Privacy Policy

Effective Date: October 20, 2025

1. INTRODUCTION

This Privacy Policy describes how Silent Beacon, LLC (“Silent Beacon,” “SBL,” “we,” “us,” or “our”) collects, uses, and shares information in connection with your use of our products and services. This includes: the physical Silent Beacon panic button and any related hardware (the “Beacon”); the Silent Beacon mobile applications (the “Applications”); our websites, including the marketing website and the cloud-based management portal for enterprise clients (the “Sites”); and all related backend servers, software, and support functions including 24/7 professional monitoring services (the “Services”). Beacon, Applications, Sites, and Services will be collectively and individually referenced as part or in its entirety as (the “System”). This policy applies to both individual users (“Consumers”) and organizations that license and lease our System for their employees or members (“Enterprise Safety Solutions” or “ESS”). This Privacy Policy applies to all users of the Silent Beacon System worldwide, as well as visitors to our websites, including but not limited to users in the United States, Canada and the European Economic Area.

1.1 SCOPE

This Privacy Policy covers individual users access and engage with any part of our System. 

1.2 YOUR CONSENT

By accessing, or using our System in any manner, you acknowledge that you have read and understood this Privacy Policy and agree to be bound by its terms. You consent to the collection, use, and sharing of your information as described herein. If you do not agree with this Privacy Policy, you must not use our any part of our System.

1.3 YOUR RESPONSIBILITY FOR THIRD-PARTY INFORMATION

If you provide us with someone else’s personal information (e.g., your emergency contacts), you represent and warrant that you have provided any required notices and obtained any required permissions from that person to share their information with us for the sole purpose of receiving emergency alerts from your use of the Services.

1.4 CONSENT TO ELECTRONIC COMMUNICATIONS

To provide the Services, we and your designated contacts must be able to communicate with you by SMS text message and/or phone calls. By using the Services, you expressly consent to receive operational, non-marketing text messages and phone calls from Silent Beacon and your designated contacts, including those made with an automatic telephone dialing system. You understand that message and data rates may apply.

2. DEFINITIONS

“Consumer”: An individual who accesses or uses any part of the System for personal use.

“Data Controller”: The entity that determines the purposes and means of processing personal data.

“Data Processor”: The entity that processes personal data on behalf of the Data Controller.

“ESS End User”: An individual who uses the System provided by an ESS Client.

“ESS Client”: A business or organization that leases and licenses the System for use by its employees or members.

“Personal Information”: Information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked with a particular consumer or household.

“Sensitive Personal Data”: Personal Information which is considered more sensitive to the individual, such as race and ethnic origin, political opinions, religious or philosophical beliefs, trade-union membership, genetic or biometric information, medical information, and sexual orientation. Silent Beacon does not collect or use Sensitive Personal Data through the System and asks that you do not provide such information to us.

“Sensitive Personal Information” or “SPI”: A subcategory of Personal Information that includes, under California law, “precise geolocation.” We collect precise geolocation only to deliver emergency features when you trigger an alert. We do not use or retain SPI for advertising, and we do not “sell” or “share” SPI.

3. INFORMATION WE COLLECT

3.1 INFORMATION YOU PROVIDE TO US

We collect the following information for first and last name, email address, phone number; emergency contact names, email addresses, and phone numbers of your designated emergency contacts; and username, password, and account preferences. (making a chart)

3.2 INFORMATION WE COLLECT AUTOMATICALLY

We collect certain information automatically when you use our Services. This information includes: Location Data (Sensitive Personal Information): The Beacon device does not have GPS. When an alert is activated, the Application on your smartphone collects your phone’s precise geolocation data. This is considered Sensitive Personal Information under some laws. Its collection is strictly limited to providing the core emergencyresponse features of the Services; Device and Connection Information: Device type, operating system version, browser type, and internet service provider (ISP); Usage Data: How you use our Services, including features accessed, time spent, and actions taken; Log Data: Internet Protocol (IP) address, browser type, pages visited, and time and date of visit. The information we automatically collect is primarily statistical data but may include personal information, and we may maintain it or associate it with personal information we collect in other ways or receive from third parties.

3.4 COOKIES AND TRACKING TECHNOLOGIES

Our websites and applications use cookies and other technologies to collect and store information. The technologies we use for this automatic data collection may include:

Cookies: A cookie is a small file placed on the hard drive of your computer. You may refuse to accept browser cookies by activating the appropriate setting on your browser. However, if you select this setting, you may be unable to access certain parts of our Services. You can set your browser to refuse all or some browser cookies or to alert you when websites set or access cookies. If you disable or refuse cookies, please note that some parts of our Services may become inaccessible or not function properly.

Web Beacons: Pages of our Sites and our emails may contain small electronic files known as web beacons (also referred to as clear gifs, pixel tags, and single-pixel gifs) that permit us, for example, to count users who have visited those pages or opened an email and for other related website statistics. Some browsers have incorporated “Do Not Track” (DNT) features that can send a signal to the websites you visit indicating you do not wish to be tracked. Because there is not yet a common understanding of how to interpret DNT signals, we do not currently respond to DNT signals on our websites. You can manage your cookie preferences at any time by clicking the “Cookie Settings” link in the footer of our website. While we do not respond to browser-based “Do Not Track” signals, we do honor legally recognized universal opt-out mechanisms like the Global Privacy Control.

3.5 NOTICE AT COLLECTION

The following table summarizes our collection, use, and disclosure of personal information:

3.A SERVICE-SPECIFIC COLLECTION TABLES

3.A.1 Websites

3.A.2 Mobile Application

3.A.3 Beacon Device

3.A.4 ESS Dashboard

Silent Beacon honors the Global Privacy Control (GPC) and other legally recognized universal opt-out mechanisms under applicable law (CA, CO, CT, VA). Precise geolocation data is classified as Sensitive Personal Information and is only collected when an alert is activated.

4. HOW WE USE YOUR INFORMATION

We use your Personal Information in ways that are compatible with the purposes for which it was collected or authorized by you. We process your data based on one or more of the following legal grounds. Performance of a Contract: Much of our processing is necessary to provide the Services you have requested and to perform our contractual obligations to you. This includes transmitting emergency alerts and location data to your designated contacts; providing a method for users to directly contact emergency services; authenticating users and maintaining account security; providing customer support and responding to your inquiries. Legitimate Interests: We process certain data for our legitimate business interests, provided these interests are not overridden by your rights and freedoms. These interests include analyzing usage patterns to improve our Services, troubleshooting technical issues, and developing new features; enhancing the security of our network and information systems to protect your data; detecting and preventing fraud, enforcing our terms of use, and protecting our rights and property; and intra-company transfers and other general business operations. For certain activities, we rely on your consent. This includes sending you direct marketing communications. You can withdraw your consent at any time for processing that is based on consent. Please note that withdrawing consent may limit your ability to use certain features of our Services, and we may continue to process your information where we have another legal basis to do so (such as performance of our contract with you)We will process data where necessary to comply with a legal or regulatory obligation, such as retaining financial records for tax purposes or responding to a valid legal request from law enforcement.

5. INFORMATION SHARING AND DISCLOSURE

5.1 EMERGENCY CONTACTS AND SERVICES

                  When you activate an alert, your location data and profile information are shared with your designated emergency contacts via multiple methods, which may include text message, email, push notifications, and dashboard alerts (for ESS End Users). The specific notification methods depend on your account settings and subscription type.

5.2 SERVICE PROVIDERS

We share information with the following third-party service providers: Notification Providers, Cloud Hosting Providers, Analytics Services and Monitoring Services. Information is shared only to provide the Services and is not sold. Payment processing is handled by third-party processors and we do not collect or store financial account information.

5.4 LEGAL REQUIREMENTS

We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court or government agency).

6. DATA STORAGE AND SECURITY

6.1 DATA SECURITY

We implement and maintain a security program with appropriate technical and organizational measures designed to protect your personal information against unauthorized access, accidental loss, alteration, or destruction. Our security framework is aligned with industry-recognized standards to ensure the confidentiality, integrity, and availability of your data. Data security under SOC 2 involves implementing and maintaining controls like access management, data encryption, and risk assessment to protect sensitive information from unauthorized access or breaches. [RUN through CHAT GPT TO consolidate]

6.2 DATA RETENTION SCHEDULE

Our data retention periods are determined by applicable law and the operational needs of the Services. Our standard retention period for personal information is three (3) years following the termination of your account or contract. After this period, your personal information will be deleted from our active systems in accordance with our data deletion procedures. An exception to this standard contractual information. In compliance with IRS regulations and other legal obligations, all transaction data, billing records, and associated contracts will be retained for seven (7) years after the business relationship ends. Information that has been permanently de-identified so that it can no longer be linked to an individual is not considered personal information. This anonymized and aggregated data is retained indefinitely for service improvement, statistical analysis, and other business purposes.

6.3 INTERNATIONAL DATA TRANSFERS

Your information is processed by our team in the United States and by our third-party service providers globally. If you are in the European Economic Area (EEA), your personal information will be transferred outside of the EEA. For such transfers, Silent Beacon relies on legally provided mechanisms to ensure an adequate level of data protection. We implement Standard Contractual Clauses (SCCs) as approved by the European Commission and the UK for transfers of personal information to third countries. We also conduct transfer impact assessments to ensure that the law in the recipient country does not prevent the data importer from fulfilling its obligations under the SCCs. A copy of our SCCs can be provided upon request.

6.4 DATA BREACH NOTIFICATION

Silent Beacon is committed to maintaining the security and integrity of all personal information. If a data-security incident occurs that compromises personal information, Silent Beacon will notify affected individuals and the appropriate regulatory authorities without undue delay and, where feasible, within seventy-two (72) hours of becoming aware of a personal data breach, in accordance with applicable privacy and data-protection laws.

Silent Beacon will provide notice to affected users by email without undue delay after confirming a breach involving their personal information, except where prohibited or delayed by law enforcement or regulatory requirements.

Silent Beacon will also provide notice directly to the ESS Clients under the timelines and procedures described in the Support and Service Level Policy (SLP). The SLP contains additional operational details about how Silent Beacon investigates, manages, and communicates security incidents. However, this Privacy Policy serves as the authoritative statement of Silent Beacon’s legal obligation to provide breach notifications required by law, while the SLP provides a more detailed description of the internal processes supporting those obligations.

