Privacy Policy - Guardian Security

01

Introduction

Guardian Security is committed to protecting your privacy and handling your personal data with the highest level of security and transparency. This Privacy Policy explains how we collect, use, and protect personal information in full compliance with the EU General Data Protection Regulation (GDPR).

We uphold the principles of data minimization, privacy by design, and lawful processing.

02

Data We Collect

The only personal data we collect and process are Discord usernames and Discord IDs.

We do not collect or store any of the following unless explicitly authorized:

Real names
Email addresses
IP addresses
Payment information
Location data
Device identifiers
Cookies or tracking data

03

Purpose and Legal Basis for Processing

We collect Discord usernames solely for the following purposes:

User identification within our security systems and Discord servers
Access control and verification to ensure secure communication channels
Incident response and security audits when required

The lawful basis for processing under Article 6 of the GDPR is:

⚖️ Legitimate interest (Art. 6(1)(f)): maintaining secure and verifiable communication

✓ Consent (Art. 6(1)(a)): where users explicitly provide their Discord username

04

Data Storage and Retention

Discord usernames are stored securely in encrypted databases with restricted access
We retain usernames only for as long as necessary to maintain operational security or as required by law
When data is no longer needed, it is securely deleted using GDPR-compliant erasure methods

05

Data Sharing and Disclosure

We do not sell, share, or disclose Discord usernames to third parties, except when:

Required by law enforcement under a lawful request
Necessary to protect system integrity or prevent abuse

All processing partners (if any) are bound by GDPR-compliant data processing agreements (DPAs).

06

Your GDPR Rights

As a user, you have the following rights under GDPR:

Access

Request a copy of your stored data

Rectification

Request correction of inaccurate data

Erasure

Request deletion of your data ("Right to be Forgotten")

Restriction

Limit how your data is used

Portability

Obtain your data in a machine-readable format

Objection

Object to processing based on legitimate interest

To exercise these rights, contact: joe@guardian-security.org

We will respond within 30 days of your request.

07

Data Security Measures

Guardian Security implements rigorous data protection controls, including:

AES-256 encryption for stored identifiers
Zero-knowledge access protocols for staff
Regular security audits and penetration testing
Strict role-based access control (RBAC)
Incident response procedures aligned with ISO/IEC 27001

08

Updates to This Policy

We may update this Privacy Policy to reflect operational or legal changes. All updates will be posted here with a revised "Effective Date."

09

Contact Information

If you have any questions, concerns, or GDPR-related requests, contact our Data Protection Officer (DPO):

joe@guardian-security.org