Privacy policy

The data controller for personal data collected through this website is Division5.

• Division 5 sh.p.k.
• Rruga Lord Bajron, Tirana, Albania
• Email: team@division5.agency
• Phone: +355 67 685 7951

We only collect what you actively send us through one of the forms below, plus minimal technical data needed to keep the site running.

Contact form

When you reach out via the Contact page we collect your first and last name, email address, company name, and the message you write. We use it to respond to your enquiry.

Team builder form

When you request a team via the Team Builder page we collect your company name, email, project requirements, budget, start date, project type, additional notes, and the team composition you sketched. We use it to scope the engagement.

Job applications

When you apply for a role we collect your first and last name, email, phone, availability, expected compensation, referral source, engagement type, and the CV you upload. We use it to evaluate your application.

Analytics (only if you accept cookies)

If you click Accept on the cookie banner we load Google Analytics 4 with IP anonymisation enabled. It records page views, the path you took through the site, and basic device metadata. Without your consent, Google Analytics never loads.

• To respond to your enquiry, scope a project, or evaluate your application.
• To verify legitimate interest before sharing your details with the hiring team or partner companies.
• To understand which pages and journeys are working (analytics — consent-gated).

We do not make automated decisions about you. A human at Division5 reviews every contact, team request, and job application before any next step.

• Explicit consent — for analytics, and for storing your job application beyond the immediate evaluation.
• Pre-contractual necessity — for processing your Team Builder enquiry and your job application up to the hiring decision.
• Legitimate interest — for responding to contact-form messages and for the minimal technical logs needed to keep the site available.

Beyond Division5 staff who handle your submission directly, your data may be shared with:

• Division5 internal teams (sales, recruitment, leadership) who handle the substance of your enquiry.
• Our application backend at app.division5.co — the d5 management system. Same legal entity, hosted in Albania.
• Google LLC (United States) — only if you accept cookies, for analytics. Transfers governed by Google's Data Processing Addendum + EU Standard Contractual Clauses.

Your data stays in Albania except for the Google Analytics path (United States) which is consent-gated. We do not use Google Analytics until you click Accept.

• Contact form submissions: Kept for up to 24 months after the last meaningful exchange, then deleted.
• Team Builder requests: Kept for up to 24 months for ongoing engagements; 12 months for opportunities that did not progress.
• Job applications: Kept for up to 24 months if you were hired (then transferred to the employee record); up to 12 months otherwise. Deleted earlier on request.
• Analytics events: Subject to Google's default retention (currently 14 months).

Under Albanian Law No. 124/2024 and the EU GDPR you can ask us to:

• Show you the personal data we hold about you.
• Correct anything that is wrong.
• Delete your data (right to be forgotten).
• Give you a copy of your data in a portable format.
• Stop processing your data for any specific purpose.
• Withdraw any consent you previously gave us (the cookie banner is one consent surface).

To exercise any of these rights, email team@division5.agency.

If you think we are not handling your data correctly, you can complain to the Albanian Information and Data Protection Commissioner at idp.al.

We use the minimum amount of client-side storage required to remember your cookie-consent choice and your language preference. Optional analytics cookies (Google Analytics 4) only load after you accept on the banner.

You can change your mind at any time by clearing the site's local storage in your browser — the banner will reappear and you can choose again.

We serve the site over HTTPS with HSTS enabled. Form submissions are protected by spam detection and rate limiting. Internally we follow the principle of least privilege for access to submitted data.

This site is not intended for users under 18. We do not knowingly process the personal data of minors. If you believe we hold data about a minor, contact us and we will delete it.

When we materially change how we handle your data, we bump the version number above and re-prompt the cookie banner. You are welcome to subscribe to our newsletter or check this page periodically.