All breach-related communications will describe, to the extent known at the time, the general nature of the incident, the categories of information affected, potential consequences, and the measures taken or planned to mitigate risk and prevent recurrence.

6.5           YOUR RIGHT TO DELETION

You have the right to request the deletion of your personal information. This section outlines our process of handling such requests and our corresponding obligations. To request the deletion of your data, please submit a formal request via email to legal@silentbeacon.com. We will acknowledge receipt of your request within five business days and begin the verification process. In line with our commitment to transparency and our legal obligations under regulations like GDPR, we follow a detailed process. We will first take reasonable steps to verify your identity to ensure we are deleting data for the correct individual. Upon successful verification, we will process your request and permanently remove your personal information from our active production systems within 60 days. Once your data is deleted from our active systems, it will remain isolated in our backup archives until it is automatically and permanently deleted as part of our regular backup rotation schedule. This data is not used for any operational purpose during this period. We will send you final confirmation once your data has been deleted from our active systems. We are required by law to retain certain types of information, even after a deletion request. These exceptions are limited and specific: we must retain billing and contract information for seven years to comply with tax and financial auditing laws; we cannot delete information that is subject to a legal hold, litigation, or government investigation; and information that has been permanently de-identified so that it can no longer be linked back to you is not considered personal information and may be retained for analytical purposes. These exceptions do not apply to your personal contact information or emergency contacts, which will be deleted from our active systems upon your request.

6.6           ENTERPRISE CONTRACT TERMINATION

This section outlines the procedures for data handling upon the termination of an ESS Client’s contract. Upon the effective date of contract termination, SBL will take reasonable steps to deactivate access to the System. All associated ESS End User accounts will also be deactivated at this time. Upon contract termination, ESS End User data will be handled according to the master retention schedule outlined in Section 6.2. SBL will not provide additional notice to former ESS End Users before their data is deleted per this schedule. ESS End Users who wish to continue using Silent Beacon services after their  account is deactivated may create a new personal Consumer account by downloading the Safety App for Silent Beacon Application. SBL does not offer a direct account migration service.  Upon termination of your account, SBL will cease sharing your data with its third-party service providers. The deletion of any data previously shared with and held by these providers is governed by their individual data retention schedules and policies.

7. YOUR RIGHTS AND CHOICES

7.1 HOW TO EXERCISE YOUR RIGHTS

We have established a simple process for you to exercise your rights to access, correct, or delete your personal information, as granted by laws like GDPR and CCPA. To submit a request, please email us at legal@silentbeacon.com with the subject line “Data Subject Request.” In your email, please include the following information so we can verify your identity and process your request: your full name, the email address associated with your Silent Beacon account; the specific right you wish to exercise (e.g., “Request for Access,” “Request for Deletion”); and any details that can help us locate your records, such as your device serial number or the date you created your account. We will acknowledge your request within five business days and process it within 60 days of verifying your identity. There is no charge for this process. If we deny your request in whole or in part, you may appeal our decision by emailing us at legal@silentbeacon.com with the subject line “Appeal.” We will review your appeal and inform you in writing of any action taken or not taken in response, including a written explanation of the reasons for the decisions, within the time required by applicable law. If your appeal is denied, you may contact your state’s Attorney General to submit a complaint.

7.2 ACCOUNT INFORMATION

You can access, update, or delete your account information at any time by logging into your account or contacting us. ESS Clients are responsible for updating and deleting ESS End User account information.

7.3 LOCATION DATA

The Application collects your smartphone’s location data only when you activate an alert via the Application or the Beacon. You can disable location services for the Application through your smartphone’s settings, but this will prevent the core safety features of the System from functioning.

7.4 COMMUNICATION PREFERENCES

You can opt out of marketing communications by following the “unsubscribe” instructions in our emails or contacting us directly by emailing support01@silentbeacon.com

7.5 RIGHTS FOR CALIFORNIA RESIDENTS (CCPA)

If you are a California resident, you have the following rights: (1) Right to Know: You can request information about the personal information we collect, use, disclose, and sell; (2) Right to Delete: You can request deletion of your personal information.; (3) Right to Opt-Out: You can opt out of the sale of your personal information (note: Silent Beacon does not sell personal information); and (4) Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights. To exercise these rights, please contact us using the information in Section 11.

7.6 RIGHTS FOR EUROPEAN USERS (GDPR)

If you are in the European Economic Area, you have the following rights:(1) Access: You can request copies of your personal information; (2) Rectification: You can request correction of inaccurate information; (3) Erasure: You can request deletion of your personal information; (4) Restriction: You can request restriction of processing of your personal information; (5) Data Portability: You can request transfer of your personal information; (6) Objection: You can object to processing based on legitimate interests; (7) Withdrawal of Consent: You can withdraw consent where processing is based on consent. To exercise these rights, please contact us using the information in Section 11.

