Privacy Policy

Effective Date: August 16, 2026
Last Updated: August 16, 2026

The Simon Agency, LLC (“The Simon Agency,” “TSA,” “we,” “our,” or “us”) provides risk advisory, protective services, secure transportation, investigations and due diligence, crisis and incident support, training, staffing and workforce coordination, and related operational services in the United States and internationally. We also operate websites, portals, applications, forms, and communications systems, including the Operational Readiness Network (“ORN”) (collectively, the “Services”).

This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information in connection with the Services. It applies to website visitors, prospective and current clients, client representatives, protected persons and travelers, event participants, vendors, service partners, job applicants, employees, contractors, ORN members, training participants, and other individuals whose personal information we process.

This Privacy Policy does not replace a more specific notice, agreement, authorization, or disclosure that applies to a particular service or relationship. For example, applicants and workforce members may receive separate background-screening, employment, monitoring, or jurisdiction-specific privacy notices. If a specific notice conflicts with this Privacy Policy, the more specific notice controls for the information and activity it addresses.

By using the Services or providing personal information to us, you acknowledge the practices described in this Privacy Policy. Acknowledging this Privacy Policy does not constitute consent to receive text messages, authorize a background investigation, or provide any other consent that applicable law requires us to obtain separately.

1. Who Is Responsible for Your Information

Unless another notice identifies a different entity, The Simon Agency, LLC is responsible for the personal information covered by this Privacy Policy.

Our contact information is:

The Simon Agency, LLC
10845 Griffith Peak Drive, Suite 200
Las Vegas, Nevada 89135
United States
Email: info@thesimon.agency
Website: https://thesimon.agency

2. Personal Information We Collect

The personal information we collect depends on the Services involved and your relationship with us. During the preceding 12 months, where applicable, we may have collected the following categories of information.

A. Identifiers and Contact Information

This may include your name, preferred name, mailing address, email address, telephone number, date of birth, signature, photograph, account username, internal personnel number, government-issued identifiers, passport or travel-document information, professional-license numbers, and similar identifiers.

B. Client, Assignment, and Service Information

This may include service requests, contracts, points of contact, assignment details, schedules, locations, itineraries, travel arrangements, passenger or protected-person information, emergency contacts, access instructions, post orders, preferences, risk considerations, incident information, reports, and communications relating to the Services.

C. Applicant, Workforce, and Professional Information

This may include employment and contractor history, education, training, military or law-enforcement experience, qualifications, certifications, licenses, guard cards, permits, references, availability, scheduling information, work eligibility, assignment history, performance information, policy acknowledgments, disciplinary information, timekeeping, payroll-related information, and information provided through applicant, employee, contractor, or ORN personnel systems.

D. Screening, Compliance, and Investigative Information

Where permitted by law and relevant to the relationship or Services, this may include identity-verification information, criminal-history information, driving records, licensing and credential status, sanctions or watchlist results, professional and civil records, public-record information, due-diligence findings, reference information, social-media or open-source information, and information developed during lawful investigations, threat assessments, or protective-intelligence activities.

Separate notices, authorizations, and legal requirements may apply to employment background reports, consumer reports, investigative consumer reports, medical information, and other regulated screening information.

E. Financial and Transaction Information

This may include billing contacts, invoices, payment status, bank or payment-account details, tax information, payroll information, expense and reimbursement records, receipts, and transaction history. Payment-card information may be collected and processed directly by a payment processor rather than stored by TSA.

F. Health, Safety, and Emergency Information

Where relevant and legally permitted, this may include fitness-for-duty information, workplace injury information, accommodation-related information, emergency medical information, allergies or accessibility needs, incident details, and other information necessary to protect health and safety, arrange services, comply with law, or respond to an emergency. We do not request more health information than reasonably necessary for the applicable purpose.

G. Location, Transportation, and Telematics Information

When necessary to provide protective, transportation, logistics, workforce, or safety services, we may collect pickup and destination information, assignment locations, real-time or historical vehicle location, mileage, routes, travel status, device location where enabled, and vehicle or fleet telematics. The availability and precision of this information depend on the service, device settings, vehicle systems, and permissions involved.

H. Communications and Messaging Information

This may include emails, telephone numbers, call and message metadata, text-message content, form submissions, support requests, availability responses, operational acknowledgments, message delivery status, opt-in and opt-out records, and other communications with TSA, ORN, our personnel, or authorized service providers.

I. Audio, Video, Photographs, and Security Records

Where disclosed, authorized, or permitted by law, we may collect photographs, identification images, video, audio, access-control records, vehicle-camera recordings, security-camera recordings, body-worn or operational recordings, and related metadata. These records may be used for safety, security, training, quality assurance, incident review, legal compliance, claims, and investigations. Additional notices may apply at particular facilities, vehicles, events, or assignments.

J. Device, Internet, and Usage Information

This may include IP address, browser type, device type, operating system, unique device or session identifiers, language, approximate location derived from IP address, pages viewed, referring pages, links selected, access times, form activity, error logs, and interactions with our websites, portals, and applications.

K. Sensitive Personal Information

Some information described above may be considered sensitive under applicable law, including government identifiers, precise location, account credentials, financial information, health information, racial or ethnic information voluntarily provided for lawful reporting, criminal-history information, and the contents of certain private communications. We use sensitive personal information only for legitimate and reasonably necessary purposes, including providing requested services, workforce administration, licensing and compliance, safety and security, fraud prevention, legal obligations, and protecting individuals and property. We do not use sensitive personal information to infer characteristics for advertising purposes.

L. Inferences and Assessments

We may develop operational assessments, risk ratings, qualifications, assignment suitability information, or other inferences based on information lawfully collected. These assessments support human decision-making and are not necessarily determinative by themselves.

3. Sources of Personal Information

We may collect personal information from:

• You directly, including through forms, applications, contracts, communications, interviews, and your use of the Services;
• Clients, employers, organizational sponsors, family offices, authorized representatives, and persons arranging Services on your behalf;
• Applicants, employees, contractors, references, training providers, licensing authorities, and professional organizations;
• ORN members, operational partners, subcontractors, vendors, and service providers;
• Public records, government databases, courts, regulatory and licensing bodies, sanctions and watchlists, news sources, websites, social media, and other lawful open sources;
• Screening, identity-verification, fraud-prevention, insurance, travel, transportation, payroll, payment, and technology providers;
• Devices, vehicles, security systems, cookies, analytics tools, portals, and applications; and
• Law-enforcement agencies, emergency services, witnesses, complainants, subjects, and other persons involved in an incident, investigation, threat assessment, or legal matter.

In some investigative, protective-intelligence, due-diligence, fraud-prevention, or security matters, we may collect information without contacting the individual when notice would be impractical, compromise the purpose of the work, create a safety risk, violate a legal or contractual restriction, or is otherwise not required by law.

4. How We Use Personal Information

We may use personal information to:

• Respond to inquiries, prepare proposals, establish client relationships, and provide the Services;
• Plan, staff, coordinate, manage, document, and evaluate assignments and operations;
• Provide executive and dignitary protection, secure transportation, event and residential security, risk advisory, protective intelligence, investigations, due diligence, crisis support, training, and related services;
• Create and administer accounts, personnel records, applicant records, ORN profiles, schedules, availability requests, assignments, and communications;
• Verify identity, qualifications, licensing, credentials, work eligibility, and compliance with assignment or legal requirements;
• Conduct lawful screening, investigations, threat assessments, due diligence, incident reviews, and fraud-prevention activities;
• Process contracts, invoices, payments, payroll, reimbursements, expenses, and financial records;
• Communicate about services, assignments, schedules, incidents, accounts, training, safety, and administrative matters;
• Send marketing communications where permitted by law and consistent with your preferences and any required consent;
• Protect the safety, security, rights, property, and operations of TSA, our clients, protected persons, workforce members, business partners, and the public;
• Monitor and improve service quality, training, readiness, system performance, and user experience;
• Authenticate users, protect accounts, maintain cybersecurity, detect misuse, and prevent fraud;
• Establish, exercise, or defend legal claims; respond to legal process; cooperate with lawful government requests; and satisfy licensing, insurance, audit, contractual, and regulatory obligations;
• Create aggregated or de-identified information for analytics, planning, reporting, and service improvement; and
• Carry out other purposes disclosed when information is collected or authorized by the individual.

