Anchor BlackBox™ Governance
Privacy Policy
Last updated: October 22, 2025
About Us & Scope
Anchor BlackBox Inc. (operating Anchor BlackBox™, "we," "us," or "our") explains here how we collect, use, disclose, and protect personal data when you visit anchorblackbox.com (the "Website"), receive our communications, attend our events, or use our services and tools. This Policy forms part of our Terms of Use.
When This Policy Applies
This Policy covers Website visitors and people who interact with our content, forms, and events. It does not apply to job applicants or our personnel, or where we act solely as a processor for a client.
Changes to This Policy
We may update this Policy to reflect legal, technical, or business changes. The "Last updated" date indicates when changes took effect. Your continued use of the Website after an update applies on a prospective basis.
Contact Information
Anchor BlackBox Inc. -- Data Protection Officer
Submit a request via our on-site form: Data Privacy Request
Personal Data We Collect
- Provided by you: name, email, phone, company, role, state/province, country/region, topics of interest, messages, event registrations.
- From third parties: service providers supporting registrations, communications, or events; public sources where lawful.
- Automatically: device/usage data (IP, browser, pages visited) as described in Cookies. We may create de-identified or aggregated data for analytics.
We do not sell or share personal information for cross-context behavioral advertising, and have not done so in the past 12 months.
How We Use Personal Data
- Operate and improve the Website and our services.
- Respond to inquiries, deliver resources, and run events.
- Send communications you request or that are compatible with our relationship (you can opt out at any time).
- Maintain security, prevent fraud, and meet legal obligations.
- Generate de-identified/aggregated insights to improve content and performance.
Legal bases vary by region and include legitimate interests, contractual necessity, consent (where required), and legal obligations.
Disclosures of Personal Data
We may disclose data to: service providers/contractors (hosting, email, analytics) under our instructions; professional advisors bound by confidentiality; authorities where required by law; and affiliates within Anchor BlackBox Inc. International transfers use Standard Contractual Clauses or equivalent safeguards.
Cookies & Similar Technologies
We use cookies and similar technologies to run the site, remember preferences, measure traffic, and improve content. For details see our Cookie Notice. Some browsers send "Do Not Track" signals; our site does not currently respond to DNT.
SMS Consent & Messaging Policy
Data Retention
We retain personal data only as long as needed for the purposes in this Policy and to meet legal/regulatory requirements. De-identified/aggregated data may be kept without time limit.
Security
We use administrative, technical, and organizational measures designed to protect personal data from loss, misuse, and unauthorized access. No method is perfectly secure. If you suspect misuse, contact legal@privacystudios.com.
Minors
This Website is intended for adults. We do not knowingly collect data from individuals under 18. If you believe a minor has provided data, contact us and we will delete it promptly.
Links to Other Sites
Our Website/emails may link to external sites governed by their own privacy policies. We are not responsible for their practices.
Your Privacy Rights (Global)
Subject to law and identity verification, you may access, correct, delete, restrict, port, or withdraw consent for your personal data. Submit requests via our Data Privacy Request form or email legal@privacystudios.com.
14.1 How to Submit a Request
Tell us which right you wish to exercise and include enough information to locate your records (e.g., the email you used with us).
14.2 Verification & Authorized Agents
We take reasonable steps to verify your identity. Authorized agents may submit requests with evidence of authority.
14.3 Appeals
If we decline your request, appeal by writing to legal@privacystudios.com with "Appeal" in the subject line. If unsatisfied, contact your state Attorney General or relevant data protection authority.
14.4 Opt-Out Signals
Where required by law, we treat a valid Global Privacy Control (GPC) signal as an opt-out of sale/sharing for that browser.
U.S. Residents' Rights
Core rights: access/know, correction, deletion, portability, and non-discrimination. Opt-out rights: targeted advertising, sale of personal data (we do not sell), and profiling for decisions with legal or similarly significant effects. Submit requests via our Data Privacy Request form or email legal@privacystudios.com.
California Notice (CCPA/CPRA)
We do not sell personal information and do not share personal information for cross-context behavioral advertising.
| Category | Sources | Purposes | Recipients |
|---|---|---|---|
| Identifiers & contact details | You; event signups; website forms | Responding to inquiries; delivering content; security/fraud prevention | Service providers; professional advisors |
| Commercial & interaction data | You; automatic collection; event tools | Operate, secure, and improve our site and services | Service providers (analytics, hosting, email) |
| Content you submit | You | Answer questions; provide support; maintain records | Service providers; professional advisors |
Your California rights: Know/Access; Correct; Delete; Portability; Opt-out of sale or sharing (not applicable); Appeal. Respond time: 45 days. We will not discriminate against you for exercising your rights.
GDPR Notice (EU/EEA)
Anchor BlackBox Inc. acts as controller for Website operations. For client projects where we act on instructions, we are a processor governed by the applicable DPA.
| Purpose | Legal Basis | Retention |
|---|---|---|
| Respond to inquiries | Legitimate interests (Art. 6(1)(f)) | As needed to address request |
| Email subscriptions | Consent or legitimate interests | Duration of subscription |
| Events and webinars | Contract; legitimate interests | Event lifecycle and limited post-event period |
| Site operation, analytics, security | Legitimate interests; consent for non-essential cookies | Cookie/log durations |
| Compliance, legal claims | Legal obligation; legitimate interests | As required by law |
International transfers outside the EEA/UK use Standard Contractual Clauses. You have the right to lodge a complaint with your local supervisory authority. Contact legal@privacystudios.com first so we can address your concerns quickly.
SaaS & Tools
- When clients upload data to our tools, we act as a processor under a data processing agreement.
- When we collect usage data to secure and improve our services, we act as a controller.
- We apply encryption in transit/at rest and retain data only as needed. Upon termination, data is deleted or de-identified per contract.
Country/Region-Specific Addenda
Supplemental provisions apply to residents of U.S. states with comprehensive privacy laws: Virginia (VCDPA), Colorado (ColoPA), Connecticut (CTDPA), Utah (UCPA), Delaware (DPDPA), Oregon (OCPA), Texas (TDPSA), Iowa, Indiana, Tennessee, Montana, Kentucky, Nebraska. Key rights include access, correction, deletion, portability, opt-out, and appeal. Anchor BlackBox Inc. applies a unified compliance framework meeting or exceeding the strongest applicable state standard.