Privacy Policy

1. GENERAL PROVISIONS AND SCOPE OF APPLICATION

1.1. This Privacy and Information Protection Policy (hereinafter referred to as the "Policy") has been developed by Alpha Detachment LLC (hereinafter referred to as the "Company", "We", "Data Controller") and establishes the procedure for the collection, processing, storage, utilization, and protection of personal data, trade secrets, as well as technical and strategic information of Clients (hereinafter referred to as the "User", "Client", "Data Subject").

1.2. By using this website or contacting the Company for the provision of services, the Client confirms that they have reviewed this Policy and provide irrevocable consent to the processing of their data in accordance with the current legislation of Ukraine, including the Law of Ukraine "On Protection of Personal Data", as well as international security standards (including GDPR).

1.3. The Company specializes in supporting defense industry enterprises (Defense-Industrial Complex / DIC), therefore information security is our highest priority. Every interaction and detail of cooperation is governed by a clear and strict Non-Disclosure Agreement (NDA) with zero compromise.

2. CATEGORIES OF DATA COLLECTED AND PROCESSED

To ensure the full-scale provision of consulting, legal, logistical, and IT services, the Company may collect and process the following categories of data:

2.1. Identification and contact data: Full names of executives, founders, and ultimate beneficial owners, contact phone numbers, secure email addresses, profiles in encrypted messengers, and enterprise registration addresses.

2.2. Corporate and financial information: Data required for accounting support, grant management, and customs clearance. This includes charter documents, financial statements, business plans, cash flow projections, military product specifications, and customs declarations.

2.3. Technical and infrastructural data: Information transmitted within the framework of IT development and cybersecurity: IP addresses, server architecture, penetration testing results, log files, corporate network configurations, and CRM system access credentials.

2.4. Personnel data: Information regarding employees (engineers, designers, technologists) required exclusively for auditing compliance with enterprise criticality criteria and processing personnel draft deferments (mobilization exemptions).

3. PURPOSE OF INFORMATION PROCESSING

The collection and processing of information are carried out exclusively for the following purposes:

3.1. Provision of turnkey comprehensive services for scaling the defense business (grant management, customs clearance, legal protection, IT development).

3.2. Execution of terms under service agreements and Non-Disclosure Agreements (NDAs).

3.3. Business structuring, development of Foreign Economic Activity (FEA) currency contracts, licensing agreements, and contracts with end-users (Ministry of Defense, intelligence agencies, foundations).

3.4. Ensuring multi-level DevOps server protection, implementing Data Loss Prevention (DLP) continuous monitoring systems, and conducting OSINT intelligence research for counterparty vetting.

4. TECHNICAL AND ORGANIZATIONAL SECURITY MEASURES (CYBER DEFENSE)

Considering the specifics of the Defense Tech infrastructure, we have implemented unprecedented security measures:

4.1. Isolated Infrastructure: All development and communication processes are conducted exclusively through our proprietary secure CRM systems. We do not utilize third-party unencrypted platforms for storing client databases.

4.2. Encrypted Channels: The transmission of any information is performed exclusively via encrypted communication channels utilizing End-to-End Encryption protocols and military-grade SSL/TLS certificates.

4.3. Access Restrictions (Zero Trust): Only authorized Company specialists (lawyers, customs brokers, IT architects) directly assigned to project execution have access to Client information, strictly within the scope required to fulfill their duties.

4.4. Regular Audit: Our internal systems undergo regular infrastructure penetration testing to identify vulnerabilities and defend against targeted attacks.

5. DATA TRANSFER TO THIRD PARTIES

5.1. The Company undertakes not to sell, exchange, or transfer Client data to third parties for commercial purposes.

5.2. Transfer of data to third parties is permitted exclusively:

For the execution of direct Client instructions (e.g., submitting applications to grant funds, the Ministry of Economy, the Ministry of Digital Transformation, or banking institutions for compliance clearance).

Upon an official, legally justified request by authorized state authorities or intelligence agencies in cases explicitly stipulated by the current legislation of Ukraine.

5.3. Even in the event of data transfer for the execution of Client instructions, the Company ensures the signing of appropriate NDAs with contractors.

6. DATA RETENTION PERIODS

6.1. Client personal and corporate data are retained for the period necessary to fulfill contractual obligations, but no longer than required by applicable legislation (e.g., statutory requirements for archiving accounting and customs documentation).

6.2. Upon completion of cooperation or the expiration of NDA validity terms, all sensitive information (blueprints, technical specifications, databases) is subject to irreversible cryptographic destruction on the Company's servers, for which a corresponding certificate may be provided to the Client.

7. RIGHTS OF DATA SUBJECTS

Clients and Data Subjects have the right to:

7.1. Be informed regarding the sources of collection, location of their personal data, and the purpose of its processing.

7.2. Obtain information concerning the conditions under which access to personal data is granted.

7.3. Access their personal data.

7.4. Submit a motivated demand to modify or destroy their personal data (the right to be forgotten) if such data is processed unlawfully or is inaccurate.

7.5. Protect their data against accidental loss, destruction, or damage resulting from intentional concealment or denial of access.

8. POLICY ON COOKIE FILES

8.1. Our website utilizes cookies exclusively to ensure basic website functionality, enhance security levels (DDoS protection, session verification), and conduct general traffic analytics.

8.2. We do not utilize marketing trackers or social media pixels capable of identifying users and potentially compromising the activities of Defense-Industrial Complex enterprises.

9. AMENDMENTS TO THE POLICY

9.1. Alpha Detachment LLC reserves the right to introduce amendments to this Policy in connection with legislative updates, cybersecurity protocol revisions, or the expansion of service offerings.

9.2. All amendments are published on this page. Utilization of the Company’s services following the publication of the updated Policy constitutes full agreement by the Client with the introduced changes.

10. CONTACT INFORMATION

For all inquiries regarding confidentiality, data protection, as well as to initiate the NDA execution procedure, please contact us via the secure communication channels indicated on the Contacts page.