Last updated: May 2026
This Privacy Policy describes how Alnitak Resources LLC ("Alnitak Resources," "we," "our," or "us") collects, uses, retains, and discloses personal information collected through this website (alnitakresources.com) and through related engagement pathways. This Policy applies to information collected from visitors to the website, prospective counterparties, capital partners, sovereign and multilateral counterparties, members of the public, and other individuals who interact with us through this website.
We are committed to protecting personal information and to handling it in accordance with applicable data protection law, including the General Data Protection Regulation (Regulation (EU) 2016/679) and the United Kingdom data protection regime (the "GDPR"), the California Consumer Privacy Act of 2018 as amended by the California Privacy Rights Act ("CCPA/CPRA"), the Personal Information Protection and Electronic Documents Act of Canada ("PIPEDA"), the Lei Geral de Proteção de Dados of Brazil ("LGPD"), the Protection of Personal Information Act of South Africa ("POPIA"), the Data Protection Act of Tanzania, the Data Protection and Privacy Act of Uganda, and other applicable national, state, and provincial privacy laws.
1. Information we collect
We collect personal information that you provide to us directly through this website and through related engagement processes. The categories of personal information we collect include:
Identity and contact information. Name, professional title, employer or affiliated firm, email address, telephone number, and (where you provide it) physical address.
Professional information. Information about your role, your firm's mandate, your firm's assets under management range, your accredited investor or qualified purchaser status, and other professional information relevant to evaluating mutual fit for engagement.
Engagement-related information. Information you provide in your inquiries, including the subject of your interest, the nature of your inquiry, and any context you choose to share.
Technical information. When you visit this website, we (or our hosting and infrastructure providers) automatically receive and log certain technical information, including IP address, browser type and version, operating system, referring URL, pages visited, and timestamps. This information is used for security, fraud prevention, performance monitoring, and analytics purposes. We do not use this technical information to identify individual visitors except where necessary to investigate suspected security incidents or violations of these terms.
Cookies and similar technologies. This website may use cookies, local storage, or similar technologies for essential site functionality, performance measurement, and (where applicable) analytics. We do not use third-party advertising cookies or behavioral tracking cookies. A separate Cookie Notice may be published if and when we deploy non-essential cookies.
We do not knowingly collect personal information from minors under the age of 18. If we learn that we have collected such information, we will delete it.
2. Sources of information
We collect personal information from the following sources:
Directly from you. When you submit forms on this website (newsletter signup, contact form, engagement pathway forms, data room registration), correspond with us by email or telephone, or otherwise provide information to us.
From our hosting and infrastructure providers. Technical information described above.
From third parties in limited circumstances. When verifying counterparty information for institutional engagement (such as accredited investor verification, sanctions screening, or politically-exposed-person screening), we may obtain information from third-party verification providers. We obtain such information only after you have submitted an engagement form to us, and only as part of our counterparty verification process.
3. Lawful basis for processing (GDPR, UK GDPR, and equivalent regimes)
Where the GDPR or equivalent regimes apply, we process personal information on the following lawful bases:
Legitimate interests. Most of our processing is based on our legitimate interests in operating our business, evaluating prospective counterparties, communicating with stakeholders, and protecting the security and integrity of our systems and information. We have considered our interests against the rights and freedoms of data subjects and have determined that our processing is proportionate.
Consent. Where you affirmatively subscribe to our newsletter or affirmatively elect to receive marketing communications, we process your information on the basis of your consent. You may withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.
Contract. Where processing is necessary to take steps at your request prior to entering into a potential business relationship (for example, evaluating an engagement inquiry), we process information on the basis of pre-contractual necessity.
Legal obligation. Where we are required to process information to comply with applicable law (including sanctions screening, anti-money-laundering obligations, tax reporting, or response to lawful requests from public authorities), we process on the basis of legal obligation.
4. How we use information
We use personal information for the following purposes:
- To respond to inquiries submitted through this website and to evaluate prospective engagements
- To verify the identity, accreditation status, and good standing of prospective counterparties
- To communicate operational milestones, investor updates, community impact reports, and other communications you have requested
- To operate, maintain, secure, and improve this website and our systems
- To comply with applicable law, including anti-money-laundering, sanctions, tax, and other regulatory obligations
- To investigate and respond to suspected unauthorized access, misuse of this website, or violations of our Terms of Use
- To protect our rights, property, and legal interests, and those of our counterparties, partners, and the communities where we operate
5. Disclosure of information
We do not sell, rent, or trade personal information. We disclose personal information only in the following circumstances:
Service providers. We share information with carefully selected service providers who process information on our behalf, including hosting and infrastructure providers, email and communications providers, identity and counterparty verification providers, and professional advisors (legal, accounting, audit). These providers are contractually obligated to protect the information and to use it only for the purposes we specify.
Affiliates and joint venture partners. We share information with affiliated entities, joint venture partners, and credentialed local partners involved in our platforms, only as necessary to evaluate, structure, and operate our engagements, and only under appropriate confidentiality protections.
Capital and multilateral counterparties. Where you have submitted an engagement inquiry to a specific pathway (institutional capital, sovereign, multilateral), we may share your information with the relevant teams responsible for that engagement pathway, including external counsel and verification providers, under appropriate confidentiality protections.
Legal and regulatory disclosure. We disclose information when required by applicable law, court order, regulatory request, or other legal process; to enforce our legal rights; to comply with anti-money-laundering and sanctions obligations; or to protect against fraud, abuse, or imminent harm.
Business transitions. In the event of a merger, acquisition, financing, or other corporate transaction, we may disclose information to acquirers, financing partners, or successors, subject to confidentiality protections and applicable law.
