Privacy Policy

1. Who We Are

Agile Federal Technologies LLC (AgileFedTech) is a certified Small Disadvantaged Business (SDB), Service-Disabled Veteran-Owned Small Business (SDVOSB), and Historically Underutilized Business Zone (HUBZone) enterprise. We provide information technology solutions, DevSecOps platform engineering, cybersecurity, physical security infrastructure, and technical consulting to federal civilian agencies, the Department of Defense, state governments, and commercial partners.

Our principal headquarters is located in Mayagüez, Puerto Rico, with operational liaisons serving the Washington, DC capital region and nationwide clients.

Our official website address is: https://agilefedtech.com.

2. Scope of This Policy

This Privacy Policy applies to all personal information, organizational contact details, and technical data collected through:

• Our primary website at https://agilefedtech.com and any associated subdomains;
• Communications submitted via our online contact forms, Request for Quick Quote (RFQ) tools, and scheduling/booking calendars;
• Resumes, employment applications, and candidate profiles submitted through our Careers portal;
• Direct electronic communications (email, phone, video conference) initiated via our digital presence.

This policy does not supersede classified government directives, non-disclosure agreements (NDAs), or specific Federal Contract Information (FCI) / Controlled Unclassified Information (CUI) handling procedures governed by active contract vehicles or Task Orders.

3. Information We Collect

We collect only information necessary to fulfill our business, contracting, and operational obligations. Depending on how you interact with our website, we may collect:

A. Information You Voluntarily Provide

• Business Contact Information: Name, professional title, organization or government agency name, business email address, physical mailing address, and telephone number.
• Procurement & Solicitations Details: Agency requirements, NAICS code interests, Statement of Work (SOW) summaries, solicitation numbers, and estimated timelines submitted via our Quote and Booking tools.
• Career & Recruitment Data: Resumes, employment history, educational credentials, professional certifications (e.g., CISSP, AWS, PMP), security clearance status (e.g., Public Trust, Secret, Top Secret/SCI eligibility), and veteran status.
• Correspondence: Records and copies of your inquiries, questions, or feedback when you contact us.

B. Information Collected Automatically

• Device & Connection Data: Internet Protocol (IP) address, browser type and version, language settings, operating system, and hardware platform.
• Site Telemetry & Interaction Data: Pages visited, date and time of visits, referring web addresses, navigation sequences, page response times, and download errors.

C. Information from Verification & Public Sources

• Commercial and government registries, such as the System for Award Management (SAM.gov), SBA Dynamic Small Business Search (DSBS), and CAGE code directories to verify contracting authority and authorized procurement officer credentials.

4. How We Use Your Information

AgileFedTech uses collected information strictly for legitimate commercial, government contracting, and administrative purposes:

• Fulfilling Inquiries & Quotes: Assessing feasibility, generating formal capability statements, submitting cost estimates, and providing requested information.
• Contract Administration: Executing prime contracts, subcontracts, non-disclosure agreements, and teaming arrangements with defense and civilian partners.
• Briefings & Meetings: Scheduling, coordinating, and conducting virtual or in-person capability briefings and consultations.
• Recruitment & Talent Acquisition: Evaluating candidate qualifications for open cleared and non-cleared engineering, management, and technical roles.
• Site Security & Fraud Prevention: Protecting our infrastructure against unauthorized access, cyber threats, automated abuse, and denial-of-service attempts.
• Regulatory Compliance: Complying with statutory audits, federal acquisition records requirements, export regulations (ITAR/EAR where applicable), and legal processes.

5. Federal Security & Data Governance (CUI, NIST, CMMC)

Security is fundamental to our core mission. In accordance with federal standards governing defense contractors and government IT service providers:

• NIST SP 800-171 & CMMC Alignment: We align our internal information systems with National Institute of Standards and Technology (NIST) Special Publication 800-171 controls and Cybersecurity Maturity Model Certification (CMMC) practices to protect Federal Contract Information (FCI) and Controlled Unclassified Information (CUI).
• Encryption Standards: All data transmitted through our web services utilizes modern Transport Layer Security (TLS 1.3/1.2). Static data and backups are encrypted at rest using industry-standard AES-256 cryptographic algorithms.
• NDAA Section 889 Compliance: We maintain strict supply chain hygiene, ensuring that no prohibited telecommunications or video surveillance equipment or services are deployed across our corporate systems.
• Role-Based Access Control (RBAC): Access to personal and procurement information is restricted exclusively to authorized personnel with a verified "need-to-know" and who are bound by confidentiality obligations.

