The short version
- This site sets no cookies and runs no analytics, advertising or tracking tools.
- We collect personal information only when you send it to us through a form or by email, plus the basic technical logs every web server keeps.
- We use it to answer you and to run and secure the site. We do not sell it or use it for advertising.
- You can ask to see, correct, export or delete your information at any time.
1. Who we are and what this policy covers
Falcon Forge, LLC ("Falcon Forge," "we," "us") is the controller of the personal information described in this policy. We are based in Greenville, South Carolina, United States.
This policy covers the public website at falconforge.org in English and Arabic (the "Site"). It does not cover the Chiron Platform at chiron.falconforge.org or the training services we deliver. Personal information in those services, such as learner records, transcripts and certificates, is processed under our agreements with the organizations we serve and under the privacy notice presented inside the platform.
2. Information we collect
Information you give us
When you use the contact form, we receive your first and last name, email address, phone number (optional), the reason for your inquiry, your message, the language you used and the time you started the form. When you apply to become a provider, we also receive your military branch, highest rank and a description of your acquisition experience. When you email us, we receive whatever your message contains.
Information collected automatically
Like any website, our servers and content delivery network record basic technical information for each request: your IP address, the date and time, the page or file requested, the referring page, your browser and device type, and the response status. Our contact-form service records only a one-way hash of your IP address, used to block abuse.
What we do not collect
The Site does not use cookies, local storage for tracking, web analytics, advertising pixels, social media plugins or device fingerprinting. We do not ask for, and ask you not to send, sensitive personal information such as health, religious or biometric data, national identity numbers, or classified or export-controlled information.
3. How we use information
We use personal information only for these purposes:
- to respond to your inquiry and continue the conversation you started;
- to evaluate applications from prospective instructors and providers;
- to prepare for and discuss programs and services with you or your organization;
- to operate, maintain and secure the Site, including detecting and preventing spam, fraud and abuse;
- to comply with legal obligations and to establish, exercise or defend legal claims.
We do not use your information for automated decision-making that has legal or similarly significant effects on you, and we do not build profiles for advertising.
4. Legal bases for processing
Depending on where you are, we rely on one or more of the following: your consent, which you give by submitting a form and may withdraw at any time; the steps you ask us to take before entering into an agreement; our legitimate interests in responding to inquiries and keeping the Site secure, balanced against your rights; and compliance with our legal obligations. For visitors in the Kingdom of Saudi Arabia, we process personal information in accordance with the Personal Data Protection Law and its Implementing Regulations.
6. International transfers
We are a U.S. company and the Site is hosted in the United States, so information you send us is processed there. Where the Saudi Personal Data Protection Law or another law restricts transfers outside your country, we transfer only the minimum information needed for the purposes above and rely on the safeguards that law provides, such as contractual protections.
7. How long we keep information
- Inquiries and related correspondence: up to 24 months after our last contact with you, unless a business relationship follows, in which case the relevant agreement applies.
- Provider applications: up to 24 months, unless you ask us to delete yours sooner.
- Server, delivery network and contact-form logs: 30 days.
- Records of privacy requests and of our processing: as long as the law requires.
When information is no longer needed, we delete or anonymize it.
8. Security
We protect information with measures appropriate to its sensitivity, including encryption in transit (HTTPS), encryption at rest, access limited to people who need it, least-privilege system permissions, security headers and monitoring. No method of transmission or storage is completely secure. If a personal data breach occurs, we will notify the competent authorities and affected individuals as the law requires, including SDAIA, the data protection authority of the Kingdom of Saudi Arabia, within 72 hours where the Personal Data Protection Law applies.
9. Your rights
Depending on where you live, and in particular under the Saudi Personal Data Protection Law, you have the right to:
- be informed about how and why your personal information is processed;
- access your personal information and receive a copy of it in a readable, commonly used format;
- have inaccurate, incomplete or out-of-date information corrected;
- have your information deleted or destroyed when it is no longer needed;
- restrict or object to processing, and withdraw your consent at any time, without affecting processing that took place before;
- not be treated differently for exercising any of these rights.
To exercise a right, email us at the address below. We may need to confirm your identity before acting on a request. We respond within 30 days; if we need more time, we will tell you and may extend this once by up to 30 more days.
If you are not satisfied with our response, you may complain to your data protection authority. In the Kingdom of Saudi Arabia this is SDAIA, the national authority responsible for personal data protection.
10. Children
The Site is intended for professionals and organizations. It is not directed to anyone under 18, and we do not knowingly collect personal information from children. If you believe a child has sent us information, contact us and we will delete it.
11. Do Not Track and Global Privacy Control
Because the Site does not track visitors across websites or sell or share personal information for advertising, there is nothing for these browser signals to switch off. We honor them all the same.
12. Other websites
The Site links to other websites, including the Chiron Platform. Their privacy practices are governed by their own policies.
13. Changes to this policy
We may update this policy to reflect changes to the Site or the law. The date at the top of this page shows when it last changed. If we make a material change, we will note it prominently on the Site.
14. Contact us
For privacy questions or requests, contact Falcon Forge, LLC, Greenville, South Carolina, United States, at the email address below. This policy is published in English and Arabic; if the two versions differ, the English version controls.
Falcon Forge, LLC
Email: info@falconforge.org