Privacy
Short version: this website sets no cookies, runs no analytics and contains no third-party code of any kind. The only personal data we hold is what you type into the enquiry form and send us.
1 · Who we are
Hulk Defense Inc., Toronto, Ontario, Canada, is the controller of any personal data collected through this site. For any privacy question, or to exercise any right described below, write to info@hulkdefense.com.
2 · What this site does not do
There is no analytics package, no tag manager, no advertising or remarketing network, no tracking pixel, no social media button, no embedded video, no chat widget, no A/B testing tool and no third-party script of any kind on any page.
No cookies are set by this website, and no local storage or similar technology is used to identify you or to persist anything between visits. There is therefore no cookie banner, because there is nothing to consent to.
Fonts, stylesheets, images and every other asset are served from our own server. Nothing on this site causes your browser to contact a content delivery network, a font service or any other third party, so no third party learns that you visited.
3 · Server logs
Our web server records standard access logs for security, abuse prevention and diagnostics: IP address, date and time, the URL requested, HTTP status code, bytes served, referrer and user agent string.
Retention: 90 days, after which logs are deleted. Lawful basis: legitimate interests in keeping the service secure and available. Logs are not used to build a profile, are not combined with any other data set, are not used for marketing and are not sold or shared.
4 · The enquiry form
If you send an enquiry we receive the fields you complete: audience type, area of interest, name, organisation, email address, country and your message. The form also carries a hidden anti-spam field, which should be left empty and is not personal data.
Why we hold it. To answer you; to assess and record requests for technical documentation, including export-control and end-use assessment; and to keep a record of who has received which documents under which non-disclosure agreement.
Lawful basis. Steps taken at your request prior to entering a contract, our legitimate interests in responding to business enquiries, and — for export and end-use records — compliance with a legal obligation.
Retention. Enquiries that do not progress are deleted within 24 months. Where documents have been released under an NDA, the release record is kept for as long as the NDA and any applicable export-control record-keeping obligation require.
We do not sell your data, do not share it with data brokers, do not add you to a marketing list and do not send newsletters or automated marketing.
5 · Who else sees it
Enquiries are read by our own staff. The site and the mailbox run on infrastructure provided by our hosting and email providers, who process data on our instructions as processors under contract. Where an enquiry leads to a technical discussion, relevant details may be shared with a named subcontractor or partner under confidentiality — we will tell you if that applies.
We may disclose information where required by law, including in response to a lawful request from a regulator or export-control authority.
6 · International transfer
We are based in Canada and our infrastructure is hosted in the United States. If you contact us from outside those countries, your data will be transferred to and processed in them. Where that transfer is from the United Kingdom, the European Economic Area or another jurisdiction with transfer restrictions, we rely on appropriate safeguards including standard contractual clauses with our providers.
7 · Your rights
Subject to the applicable law where you are, you may ask us to give you a copy of the personal data we hold about you; correct it if it is wrong; delete it; restrict or object to our processing of it; or provide it in a portable form. You may also withdraw consent where we rely on consent.
Write to info@hulkdefense.com. We will respond within 30 days. There is no charge. We may need to verify your identity before acting on a request.
If you are in Canada you may complain to the Office of the Privacy Commissioner of Canada. In the United Kingdom, to the Information Commissioner's Office. In the European Economic Area, to your national supervisory authority. We would rather you came to us first.
8 · Security
The site is served over HTTPS with HTTP Strict Transport Security. The server carries a restrictive content security policy which, among other things, prevents third-party code from running on these pages. Access to enquiry data is limited to staff who need it. No system is perfectly secure, and we do not claim otherwise.
9 · Children
This site is directed at defence, government and commercial organisations. It is not intended for children and we do not knowingly collect data from them.
10 · Changes
If we change this notice we will change the date below. Material changes to how we handle enquiry data will be described here rather than made silently.
Last updated 16 August 2026.