Effective date: October 4, 2026

1. Scope and Overview

This Privacy Policy describes how GoldnBear Inc., doing business as GoldnBear Security (referred to in this policy as GoldnBear, we, us or our), collects, uses, discloses and protects personal information when you visit https://goldnbearsecurity.com (the Site), submit a contact or quote request, call or email us using the details on the Site, or otherwise interact with us online. It also explains the choices available to you and the rights you have under California law, including the California Consumer Privacy Act as amended by the California Privacy Rights Act (together, the CCPA) and the California Online Privacy Protection Act (CalOPPA).

GoldnBear is a security guard company licensed as a Private Patrol Operator by the California Bureau of Security and Investigative Services and headquartered at 811 W 7th St, Los Angeles, CA 90017. This policy applies to personal information collected through the Site and through the online and telephone communications that begin on the Site. It does not apply to information we collect while performing security services under a written service agreement, which is governed by that agreement, and it does not apply to information collected by third-party websites that we link to.

We honor the rights described in this policy for all California residents, regardless of whether the CCPA's revenue or volume thresholds apply to us at any given time. By using the Site, you acknowledge that you have read this policy. If you do not agree with it, please do not use the Site or submit personal information to us.

This Privacy Policy was last updated on October 4, 2026, which is also its effective date.

2. Information We Collect

The Site is a marketing and informational website. We do not offer online accounts and we do not process payments online. Personal information means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular person or household. We collect the following categories of personal information:

Identifiers: your name, email address, telephone number and company name, and, when you use the Site, your IP address and a device or browser identifier.
Contact and customer records: the contact details above together with the notes we keep about your inquiry, your quote request and any follow-up conversations.
Commercial information: the service you are interested in, the location and size of the property or event, the coverage hours you are considering, the quote or proposal we provide, and whether you became a client.
Internet and other electronic network activity: the pages you view, the links and buttons you click (including click-to-call links), the website that referred you, the date and time of your visit, your browser type, operating system and screen size, and information collected through cookies and similar technologies as described in our Cookie Policy.
Approximate geolocation: a general location, such as a city or region, inferred from your IP address. We do not collect precise GPS location through the Site.
Professional or employment-related information: your job title, employer and role in a purchasing decision when you contact us on behalf of a business, or the information you provide if you inquire about working for us.
Audio, electronic and similar information: voicemail messages you leave for us and the content of emails, form messages and other communications you send to us.
Sensitive personal information: we do not request or knowingly collect sensitive personal information such as government identification numbers, financial account numbers, precise geolocation, racial or ethnic origin, religious beliefs, union membership, health information, sexual orientation, biometric data or the contents of private mail, email or text messages that are not directed to us. If you choose to include sensitive details in a free-text message, we use them only to respond to your request.

Sources of Personal Information

We collect personal information from the following sources:

Directly from you, when you complete the contact or quote form, call or text us using the numbers on the Site, email us, request an alternative format of Site content, or otherwise communicate with us.
Automatically from your browser or device when you use the Site, through server logs, cookies, local storage and analytics tools.
From service providers that help us operate the Site, such as our hosting, form processing, email delivery and analytics providers.
From publicly available sources and business directories, when we verify a business inquiry or research a prospective client's property.
From referral partners or existing clients who introduce you to us, where you have agreed to be contacted.

3. How We Use Personal Information

We use personal information for the business and commercial purposes listed below. We do not use personal information collected on the Site for automated decision-making that produces legal or similarly significant effects, and we do not use sensitive personal information to infer characteristics about you.

To respond to your inquiries, prepare quotes and proposals, schedule consultations and site assessments, and communicate with you about the services you requested.
To provide, maintain, secure and improve the Site, including diagnosing technical problems, detecting fraud, abuse or security incidents, and enforcing our Terms of Service.
To understand how visitors use the Site, and to measure ads and leads with the OpenAI advertising and measurement pixel and the Google Ads tag described in section 4.
To remember your preferences, such as accessibility settings and cookie choices, when you return to the Site.
To send you information about our services that we believe may interest you, where permitted by law. You may opt out of marketing communications at any time by using the unsubscribe link in an email, replying STOP to a text message, or contacting us at ceo@goldnbearsecurity.com.
To comply with legal obligations, including the licensing and record-keeping requirements that apply to Private Patrol Operators in California, and to respond to lawful requests from public authorities.
To establish, exercise or defend legal claims and to protect the rights, property and safety of GoldnBear, our clients, our personnel and the public.
To evaluate and complete a business transaction, such as a merger, acquisition or sale of assets, subject to the commitments in this policy.

