Privacy Policy

Introduction

BLACK SHEEP OI, LLC ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard information when you visit our website at blacksheephq.ai (the "Site").

Information We Collect

Contact Form Data

When you use our contact form, we collect:

• Name: To address you in our response
• Email Address: To respond to your inquiry
• Phone Number (optional): If you provide it for follow-up
• Message Content: Your inquiry or feedback

Partnership & Conference Forms

Our partnership enquiry form collects your name, email, and optionally your phone number, company, job title, and message. Our conference form collects your name, email, and optionally your phone number and your responses to two short questions. We also record which link referred you, so we know which event or campaign an enquiry came from.

Shop & Order Data

When you make a purchase through our shop, we collect:

• Name and Email Address: To confirm and communicate about your order
• Shipping Address: To deliver your order
• Phone Number (optional): For delivery questions
• Order Details: The items you purchased

Payments are processed entirely by Stripe. Your card number is entered on Stripe's secure checkout page and never touches our systems. We do not collect, see, or store payment card numbers. Order details (name, email, shipping address, items) are held in your Stripe payment record and sent to our team by email so we can fulfill your order, provide support, and meet tax and accounting obligations. We do not operate a separate order database. Shipping details are shared with our apparel fulfillment vendor solely to produce and ship your order, never for marketing. We send transactional emails (order confirmation, shipping notification) related to your purchase.

Automatic Information

Our hosting provider (Vercel) may automatically collect standard server logs including IP addresses, browser type, and access times for security and performance monitoring. We do not use this data for tracking or profiling.

What We Don't Collect

We believe in minimal data collection. Our website:

• Does not use cookies for tracking or advertising
• Does not use tracking pixels or third-party advertising
• Does not create user accounts or store login credentials (shop purchases use guest checkout)
• Does not collect or store payment card numbers: card entry happens only on Stripe's secure checkout page
• Does not sell or share your data with third parties for marketing

We use privacy-friendly Vercel Analytics to understand aggregate traffic patterns (page views, visitor counts, referral sources). This service does not use cookies, does not track individuals, and does not collect personal information.

How We Use Your Information

Information submitted through our contact, partnership, and conference forms is used solely to:

• Respond to your inquiry or feedback
• Communicate with you about BLACKSHEEP OI products or services you've expressed interest in
• Improve our website and services based on feedback

Third-Party Services

Email Delivery (Resend)

Contact form submissions are delivered via Resend (resend.com), a transactional email service. Your contact information is transmitted to Resend solely for email delivery purposes. Resend's privacy policy is available at resend.com/legal/privacy-policy.

Payments (Stripe)

Shop payments are processed by Stripe on Stripe's hosted checkout page. Stripe collects your payment card information directly; we never receive it. Stripe's privacy policy is available at stripe.com/privacy.

Lead Intake (Internal CRM, Supabase)

Submissions to our partnership enquiry form (name, email, phone, company, job title, message, and referring link) are transmitted over an authenticated connection to our internal CRM, which is hosted on Supabase and protected by access controls and encryption in transit. Contact and conference form submissions are not sent to the CRM. Supabase's privacy policy is available at supabase.com/privacy.

Order Fulfillment

Shipping details for shop orders are shared with our apparel fulfillment vendor through their access-controlled order portal, solely to produce and ship your order. Our fulfillment vendor is not permitted to use your information for any other purpose.

Hosting (Vercel)

Our website is hosted on Vercel. Vercel may collect standard server logs for security and performance purposes. Vercel's privacy policy is available at vercel.com/legal/privacy-policy.

Analytics (Vercel Analytics)

We use Vercel Analytics to collect aggregate, anonymous website usage data. This service is privacy-friendly: it does not use cookies, does not collect personal information, and does not track individual users across sites. Data collected includes page views, visitor counts, referral sources, and geographic regions (country-level only).

Content Management (Sanity)

Our website content is managed through Sanity CMS. Sanity does not collect visitor data; it only stores our website content. Sanity's privacy policy is available at sanity.io/legal/privacy.

Data Retention

Contact and conference form submissions are forwarded to our team by email and are not written to any database. Emails are retained in our business email systems according to standard business practices.

Partnership enquiries are additionally stored in our internal CRM so we can track and follow up on the enquiry, and are retained there for as long as the business relationship or prospect remains active.

Shop order records live in two places: your Stripe payment record, and the order notification email in our business email systems. We do not operate a separate order database. Both are retained for as long as needed to fulfill and support your order and to meet tax, accounting, and legal record-keeping requirements. You may request deletion of your personal data at any time; we will honor it except where retention is required by law.

Your Rights

Depending on your location, you may have the following rights regarding your personal data:

For All Users

• Access: Request information about data we hold about you
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your data from our systems

For California Residents (CCPA)

California residents have the right to know what personal information we collect and how it's used, request deletion of personal information, and opt-out of the sale of personal information. We do not sell personal information.

For EU/EEA Residents (GDPR)

EU/EEA residents have additional rights including data portability and the right to restrict processing. Our legal basis for processing contact form data is legitimate interest (responding to your inquiry); for shop orders it is performance of a contract (fulfilling your purchase).

Security

We implement appropriate technical and organizational measures to protect your data, including:

• HTTPS encryption for all data transmission
• Rate limiting on contact form submissions
• Input validation and sanitization
• Security headers (CSP, HSTS, etc.)
• Regular security updates and patching

Children's Privacy

Our website is not directed at children under 13 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last Updated" date. We encourage you to review this policy periodically.

Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us: