Black Business Credit and Capital - BlackCorporations.Online

Black Business Credit & Capital

Privacy Policy

Effective date: May 2, 2026

Controller

Black Business Credit & Capital
76 Winnet Drive, Dayton, Ohio 45415
Phone: 323-452-5225
Email: info@blackstock.exchange

Scope

This Privacy Policy explains how we collect, use, disclose, and protect personal information when you visit blackcorporations.online and when you use our business formation and related services.

Categories of Personal Data We Collect

  • Account and identity: name, email, phone number, address, date of birth (if provided), government identifiers (e.g., SSN/EIN) when required for filings.
  • Payment and billing: payment method tokens, billing address, transaction records. We do not store full card numbers; payments are processed by Square and Cash App.
  • Service and transaction: company formation details, registered agent data, uploaded documents.
  • Communications: support emails, messages, and call records (if recorded).
  • Usage and technical: IP address, device identifiers, browser type, pages visited, cookies, and log data.

Sources of Data

We collect data directly from you, from third-party service providers (e.g., payment processors), and from public/business registries as required to complete filings.

Purposes of Processing

  • To provide and operate services and complete business filings.
  • To process payments and maintain billing records.
  • To communicate about your account and provide customer support.
  • For security, fraud prevention, and legal compliance.
  • For internal analytics and product improvement (with consent where required).
  • For marketing communications where you have opted in (in-house marketing only).

Third-Party Recipients and Subprocessors

We use third-party services to provide our services. Current vendors include:

VendorRoleData Processed
SquarePayment processorPayment tokens, billing address, transaction data
Cash AppPayment processorPayment tokens, billing address, transaction data
VercelHosting & infrastructureIP address, request logs, technical data
In-house marketingMarketingEmail, name (opt-in only; no external ad networks)

We maintain Data Processing Addenda with subprocessors where required. See our Data Processing Addendum for more details.

International Transfers

Data may be processed in the United States and other jurisdictions. Where transfers outside your jurisdiction occur, we rely on appropriate safeguards such as standard contractual clauses, adequacy decisions, or your consent. Our primary operations are based in Dayton, Ohio, USA.

Data Retention

We retain account and transaction records necessary to provide services and meet legal and tax obligations (generally up to 7 years for billing/tax records under Ohio and federal law). Other personal data are retained only as long as needed for stated purposes or as required by applicable law.

Your Rights

Depending on your jurisdiction, you may have rights to access, correct, delete, restrict or object to processing, request portability, and withdraw consent at any time. To exercise your rights:

We will verify requests using reasonable steps and respond within applicable timeframes (45 days for GDPR; 45 days for CCPA/CPRA with a possible 45-day extension).

CCPA/CPRA Disclosures (California Residents)

We disclose categories of personal information collected and the purposes for which they are used throughout this Policy. We do not knowingly sell personal information. If we share or sell personal information in the future, a “Do Not Sell or Share My Personal Information” option will be provided. To exercise your California rights, use the Do Not Sell or Share link in the footer or submit a DSAR request.

Security

We implement administrative, technical, and physical safeguards designed to protect personal data appropriate to the risk. Payments are processed by PCI-compliant processors (Square, Cash App); we do not store full card data on our servers. For more details, see our Security Statement.

Breach Notification

We will notify affected individuals and regulators as required by applicable law (including Ohio data breach notification law, ORC § 1349.19, and other applicable state and federal requirements) in the event of a data breach, within legally required timelines.

Children's Data

Our services are for businesses and adults (18+). We do not knowingly collect personal information from children under 13. If we learn we have collected such information, we will take steps to delete it promptly. Contact us at info@blackstock.exchange if you believe we have collected data from a minor.

Automated Decision-Making

We do not use automated decision-making that produces legal or similarly significant effects without human review, except automated validations required for filings or payment processing (e.g., address verification, fraud detection by our payment processors).

Changes to This Policy

We will post updates with a revised effective date. Significant changes will be communicated via prominent notice on our website or by direct communication. We encourage you to review this Policy periodically.

Contact

Black Business Credit & Capital
76 Winnet Drive, Dayton, Ohio 45415
Phone: 323-452-5225
Email: info@blackstock.exchange