The Site loads an OpenAI advertising and measurement pixel when a page loads, unless you opt out or your browser sends Global Privacy Control. The pixel is a script from bzrcdn.openai.com, pixel ID SvEb4UsvZMWB8AMGhZKDA3. It measures page visits. When a visitor submits a form or taps a phone number link, our code sends a lead event named lead_created with a type of customer_action. We use those events to measure ads and leads. The lead event our code sends does not include the name, email address, phone number, or message from the form. The Site also loads a Google Ads tag under the same conditions: the Google tag script from www.googletagmanager.com, configured with the Google Ads ID AW-799391813. It measures page visits for Google Ads. Our code does not send it a lead event or anything typed into a form. These uses may count as “sharing” of personal information for cross-context behavioral advertising under the CCPA. You can stop the pixel and the tag for this browser at https://goldnbearsecurity.com/your-privacy-choices. We also disclose personal information in the following circumstances:

Service providers and contractors: companies that host the Site and its infrastructure (such as Vercel), process form submissions, deliver email, provide telephone and voicemail services, provide customer relationship management or scheduling tools, and provide professional services such as accounting, insurance and legal advice. These providers are bound by contract to use personal information only to perform services for us and to protect it.
Advertising measurement: OpenAI, through the pixel described above, receives the page-visit and lead events that pixel sends, and Google, through the Google Ads tag described above, receives the page-visit data that tag sends, so we can measure ads and leads. Those disclosures may be sharing under the CCPA. Opt out at https://goldnbearsecurity.com/your-privacy-choices.
Legal compliance and protection: government agencies, regulators (including the California Bureau of Security and Investigative Services), courts, law enforcement or other parties when required by law, subpoena or court order, or when we believe in good faith that disclosure is necessary to protect rights, property or safety, to investigate fraud or security incidents, or to enforce our policies and agreements.
Business transfers: a buyer, successor or other party in connection with a merger, acquisition, financing, reorganization, bankruptcy or sale of all or part of our business. We will require any successor to honor the commitments in this policy for personal information collected before the transfer.
With your direction or consent: when you ask us to share information with a third party, such as a property manager, landlord or event organizer who is involved in your request.
Affiliates: entities under common ownership or control with GoldnBear Inc., which must follow this policy.

Categories Disclosed for a Business Purpose in the Preceding 12 Months

Identifiers and contact information, disclosed to hosting, form processing, email, telephone, analytics and customer relationship management providers.
Commercial information, disclosed to form processing, email and customer relationship management providers.
Internet and other electronic network activity, disclosed to hosting and security providers, and shared with OpenAI and Google through the advertising pixel and tag unless you opt out or send Global Privacy Control.
Approximate geolocation, disclosed to hosting, security and analytics providers.
Professional or employment-related information, disclosed to email and customer relationship management providers.
Audio, electronic and similar information, disclosed to telephone, voicemail and email providers.

5. Cookies and Tracking Technologies

The Site uses cookies and browser storage. Strictly necessary items keep the Site secure and functional. Preference items remember your accessibility settings (such as text size, contrast, font and reduced motion) and your Do Not Sell or Share choice. Those preference items are stored in your browser under the name gnb-consent (local storage and a first-party cookie) and are not the advertising pixel or tag.

The Site also loads the OpenAI advertising and measurement pixel and the Google Ads tag described in section 4 when a page loads. They are used to measure ads and leads, and that may count as sharing for cross-context behavioral advertising under California law. They do not load if you opt out at https://goldnbearsecurity.com/your-privacy-choices or if your browser sends Global Privacy Control. The Site code does not currently load Google Analytics. For the cookies and storage items we set, and how to opt out, see our Cookie Policy at https://goldnbearsecurity.com/cookie-policy.