8. ESS CLIENT RESPONSIBILITIES

8.1 NOTICE TO ESS END USERS

ESS Clients are responsible for providing this Privacy Policy to their ESS End Users, obtaining any necessary consents from ESS End Users and ensuring they have the legal right to share ESS End User information with Silent Beacon.

8.2 DATA PROCESSING ROLES

For purposes of data protection laws, Silent Beacon acts as a Data Controller for information collected directly from Consumers. For ESS Clients, Silent Beacon typically acts as a Data Processor, while the ESS Client acts as the Data Controller for their ESS End Users’ data. In some circumstances, Silent Beacon may be a joint controller with the ESS Client.

8.3 DATA PROCESSING TERMS

For ESS Clients in the EEA or who are otherwise subject to the GDPR, we offer a Data Processing Agreement (DPA) that includes: (1) Processing Limitations: We will only process personal data according to the ESS Client’s documented instructions; (2) Confidentiality Commitments: We ensure that persons authorized to process personal data are under appropriate confidentiality obligations; (3) Security Measures: We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk; (4) Sub-processor Management: We will not engage another processor without prior authorization and will impose the same data protection obligations; (5) Data Subject Rights Assistance: We will assist the ESS Client in responding to data subject requests; (6) Breach Notification: We will notify the ESS Client without undue delay after becoming aware of a personal data breach; (7) Data Protection Impact Assessments: We will assist with data protection impact assessments when required; (8) Deletion or Return: We will delete or return all personal data at the end of the provision of services; (9) Audit Rights: We will make available all information necessary to demonstrate compliance and contribute to audits; and (10) Cross-border Transfer Mechanisms: We implement appropriate safeguards for international data transfers. ESS Clients should contact us to request our standard DPA or to discuss custom data processing terms..

9. CHILDREN’S PRIVACY

Our Services are not directed to or intended for use by children. We do not knowingly collect personal information from children under 13 years of age (or under 16 in the European Economic Area). By creating an account and using our Services, you represent and warrant that you are at least 13 years of age (or 16 in the European Economic Area). If we learn that we have collected personal information from a child under the minimum required age without parental consent, we will take steps to delete that information as quickly as possible. If you become aware that a child has provided us with personal information in violation of this policy, please contact us immediately at [legal@silentbeacon.com].

10. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the “Effective Date” at the top. For significant changes, we will provide additional notice, such as an email notification.

11. CONTACT INFORMATION

If you have any questions about this Privacy Policy or our data practices, please contact us:

12. JURISDICTION-SPECIFIC PROVISIONS

12.1 FOR CALIFORNIA RESIDENTS

In accordance with the California Consumer Privacy Act (CCPA), we provide the following additional information: we have not sold personal information in the preceding 12 months; and we have disclosed the following categories of personal information for business purposes in the preceding 12 months: identifiers, commercial information, internet activity, geolocation data. We do not sell your personal information for monetary compensation. However, our use of third-party analytics and advertising cookies may be considered a “sale” or “sharing” of personal information for cross-context behavioral advertising under California law. You may opt out of this activity by broadcasting an opt-out preference signal, such as the Global Privacy Control (GPC), on your browser. We honor GPC and other legally recognized universal opt-out mechanisms. You can also manage your cookie preferences through our cookie settings link.

12.2 FOR VIRGINIA RESIDENTS

In accordance with the Virginia Consumer Data Protection Act (VCDPA), Virginia residents have the following rights: (1) Right to Access: You can confirm whether we are processing your personal data and access such data; (2) Right to Correction: You can correct inaccuracies in your personal data; (3) Right to Deletion: You can delete personal data provided by or obtained about you; (4) Right to Data Portability: You can obtain a copy of your personal data in a portable and readily usable format; and Right to Opt Out: You can opt out of the processing of personal data for purposes of targeted advertising, sale of personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects. To exercise these rights, please contact us using the information in Section 11.

12.3 FOR COLORADO RESIDENTS

In accordance with the Colorado Privacy Act (CPA), Colorado residents have the following rights: (1) Right to Access: You can confirm whether we are processing your personal data and access such data; (2) Right to Correction: You can correct inaccuracies in your personal data; (3) Right to Deletion: You can delete personal data provided by or obtained about you; (4) Right to Data Portability: You can obtain a copy of your personal data in a portable and readily usable format; and (5) Right to Opt Out: You can opt out of the processing of personal data for purposes of targeted advertising, sale of personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects. To exercise these rights, please contact us using the information in Section 11. We honor GPC and other legally recognized universal opt-out mechanisms.

12.4 FOR CONNECTICUT RESIDENTS

In accordance with the Connecticut Data Privacy Act (CTDPA), Connecticut residents have the following rights: (1) Right to Access: You can confirm whether we are processing your personal data and access such data; (2) Right to Correction: You can correct inaccuracies in your personal data; (3) Right to Deletion: You can delete personal data provided by or obtained about you; (4) Right to Data Portability: You can obtain a copy of your personal data in a portable and readily usable format; (5) Right to Opt Out: You can opt out of the processing of personal data for purposes of targeted advertising, sale of personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects. To exercise these rights, please contact us using the information in Section 11.