We may use automation and artificial-intelligence-assisted tools to organize information, identify patterns, summarize records, support security or operational analysis, and assist personnel. We apply human oversight where appropriate and do not rely solely on automated processing to make a decision that produces legal or similarly significant effects unless permitted by law and accompanied by required notice and safeguards.

5. Legal Bases for Processing Where Applicable

Where European Economic Area, United Kingdom, Swiss, or similar data-protection law applies, we process personal information under one or more of the following legal bases:

• Contract: processing necessary to enter into or perform a contract or provide requested Services;
• Legitimate interests: processing necessary for safety, security, service delivery, business administration, fraud prevention, network and information security, investigations, legal claims, and improving the Services, balanced against the individual’s rights;
• Legal obligation: processing necessary to comply with applicable law, regulation, licensing, court orders, or other legal requirements;
• Vital interests: processing necessary to protect life, health, or physical safety;
• Consent: processing based on freely given consent when consent is appropriate or required; and
• Substantial public interest or legal claims: processing of certain sensitive information where permitted for safety, employment, legal, regulatory, or claims-related purposes.

When we rely on consent, you may withdraw it at any time, but withdrawal does not affect processing that occurred before withdrawal or processing supported by another lawful basis.

6. How We Disclose Personal Information

We may disclose personal information as reasonably necessary to the following categories of recipients.

A. Service Providers and Processors

We may disclose information to providers that support hosting, cloud storage, cybersecurity, communications, SMS delivery, email, collaboration, customer and workforce management, applicant tracking, background screening, identity verification, payroll, scheduling, payment processing, accounting, fleet management, analytics, training, travel, insurance, document management, and professional services. These providers are authorized to process information only for the services they perform for us, subject to appropriate contractual or legal restrictions.

B. Clients and Authorized Representatives

We may disclose information to a client, employer, organizational sponsor, family office, travel coordinator, or authorized representative when necessary to arrange or provide Services, confirm qualifications, coordinate an assignment, address an incident, provide reports, manage billing, or satisfy contractual obligations. We limit disclosures to information reasonably relevant to the relationship and applicable requirements.

C. ORN Members and Operational Partners

We may disclose limited professional, contact, qualification, scheduling, location, or assignment information to ORN members, subcontractors, vendors, transportation providers, medical providers, security partners, and other operational resources when necessary to evaluate, staff, coordinate, or perform an assignment. Such disclosures may be subject to confidentiality, data-protection, contractual, licensing, and need-to-know restrictions.

D. Professional Advisers and Insurers

We may disclose information to attorneys, accountants, auditors, consultants, insurers, brokers, claims administrators, investigators, and other professional advisers for legal, financial, compliance, risk-management, or claims purposes.

E. Government, Regulatory, and Safety Recipients

We may disclose information to courts, regulators, licensing authorities, law-enforcement agencies, emergency services, government entities, or other parties when required by law or when we reasonably believe disclosure is necessary to protect safety, prevent harm, investigate wrongdoing, enforce agreements, or protect legal rights.

F. Business Transactions

We may disclose information in connection with an actual or proposed merger, acquisition, financing, restructuring, sale of assets, or similar transaction, subject to appropriate confidentiality and legal protections.

G. At Your Direction or With Your Authorization

We may disclose information when you request, direct, or authorize us to do so.

We do not sell personal information for monetary consideration. If a disclosure involving analytics or advertising technology is treated as a “sale,” “sharing,” or targeted advertising under applicable law, we will provide any legally required notice and choice. The mobile-messaging restrictions in Section 8 apply regardless of any broader disclosure described in this section.

