Legal & Privacy

1. Introduction

Emerging Defense Solutions, LLC ("EDS", "we", "us", or "our") respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, use our services, or interact with our businesses including Cyber Dojo Solutions, Heritage Shield Defense Academy, Seals on Wheels, and Mow Dojo.

2. Information We Collect

Personal Information:

• Contact information (name, email address, phone number, mailing address)
• Account credentials (username, password, security questions)
• Payment and billing information
• Government-issued identification (for notary services and background checks)
• Employment information (for job applications)
• Training records and certifications

Technical Information:

• IP address and device identifiers
• Browser type and version
• Operating system
• Cookies and similar tracking technologies
• Usage data and analytics

3. How We Use Your Information

• Provide and maintain our services
• Process transactions and payments
• Send service-related communications
• Conduct background checks (where required)
• Deliver training and certification programs
• Improve our services and user experience
• Comply with legal obligations
• Prevent fraud and enhance security
• Send marketing communications (with consent)

4. Legal Basis for Processing (GDPR)

We process personal data under the following lawful bases:

• Contractual Necessity: To fulfill our contractual obligations to you
• Legitimate Interests: To operate and improve our business
• Legal Compliance: To comply with applicable laws and regulations
• Consent: Where you have provided explicit consent

5. Data Sharing and Disclosure

We may share your information with:

• Service Providers: Third-party vendors who assist in our operations
• Business Partners: With your consent or as necessary for services
• Legal Authorities: When required by law or to protect rights and safety
• Business Transfers: In connection with mergers, acquisitions, or asset sales

We do not sell your personal information to third parties for marketing purposes.

6. Data Retention

We retain personal information for as long as necessary to fulfill the purposes outlined in this policy, comply with legal obligations, resolve disputes, and enforce agreements. Specific retention periods:

• Account information: Duration of account plus 7 years
• Transaction records: 7 years from transaction date
• Training certifications: Permanent or as required by law
• Background check records: As required by state and federal law

7. Security Measures

We implement industry-standard security measures including:

• Encryption of data in transit and at rest (TLS 1.3, AES-256)
• Multi-factor authentication for sensitive accounts
• Regular security audits and penetration testing
• Employee training on data protection
• Access controls and least-privilege principles
• Incident response and breach notification procedures

8. Your Privacy Rights

All Users:

• Access and obtain a copy of your personal data
• Correct inaccurate or incomplete data
• Request deletion of your data (subject to legal requirements)
• Opt-out of marketing communications at any time
• Object to certain processing activities
• Opt-out of automated profiling and AI-based decision-making that produces legal or significant effects

California Residents (CPRA/CCPA as amended 2023–2026):

• Right to know what personal information is collected, used, shared, or sold
• Right to delete personal information
• Right to correct inaccurate personal information
• Right to opt-out of sale or sharing of personal data (we do not sell personal data)
• Right to limit use and disclosure of sensitive personal information
• Right to non-discrimination for exercising privacy rights
• Right to opt-out of automated decision-making technology

EU/UK Residents (GDPR / UK GDPR):

• Right to data portability
• Right to restrict processing
• Right to object to automated decision-making and profiling
• Right to lodge a complaint with a supervisory authority
• Right to withdraw consent at any time without affecting prior lawful processing

Other U.S. State Residents (2025–2026 Laws):

• Texas (TDPSA): Right to access, correct, delete, and opt-out of targeted advertising and profiling
• Florida (FDBR): Right to access, correct, delete, and opt-out of processing sensitive data
• Oregon (OCPA): Right to access, correct, delete, and opt-out of sale and profiling
• Montana (MCDPA): Right to opt-out of sale of personal data and profiling
• Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA): Full consumer data rights apply

9. Children's Privacy

Our services are not directed to children under 13 (or 16 in the EU). We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

10. International Data Transfers

Your information may be transferred to and processed in the United States or other countries where our service providers operate. We ensure appropriate safeguards are in place through Standard Contractual Clauses (SCCs), adequacy decisions, or other mechanisms approved under applicable law including the EU-U.S. Data Privacy Framework.

11. Artificial Intelligence & Automated Processing

EDS uses artificial intelligence and automated processing tools to improve service delivery, including:

• AI-assisted customer inquiry routing and classification
• Automated scheduling and calendar management tools
• AI-generated content drafts (always reviewed by humans before publication)
• Automated lead scoring and CRM workflow tools

No fully automated decisions with legal or similarly significant effects are made about individuals without human review. You have the right to request human review of any automated decision, object to automated profiling, and obtain an explanation of the logic involved. To exercise these rights, contact privacy@eds-360.com.

12. Do Not Track & Global Privacy Control

We honor Global Privacy Control (GPC) signals where technically feasible. We do not currently respond to browser "Do Not Track" (DNT) headers as no universal standard exists. California residents using GPC signals will have their opt-out of sharing/sale automatically applied.

