RK'S GUYANA SECURITY SERVICES — MESSAGING PRIVACY NOTICE — EFFECTIVE 11 MAY 2026 — VERSION 1.0. PLEASE READ THIS NOTICE CAREFULLY. BY INITIATING, CONTINUING, OR OTHERWISE PARTICIPATING IN ANY COMMUNICATION WITH RK'S GUYANA SECURITY SERVICES (HEREINAFTER, THE "COMPANY") THROUGH A MESSAGING PLATFORM, INCLUDING WITHOUT LIMITATION WHATSAPP, YOU ACKNOWLEDGE THAT YOU HAVE READ AND UNDERSTOOD THE TERMS SET OUT HEREIN AND THAT YOU AGREE TO THE PROCESSING OF YOUR PERSONAL INFORMATION AS DESCRIBED, AND TO THE TERMS, LIMITATIONS, AND DISCLAIMERS SET FORTH HEREIN, IN THEIR ENTIRETY AND WITHOUT QUALIFICATION. IF YOU DO NOT AGREE, YOU SHALL NOT INITIATE OR CONTINUE COMMUNICATION THROUGH THE SERVICE AND SHALL HAVE NO RIGHTS HEREUNDER. THIS NOTICE IS PROVIDED IN COMPLIANCE WITH APPLICABLE LAW AND WITH THE TERMS AND POLICIES OF THE THIRD-PARTY MESSAGING PLATFORMS THROUGH WHICH THE COMPANY OPERATES, AND IS SUBJECT TO AMENDMENT, REPLACEMENT, OR SUPPLEMENTATION BY THE COMPANY AT ANY TIME AND FROM TIME TO TIME WITHOUT NOTICE, WITH OR WITHOUT CAUSE, IN THE EXERCISE OF ITS SOLE AND ABSOLUTE DISCRETION. THE CURRENT VERSION SHALL AT ALL TIMES BE THAT VERSION WHICH IS PUBLISHED AT THE UNIFORM RESOURCE LOCATOR DESIGNATED FOR THIS PURPOSE BY THE COMPANY AND AS MAY BE NOTIFIED TO THE USER FROM TIME TO TIME OR NOT AT ALL. SECTION 1. DEFINITIONS. 1.1 The "Company" means RK's Guyana Security Services, a business registered under the Business Names (Registration) Act of the Co-operative Republic of Guyana, Certificate No. 58771, with its registered office at Lot 125 E 1/2, Regent Road, Bourda, Georgetown, Guyana, and its successors and permitted assigns. 1.2 The "Service" means, collectively, the messaging-based communication channels operated by the Company from time to time through third-party messaging platforms, together with the supporting arrangements and infrastructure relating thereto, as the same may exist from time to time. 1.3 The "User" means any individual or entity that initiates, receives, or otherwise participates in communications through the Service, whether on the User's own behalf or on behalf of another, and whether or not the User has independently agreed to the terms hereof. 1.4 "Personal Information" means information that identifies, or could reasonably be used to identify, a natural person, and that is provided to or otherwise comes into the possession of the Company in connection with the Service, regardless of the means or form of such provision and regardless of the purpose for which it was originally provided. 1.5 "Automated Communications" means communications conducted in whole or in part through automated technology, as further described in Section 4 hereof. 1.6 "Processor" means any third party that processes Personal Information on behalf of, or under the instructions of, the Company, including without limitation the operators of the messaging platforms through which the Service is conducted and any sub-processors engaged by any of them. 1.7 Words importing the singular shall include the plural and vice versa; words importing one gender shall include all genders; references to any statute, regulation, or other instrument shall be construed as references to such statute, regulation, or instrument as amended, replaced, or supplemented from time to time; and the headings used herein are for convenience only and shall not affect the construction of any provision. SECTION 2. SCOPE. 2.1 This Notice applies to all Personal Information processed by the Company in connection with the Service. 2.2 This Notice does not apply to Personal Information processed by the Company through other channels of communication, including without limitation in-person communications, voice telephony, electronic mail, and postal correspondence, which may be governed by separate notices or policies of the Company, or by no such notice or policy at all. 2.3 Where the Service is conducted through a third-party messaging platform, the terms and policies of such platform, including without limitation any privacy policy, terms of service, messaging policy, or commerce policy issued by the platform operator, shall apply in addition to the terms hereof, and the Company shall not be responsible for the acts or omissions of any such platform operator. 2.4 Nothing in this Notice shall be construed as conferring upon the User any right or remedy against any Processor or platform operator, and any complaint, claim, or request relating to the acts or omissions of any such party shall be directed to that party in accordance with its own policies. SECTION 3. INFORMATION PROCESSED. 3.1 The Company may, in connection with the Service, process Personal Information including without limitation: identifying information such as name, address, and contact details; communication content, including text, attachments, identifiers, and metadata associated therewith; technical information relating to the means by which the User participates in the Service; information relating to the User's relationship or potential relationship with the Company; and any further information that the User may provide, or that may otherwise come into the possession of the Company, in connection with the Service. 3.2 The categories, sources, and means of Personal Information processed may be varied from time to time by the Company without notice and the foregoing enumeration is illustrative and not exhaustive. 3.3 The User shall not provide, through the Service, any information of a sensitive nature except where strictly necessary for the purposes for which the communication is initiated, and the Company assumes no responsibility for such information beyond the obligations imposed by applicable law. 3.4 Where the User provides Personal Information relating to a third party, the User represents and warrants that the User has the necessary authority, consent, or other lawful basis to do so and shall indemnify the Company in respect of any claim arising from any breach of such representation and warranty. SECTION 4. AUTOMATED COMMUNICATIONS. 