Privacy Policy
This Privacy Policy explains how Product Profits Ltd ("Company", "we", "us", "our") collects, uses, shares, and protects personal data when you visit our website at blackboxbusiness.systems (the "Site") or use our services (the "Services").
We are the data controller for the personal data described in this policy. If you have questions, contact us at the details in Section 14.
1. Who We Are
Product Profits Ltd, a company registered in England and Wales under company number [COMPANY NUMBER], with its registered office at 167-169 Great Portland Street, 5th Floor, London, W1W 5PF, United Kingdom. Contact email: james@b2bgrowth.systems.
2. What We Collect
We collect the following categories of personal data:
- Information you give us. Your name, email address, company name, phone number, job title, and any other information you provide when you request an audit, book a session, subscribe, or contact us.
- Account information. If you create an account, we collect your login credentials and account preferences.
- Payment information. If you purchase a paid service, our payment processor collects your payment card details. We do not store full card numbers on our systems.
- Communications. Records of your correspondence with us, including emails, support requests, and any content you submit through the Services.
- Automatically collected information. When you visit the Site we may collect your IP address, browser type and version, device type, operating system, referring URL, pages viewed, and the dates and times of your visits.
- Cookies and similar technologies. We use cookies and similar technologies as described in our Cookie Policy.
3. How We Use Your Information
We use your personal data to:
- Provide, operate, and maintain the Services;
- Respond to your enquiries and fulfil your requests;
- Process payments and manage subscriptions;
- Send you service messages, and, where you have consented, marketing communications;
- Improve the Site and the Services;
- Detect, prevent, and address technical issues, fraud, and abuse;
- Comply with our legal and regulatory obligations.
4. Our Legal Basis for Processing
Where the General Data Protection Regulation (GDPR) or UK GDPR applies, we rely on the following legal bases:
- Contract. To perform our contract with you or take steps at your request before entering into one.
- Consent. Where you have given us clear consent, for example to send you marketing communications or to set non-essential cookies. You may withdraw consent at any time.
- Legitimate interests. To operate and improve our business, prevent fraud, and secure our Services, where those interests are not overridden by your rights and freedoms.
- Legal obligation. To comply with laws that apply to us.
5. How We Share Your Information
We do not sell your personal data. We share personal data only as follows:
- Service providers. With vendors who perform services on our behalf, such as hosting, payment processing, email delivery, analytics, and customer support. These providers are bound to process data only on our instructions.
- Advertising and analytics partners. Where you consent, with partners such as Meta, Google, LinkedIn, and Reddit, for the purpose of measuring and targeting advertising.
- Legal and safety. Where required by law, regulation, court order, or to protect the rights, property, or safety of the Company, our users, or others.
- Business transfers. In connection with a merger, acquisition, financing, or sale of assets, in which case we will notify you of any change in ownership or use of your data.
6. International Transfers
We may transfer personal data to countries outside your own. Where we transfer data out of the European Economic Area or the United Kingdom, we rely on appropriate safeguards, including the European Commission's Standard Contractual Clauses or an equivalent mechanism, to protect your data.
7. How Long We Keep Your Information
We keep personal data only as long as necessary for the purposes set out in this policy, to comply with our legal obligations, resolve disputes, and enforce our agreements. When data is no longer needed, we delete or anonymise it.
8. Your Rights
Depending on where you live, you may have the following rights:
- Access. Request a copy of the personal data we hold about you.
- Correction. Ask us to correct inaccurate or incomplete data.
- Deletion. Ask us to delete your personal data.
- Restriction. Ask us to restrict how we process your data.
- Portability. Ask us to transfer your data to another organisation.
- Objection. Object to processing based on our legitimate interests or for direct marketing.
- Withdraw consent. Withdraw any consent you have given at any time.
To exercise any of these rights, contact us using the details in Section 14. We will respond within the timeframe required by applicable law. You also have the right to lodge a complaint with your local data protection authority (in the UK, the Information Commissioner's Office).
9. California Privacy Rights
If you are a California resident, the California Consumer Privacy Act (CCPA), as amended by the CPRA, gives you the right to know what personal information we collect, use, and disclose; to request deletion of your personal information; to request correction of inaccurate information; to opt out of the sale or sharing of your personal information; to limit the use of your sensitive personal information; and to not be discriminated against for exercising your rights.
We do not sell your personal information. To exercise any of these rights, contact us using the details in Section 14.
10. Other US State Privacy Rights
Residents of certain other US states, including Virginia, Colorado, Connecticut, and Utah, may have similar rights to access, correct, delete, and obtain a copy of their personal data, and to opt out of targeted advertising and the sale of personal data. To exercise these rights, contact us using the details in Section 14.
11. Cookies
We use cookies and similar technologies on the Site. For details on the types of cookies we use and how to manage them, see our Cookie Policy.
12. Security
We maintain reasonable administrative, technical, and physical safeguards designed to protect personal data against unauthorised access, alteration, disclosure, or destruction. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
13. Children's Privacy
The Services are not directed to children under the age of 16, and we do not knowingly collect personal data from children. If we become aware that we have collected personal data from a child without appropriate consent, we will take steps to delete it.
14. Contact Us
For any question about this Privacy Policy or your personal data, contact:
Product Profits Ltd
167-169 Great Portland Street, 5th Floor, London, W1W 5PF, United Kingdom
Email: james@b2bgrowth.systems
15. Changes to This Policy
We may update this Privacy Policy from time to time. We will post the updated policy on this page and revise the "Last updated" date. Where changes are material, we will provide additional notice.