6. Notice at Collection for California Residents

The CCPA requires us to tell you, at or before the point of collection, the categories of personal information we collect, the purposes for which we use each category, whether we sell or share it, and how long we keep it. The following list serves as our Notice at Collection. Retention periods are maximums; we delete or de-identify information sooner when it is no longer needed for the stated purpose, unless a longer period is required by law or by a pending legal matter.

Identifiers. Examples: name, email address, telephone number, company name, IP address, device identifier. Purposes: respond to inquiries and quote requests, communicate with you, secure and operate the Site, comply with law, and, for network identifiers, measure ads and leads. Retention: up to three years after our last interaction with you, or the life of a client relationship plus the period required by law. Sold or shared: the name, email, phone, and company you submit are not included in the lead event our code sends. An IP address or similar network identifier may be shared with OpenAI and Google when the advertising pixel and tag load. That may be sharing under the CCPA. Opt out at https://goldnbearsecurity.com/your-privacy-choices.
Customer records (California Civil Code section 1798.80). Examples: name, address, telephone number, notes of conversations. Purposes: respond to inquiries, prepare quotes, maintain business records. Retention: up to three years after our last interaction, or longer for records of actual clients as required by BSIS regulations and tax law. Sold or shared: No.
Commercial information. Examples: services requested, property or event details, quotes, service history. Purposes: prepare and follow up on proposals, manage client relationships, analyze demand for our services. Retention: up to three years after our last interaction, or the life of the client relationship plus the period required by law. Sold or shared: No.
Internet or other electronic network activity. Examples: pages viewed, clicks, referring site, browser and device information, cookie data, and events from the OpenAI advertising pixel (a page visit when the script loads, and a lead event named lead_created after a visitor submits a form or taps a phone number link) and from the Google Ads tag (a page visit when the script loads). Purposes: operate, secure and improve the Site, remember preferences, measure ads and leads. Retention: server and security logs up to 90 days; the gnb-consent opt-out cookie lasts up to 12 months and the local storage copy lasts until you clear it. We do not set the retention period for events the pixel sends to OpenAI or the tag sends to Google. Sold or shared: this category may be shared with OpenAI and Google for cross-context behavioral advertising. Opt out at https://goldnbearsecurity.com/your-privacy-choices. Global Privacy Control also stops the pixel and the tag.
Approximate geolocation. Examples: city or region inferred from your IP address. Purposes: security, fraud prevention, understanding which regions we serve. Retention: same as internet activity above. Sold or shared: No.
Professional or employment-related information. Examples: job title, employer, role in a purchasing decision, employment inquiry details. Purposes: respond to business inquiries, evaluate employment interest. Retention: up to three years after our last interaction; applicant records for the period required by employment law. Sold or shared: No.
Audio, electronic or similar information. Examples: voicemail messages, email and form message content. Purposes: respond to your request, keep a record of our communications. Retention: up to three years after our last interaction. Sold or shared: No.
Sensitive personal information. Examples: none requested; only details you voluntarily include in a message or call. Purposes: respond to your request only. Retention: deleted or redacted when no longer needed to respond, and in any case within the periods above. Sold or shared: No. We do not use sensitive personal information to infer characteristics about you.
Protected classification characteristics, biometric information, education information and inferences drawn from personal information: not collected through the Site.

7. Your California Privacy Rights

If you are a California resident, you have the following rights with respect to personal information we hold about you. These rights are subject to certain exceptions under the CCPA, and we will explain any exception we rely on when we respond to your request.