6. International transfers
Alnitak Resources LLC is incorporated in the United States. We operate platforms in multiple jurisdictions, including in Africa and Latin America, and we work with capital partners, multilateral institutions, and counterparties globally. As a result, personal information may be transferred to, stored in, and processed in jurisdictions other than the one in which it was collected, including jurisdictions whose data protection laws may differ from those of your jurisdiction.
Where we transfer personal information from the European Economic Area, the United Kingdom, or other jurisdictions that restrict cross-border transfers, we implement appropriate safeguards as required by applicable law, including European Commission Standard Contractual Clauses, the UK International Data Transfer Agreement, or other recognized transfer mechanisms.
7. Data retention
We retain personal information for as long as necessary to fulfill the purposes for which it was collected, to comply with applicable legal and regulatory obligations, to resolve disputes, and to enforce agreements. Specific retention periods vary by category of information and applicable legal requirements. Information collected for engagement evaluation that does not result in an active relationship is typically retained for a period of up to seven years for compliance and audit purposes, then deleted or anonymized.
8. Your rights
Depending on your jurisdiction, you may have the following rights with respect to your personal information:
Access. The right to obtain confirmation of whether we process your information and to obtain a copy.
Rectification. The right to have inaccurate information corrected.
Erasure. The right to have your information deleted, subject to applicable legal exceptions.
Restriction. The right to restrict our processing in certain circumstances.
Portability. The right to receive your information in a structured, commonly used format and to transmit it to another controller.
Objection. The right to object to processing based on our legitimate interests, including profiling.
Withdraw consent. Where processing is based on consent, the right to withdraw consent at any time.
Non-discrimination. Under the CCPA/CPRA and similar regimes, the right not to be discriminated against for exercising your rights.
Sale/share opt-out. Under the CCPA/CPRA, the right to opt out of the sale or sharing of personal information. We do not sell or share personal information for cross-context behavioral advertising; this right is not currently engaged but is available if our practices change.
Limit use of sensitive information. Under the CCPA/CPRA, the right to limit our use of sensitive personal information. We do not use sensitive personal information for purposes other than those permitted under the CCPA/CPRA.
Lodge a complaint. The right to lodge a complaint with a supervisory authority. In the European Union, this is your national data protection authority. In the United Kingdom, this is the Information Commissioner's Office. In California, this is the California Privacy Protection Agency.
To exercise any of these rights, please contact us through the inquiry pathway described in Section 11. We will respond within the timeframes required by applicable law.
9. Security
We implement reasonable and appropriate technical, administrative, and physical safeguards designed to protect personal information against unauthorized access, disclosure, alteration, and destruction. These safeguards include encryption of information in transit, access controls, security monitoring, and contractual confidentiality protections with service providers and counterparties. No method of transmission or storage is perfectly secure, and we cannot guarantee absolute security.
If we become aware of a security incident affecting your personal information, we will notify you and the relevant supervisory authorities to the extent required by applicable law.
10. Third-party links and services
This website may contain links to third-party websites and services that are not operated by us. This Privacy Policy does not apply to those third parties. We encourage you to review the privacy notices of any third-party website or service you visit.
11. Contact and inquiries
To exercise your rights under this Privacy Policy, to raise a privacy concern, or to ask a question about our privacy practices, please contact us through our Engage pathway:
- For institutional and capital counterparties: through the Institutional Capital pathway
- For sovereign and government counterparties: through the Sovereign Partners pathway
- For multilateral and DFI counterparties: through the Multilateral Partners pathway
- For general privacy inquiries from members of the public: through the General Contact pathway at /engage/contact/
When contacting us about a privacy matter, please clearly identify the nature of your inquiry to allow us to respond appropriately. We may need to verify your identity before responding to certain requests.
12. Changes to this Privacy Policy
We may update this Privacy Policy from time to time. The "Last updated" date at the top of this Policy indicates when it was last revised. Material changes will be communicated through this website. Your continued use of this website following any changes constitutes acceptance of the revised Policy.
13. Governing law
This Privacy Policy is governed by the laws of the State of Delaware, United States, without reference to conflict of laws principles, except that mandatory privacy laws of your jurisdiction (including the GDPR, CCPA/CPRA, and other applicable regimes) continue to apply where they grant you rights or protections that exceed those provided under Delaware law. Where mandatory law of your jurisdiction conflicts with this Policy, the mandatory law of your jurisdiction prevails to the extent of the conflict.
14. Specific notices for certain jurisdictions
California residents. California residents have specific rights under the CCPA/CPRA, including the rights described in Section 8. We do not sell personal information for monetary consideration and do not share personal information for cross-context behavioral advertising. We retain personal information in accordance with the periods described in Section 7.
European Economic Area, United Kingdom, and Switzerland residents. Data subjects in these jurisdictions have rights under the GDPR (or equivalent regime), including those described in Section 8. The data controller for the purposes of the GDPR is Alnitak Resources LLC. We have not appointed a Data Protection Officer where one is not required, but privacy inquiries may be directed through Section 11.
Brazilian residents. Data subjects in Brazil have rights under the LGPD, including those described in Section 8.
Canadian residents. Personal information of Canadian residents is processed in accordance with PIPEDA and applicable provincial privacy laws.
South African residents. Personal information of South African residents is processed in accordance with POPIA.
Tanzanian, Ugandan, and other African jurisdictions. Personal information of residents of jurisdictions where we operate platforms is processed in accordance with applicable national data protection laws, including the Data Protection Act of Tanzania and the Data Protection and Privacy Act of Uganda.
If your jurisdiction is not specifically named above and you have questions about how we handle your personal information under your local law, please contact us through Section 11.
This Privacy Policy is provided in good faith and in accordance with applicable law. It is not legal advice and does not create a contractual relationship between you and Alnitak Resources LLC. For specific questions about your rights, you should consult qualified counsel in your jurisdiction.