Privacy Policy

1.Information We Collect

The information we collect depends on how you interact with Black Skull and the services you use.

When you contact us, request information, book a consultation, submit a service inquiry, or otherwise communicate with us, we may collect information such as your name, business name, job title, email address, telephone number, business address, and the details of your request.

If you become a client, we may collect additional information necessary to establish and manage our business relationship. This may include account and billing information, contract details, service requirements, communications, operational instructions, and information relating to the systems, processes, employees, customers, vendors, or other business activities involved in the services we provide.

When you apply for employment or participate in a recruitment process, we may collect information such as your name, contact details, resume or CV, employment history, education, qualifications, skills, references, availability, interview information, compensation expectations, and other information you choose to provide during the recruitment process.

We may also collect technical information when you visit our website. Depending on the technologies used on the website, this may include your IP address, browser type, device type, operating system, pages visited, referring website, approximate location, date and time of access, and information about how you interact with our website.

2.Information Provided by Our Clients

Because Black Skull provides business process, back-office, staffing, administrative, and operational services, our clients may provide us with personal information relating to their own customers, employees, candidates, vendors, contractors, business partners, or other individuals.

For example, a client may provide information to us so that we can perform data entry, CRM administration, scheduling, customer support, recruitment, document management, account administration, or another contracted business function.

Where we process personal information on behalf of a client, we generally process that information according to the client's instructions and the terms of the applicable service agreement or data processing agreement.

In these circumstances, the client may determine why the information is being processed and what information we are authorized to process. Our role may therefore be that of a service provider, processor, contractor, or similar role under applicable privacy law.

If you have a privacy request relating to information that Black Skull processes solely on behalf of one of our clients, we may direct your request to that client or assist the client in responding to the request, depending on the applicable law and contractual arrangement.

3.How We Use Personal Information

We use personal information only for legitimate business purposes and as permitted by applicable law.

Depending on the circumstances, we may use information to respond to inquiries, provide requested services, communicate with clients, manage accounts and contracts, process payments, provide administrative and operational support, recruit and staff personnel, coordinate onboarding, maintain business records, provide customer support, manage service delivery, and improve our internal processes.

We may also use information to maintain the security of our systems, detect and prevent fraud or unauthorized activity, investigate incidents, enforce agreements, comply with legal obligations, resolve disputes, and protect our legal rights.

Where permitted by law, we may use contact information to send service-related or business communications. Marketing communications will be handled in accordance with applicable laws and any preferences or consent requirements that apply.

4.Legal Basis for Processing

Where privacy laws require us to identify a legal basis for processing personal information, we may rely on one or more applicable legal bases depending on the circumstances.

These may include processing that is necessary to perform a contract or take steps at your request before entering into a contract, comply with a legal obligation, pursue legitimate business interests, protect legal rights or safety, or process information based on your consent where consent is required.

Where we rely on legitimate interests, those interests may include providing and improving our services, managing our client relationships, maintaining business operations, protecting our systems, preventing fraud, and communicating with clients and prospective clients.

The specific legal basis may vary depending on the type of information, the purpose of processing, and the jurisdiction in which the individual is located.

5.Recruitment and Staffing Information

Black Skull provides recruitment and staffing services, including candidate sourcing, screening, interview coordination, onboarding support, and the placement or management of dedicated personnel.

If you apply for a position with Black Skull or are considered for a position or staffing opportunity through our services, we may process information contained in your application, resume, professional profile, communications, interviews, references, and other recruitment materials.

We may use this information to assess qualifications, communicate with candidates, coordinate recruitment activities, match candidates with relevant opportunities, support onboarding, and meet legal or contractual requirements.

We will not use recruitment information for unrelated purposes except where permitted or required by applicable law.

6.Sensitive and Confidential Information

Some services provided by Black Skull may require us to handle information that is confidential or potentially sensitive.

For example, clients may provide information relating to employees, customers, financial activities, business operations, healthcare administration, property records, technology infrastructure, or other confidential business matters.

We process sensitive or special-category information only where permitted by applicable law and where it is necessary for the relevant service, contractual relationship, legal obligation, or other permitted purpose.