7. Cookies, Analytics, and Online Technologies

We may use cookies, pixels, local storage, log files, and similar technologies to operate our websites and applications, remember preferences, secure accounts, understand usage, diagnose problems, measure performance, and improve the Services.

These technologies may include:

• Strictly necessary technologies required for security, authentication, forms, and core website functions;
• Preference technologies that remember settings and choices;
• Analytics technologies that help us understand traffic and use of the Services; and
• Advertising technologies, if used, that help measure campaigns or deliver relevant communications, subject to legally required notice and choice.

You may control cookies through browser settings and any cookie-preference tools we make available. Blocking certain technologies may affect site functionality. Where required by law, we honor applicable opt-out preference signals, such as Global Privacy Control, for the browser or device sending the signal.

8. Mobile Messaging and SMS Privacy

The Simon Agency offers eligible individuals the opportunity to receive recurring, nonmarketing workforce and assignment-related text messages through ORN. Messages may include assignment opportunities, availability requests, assignment confirmations, schedule changes, reporting instructions, reminders, and other operational notices. The ORN SMS program uses the telephone number 571-680-1991.

Separate and Voluntary Consent

Consent to receive ORN text messages is collected separately through an affirmative opt-in process. The SMS-consent control is not selected by default. Acceptance of this Privacy Policy or another agreement, use of the Services, employment with TSA, contractor engagement, ORN membership, or eligibility for an assignment does not by itself constitute consent to receive text messages. SMS enrollment is voluntary and is not a condition of employment, contractor engagement, ORN membership, or assignment eligibility.

Information Collected and Used

When you enroll, we may collect your mobile telephone number, consent status, enrollment date and source, the version of the disclosure presented to you, message-delivery information, responses, HELP requests, and opt-out activity. We use this information to deliver workforce and assignment notifications, maintain consent records, administer messaging preferences, provide support, and operate the ORN messaging program.

Mobile Information Is Not Shared for Marketing

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text-messaging originator opt-in data and consent will not be sold, rented, transferred, or shared with third parties for their independent use. We may provide limited mobile information to service providers solely to operate and deliver the messaging program, process consent and opt-out requests, maintain security, or comply with law. Those providers may not use the information for their own marketing or promotional purposes.

Frequency, Charges, Help, and Opt-Out

Message frequency varies based on assignment and operational activity. Message and data rates may apply. Reply STOP to any ORN message to opt out. After the request is processed, you will receive a confirmation and no further messages will be sent through the ORN campaign unless you enroll again. Reply HELP for assistance or contact TSA Operations at 571-680-1991.

Individuals who do not enroll in ORN text messaging, or who later opt out, may use other communication methods authorized and made available by TSA. For additional program terms, see our SMS Terms and Conditions.

9. Security, Operational, and Investigative Information

Some TSA Services inherently involve confidential, security-sensitive, privileged, or legally restricted information. We apply access controls and disclose this information only on a need-to-know basis consistent with law, safety requirements, client obligations, and legitimate operational purposes.

Nothing in this Privacy Policy requires TSA to disclose information when disclosure would reveal confidential security procedures, compromise a protective operation or investigation, endanger an individual, violate a legal or contractual duty, interfere with law enforcement, reveal privileged material, or infringe the rights of another person. Any limitation on an individual request will be applied only as permitted by applicable law.

10. International Operations and Data Transfers

TSA is based in the United States and may provide or coordinate Services in multiple countries. Personal information may be accessed, processed, or stored in the United States and other countries where TSA, our clients, ORN members, operational partners, or service providers conduct business.

Privacy and data-protection laws in those countries may differ from the laws where you reside. Where applicable law requires safeguards for cross-border transfers, we use lawful transfer mechanisms and appropriate contractual, organizational, or technical protections. These may include adequacy decisions, approved contractual clauses, or other legally recognized mechanisms.

11. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including to provide Services, manage client and workforce relationships, preserve operational and incident records, maintain consent and opt-out records, satisfy licensing and insurance requirements, resolve disputes, enforce agreements, establish or defend legal claims, and comply with legal, tax, accounting, contractual, and regulatory obligations.

Retention periods vary depending on the nature of the information, the relationship, applicable limitation periods, legal requirements, client obligations, safety considerations, and whether the information is relevant to an investigation, incident, claim, litigation hold, or regulatory matter. When information is no longer required, we may delete, anonymize, or securely isolate it as appropriate.

12. Information Security

We maintain reasonable administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, use, alteration, loss, or disclosure. Measures may include access controls, authentication, encryption, monitoring, vendor review, confidentiality requirements, secure transmission, incident-response procedures, and workforce training.

No system or transmission method is completely secure, and we cannot guarantee absolute security. If a security incident affects personal information, we will investigate and provide legally required notifications within the time and manner required by applicable law.

13. Your Privacy Rights and Choices

Depending on your location, relationship with TSA, and applicable law, you may have the right to:

• Confirm whether we process your personal information;
• Access or obtain a copy of your personal information;
• Correct inaccurate personal information;
• Request deletion of personal information;
• Obtain certain information in a portable format;
• Restrict or object to certain processing;
• Withdraw consent where processing is based on consent;
• Opt out of certain sales, sharing, targeted advertising, or qualifying profiling;
• Limit certain uses of sensitive personal information;
• Appeal a decision concerning a privacy request; and
• Lodge a complaint with an applicable privacy or data-protection authority.

These rights are subject to legal exceptions and may differ for applicants, employees, contractors, business contacts, investigative subjects, and other individuals. We may need to verify your identity and authority before acting on a request. We will not unlawfully discriminate or retaliate against you for exercising an applicable privacy right.

To submit a request, email info@thesimon.agency with the subject line Privacy Request, or write to the address in Section 1. Describe the right you wish to exercise and the information or relationship involved. An authorized agent may submit a request where permitted by law, but we may require evidence of authorization and identity verification.

If we deny a request, you may appeal where applicable by emailing info@thesimon.agency with the subject line Privacy Appeal and describing the decision you want reviewed.

Email Communications

You may unsubscribe from promotional emails by using the unsubscribe link in the message or contacting us. We may continue sending nonpromotional communications concerning an active account, contract, assignment, safety matter, legal obligation, or service relationship.

Text Messages

The choices for ORN text messages are described in Section 8. Reply STOP to opt out and HELP for assistance.

Location and Device Permissions

You may manage location, camera, notification, and other device permissions through your device or browser settings. Disabling a permission may limit functionality or affect our ability to provide a requested service.

14. Children and Minors

Our websites, workforce systems, and ORN are not directed to children under 13, and we do not knowingly collect personal information directly from children under 13 through those services without appropriate authorization.

Some protective, transportation, travel, event, family-office, or client services may involve minors. In those circumstances, we may process limited information about a minor as directed or authorized by a parent, guardian, client, school, organization, or other legally authorized person and as reasonably necessary to provide the Services, protect safety, or comply with law.

If you believe a child provided personal information to us without appropriate authorization, contact us at info@thesimon.agency.

15. Third-Party Websites and Services

The Services may contain links to or integrate with third-party websites, platforms, applications, or services. Their privacy practices are governed by their own notices. We encourage you to review those notices before providing personal information. TSA is not responsible for the privacy practices of a third party acting independently from us.

16. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our Services, operations, legal obligations, or privacy practices. We will post the revised version with an updated “Last Updated” date. When required by law, we will provide additional notice or obtain consent before a material change takes effect.

17. Contact Us

For questions, complaints, privacy requests, or concerns about this Privacy Policy or our information practices, contact:

The Simon Agency, LLC
Attn: Privacy
10845 Griffith Peak Drive, Suite 200
Las Vegas, Nevada 89135
United States
Email: info@thesimon.agency
Telephone: 571-680-1991

Individuals in the European Economic Area, United Kingdom, or Switzerland may also have the right to contact their local data-protection authority concerning our processing of personal information.