12.5 FOR UTAH RESIDENTS

In accordance with the Utah Consumer Privacy Act (UCPA), Utah residents have the following rights: (1) Right to Access: You can confirm whether we are processing your personal data and access such data; (2) Right to Deletion: You can delete personal data provided by or obtained about you; (3) Right to Data Portability: You can obtain a copy of your personal data in a portable and readily usable format; and (4) Right to Opt Out: You can opt out of the processing of personal data for purposes of targeted advertising or the sale of personal data. To exercise these rights, please contact us using the information in Section 11.

12.6 FOR CANADIAN RESIDENTS

In accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws, we adhere to the following principles: (1) Accountability: We are responsible for personal information under our control and have designated individuals who are accountable for our compliance; (2) Identifying Purposes: We identify the purposes for which personal information is collected at or before the time of collection; (3) Consent: We obtain informed consent for the collection, use, or disclosure of personal information, except where inappropriate; (4) Limiting Collection: We limit the collection of personal information to that which is necessary for the purposes identified; (5) Limiting Use, Disclosure, and Retention: We do not use or disclose personal information for purposes other than those for which it was collected, except with consent or as required by law. We retain personal information only as long as necessary; (6) Accuracy: We rely on you to keep your personal information accurate and up-to-date. We provide you with the tools to access, review, and correct your information at any time through your account settings. It is your responsibility to ensure your contact information and the details of your emergency contacts are accurate to ensure the proper functioning of the Services; (7) Safeguards: We protect personal information with security safeguards appropriate to the sensitivity of the information; (8) Openness: We make information about our policies and practices relating to the management of personal information readily available; (9) Individual Access: Upon request, we inform individuals of the existence, use, and disclosure of their personal information and give them access to that information. Individuals have the right to challenge the accuracy and completeness of their information and have it amended as appropriate; and (10) Challenging Compliance: Individuals can challenge our compliance with the above principles by contacting the designated individuals accountable for our compliance. Canadian residents can exercise their privacy rights by contacting us using the information in Section 11.

12.7        FOR RESIDENTS OF MEXICO

                  If you are a resident of Mexico, the following additional terms apply to you in compliance with the Federal Law on Protection of Personal Data Held by Private Parties (LFPDPD) and its regulations. These terms prevail over any conflicting provisions in this Privacy Policy. For the purposes of Mexican law, the Data Controller for your personal information is Silent Beacon, LLC., with its address at 9200 Corporate Boulevard, Suite 250, Rockville, MD 20850, USA. By using our Services and agreeing to this Privacy Policy, you provide your express consent for the collection, use, and processing of your personal information, including your sensitive personal information, as described herein. For the purposes of Mexican law, your location data (GPS coordinates), which is only collected when an alert is activated, is considered sensitive personal information. We will obtain your express written consent for the processing of this sensitive data before it is collected. We process your personal information for the primary purposes of providing the Services, including emergency alert functions, account management, and customer support. We may also use your information for the secondary purposes of service improvement and analytics. You may object to the processing of your data for secondary purposes by contacting us. Your personal information is transferred to and processed in the United States for the purposes described in this policy. By consenting to this Privacy Policy, you also consent to this international transfer of your data. We will ensure that any recipients of your data maintain the same level of protection as required by the LFPDPD. Under the LFPDPD, you have the right to exercise your rights of Access, Rectification, Cancellation, and Opposition (“ARCO” rights): Access: You have the right to know what personal information we have about you and how we process it; Rectification: You have the right to correct your personal information if it is inaccurate or incomplete; Cancellation: You have the right to request the deletion of your personal information from our databases when you believe it is not being used in accordance with the law; Opposition: You have the right to object to the use of your personal information for specific purposes. To exercise your ARCO rights, or to revoke your consent for data processing, please submit a formal request via email to legal@silentbeacon.com. Your request must include your full name, contact information, a copy of your official identification, and a clear description of the right you wish to exercise. We will respond to your request within the timeframes established by law. If you wish to limit the use or disclosure of your personal information, you may do so by contacting us at legal@silentbeacon.com.

12.8 FOR RESIDENTS OF AUSTRALIA

                  If you are a resident of Australia, the following additional terms apply to you in compliance with the Australian Privacy Act 1988 (Cth) (the “Privacy Act”) and the Australian Privacy Principles (APPs). These terms prevail over any conflicting provisions in this Privacy Policy. We collect and hold personal information as described in Section 3 of this policy, which is reasonably necessary for our business functions and activities. This includes sensitive information, such as your location data (GPS coordinates), which is only collected with your consent when an alert is activated. To provide our Services, your personal information is transferred to and processed on servers located outside of Australia, primarily in the United States where Silent Beacon, LLC. is located. Our third-party service providers may also be in other countries. By providing us with your personal information and consenting to this Privacy Policy, you expressly consent to the disclosure of your information to these overseas recipients. Please be aware that when you consent to this overseas disclosure, Australian Privacy Principle 8.1 will not apply. This means that we are not required to take reasonable steps to ensure the overseas recipient does not breach the Australian Privacy Principles, and you may not be able to seek redress under the Privacy Act for any breach by the overseas recipient. You have the right to request access to the personal information we hold about you and to request its correction if it is inaccurate, out-of-date, or incomplete. You may exercise these rights at any time by sending a request to our privacy team at legal@silentbeacon.com. We will respond to your request within a reasonable period. We will not charge you for making a request, but we may charge a reasonable administrative fee for providing you with access to your information. We will not use or disclose your personal information for the purpose of direct marketing without your consent. If you have consented to receive marketing materials, you may opt-out at any time by using the unsubscribe mechanism in the communication or by contacting us directly. In the event of a data breach that is likely to result in serious harm to any individuals whose personal information is involved, we will comply with our obligations under the Notifiable Data Breaches (NDB) scheme. This includes notifying the Office of the Australian Information Commissioner (OAIC) and affected individuals as required by law. If you have a concern or complaint about how we have handled your personal information, please contact us first at legal@silentbeacon.com. We will investigate your complaint and attempt to resolve it with you. If you are not satisfied with our response, you have the right to lodge a complaint with the Office of the Australian Information Commissioner (OAIC), www.oaic.gov.au/privacy/privacy-complaints, phone: 1300 363 992.