Right to know and access: you may request that we disclose the categories of personal information we have collected about you, the categories of sources, the business or commercial purposes for collecting it, the categories of third parties to whom we disclosed it, and the specific pieces of personal information we hold. You may make this request up to twice in a 12-month period. We will provide the information in a portable and readily usable format, and on request we will include information collected before the preceding 12-month period unless doing so would be impossible or would involve disproportionate effort.
Right to delete: you may request that we delete personal information we collected from you, subject to exceptions such as completing a transaction you requested, detecting security incidents, complying with a legal obligation, or internal uses that are reasonably aligned with your expectations. We will also direct our service providers and contractors to delete the information.
Right to correct: you may request that we correct inaccurate personal information we maintain about you. We may ask you for documentation that supports the correction.
Right to opt out of sale or sharing: you may opt out of sharing through the OpenAI advertising and measurement pixel and the Google Ads tag. Use Do Not Sell or Share My Personal Information at https://goldnbearsecurity.com/your-privacy-choices to stop both on this browser. We also honor Global Privacy Control by not loading them. You may email, call, or write to us to apply an opt-out to information you already submitted, such as a quote request.
Right to limit the use of sensitive personal information: we do not use or disclose sensitive personal information for purposes other than those permitted by the CCPA, so this right does not currently require any action. You may still submit a request through our Your Privacy Choices page.
Right to non-discrimination: we will not deny you services, charge you a different price, provide a different level or quality of service, or retaliate against you for exercising any of these rights.
Right to notice: you have the right to receive this policy and our Notice at Collection before or at the time we collect personal information from you.

8. How to Submit a Request and What Happens Next

You or your authorized agent may submit a request to know, delete or correct personal information by any of the following methods. We do not require you to create an account to make a request, and we do not charge a fee to respond unless a request is manifestly unfounded or excessive, in which case we will explain why before charging a reasonable fee or declining to act.

Email: send your request to ceo@goldnbearsecurity.com with the subject line California Privacy Request.
Telephone: call us at (213) 864-7178 and tell the person who answers that you are making a California privacy request.
Mail: write to GoldnBear Inc., Attention: Privacy, 811 W 7th St, Los Angeles, CA 90017.
Contact form: use the form on the Site and state in the message that you are making a privacy request.

Verification

To protect your information, we must verify your identity before fulfilling a request to know, delete or correct. We will ask you to provide at least two pieces of personal information that we already hold, such as the email address and telephone number you used when you contacted us, and we will match them against our records. For requests to access specific pieces of information, or to delete information that is sensitive in nature, we may ask for a third data point or a signed declaration under penalty of perjury. We use the information you provide only to verify your identity and to process the request, and we delete it once the request is complete.

If we cannot verify your identity to the required degree of certainty, we will tell you and explain why. Requests to opt out of sale or sharing and requests to limit the use of sensitive personal information do not require verification, although we may ask for enough information to locate you in our records.

Timing

We will confirm receipt of your request within 10 business days and will respond within 45 calendar days of receiving it. If we need more time, up to an additional 45 days, we will tell you why and give you the new deadline in writing before the first 45 days end. Opt-out and limitation requests are processed within 15 business days. Our response will cover the 12-month period preceding your request unless you ask for a longer period.

Authorized Agents

You may designate an authorized agent to make a request on your behalf. The agent must provide your signed, written permission, or a copy of a power of attorney that is valid under the California Probate Code. We may also ask you to verify your own identity directly with us, or to confirm that you gave the agent permission. Requests from agents that do not include this proof may be denied.

Appeals

If we deny your request in whole or in part, you may ask us to reconsider by replying to our response or by emailing ceo@goldnbearsecurity.com with the subject line Privacy Request Appeal. A member of our management team who was not involved in the original decision will review the appeal and respond in writing within 45 days. You also have the right to file a complaint with the California Privacy Protection Agency at cppa.ca.gov or with the California Attorney General at oag.ca.gov/privacy.

Metrics

We keep records of the consumer requests we receive and how we responded to them, as required by the CCPA regulations. Summary metrics for the previous calendar year, including the number of requests to know, delete, correct, opt out and limit that we received, granted in whole or in part, and denied, and the median number of days it took us to respond, are available on request by emailing ceo@goldnbearsecurity.com.

9. California Shine the Light

California Civil Code section 1798.83, known as the Shine the Light law, allows California residents to request certain information about whether a business has disclosed personal information to third parties for those third parties' own direct marketing purposes. GoldnBear does not disclose personal information to third parties for their own direct marketing purposes.

If you would like to confirm this for a particular calendar year, you may send a request to ceo@goldnbearsecurity.com with the subject line Shine the Light Request, or write to GoldnBear Inc., Attention: Shine the Light Request, 811 W 7th St, Los Angeles, CA 90017. We will respond within 30 days. You may make one request per calendar year, and requests must include enough information for us to locate you in our records.

