Privacy Policy

Multifamily Top Security (“Multifamily Top Security,” “we,” “us,” or “our”) is a licensed Texas security firm headquartered in Houston, Texas. We specialize only in multifamily properties — apartment communities, condominiums, townhomes, and mixed-use developments. Nothing else. This Privacy Policy explains what information we collect when you visit our website, request a quote, call our dispatch line, or interact with our services, and how we use, share, and protect that information.

1. Overview

This Privacy Policy applies to multifamilytopsecurity.tellprojectstx.com and any pages, forms, or services operated under it. By using this website or contacting us, you acknowledge that you have read this Policy and understand how we handle information.

Multifamily Top Security is a division of Tell Projects, a Texas business entity. References to “our company” include both Multifamily Top Security and its parent Tell Projects for purposes of shared data systems (CRM, dispatch, billing).

2. Scope & Roles

2.1 Whose Data Is Covered

This Policy covers personal information about:

• Property managers, owners, and HOA representatives who contact us for quotes, contracts, or service.
• Residents, prospective residents, and visitors at properties under our standing contract (limited — primarily incident report subjects, CCTV footage subjects, and contact log entries).
• Job applicants who submit résumés or apply for officer, dispatcher, or surveyor positions.
• Website visitors who browse our pages, submit forms, or use our chat features.

2.2 Our Role

For most data we collect directly (e.g., quote requests, careers, web analytics), Multifamily Top Security is the data controller. For data we collect or process at the direction of a property management client (e.g., CCTV footage on their property, access-control logs, incident reports), we may act as a data processor subject to the client’s policies and our written service agreement.

3. Information We Collect

3.1 Information You Provide Directly

When you submit a quote request, contact form, or careers application, we may collect:

• Name, job title, and company or property management organization
• Email address and telephone number
• Property address, unit count, city, and ZIP code
• Description of your security needs, current setup, recent incidents, or biggest concerns
• Best time to reach you and preferred contact method
• For careers: résumé, licensure information, work history, and references

Form fields marked optional are exactly that — you may submit a quote with only the required fields (name, email, phone, service type, and brief description).

3.2 Information Collected Automatically

When you visit our website, we and our service providers may automatically collect:

• Device and browser information: user agent, screen size, operating system, language.
• Connection information: IP address, approximate geographic region (city/state level), referring URL.
• Usage information: pages visited, time on page, scroll depth, button clicks, form interactions, search queries entered on our site.
• Cookie identifiers (see Section 5).

3.3 Information Collected at Client Properties

While performing services at a property under our standing contract, our officers and systems may capture:

• CCTV / video footage on common areas (entrances, hallways, parking, amenity spaces) as designated by the property owner.
• Access-control logs (key fob, mobile credential, and gate entry events).
• Incident reports describing date, time, location, individuals involved (including names, descriptions, and statements), and actions taken.
• Visitor log entries at concierge or front-desk posts.
• Dispatch call records when residents or staff request patrol assistance.

This information is collected on behalf of the property owner / management company who is the controller. We retain copies in our case management system for the period required by our service agreement and applicable Texas law.

4. How We Use Information

We use the information we collect for the following purposes:

• Respond to inquiries — reply to quote requests, schedule walkthroughs, provide proposals.
• Deliver services — dispatch officers, monitor cameras, manage access systems, file incident reports, support court evictions, and otherwise fulfill our service contracts.
• Customer relationship management — maintain a record of your interactions and preferences in our CRM.
• Billing and accounting — invoice clients and reconcile payments.
• Safety and incident investigation — review CCTV and dispatch records to investigate incidents, respond to law enforcement requests with valid legal process, and support insurance claims.
• Website improvement — analyze usage to fix bugs, improve navigation, and refine our content.
• Hiring — evaluate candidates and conduct legally required background checks for licensed security personnel.
• Legal compliance — comply with Texas Department of Public Safety Private Security Bureau rules, court orders, and applicable laws.

We do not use information you submit for unrelated marketing campaigns, and we do not sell personal information.

5. Cookies & Tracking Technologies

We use cookies and similar technologies to operate this site and understand how it is used.

5.1 Types of Cookies

• Strictly necessary — CSRF token for form submissions; cannot be disabled without breaking site functionality.
• Analytics — Google Analytics (`_ga`, `_gid`) measures aggregate page traffic and session counts.
• Call attribution — CallRail (`__ctmid`) identifies which marketing source produced a phone call so we can measure return on advertising spend.

5.2 Managing Cookies

You can disable cookies in your browser settings. Most browsers also offer a Do Not Track signal — we honor it where technically feasible. Disabling cookies will not prevent you from browsing the site, but it may break the contact form (the CSRF cookie is required).

6. Call Recording (CallRail)

Our office line and dispatch number are operated through CallRail. Inbound calls may be recorded for quality assurance, dispatcher training, and to maintain an accurate record of service requests. Recording is performed in accordance with Texas single-party consent law (Texas Penal Code § 16.02).

If you do not consent to call recording, please request a callback by email at info@tellprojectstx.com. Recordings are stored for up to 24 months and are accessible only to authorized staff for the purposes listed above.

7. Analytics & Advertising

We use Google Analytics 4 to understand how visitors find and use our site. Google Analytics collects IP-truncated visitor information and usage statistics. You can opt out using the Google Analytics Opt-Out Browser Add-On.

We do not run programmatic display advertising. We do not allow third-party advertisers to drop cookies on our site. We do not maintain cross-site advertising profiles or sell visitor data to ad networks.