4.1 The Company, in the conduct of its operations, employs automated technology in connection with certain communications conducted through the Service. Such use is undertaken in accordance with applicable law and with the terms and policies of the relevant messaging platform providers, and is subject to modification at any time in the discretion of the Company. 4.2 Where Automated Communications are employed, the User will be informed of such use at or near the commencement of the relevant communication session, in such manner as the Company considers appropriate to satisfy applicable disclosure requirements, and the method and content of such notification may be varied from time to time without further notice. 4.3 The User may, at any time during a communication session, request that the communication be conducted with a human representative of the Company in lieu of, or in addition to, Automated Communications. The Company shall give effect to such request within a reasonable period having regard to its operational arrangements, its regular hours of business, and the nature of the communication concerned. Nothing in this Clause shall oblige the Company to maintain human representatives available at any particular time, or to provide any specific response time or quality of response, and the Company makes no representation in such regard. 4.4 The categories of communications in respect of which Automated Communications may be employed, the platforms through which they are conducted, the categories of Personal Information processed in connection with them, the Processors engaged in connection with them, and the operational arrangements relating thereto, may each be varied from time to time by the Company in the exercise of its reasonable discretion, without further notice to the User. Continued use of the Service following any such variation shall constitute the User's acknowledgement and acceptance of the terms as so varied, whether or not the User has read or had the opportunity to read such variation. 4.5 Records of Automated Communications, including without limitation the content of messages, identifiers associated with the User, metadata, and any material derived therefrom by automated or other means, may be retained by the Company for such periods as the Company determines necessary or appropriate for operational, legal, regulatory, audit, evidentiary, investigative, or any other purposes connected with the conduct of its business, and the Company makes no representation and assumes no obligation as to any specific period of retention or as to any possibility of deletion save as required by applicable law. 4.6 The User may opt out of receiving further Automated Communications by replying with the word "STOP" or by such other means as may be notified by the Company from time to time. Opt-out from Automated Communications shall not affect the User's ability to initiate communications with the Company through alternative channels and shall not give rise to any obligation on the part of the Company to provide such alternative channels or to respond through such alternative channels within any particular time or at all. 4.7 No provision of this Section 4, and no act or omission of the Company in connection herewith, shall be construed as creating any warranty or representation as to the nature, operation, performance, accuracy, completeness, suitability, or fitness of Automated Communications for any purpose, whether such purpose is known to the Company or otherwise. The User acknowledges that the Company makes no such warranty, whether express or implied, and that any reliance upon the outcome of, or any consequence arising from, Automated Communications is undertaken at the User's own risk and to the exclusion of any liability on the part of the Company to the maximum extent permitted by applicable law. SECTION 5. PURPOSES OF PROCESSING. 5.1 The Company processes Personal Information for purposes connected with the conduct of its business, including without limitation: responding to communications initiated by or directed to the User; performing or facilitating any engagement that may exist or come to exist between the Company and the User or any third party; meeting the Company's obligations under applicable law and under the policies of the messaging platforms through which the Service is conducted; protecting the safety, security, and operational integrity of the Company's personnel, clients, and operations; conducting internal review, audit, training, and quality assurance activities; and such further purposes as the Company may determine from time to time in connection with the conduct of its business. 5.2 The enumeration of purposes set forth above is illustrative and not exhaustive, and the Company reserves the right to process Personal Information for any further purpose that is consistent with applicable law. SECTION 6. LAWFUL BASIS. 6.1 The Company processes Personal Information on such lawful basis or bases as may apply in the circumstances, including without limitation the User's consent (which is given by initiating or continuing communication through the Service); the performance of, or the entry into, a contract with the User; compliance with the Company's legal and regulatory obligations; the legitimate interests of the Company in conducting its business; and the protection of the vital interests of the User or of another natural person. 6.2 Where the lawful basis is consent, the User may withdraw such consent at any time by ceasing to use the Service; provided, however, that such withdrawal shall not affect the lawfulness of any processing carried out prior thereto, nor any continuing processing required for any other lawful purpose. SECTION 7. SHARING WITH PROCESSORS AND OTHER THIRD PARTIES. 7.1 The Company may share Personal Information with Processors engaged in connection with the Service, including without limitation the operators of messaging platforms through which the Service is conducted and providers of related technical infrastructure. 