1. Acceptance of Terms

By accessing or using EDS services, you agree to be bound by these Terms of Service and all applicable laws and regulations. If you do not agree, do not use our services.

2. Services Offered

EDS provides cybersecurity consulting, defensive training, mobile notary services, and property maintenance through our operating companies. Specific terms may apply to individual services.

3. User Accounts

• You must provide accurate and complete information
• You are responsible for maintaining account security
• You must notify us immediately of unauthorized access
• You must be 18 years or older to create an account
• One person or entity per account

4. Prohibited Activities

You may not:

• Use our services for illegal purposes
• Impersonate others or provide false information
• Interfere with or disrupt our services
• Attempt unauthorized access to systems or data
• Transmit malware, viruses, or harmful code
• Violate intellectual property rights
• Harass, abuse, or harm others

5. Intellectual Property

All content, trademarks, logos, and materials on our platforms are owned by EDS or licensed to us. You may not use, reproduce, or distribute our intellectual property without written permission.

6. Payment and Fees

• Fees for services are as stated at time of purchase
• Payment is due according to agreed terms
• We accept major credit cards and ACH transfers
• Refunds are subject to our refund policy
• We reserve the right to change fees with notice

7. Limitation of Liability

TO THE MAXIMUM EXTENT PERMITTED BY LAW, EDS SHALL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES ARISING FROM YOUR USE OF OUR SERVICES. OUR TOTAL LIABILITY SHALL NOT EXCEED THE AMOUNT PAID BY YOU IN THE 12 MONTHS PRECEDING THE CLAIM.

8. Warranties and Disclaimers

SERVICES ARE PROVIDED "AS IS" AND "AS AVAILABLE" WITHOUT WARRANTIES OF ANY KIND, EXPRESS OR IMPLIED. WE DO NOT GUARANTEE UNINTERRUPTED OR ERROR-FREE SERVICE.

9. Termination

We may suspend or terminate your access to our services at any time for violations of these terms or other reasons we deem appropriate. You may terminate your account by contacting us.

10. Dispute Resolution

Any disputes shall be resolved through binding arbitration in accordance with the rules of the American Arbitration Association. You waive the right to participate in class actions.

11. Governing Law

These terms are governed by the laws of the State of Delaware, United States, without regard to conflict of law principles.

What Are Cookies

Cookies are small text files stored on your device when you visit our website. They help us provide a better user experience and understand how our services are used.

Types of Cookies We Use

• Essential Cookies: Required for basic site functionality (authentication, security)
• Performance Cookies: Help us understand how visitors use our site (analytics)
• Functional Cookies: Remember your preferences and settings
• Marketing Cookies: Used to deliver relevant advertisements (with consent)

Managing Cookies

You can control cookies through your browser settings. Note that disabling certain cookies may affect website functionality. Most browsers allow you to:

• View and delete cookies
• Block third-party cookies
• Block all cookies (may affect functionality)
• Delete cookies when closing browser

Security Standards

As a cybersecurity-focused organization, we maintain the highest standards of data protection:

• Encryption: AES-256 for data at rest, TLS 1.3 for data in transit
• Access Controls: Role-based access with multi-factor authentication
• Monitoring: 24/7 security monitoring and incident response
• Audits: Regular third-party security assessments
• Compliance: SOC 2, NIST 800-53, ISO 27001 aligned practices

Regulatory Compliance

We comply with applicable privacy and security regulations including:

• GDPR / UK GDPR: General Data Protection Regulation (EU/UK residents)
• CPRA/CCPA: California Privacy Rights Act (as amended through 2026)
• COPPA: Children's Online Privacy Protection Act
• HIPAA: Where applicable to protected health information
• GLBA: Gramm-Leach-Bliley Act (financial data)
• VCDPA, CPA, CTDPA: Virginia, Colorado, Connecticut privacy laws
• TDPSA, FDBR, OCPA, MCDPA: Texas, Florida, Oregon, Montana (2025–2026)
• NIST Privacy Framework: Voluntary framework alignment for data governance
• EU-U.S. Data Privacy Framework: For cross-border data transfers

Breach Notification

In the event of a data breach affecting your personal information, we will notify you within 72 hours (or as required by applicable law) and provide information about the breach, its impact, and remediation steps.

For questions about this policy, to exercise your privacy rights, or to report security concerns:

Mailing Address:
Emerging Defense Solutions, LLC
Attn: Data Protection Officer
Virginia, USA
Physical address available upon written request to privacy@eds-360.com

We will respond to privacy requests within 30 days (45 days where permitted by law).

We may update this Privacy Policy from time to time. We will notify you of material changes by:

• Posting the updated policy on our website
• Updating the "Last Updated" date
• Sending email notifications for significant changes
• Requiring re-acceptance for material changes

Your continued use of our services after changes constitutes acceptance of the updated policy.