8. How We Share Information

We share personal information only in the following circumstances:

• With our parent organization, Tell Projects — for shared CRM, billing, and corporate operations. Tell Projects is bound by this Policy.
• With service providers — hosting (Hostinger), CRM/dispatch software, email service providers, payment processors, background-check vendors, and SMS gateways. All providers are bound by contract to use the information only for the services they provide to us.
• With property management clients — when we are acting as a processor on their property, we share incident records, CCTV footage, and dispatch logs with the client controller per our service agreement.
• With law enforcement and courts — in response to valid subpoenas, court orders, warrants, or in connection with insurance defense.
• In a business transfer — if Multifamily Top Security or Tell Projects is sold, merged, or restructured, your information may transfer with the business. Successor entities will be bound by the protections in this Policy or one with equivalent terms.

We do not sell personal information. We do not share personal information with advertisers, data brokers, or marketing list vendors.

9. Data Retention

We retain personal information for as long as needed to fulfill the purposes described in this Policy and to meet our legal obligations:

• Quote requests & CRM contacts: 36 months from last interaction, then archived or deleted.
• Active service records: for the duration of the service contract plus 4 years (Texas statute of limitations for written contracts).
• Incident reports & dispatch records: 4 years minimum; longer if part of pending or threatened litigation.
• CCTV footage: 30–90 days standard rolling overwrite, unless flagged for incident retention.
• Call recordings: 24 months.
• Careers applications: 12 months if not hired; for the duration of employment plus 7 years if hired (employment records).
• Website analytics: 14 months (default Google Analytics retention).

10. Data Security

We use a layered security program:

• Transport security: all web traffic enforced over HTTPS/TLS 1.2+.
• Access control: role-based access in our CRM, dispatch, and CCTV review systems; least-privilege principle.
• Logging: administrative actions logged and reviewed.
• Vendor diligence: service providers vetted for security posture before onboarding.
• Physical security: on-premise servers and backup media kept in our locked Houston office.

No system is 100% secure. If we become aware of a personal data breach affecting your information, we will notify you and the appropriate regulators in accordance with applicable law (including Texas Bus. & Com. Code § 521).

11. Your Rights

Subject to applicable law and verification of your identity, you may:

• Access the personal information we hold about you.
• Correct inaccurate or incomplete information.
• Delete information no longer needed for a legitimate purpose.
• Restrict certain processing where you have a legal right to do so.
• Object to processing based on legitimate interests.
• Portability — request a copy in a structured, machine-readable format.
• Withdraw consent for consent-based processing at any time (does not affect processing already performed).

Some information is exempt from these rights — for example, incident reports and CCTV footage related to criminal investigations or active litigation. To exercise any right, see Section 18 (Contact Us).

12. California Residents (CCPA / CPRA)

If you are a California resident, you have the rights described in Section 11 plus the following:

• Right to know the categories of personal information collected, the sources, the business purpose, and the categories of third parties with whom it is shared.
• Right to opt out of sale or sharing. We do not sell personal information and we do not share personal information for cross-context behavioral advertising.
• Right to limit use of sensitive personal information. We do not use sensitive personal information beyond the purposes permitted under CPRA § 7027.
• Right to non-discrimination for exercising your rights.

Authorized agents may submit requests on your behalf with proof of authorization. We will respond within 45 days (extendable by 45 more if needed and disclosed).

13. EEA / UK Residents (GDPR)

If you are in the European Economic Area or the United Kingdom, the rights in Section 11 apply directly. Our legal bases for processing are:

• Contract — to respond to your quote and deliver services you have purchased.
• Legitimate interests — to operate the site, improve our services, and protect lawful property interests.
• Legal obligation — to comply with Texas DPS rules, tax law, and court process.
• Consent — for optional analytics cookies and marketing email.

You have the right to lodge a complaint with your local supervisory authority. Multifamily Top Security is based in the United States and does not market services to EEA/UK residents; we process EEA/UK personal data only incidentally (e.g., site visits from EU IPs).

14. Texas Residents (TDPSA)

Under the Texas Data Privacy and Security Act (effective July 1, 2024), Texas residents have the rights described in Section 11. We do not engage in “targeted advertising” or “sale of personal data” as those terms are defined under the TDPSA. We do not process “sensitive data” (as defined in § 541.001) beyond what is reasonably necessary to provide security services you have requested.

Texas residents may appeal a denial of a privacy request by emailing info@tellprojectstx.com with subject “TDPSA Appeal.” If the appeal is denied, you may contact the Texas Attorney General at www.texasattorneygeneral.gov.

15. Children

Our website and services are intended for adult property managers, owners, residents, and prospects. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has submitted personal information through our site, please contact us so we can delete it.

16. International Data Transfers

We operate in the United States. Our service providers (hosting, CRM, analytics, email) are primarily located in the United States. If you contact us from outside the United States, your information will be transferred to and processed in the United States, which may have data protection rules different from your home country.

17. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our services, technology, or applicable law. The “Last updated” date at the top reflects the most recent revision. Material changes will be highlighted at the top of this page for at least 30 days. We encourage you to review this Policy periodically.

18. Contact Us

To exercise any of the rights described in this Policy, or to ask questions about our privacy practices, contact us at:

We aim to respond to all verifiable privacy requests within 30 days. Complex or high-volume requests may take up to 45 days; we will notify you if we need additional time.