12.9 FOR RESIDENTS OF BRAZIL

                  If you are a resident of Brazil, the following additional terms apply to you in compliance with the Brazilian General Data Protection Law (Lei Geral de Proteção de Dados Pessoais or “LGPD”). These terms prevail over any conflicting provisions in this Privacy Policy. The Data Controller for your personal data is Silent Beacon, LLC., located at 9200 Corporate Boulevard, Suite 250, Rockville, MD 20850, USA. We process your personal data based on the following legal grounds as established by the LGPD. The majority of our data processing is necessary to provide you with the Services you have requested, including creating your account, transmitting alerts, and providing customer support. For certain activities, such as sending marketing communications or collecting sensitive data, we will rely on your specific and informed consent. We may process some data based on our legitimate interests in improving our Services and for security purposes, provided that your fundamental rights and freedoms are not overridden. We will process data where necessary to comply with applicable laws, such as retaining financial records for tax purposes. To provide our Services, your personal data is transferred to and processed by Silent Beacon, LLC in the United States. By accepting this Privacy Policy and using our Services, you give your specific and highlighted consent for this international transfer of your personal data. We ensure the protection of your data through the adoption of standard contractual clauses and by requiring the same level of protection from our third-party service providers. The LGPD grants you, as the data subject, the following rights regarding your personal data: confirmation of the existence of the processing; access to your data; correction of incomplete, inaccurate, or out-of-date data; anonymization, blocking, or erasure of unnecessary or excessive data or data processed in noncompliance with the LGPD; portability of the data to another service or product provider, by means of an express request; erasure of personal data processed with your consent; information about public and private entities with which we have shared data; information about the possibility of denying consent and the consequences of such denial; and revocation of your consent. To exercise any of these rights, please contact our Data Protection Officer using the details provided below. In compliance with the LGPD, Silent Beacon has appointed a Data Protection Officer (Encarregado) who is responsible for overseeing our data protection strategy and compliance. You may contact our DPO with any questions or to exercise your rights, legal@silentbeacon.com, subject line: “LGPD Data Subject Request”.

12.10 FOR RESIDENTS OF FRANCE

                  If you are a resident of France, the provisions of the General Data Protection Regulation and the French Data Protection Act apply to the processing of your personal data. This section outlines specific information relevant to you. The Data Controller for your personal data is Silent Beacon, LLC, and you may contact our Data Protection Officer at legal@silentbeacon.com with any inquiries. We process your personal data based on several legal grounds. The processing is necessary for the performance of the contract between you and Silent Beacon to provide you with our Services. We also process data based on your explicit consent, particularly for the collection of sensitive data like your location during an alert. In some cases, we may process data to meet our legal obligations or for our legitimate interests, such as for service improvement and security, provided these interests do not override your fundamental rights and freedoms. Your personal data is transferred to and processed in the United States, which is outside of the European Union. We ensure the protection of your data during this transfer primarily through the use of Standard Contractual Clauses as approved by the European Commission, which contractually oblige us to uphold a level of data protection equivalent to that required within the European Union. You have the right to access, rectify, and erase your personal data, as well as the right to restrict or object to its processing and the right to data portability. Uniquely under French law, you also have the right to define directives concerning the fate of your personal data after your death. You may exercise any of these rights by contacting our Data Protection Officer. If you believe your rights have not been respected, you have the right to lodge a complaint with the French Data Protection Authority, the Commission Nationale de l’Informatique et des Libertés (CNIL), whose website is cnil.fr. We retain your personal data only for the time necessary to achieve the purposes for which it was collected. Retention periods are determined based on our contractual requirements, legal obligations, and the recommendations of the CNIL. For example, data used for marketing purposes is retained for a limited period after the last contact with you. Our websites and applications may use cookies and other similar trackers. In accordance with French law, your prior and explicit consent is required for the use of any non-essential trackers. You may withdraw your consent at any time, and refusing such trackers will not prevent you from accessing our Services.