10. Do Not Track and Global Privacy Control

Some browsers send a Do Not Track (DNT) signal. There is no common industry standard for how to interpret DNT signals, and the Site does not respond to DNT differently from a browser that does not send it. This disclosure is made in accordance with CalOPPA.

The Site does recognize the Global Privacy Control (GPC) signal. When your browser or a browser extension sends a GPC signal, we treat it as a request to opt out of sale or sharing and we do not load the OpenAI advertising and measurement pixel or the Google Ads tag. You can learn more about enabling GPC at globalprivacycontrol.org. If you have also contacted us directly, you may email ceo@goldnbearsecurity.com to apply your opt-out to information we hold about you outside of this browser.

11. Data Retention

We retain personal information only as long as reasonably necessary to fulfill the purposes described in this policy, to comply with legal, regulatory, tax, accounting and licensing obligations, to resolve disputes and to enforce our agreements. The specific retention periods for each category are listed in the Notice at Collection above. In deciding how long to keep information we consider the nature and sensitivity of the information, the purposes for which we collected it, the potential risk of harm from unauthorized use or disclosure, and applicable legal requirements, including the record-retention rules that apply to California Private Patrol Operators.

When information is no longer needed we delete it, de-identify it or aggregate it so that it can no longer be associated with you. Information that is stored on backup media is overwritten in the ordinary course of our backup rotation. Where we cannot delete information immediately for technical reasons, we isolate it from further use until deletion is possible. Records that are subject to a litigation hold or a regulatory inquiry are kept until the matter is resolved.

12. Security

We use reasonable administrative, technical and physical safeguards designed to protect personal information against unauthorized access, use, alteration or destruction, as required by California Civil Code section 1798.81.5. These include encrypting Site traffic with HTTPS, hosting the Site with a provider that maintains industry-standard security certifications, limiting access to inquiry data to personnel who need it, using strong authentication on our email and business systems, and training our staff on confidentiality.

No website, network or method of electronic storage is completely secure, and we cannot guarantee absolute security. Please do not include highly sensitive information, such as Social Security numbers, financial account numbers, passwords or alarm codes, in the contact form or in unencrypted email. If we learn of a security incident that affects your personal information, we will notify you and the appropriate authorities as required by California Civil Code section 1798.82 and other applicable law.

13. Children's Privacy

The Site is intended for adults and businesses seeking security services. It is not directed to children, and we do not knowingly collect personal information from anyone under 16 years of age. If you believe a child under 16 has provided personal information to us through the Site, please contact us at ceo@goldnbearsecurity.com and we will delete it promptly. Information about minors that we receive in the course of providing security services is handled under the applicable service agreement and the law that governs those services.

14. Third-Party Websites and Services

The Site contains links to third-party websites and services, such as map providers, review platforms, social media pages and the websites of clients and partners. Those sites are governed by their own privacy policies, and we are not responsible for their content or practices. We encourage you to review the privacy policy of any site you visit from ours. Any information you share with a third-party site, including a review platform or social network, is subject to that party's policies.

The OpenAI pixel runs under OpenAI's own practices when it loads. Our code loads the script from bzrcdn.openai.com and sends the lead event described in section 4. The Google Ads tag runs under Google's own practices when it loads. Our code loads the Google tag script from www.googletagmanager.com with the Google Ads ID described in section 4. The Site code does not currently include Google Analytics.

15. Changes to This Privacy Policy

We review this policy at least once every 12 months and update it when our practices, the Site or applicable law change. When we make changes, we will revise the date at the top of this page. If a change materially affects how we use personal information we have already collected, we will provide additional notice, such as a notice on the Site homepage or an email to the address you gave us, and where required by law we will seek your consent before applying the change to previously collected information. Your continued use of the Site after a revised policy is posted means you accept the updated policy.

16. Contact Us

If you have questions about this Privacy Policy, want to exercise your privacy rights, or need this policy in an alternative format such as large print, please contact us using any of the methods below. We aim to answer general privacy questions within 5 business days.

Email: ceo@goldnbearsecurity.com
Telephone: (213) 864-7178
Mail: GoldnBear Inc., Attention: Privacy, 811 W 7th St, Los Angeles, CA 90017
Website: https://goldnbearsecurity.com

Privacy Policy