Privacy Policy
The Black-Owned Directory (“Company,” “we,” “us,” or “our”) is committed to protecting and respecting your privacy. This Privacy Policy outlines our practices concerning the collection, use, and disclosure of personal data when you use our website, theblackowneddirectory.com (the “Website”), and tells you about your privacy rights and how the law protects you.
1. Introduction
At The Black-Owned Directory, your privacy is a top priority. We recognize that the security of your personal data is fundamental to gaining and maintaining your trust. This Privacy Policy aims to provide you with clear, transparent information about how we collect, use, and safeguard your personal information in full compliance with applicable privacy regulations, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).
2. Scope and Data Controller
This Privacy Policy applies to all personal data collected through your use of the Website and related services. The Black-Owned Directory acts as the data controller for the purposes of GDPR and similar legislation, meaning we determine the purposes and means of processing your personal data. Users residing in California are protected under the CCPA, and your rights are addressed specifically within this Policy.
3. Categories of Data Processed
We may collect, store, and process the following categories of personal data:
a) Usage Data
This includes information about your interactions with the Website, including your IP address, browser type and version, pages visited, access times, referral URLs, and other diagnostic data.
b) Account Data
Personal data you provide during the creation of an account, including your full name, email address, phone number, and billing or shipping address.
c) Profile Data
Information associated with your user profile such as preferences, business or consumer activities, purchase history, saved products or services, and behavioral data generated from your use of the Website.
d) Communication Data
Information related to communication exchanges with us, including when you contact customer support or submit inquiries, such as message content, submission time, and contact history.
e) Technical Data
This includes data about the devices and technology you use to access the Website, such as device type, operating system, browser settings, time zone, and screen resolution.
f) Transaction Data
Details of products or services you purchase through theblackowneddirectory.com, including payment method, transaction amount, fulfillment status, and delivery information. Note: We do not directly process credit/debit card information. Such data is handled by secure, PCI-compliant third-party payment processors.
g) Preference Data
Marketing and communication preferences, including opt-in or opt-out selections, as well as your indicated interests in specific categories or types of products, services, or promotions.
4. Legal Bases for Processing
We rely on the following lawful bases under the GDPR and corresponding CCPA provisions to collect and process your personal data:
– Consent: Where you have given clear, affirmative consent for us to process your personal data for a specific purpose, such as receiving marketing emails.
– Contractual Necessity: Where processing is required to perform a contract with you (e.g., provision of services or customer support).
– Legal Obligation: Where we are legally required to process your data under applicable laws.
– Legitimate Interests: Where necessary for our legitimate business interests, provided that such interests are not overridden by your data protection rights (e.g., to ensure the Website is secure and functions properly).
5. Your Rights
Under GDPR and CCPA, you have the following data subject rights, subject to limitations:
– Right of Access: You have the right to request access to the personal data we hold about you.
– Right to Rectification: You may request correction of inaccurate, incomplete, or outdated personal data.
– Right to Erasure (“Right to Be Forgotten”): You may request deletion of your personal data, subject to certain conditions.
– Right to Restrict Processing: You may request that we limit the way we process your personal data, under certain circumstances.
– Right to Data Portability: You may request a copy of your personal data in a structured, commonly used format for transfer to a third party.
– Right to Withdraw Consent: You may withdraw your consent at any time where processing is based on your consent.
– Right to Opt Out of Sale (CCPA): California residents may request that their personal data not be sold to third parties.
To exercise any of these rights, please contact us at [email protected]. We will respond to verified requests promptly, in accordance with applicable laws.
6. Security Measures
We implement appropriate technical and organizational security measures to safeguard your personal data. This includes but is not limited to:
– Encryption of data in transit and at rest
– Role-based access controls and user authentication
– Regular security audits and vulnerability assessments
– Routine data backups and disaster recovery procedures
– Employee data protection training
While we take reasonable steps to ensure data security, no system is entirely fail-proof; users are encouraged to safeguard their login credentials.
7. International Transfers
If you are accessing theblackowneddirectory.com from a region outside of where our servers or third-party processors are located, please note that your information may be transferred to and processed in countries that may not provide the same level of data protection. Where required, we use Standard Contractual Clauses approved by the European Commission or rely on other permissible safeguards under applicable data protection law for lawful international transfers.
8. Data Retention
We retain personal data only as long as necessary to fulfill the purposes outlined in this Privacy Policy, including to comply with legal, regulatory, tax, accounting, or reporting requirements. The retention periods for various categories of data are as follows:
– Usage Data: retained up to 24 months
– Account & Profile Data: retained for the duration of the account plus up to 12 months after closure
– Communication & Support Data: retained for up to 3 years
– Transaction Data: retained for a minimum of 7 years, per financial auditing requirements
– Preference Data: retained until you update your selections or request deletion
We securely delete or anonymize personal data after the retention period expires.
9. Cookie Policy
The Website utilizes cookies and similar technologies to enhance user experience. Cookies are small data files stored on your device when you visit theblackowneddirectory.com. We use the following types of cookies:
– Essential Cookies: Required for core functionality (e.g., account authentication, security).
– Functional Cookies: Enable enhancements such as remembering your preferences and providing personalized features.
– Analytics Cookies: Help us understand how users interact with the Website (e.g., page visits, session stats).
– Performance Cookies: Improve load speeds and optimize performance.
10. Cookie Management and GDPR/CCPA Compliance
You may manage your cookie preferences at any time via our cookie consent tool available on the Website or directly through your browser settings. Under GDPR and CCPA, you have the right to decline non-essential cookies and opt out of the “sale” of personal data, where applicable.
We honor Do Not Track (DNT) signals and provide opt-in consent prior to setting any non-essential cookies for users covered by the GDPR.
11. Children’s Privacy
The Website is not intended for or directed toward children under 13 years of age. We do not knowingly collect or solicit personal data from children under 13. If you believe that a child has provided us with personal data, please contact us at [email protected] so we may promptly investigate and take appropriate steps, including removal of the data.
12. Policy Updates
We reserve the right to modify or update this Privacy Policy at any time to reflect changes to our practices, legal or regulatory requirements, or technological enhancements. When material changes occur, we will provide notice via the Website or other appropriate communication channels. You are encouraged to review this policy periodically.
13. Contact Us
If you have any questions, concerns, or requests regarding your privacy or this Privacy Policy, you may contact us using the details below:
Email: [email protected]
Website: https://theblackowneddirectory.com
We are committed to ensuring compliance with applicable privacy laws and protecting your personal data. If you have concerns about how your data is being processed, please reach out to us directly so that we may address your inquiry promptly.