7.2 The Company may share Personal Information with such other third parties as may be required or permitted by applicable law, including without limitation governmental authorities, regulatory bodies, law enforcement agencies, courts, and other lawful authorities; and with the Company's successors or assigns in connection with any actual or contemplated reorganisation, merger, sale, transfer, or similar transaction. 7.3 The Company does not sell Personal Information to advertising networks. 7.4 The identities of the Processors and other third parties referred to in this Section may be varied from time to time by the Company in the exercise of its reasonable discretion, without further notice to the User. SECTION 8. INTERNATIONAL TRANSFERS. 8.1 The User acknowledges that, in connection with the Service, Personal Information may be transferred to, and processed in, jurisdictions other than the Co-operative Republic of Guyana, including without limitation jurisdictions in the European Union, the United States, and such other jurisdictions as the locations of the Company's Processors and platform providers may from time to time require. 8.2 The User consents to such transfers and processing notwithstanding that the data protection laws of the receiving jurisdictions may differ from those of the User's own jurisdiction. 8.3 The Company endeavours to engage Processors that maintain appropriate standards of data protection, but makes no representation or warranty in respect thereof beyond what is required by applicable law. SECTION 9. RETENTION. 9.1 Personal Information processed in connection with the Service shall be retained by the Company for such periods as the Company determines necessary or appropriate for operational, legal, regulatory, audit, evidentiary, investigative, or any other purposes connected with the conduct of its business, or as may be required by applicable law, whichever is the longer. 9.2 The Company makes no representation and assumes no obligation as to any specific period of retention or as to any specific time or means of deletion save as required by applicable law. 9.3 Where Personal Information is anonymised or aggregated such that it can no longer be associated with an identified or identifiable natural person, the Company may retain and use such information without limitation as to period or purpose. SECTION 10. SECURITY. 10.1 The Company implements such organisational and technical measures as it considers appropriate, in its reasonable discretion, to protect Personal Information against unauthorised access, alteration, disclosure, or destruction. 10.2 No system of communications, processing, or storage is or can be made entirely secure, and the Company makes no representation or warranty that Personal Information is or will be free from unauthorised access, alteration, disclosure, or destruction. 10.3 In the event of a personal-data breach affecting the User, the Company shall notify the User and any applicable regulatory authority in accordance with applicable law, and shall take such steps as it considers reasonable in the circumstances to mitigate harm. SECTION 11. USER RIGHTS. 11.1 Subject to applicable law, the User may have the right to: request access to Personal Information held by the Company in connection with the User; request correction of any such information that the User considers inaccurate; request deletion of any such information, subject to the Company's retention obligations and operational requirements; object to, or restrict, certain processing of such information; and lodge a complaint with the Company or with a competent regulatory authority. 11.2 To exercise any such right, the User shall contact the Company in accordance with Section 14 hereof. 11.3 The Company shall respond to such requests within a reasonable period and at no cost to the User, save where the request is manifestly unfounded or excessive, in which case the Company may charge a reasonable fee or decline to act. 11.4 The Company may require the User to provide such information as the Company considers necessary to verify the identity of the requester and the validity of the request before giving effect thereto. SECTION 12. CHILDREN. 12.1 The Service is not directed at children under the age of eighteen (18) and the Company does not knowingly process Personal Information of such children. 12.2 If the Company becomes aware that it has processed Personal Information of a child under the age of eighteen (18) without appropriate authority, it shall take such steps as it considers reasonable to delete or restrict such information. 12.3 A parent or guardian who becomes aware that a child has provided Personal Information to the Company may contact the Company in accordance with Section 14 hereof to request appropriate action. SECTION 13. AMENDMENT. 13.1 The Company may amend, replace, or supplement this Notice at any time and from time to time, in the exercise of its sole and absolute discretion, with or without notice to the User. 13.2 The current version of this Notice shall at all times be that version which is published at the Uniform Resource Locator designated for this purpose by the Company. 13.3 Continued use of the Service following any amendment, replacement, or supplementation hereof shall constitute the User's acknowledgement and acceptance of this Notice as so amended, replaced, or supplemented, whether or not the User has read or had the opportunity to read the same. SECTION 14. CONTACT. 14.1 All correspondence relating to this Notice, including any request to exercise a right hereunder, any complaint, or any other matter, shall be directed to the Company at the following particulars: Office of the Chief Executive Officer, RK's Guyana Security Services, Lot 125 E 1/2, Regent Road, Bourda, Georgetown, Guyana; electronic mail: rks@security.gy. 14.2 The Company shall acknowledge such correspondence within a reasonable period and shall respond substantively within such further period as the matter may reasonably require, having regard to the complexity of the request and the operational arrangements of the Company. (C) RK'S GUYANA SECURITY SERVICES. ALL RIGHTS RESERVED. LOT 125 E 1/2, REGENT ROAD, BOURDA, GEORGETOWN, GUYANA.