12.11 FOR RESIDENTS OF HUNGARY

                  If you are a resident of Hungary, the processing of your personal data is governed by the General Data Protection Regulation, or GDPR, as well as Act CXII of 2011 on Informational Self-Determination and Freedom of Information. The Data Controller responsible for your personal data is Silent Beacon LLC. We process your information based on several legal grounds, including the necessity to perform our contract with you, your explicit consent for specific activities such as collecting sensitive location data during an alert, our legal obligations, and our legitimate interests in maintaining and improving our service, provided these do not override your rights. Your personal data is transferred to and processed in the United States. To ensure the lawful protection of your data during this transfer, we rely on Standard Contractual Clauses as approved by the European Commission. Under the GDPR, you have the right to request access to your data, to ask for its rectification or erasure, to object to or request the restriction of its processing, and to exercise your right to data portability. Should you have any concerns or wish to exercise your rights, you may contact our Data Protection Officer at legal@silentbeacon.com. If you are not satisfied with our response, you have the right to lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information, which is known as the NAIH.

12.12 FOR RESIDENTS OF INDIA

                  If you are a resident of India, the following additional terms apply to you in compliance with the Digital Personal Data Protection Act, 2023. These terms prevail over any conflicting provisions in this Privacy Policy. For the purposes of Indian law, Silent Beacon LLC is the Data Fiduciary responsible for your personal data. We will process your personal data only after obtaining your free, specific, and unambiguous consent for the purposes outlined in this policy. By creating an account and agreeing to this policy, you provide your consent for us to collect and process your personal data as described herein. You may withdraw your consent at any time by contacting our Grievance Officer, though this may result in the termination of your ability to use our Services. As a data principal under Indian law, you have the right to access a summary of your personal data being processed, the right to request the correction or erasure of your personal data, and the right to have your grievances redressed. You also have the right to nominate another individual to exercise these rights on your behalf in the event of your death or incapacity. To provide our Services, your personal data is transferred to and processed in the United States. Your consent to this policy includes your explicit consent for this transfer of your data outside of India. Our Services are not intended for use by children under the age of 18. By using our Services, you represent that you are at least 18 years old. If you have any questions or wish to exercise your rights, please contact our designated Grievance Officer for India at legal@silentbeacon.com. We will address your concerns in accordance with the timelines and procedures prescribed by law.

12.13 FOR RESIDENTS OF ISRAEL

                  If you are a resident of Israel, the processing of your personal information is subject to Israel’s Protection of Privacy Law, 5741-1981, and its regulations. The owner and manager of the database containing your information is Silent Beacon LLC. Your consent to this Privacy Policy constitutes your express agreement to the collection and use of your personal information as described. Furthermore, to provide our Services, your personal information will be transferred to, stored, and processed in the United States. Your agreement to these terms serves as your explicit consent to this international transfer of your data. We take appropriate measures to protect the security of the information in our database in accordance with applicable law. Under Israeli law, you have the right to review the personal information we hold about you. If you find that your information is incorrect, incomplete, unclear, or not up to date, you may request that we amend or delete it. To exercise these rights, please direct your request to our privacy team at legal@silentbeacon.com.

12.14 FOR RESIDENTS OF LATVIA

                  If you are a resident of Latvia, the processing of your personal data is governed by the General Data Protection Regulation. The Data Controller responsible for your personal data is Silent Beacon LLC. We process your information based on several legal grounds, including the necessity to perform our contract with you, your explicit consent for specific activities such as collecting sensitive location data during an alert, our legal obligations, and our legitimate interests in maintaining and improving our service, provided these do not override your rights. Your personal data is transferred to and processed in the United States. To ensure the lawful protection of your data during this transfer, we rely on Standard Contractual Clauses as approved by the European Commission. Under the GDPR, you have the right to request access to your data, to ask for its rectification or erasure, to object to or request the restriction of its processing, and to exercise your right to data portability. Should you have any concerns or wish to exercise your rights, you may contact our Data Protection Officer at legal@silentbeacon.com. If you are not satisfied with our response, you have the right to lodge a complaint with the Latvian Data State Inspectorate, which is known as the Datu valsts inspekcija.

12.15 FOR RESIDENTS OF THE NETHERLANDS

                  If you are a resident of the Netherlands, the processing of your personal data is governed by the General Data Protection Regulation. The Data Controller responsible for your personal data is Silent Beacon LLC. We process your information based on several legal grounds, including the necessity to perform our contract with you, your explicit consent for specific activities such as collecting sensitive location data during an alert, our legal obligations, and our legitimate interests in maintaining and improving our service, provided these do not override your rights. Your personal data is transferred to and processed in the United States. To ensure the lawful protection of your data during this transfer, we rely on Standard Contractual Clauses as approved by the European Commission. Under the GDPR, you have the right to request access to your data, to ask for its rectification or erasure, to object to or request the restriction of its processing, and to exercise your right to data portability. Should you have any concerns or wish to exercise your rights, you may contact our Data Protection Officer at legal@silentbeacon.com. If you are not satisfied with our response, you have the right to lodge a complaint with the Dutch Data Protection Authority, which is known as the Autoriteit Persoonsgegevens.

