Privacy Policy
Effective date: September 1, 2026
1. Who we are
Red Team Albania SHPK ("RTA", "we", "us") is an offensive security consultancy registered in Tirana, Albania. This policy covers rtacorp.co and its subdomains. Contact: admin@rtacorp.co
2. What data we collect
We collect only data you provide directly: name, company, and email address submitted via our contact form, or through the Training and Internship waitlists on the Academy pages. We do not use tracking cookies, advertising pixels, or analytics that identify individuals.
3. Cookies & local storage
This site does not set tracking or advertising cookies. Your light/dark theme preference is stored in your browser's local storage, not a cookie, and is never transmitted to us. The admin console at /admin uses a strictly functional session cookie to keep authorised staff signed in; it is not present on any public page and is not used to track visitors.
4. How we use your data
Contact form and waitlist submissions are used solely to respond to your enquiry, notify you when a program opens, and, where relevant, to scope a security engagement. We do not sell, share, or transfer your data to third parties except where required to deliver our own services.
5. Third-party processors
We rely on a small number of processors to operate this site: Resend for transactional email delivery, and Cloudflare Turnstile for bot and spam prevention on our forms. These providers process data strictly on our behalf and under their own security and privacy commitments; we do not permit them to use your data for their own purposes.
6. Data retention
We retain contact form and waitlist data for as long as necessary to respond to your enquiry and for legitimate business record-keeping purposes, not exceeding 3 years unless a contractual relationship requires otherwise. You may request earlier deletion at any time.
7. Your rights
Under Albanian Law No. 9887 on Personal Data Protection and applicable EU standards, you have the right to access, correct, export, or request deletion of your personal data, and to object to or restrict certain processing. Contact us at admin@rtacorp.co to exercise these rights; we respond to verified requests within a reasonable timeframe.
8. Children's privacy
This site is intended for business and professional use and is not directed at children. We do not knowingly collect personal data from minors, and Academy programs aimed at students are administered separately with appropriate consent where required.
9. Security
All data transmitted to and from this website is encrypted via TLS. Submitted data is stored securely and is accessible only to authorised RTA personnel on a need-to-know basis.
10. Changes
We may update this policy periodically as our services or legal obligations change. Material changes will be noted on this page with a revised effective date.