Where Black Skull processes sensitive information on behalf of a client, the applicable client agreement, data processing agreement, or other contractual arrangement may establish additional requirements concerning how that information must be handled.

Clients remain responsible for ensuring that they have the appropriate legal basis, notices, permissions, or other authority to provide personal information to Black Skull for processing.

7.Healthcare and Regulated Information

Black Skull may provide administrative support to healthcare or clinical businesses, which may involve processing information relating to patient intake, scheduling, billing administration, records, or other healthcare-related operations.

Where such information is handled on behalf of a healthcare client, the processing will be governed by the applicable service agreement and any required data protection, confidentiality, security, or healthcare-specific agreements.

Where applicable, Black Skull may enter into additional contractual arrangements required for the handling of regulated information, including a Business Associate Agreement or similar agreement.

Any statement regarding HIPAA compliance, healthcare privacy, or other regulatory compliance applies only to services and circumstances for which the relevant requirements have been established and agreed.

8.Information Sharing and Disclosure

We may share personal information when necessary to provide our services, operate our business, comply with legal requirements, or protect our rights.

Depending on the circumstances, information may be accessible to authorized Black Skull employees, contractors, staffing personnel, professional advisers, technology providers, hosting providers, CRM providers, payment processors, communication platforms, security providers, analytics providers, and other service providers that support our operations.

We may also disclose information when required by law, legal process, court order, government request, or other lawful authority. We may disclose information when reasonably necessary to investigate fraud, security incidents, violations of agreements, or other unlawful activity, or when necessary to protect the rights, property, or safety of Black Skull, our clients, our users, or others.

We do not sell personal information simply because we use third-party service providers. Where applicable law gives individuals specific rights concerning the sale or sharing of personal information, those rights will be addressed in accordance with the requirements applicable to the individual and our actual data practices.

9.Service Providers and Third-Party Technology

Black Skull relies on third-party technology and service providers to operate portions of its website and business.

These providers may include companies that provide website hosting, cloud storage, CRM systems, communications, payment processing, analytics, cybersecurity, recruitment tools, productivity software, automation platforms, and other business technologies.

Where a third party processes personal information on our behalf, we take reasonable steps to require that the information is handled for appropriate purposes and protected in accordance with applicable contractual and legal requirements.

Third-party providers may have their own privacy policies and terms governing their services. We encourage you to review those policies where appropriate.

10.Artificial Intelligence and Automated Technologies

Black Skull may use software, automation, artificial intelligence, and other technology to support business operations and deliver certain services.

Depending on the service, technology may be used for tasks such as workflow automation, document processing, data organization, reporting, administrative tasks, process management, or other operational functions.

Where personal information is processed through an AI or automated system, the use of that technology will be subject to the applicable service requirements, contractual restrictions, and privacy and security obligations.

We may use third-party technology providers to support AI or automated functions. Where applicable, we will take reasonable steps to use providers and configurations appropriate for the nature of the information being processed.

AI-generated or automated outputs may require review and verification before they are relied upon for business, employment, financial, legal, healthcare, or other significant decisions.

Unless specifically agreed otherwise, Black Skull does not represent that automated or AI-generated information will always be accurate, complete, current, or suitable for a particular purpose.

Where applicable law provides individuals with rights concerning solely automated decision-making or profiling, we will handle those rights in accordance with the requirements that apply to the relevant processing activity.

11.International Data Transfers

Because Black Skull provides technology-enabled services, personal information may be accessed, stored, or processed in countries other than the country in which the information was originally collected.

Where personal information is transferred across national borders, we will take reasonable steps to ensure that the transfer is conducted in accordance with applicable privacy and data protection laws.

Depending on the applicable jurisdiction, this may include contractual safeguards, adequacy mechanisms, approved transfer arrangements, or other legally recognized safeguards.

Specific international transfer arrangements may also be addressed in a client's service agreement or Data Processing Agreement.

12.Data Security

We take reasonable administrative, technical, and organizational measures designed to protect personal information against unauthorized access, use, alteration, disclosure, loss, or destruction.

Depending on the nature of the information and services involved, these measures may include access controls, authentication requirements, restricted system permissions, confidentiality obligations, secure information handling procedures, security monitoring, data backups, vendor controls, and other appropriate safeguards.