12.16 FOR RESIDENTS OF NEW ZEALAND

                  If you are a resident of New Zealand, the processing of your personal information is governed by the New Zealand Privacy Act 2020. For the purposes of this Act, Silent Beacon LLC is the agency responsible for your personal information. We collect your information for the purpose of providing you with our emergency alert Services. To provide these Services, your personal information is transferred to and processed in the United States and other countries where our third-party service providers are located. By using our Services and agreeing to this Privacy Policy, you authorize this disclosure of your personal information to overseas recipients. You understand that when your information is disclosed overseas, the recipient may not be required to protect your information in a way that provides safeguards comparable to those in the New Zealand Privacy Act. You have the right to request access to and correction of the personal information we hold about you. You may exercise these rights at any time by contacting our privacy team at legal@silentbeacon.com. In the event of a data breach that we believe has caused or is likely to cause serious harm, we will notify the Office of the Privacy Commissioner and affected individuals as required by law. If you have a privacy concern or complaint, please contact us first so we may resolve the issue. If you are not satisfied with our response, you may lodge a complaint with the New Zealand Office of the Privacy Commissioner.

12.17 FOR RESIDENTS OF POLAND

                  If you are a resident of Poland, the processing of your personal data is governed by the General Data Protection Regulation and relevant Polish data protection laws. The Data Controller responsible for your personal data is Silent Beacon LLC. We process your information based on several legal grounds, including the necessity to perform our contract with you, your explicit consent for specific activities such as collecting sensitive location data during an alert, our legal obligations, and our legitimate interests in maintaining and improving our service, provided these do not override your rights. Your personal data is transferred to and processed in the United States. To ensure the lawful protection of your data during this transfer, we rely on Standard Contractual Clauses as approved by the European Commission. Under the GDPR, you have the right to request access to your data, to ask for its rectification or erasure, to object to or request the restriction of its processing, and to exercise your right to data portability. Should you have any concerns or wish to exercise your rights, you may contact our Data Protection Officer at legal@silentbeacon.com. If you are not satisfied with our response, you have the right to lodge a complaint with the Polish Personal Data Protection Office, which is known as the Urząd Ochrony Danych Osobowych or UODO.

12.18 FOR RESIDENTS OF SOUTH AFRICA

                  If you are a resident of South Africa, the processing of your personal information is governed by the Protection of Personal Information Act, 4 of 2013. For the purposes of this Act, Silent Beacon LLC is the Responsible Party for your personal information. We process your information based on your consent, which you provide by using our Services, and as necessary for the proper performance of our contractual obligations to you. This includes the processing of special personal information, such as your precise geolocation data when an alert is activated, for which you provide specific consent. To provide our Services, your personal information is transferred to and processed in the United States. Your agreement to this policy and use of our Services constitutes your consent to this trans-border flow of your information. We are committed to ensuring that your information is protected with appropriate security safeguards. Under South African law, you have the right to request access to your personal information, as well as to request the correction or deletion of your information. To exercise these rights or to object to the processing of your personal information, please contact our designated Information Officer at legal@silentbeacon.com. If you have a complaint regarding our compliance with POPIA, you have the right to lodge it with the Information Regulator of South Africa.

12.19 FOR RESIDENTS OF THE UNITED KINGDOM

                  If you are a resident of the United Kingdom, the processing of your personal data is governed by the UK General Data Protection Regulation and the Data Protection Act 2018. The Data Controller responsible for your personal data is Silent Beacon LLC. We process your information based on several legal grounds, including the necessity to perform our contract with you, your explicit consent for specific activities such as collecting sensitive location data during an alert, our legal obligations, and our legitimate interests in maintaining and improving our service, provided these do not override your rights. Your personal data is transferred to and processed in the United States. To ensure the lawful protection of your data during this transfer, we rely on appropriate safeguards, such as the Standard Contractual Clauses as approved for use in the United Kingdom. Under UK data protection law, you have the right to request access to your data, to ask for its rectification or erasure, to object to or request the restriction of its processing, and to exercise your right to data portability. Should you have any concerns or wish to exercise your rights, you may contact our Data Protection Officer at legal@silentbeacon.com. If you are not satisfied with our response, you have the right to lodge a complaint with the UK’s Information Commissioner’s Office, which is known as the ICO.

12.20 FOR RESIDENTS OF VENEZUELA

                  If you are a resident of Venezuela, the processing of your personal data is governed by the rights to privacy and data protection established in the Constitution of the Bolivarian Republic of Venezuela. For the purposes of your data, the responsible party is Silent Beacon LLC. By using our Services and agreeing to this Privacy Policy, you provide your free and informed consent for us to collect, use, and process your personal data for the purposes described herein. To provide our Services, your personal data is transferred to and processed in the United States. Your consent to this policy includes your express consent for this international transfer of your data. In accordance with your constitutional rights, you have the right to access the information we hold about you and to know the purposes for which it is being processed. You also have the right to request the correction or deletion of your data if it is erroneous, incomplete, or has been processed in a way that unlawfully affects your rights. To exercise any of these rights, please direct your request to our privacy team at legal@silentbeacon.com.

13. ADDITIONAL INFORMATION

13.1 AUTOMATED DECISION-MAKING

We do not use automated decision-making, including profiling, in a way that produces legal effects concerning you or similarly significantly affects you.