Privacy Policy

Blue Synergy Group, LLC (“Blue Synergy Group,” “BSG,” “we,” “us,” or “our”) is a Florida limited liability company (Document Number L21000408172) that provides security consulting and technology services. This Privacy Policy describes the personal information we collect through our website at bluesynergygroup.com and our client portal, how we use it, and your choices about it.

By using our website or client portal, you agree to the practices described in this policy. If you do not agree, please do not use our services.

1. Information We Collect

a. Information you provide through the contact form

When you submit our contact form, we collect your name, email address, phone number, company name, the service you are inquiring about, and the contents of your message. We use this information to respond to your inquiry and to follow up about our services.

b. Client portal account information

If you create or are issued a client portal account, we collect your first name, last name, email address, phone number, company name, and a securely hashed copy of your password. You may optionally upload a profile photo. Each account is assigned an internal account number (for example, BSG-001) for record-keeping.

c. Authentication and security data

To keep your account secure, we may store: a record of when you last logged in, when your password was last changed, two-factor authentication (2FA) secrets and one-time backup codes (stored as hashes), registered passkeys (WebAuthn / FIDO2 credentials), and short-lived single-use tokens for password resets and email-change confirmations. Raw passwords and raw reset tokens are never stored — only cryptographic hashes.

d. Project and engagement data

When you become a client, we collect and store information related to your engagement, which may include: the property address being assessed, project title and service type, scheduled site visit dates and locations, action items, invoices, internal consultant notes, and any documents or reports we exchange with you through the portal.

e. Messages

Messages you send to BSG staff through the portal are stored in our database so that both you and our team can review the conversation history. Messages include the sender, recipient, subject, body, timestamp, and read status.

f. Cookies and session data

We use a single first-party session cookie issued by our Flask application to keep you signed in. The session expires automatically after 30 minutes of inactivity. We do not use third-party advertising, marketing, or behavioral-tracking cookies. We do not use Google Analytics, Meta Pixel, or similar trackers on our site.

g. Server logs and security data

Like nearly every website, our servers automatically record technical information when you visit, including IP address, browser user-agent, requested URL, response status, and timestamp. This information is used strictly for operating, securing, and troubleshooting the site — for example, by our firewall, intrusion-prevention (fail2ban), and automated security monitoring systems to detect and block abuse. We do not use server logs to build advertising profiles.

2. How We Use Your Information

We use the information described above to:

• Respond to inquiries submitted through our contact form;
• Create, secure, and operate client portal accounts;
• Deliver the security consulting services you have engaged us to perform — including security assessments, peer reviews, CPTED evaluations, HB 837 compliance assessments, and security technology integration;
• Schedule and coordinate site visits, send invoices, and track project progress;
• Communicate with you about your engagement, including by email at info@bluesynergygroup.com;
• Detect, prevent, and respond to fraud, abuse, and security threats;
• Comply with our legal and contractual obligations.

3. How We Share Information

We do not sell, rent, or trade your personal information. We do not share your information with advertisers or data brokers.

We may share information only in these limited circumstances:

• Service providers we rely on to operate the site. Our website is hosted on a private virtual server we control at DigitalOcean, and our email is sent through GoDaddy SMTP using the address info@bluesynergygroup.com. These providers process limited information strictly to deliver their services to us.
• Within Blue Synergy Group. BSG personnel assigned to your engagement may access your information to deliver the services.
• Legal requirements. We may disclose information if we are required to do so by subpoena, court order, or other valid legal process, or to protect the rights, property, or safety of BSG, our clients, or the public.
• Business transfers. If BSG is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you before your information becomes subject to a different privacy policy.

4. Data Security

We take reasonable administrative, technical, and physical measures to protect your information, including:

• Transport-layer encryption (HTTPS / TLS) for all traffic to bluesynergygroup.com;
• Industry-standard one-way password hashing — we never store passwords in readable form;
• Optional two-factor authentication (TOTP) and hardware-backed passkeys (WebAuthn / FIDO2);
• Automatic 30-minute idle session expiration;
• A default-deny firewall on our server, automated intrusion prevention, file-integrity monitoring, and antivirus scanning;
• Daily encrypted backups with limited retention.

However, no method of transmission over the Internet and no method of electronic storage is completely secure. We cannot guarantee absolute security, and you use our services at your own risk. If you suspect unauthorized access to your account, please contact us immediately at info@bluesynergygroup.com.

5. Data Retention

We retain personal information for as long as it is needed to provide our services, comply with our legal and tax obligations, resolve disputes, and enforce our agreements. Client engagement records, reports, and invoices are typically retained for the duration of our business relationship and for a reasonable period afterward to support audit and recordkeeping requirements. You may request deletion of your account information at any time using the contact details below.

6. Your Rights and Choices

You may:

• Access and update your profile information at any time from the client portal’s Settings page;
• Request a copy of the personal information we hold about you;
• Request correction of inaccurate information;
• Request deletion of your account and associated personal information, subject to our legal and contractual recordkeeping obligations;
• Opt out of marketing emails at any time — though we may still send you operational emails about your account or engagement.

Depending on where you live, you may have additional rights under applicable privacy laws. To exercise any of these rights, contact us at info@bluesynergygroup.com. We will respond within a reasonable time.

7. Children’s Privacy

Our website and client portal are intended for business and professional use. They are not directed to children under the age of 13, and we do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us so we can promptly delete it.

8. International Visitors

BSG operates from Florida, USA. If you are accessing our services from outside the United States, you understand that your information will be transferred to, stored, and processed in the United States, which may have data-protection laws different from those in your jurisdiction.

9. Third-Party Links

Our site may contain links to third-party websites — for example, an embedded Google Map showing our office location. We are not responsible for the privacy practices of those third parties; their handling of your information is governed by their own privacy policies.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, our services, or applicable law. When we do, we will revise the “Last updated” date at the top of this page. Material changes will be communicated through the portal or by email when reasonable. Continued use of our services after the effective date constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy or how we handle your information, please contact us:

© 2026 Blue Synergy Group, LLC. All rights reserved.