurity.com and in the course of our engagements. This notice explains what we collect, why, and what you can ask us to do about it.
Loading a page from this site contacts nobody but this site. The typeface is served from rootguardsecurity.com, as is every stylesheet and image. The content security policy sent with each page confines the browser to this origin, so a request to any other party would be blocked rather than merely absent.
The only party that sees your connection is Cloudflare, which hosts the site on our behalf. What that involves is set out immediately below.
Almost nothing. Because the site is static, the only data generated by your visit is the connection information our hosting provider records to deliver the page and protect the service.
| Data | Why | Held by |
|---|---|---|
| IP address, browser type, page requested, time of request | Delivering the page, and detecting and blocking abuse | Cloudflare, as our hosting and security provider |
We do not use this information to identify individuals and we do not combine it with anything else.
If you email us, we hold your message, your email address and any contact details you include, so that we can reply and keep a record of the correspondence. If you send us a completed readiness assessment, we hold what you send so we can review it with you.
We use that information only to respond to you and to provide what you asked for. We do not add you to a marketing list without your agreement, and we do not sell or share your details with anyone for their own purposes.
During an assessment we collect evidence about your systems and controls. That evidence often contains personal data, for example the names and roles of staff who hold accounts, who left the organization, or who operate a control.
We do not use client evidence for any other purpose. We do not use it to train anything, we do not reuse it as an example, and we do not name clients in our materials without written permission.
| Provider | Purpose |
|---|---|
| Cloudflare | Website hosting, DNS and security |
| Cloudflare | Email routing for the contact address |
Each provider processes data under its own terms and applicable data processing agreements. We do not sell personal data to anyone, and we do not permit any provider to use it for their own purposes.
Our providers operate internationally, so data may be processed outside Jamaica. Where that happens we rely on the provider's own transfer safeguards. If you need specifics for an engagement, ask and we will tell you which providers are involved and where.
You can ask us to tell you what personal data we hold about you, correct it if it is wrong, delete it where we have no continuing need or legal obligation to keep it, or restrict what we do with it.
Where we hold data as a processor on behalf of a client, direct your request to that client and we will support them in answering it.
Requests are free and we will respond within the period required by applicable law. If you are not satisfied with our response you can complain to the Office of the Information Commissioner in Jamaica, or to the supervisory authority in your own country.
Evidence and working papers are encrypted at rest and in transit, access is limited to the principals working on the engagement, and credentials are held in a managed credential store with multi-factor authentication. We apply to ourselves the controls we assess in others, and we are willing to evidence that on request.
If we change this notice we will update the date at the top. Where the change is material and we hold your contact details, we will tell you directly.
Questions about this notice, or to make a request: contact@rootguardsecurity.com
RootGuard Security, [registered address]