6. Information Sharing & Third-Party Disclosures

We only share information under the following limited and controlled conditions:

• Trusted Infrastructure & Service Providers: Vetted third-party cloud infrastructure hosts, security providers, and telecommunications vendors who operate under contract with strict data confidentiality and security mandates (e.g., Cloudflare, enterprise email providers).
• Teaming & Joint Venture Partners: Only with explicit consent and under bilateral Non-Disclosure Agreements (NDAs) for the express purpose of joint response to federal or municipal solicitations.
• Legal & Regulatory Mandates: When required by federal law, court order, subpoena, government audit, or statutory regulation (such as FAR, DFARS, or DCAA requirements).
• Protection of Rights: When disclosure is necessary to investigate potential security breaches, enforce our agreements, or protect the safety and property of AgileFedTech, our clients, or the public.

7. Cookies, Analytics & Tracking

Our website is engineered for speed, privacy, and low latency. We do not use intrusive third-party cross-site trackers or behavioral advertising networks.

• Strictly Necessary Cookies: Small technical tokens required for secure navigation, firewall protection, load balancing, and form submission integrity.
• Performance Telemetry: Aggregated, anonymized performance metrics to measure load times, uptime, and server health.
• Do Not Track (DNT) & GPC Signals: Our website respects Do Not Track (DNT) header settings and Global Privacy Control (GPC) signals transmitted by your browser.

You may configure your browser to block or delete cookies at any time. Disabling cookies will not affect your ability to browse our primary capabilities or read published news articles.

8. Data Retention & Disposal

We retain personal data only for as long as necessary to fulfill the purposes for which it was gathered, including satisfying legal, accounting, contractual, and regulatory reporting requirements:

• Inquiry & Quote Records: Retained for active client engagement and prospective teaming records, generally up to three (3) years from the last interaction.
• Federal Contract Records: Retained in strict compliance with FAR Subpart 4.7 (Contractor Records Retention), typically a minimum of three (3) to six (6) years following final contract closeout.
• Candidate Applications: Resumes and applicant profiles are retained for up to two (2) years for consideration in future openings, unless deletion is requested sooner by the applicant.

Upon expiration of applicable retention schedules, records are permanently erased, destroyed, or sanitized in accordance with DoD and NIST guidelines for media sanitization.

9. Your Privacy Rights & Choices

Depending on your jurisdiction and applicable statutory frameworks (including state privacy legislation such as the California Consumer Privacy Act (CCPA/CPRA) and Virginia Consumer Data Protection Act (VCDPA)), you may exercise the following rights regarding your personal information:

• Right of Access & Portability: Request confirmation of whether we process your data and receive a copy in a structured, commonly used format.
• Right to Rectification: Request correction of inaccurate, outdated, or incomplete personal information.
• Right to Deletion: Request the erasure of your personal data, subject to statutory retention obligations under federal contracting rules.
• Right to Opt-Out: Opt out of commercial email updates, newsletters, or promotional announcements at any time via the unsubscribe mechanism or direct request.
• Non-Discrimination: We will never deny services, charge different prices, or provide a lower quality of service to individuals exercising their statutory privacy rights.

To exercise any of these rights, please contact our compliance office using the details in Section 13 below. We respond to all verified requests within thirty (30) days.

10. Children's Privacy

Our website, contracting services, and engineering offerings are directed exclusively to business professionals, government personnel, and adults aged 18 and older. We do not knowingly solicit or collect personal information from children under the age of 16. If we become aware that personal information of a minor has been collected without verifiable parental consent, we will promptly delete such data from our systems.

11. Third-Party Links & External Services

Our website may contain links to external governmental, military, or commercial partner resources (such as SAM.gov, Acquisition.gov, LinkedIn, or Leaflet OpenStreetMap tiles). AgileFedTech is not responsible for the privacy practices, security controls, or content of external websites. We encourage visitors to review the privacy notices of any external site they visit.

12. Changes to This Privacy Policy

We may periodically update this Privacy Policy to reflect changes in our operational practices, new federal contracting regulations, or technological advancements. When updates are published, the "Last Updated" date at the top of this policy will be revised. Significant changes will be prominently announced on our website.

13. Contact Information & Data Protection Officer

If you have questions, comments, or concerns regarding this Privacy Policy, our data practices, or wish to exercise your privacy rights, please reach out to our legal and compliance department: