Privacy Policy.
Secrecy Executive Protection LLC ("SEP," "we," "us," or "our") operates seprotection.com and the Secrecy Executive Training Academy (the "Services"). This Policy is a binding legal disclosure of how we handle your data. Read it in full before submitting any information to us.
Who we are & how to reach us
SEP is a Maryland limited liability company operating a state-certified firearms and security training academy. You may contact our privacy office at:
- Secrecy Executive Protection LLC
- 4061 Powder Mill Rd, Suite 500-8, Calverton, MD 20705
- Phone: 410-645-0722
- Email: info@seprotection.com
Information we collect
We collect only what we need to deliver training, process payments, comply with law, and communicate with you:
A. Information you give us directly
- Course registration: full legal name, date of birth (age verification), residential address, state of residence, phone number, email, emergency contact, prior firearms training, and any disclosures required by state licensing statutes.
- Account credentials: email + hashed password (bcrypt). We never store your password in readable form.
- Contact-form & consult submissions: name, email, phone, and the content of your inquiry.
- Payment information: processed exclusively by Stripe, Inc. under PCI-DSS. SEP never sees, stores, or logs full card numbers, CVVs, or bank credentials.
B. Information from Meta lead forms (Facebook & Instagram Lead Ads)
When you submit a Meta lead form (Facebook or Instagram), Meta Platforms, Inc. transmits to us the fields you authorized in that form — typically your name, phone number, email, city/state, and any campaign-specific responses. That data is imported into our secure customer-relationship system for training follow-up only. Meta's own handling of the data on their side is governed by the Meta Privacy Policy.
C. Information collected automatically
- IP address, browser type, device identifiers, referring page.
- Session cookies (authentication + shopping cart). We do not use third-party ad-tracking cookies on this site at this time.
- Server logs retained for a maximum of 90 days for security and fraud investigation.
How we use your information
- Deliver training: enroll you, schedule your class, issue certificates, and satisfy state-licensing recordkeeping obligations (Maryland, D.C., Utah, and other jurisdictions where we hold instructor credentials).
- Payments: pass your purchase to Stripe, reconcile transactions, and issue refunds under our Refund Policy.
- Phone communications: confirm class dates, deliver last-minute range changes, and respond to inquiries. Calls from our number (410-645-0722) may be recorded for training and quality purposes; you will be notified at the start of any recorded call.
- Email communications: transactional receipts, class reminders, certificate delivery, and (with your consent) course announcements.
- Follow-up sequences: we contact leads and past students by email, phone, and — where you have provided express written consent under the TCPA — SMS. You may opt out at any time (see §7).
- Legal & regulatory: respond to lawful requests from Maryland State Police, D.C. MPD, ATF, and other licensing or law-enforcement authorities.
Meta lead forms — express notice
By submitting a Meta lead form (on Facebook or Instagram) that offers training information, quote, or callback from SEP, you expressly authorize Secrecy Executive Protection LLC to contact you by phone, SMS, and email at the number and address you provided, for the purpose of scheduling training, sending course details, and following up on your inquiry. Message and data rates may apply. Reply STOPto any SMS to unsubscribe or email info@seprotection.com with "UNSUBSCRIBE" in the subject line.
Meta lead data is imported into our system only. We do not resell, license, or transfer lead-form data to any third-party marketer.
Follow-up communications & consent
- Email follow-ups: triggered by course registration, cart activity, or a lead-form submission. Every marketing email includes a one-click unsubscribe link, in compliance with the CAN-SPAM Act (15 U.S.C. § 7701 et seq.).
- SMS follow-ups: sent only where you have provided prior express written consent, as required by the Telephone Consumer Protection Act (TCPA, 47 U.S.C. § 227) and the Maryland Telephone Consumer Protection Act (Md. Code, Com. Law § 14-3201 et seq.). Consent is not a condition of purchase.
- Phone calls: we do not use auto-dialed or pre-recorded calls for marketing. Follow-up calls are placed by live staff during business hours (Mon–Sat, 9 AM – 7 PM ET).
- Do-not-contact: once you opt out, we scrub your contact from all marketing lists within 10 business days and retain a minimal suppression record to honor your opt-out going forward.
How we share your information
We do not sell your personal information. We share it only with:
- Stripe, Inc. — payment processing.
- Google Workspace / Gmail SMTP — transactional email delivery for receipts and confirmations.
- Meta Platforms, Inc. — solely as the source of lead forms you voluntarily submit to us.
- MongoDB Atlas (hosted, U.S. region) — encrypted database storage.
- Government & regulatory bodies — where required by subpoena, court order, or applicable state-licensing statute (e.g., Maryland State Police Handgun Wear & Carry Permit records; D.C. MPD Special Police Officer commission records).
- Our range partners & certified assistant instructors — only the roster information necessary to run your specific class.
Your rights & choices
- Access & correction: email info@seprotection.com to review or correct the personal data we hold on you.
- Deletion: you may request deletion at any time; we will honor it unless a Maryland or federal statute requires us to retain the record (e.g., firearms-training rosters, tax records).
- Marketing opt-out: unsubscribe from any email footer, reply STOP to any SMS, or contact us in writing.
- Do-Not-Track: we honor Global Privacy Control (GPC) signals for opt-out preferences where applicable.
Data security
- All traffic to seprotection.com is served over TLS 1.2+.
- Passwords are stored using bcrypt with per-user salting.
- Payment data is tokenized by Stripe; SEP servers never receive card numbers.
- Access to production databases is restricted to authorized personnel and logged.
- In the event of a breach that triggers notification obligations under the Maryland Personal Information Protection Act (Md. Code, Com. Law § 14-3501 et seq.), we will notify affected Maryland residents and the Office of the Maryland Attorney General as required.
Data retention
- Training records & certificates: retained for a minimum of 7 years to satisfy Maryland State Police and D.C. MPD recordkeeping obligations.
- Payment records: 7 years (federal tax retention).
- Marketing lists: until you unsubscribe, plus a permanent suppression record.
- Web server logs: maximum 90 days.
Children's information
The Services are not directed to children under 13. We do not knowingly collect personal information from children under 13. If we discover we have done so, we will delete it promptly. Firearms and security courses are further restricted by statute to adults (18+ or 21+ depending on the course).
Governing law & venue
This Policy is governed by the laws of the United States of America and the State of Maryland, without regard to conflict-of-laws principles. Any dispute arising from or relating to this Policy shall be brought exclusively in the state or federal courts located in Prince George's County, Maryland, and you consent to personal jurisdiction and venue in those courts.
Changes to this Policy
We may update this Policy from time to time. The "Effective" date at the top of the page will always reflect the current version. Material changes will be announced at the top of the page and — for registered account holders — by email.