Access to personal information is intended to be limited to individuals and service providers who have a legitimate business need to access that information.

No method of transmitting or storing information can be guaranteed to be completely secure. Accordingly, while we take reasonable measures to protect information, we cannot guarantee absolute security.

13.Data Security Incidents

If we become aware of a security incident involving personal information, we will investigate the incident and take reasonable steps to contain, mitigate, and address it.

Where notification is required under applicable law or a contractual obligation, we will provide notification to the appropriate parties within the timeframe and in the manner required by law or the applicable agreement.

Where Black Skull processes information on behalf of a client, the applicable service agreement or Data Processing Agreement may establish additional procedures for handling and reporting security incidents.

14.Data Retention

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, unless a longer retention period is required or permitted by law.

The appropriate retention period depends on factors such as the nature of the information, the purpose for which it was collected, the duration of the business relationship, contractual requirements, legal and regulatory obligations, accounting requirements, dispute resolution needs, security considerations, and other legitimate business requirements.

When personal information is no longer required, we will take reasonable steps to delete, destroy, anonymize, or otherwise dispose of it in accordance with applicable requirements and our internal procedures.

Where Black Skull processes information on behalf of a client, retention and deletion requirements may be determined by the client's instructions and the applicable service agreement or Data Processing Agreement.

15.Cookies and Tracking Technologies

Our website may use cookies and similar technologies to operate the website, remember preferences, understand website usage, improve performance, maintain security, and support analytics or marketing activities.

Cookies may be used to distinguish essential website functions from optional analytics or marketing functions. Where applicable law requires consent for non-essential cookies or similar technologies, we will provide an appropriate mechanism for obtaining and managing that consent.

The types of cookies and tracking technologies used on the website may change as our website, analytics tools, or technology providers change.

For more information about the specific cookies used on our website and how you can manage your preferences, please refer to our Cookie Policy.

16.Third-Party Websites and Links

Our website may contain links to third-party websites, platforms, applications, or services.

Those third parties operate independently of Black Skull and may have their own privacy policies and data practices. This Privacy Policy does not govern information collected directly by third-party websites or services that we do not control.

We encourage you to review the privacy policies of third-party websites before providing them with personal information.

17.Your Privacy Rights

Depending on where you live and which privacy laws apply to you, you may have certain rights regarding your personal information.

These rights may include the right to request access to personal information we hold about you, request correction of inaccurate information, request deletion of personal information, request restriction of certain processing, object to certain processing, request portability of certain information, withdraw consent where processing is based on consent, or opt out of certain marketing communications.

Certain jurisdictions may provide additional rights. For example, California law provides qualifying consumers with rights relating to knowing about personal information collected and used, deletion, correction, opting out of sale or sharing, limiting certain uses of sensitive personal information, and non-discrimination for exercising applicable rights.

These rights are not absolute and may be subject to legal exceptions. The rights available to you will depend on applicable law and your relationship with Black Skull.

18.How to Submit a Privacy Request

If you would like to exercise a privacy right or ask a question about how we handle personal information, you may contact us using the details below.

When permitted by law, we may need to verify your identity before completing certain requests. This helps protect personal information from unauthorized disclosure or deletion.

We will respond to valid privacy requests within the timeframe required by applicable law. If additional information is needed to process your request, we may contact you for clarification.

If we process your information solely on behalf of one of our clients, we may refer your request to that client or coordinate with the client to respond, depending on the applicable legal and contractual requirements.

19.Marketing Communications

We may send business or marketing communications where permitted by applicable law.

You may unsubscribe from promotional emails by using the unsubscribe option included in the communication or by contacting us directly.

Even if you opt out of marketing communications, we may continue to send non-promotional communications that are necessary to provide services, manage an account, administer a contract, respond to a request, or otherwise communicate with you regarding an existing business relationship.

20.Children's Privacy

Our website and services are intended for businesses, professionals, job applicants, clients, and other individuals who are legally able to use our services.

We do not knowingly collect personal information from children in circumstances where such collection is prohibited by applicable law. If you believe that a child has provided personal information to us inappropriately, please contact us using the information provided in this Privacy Policy.

21.Business Transfers

If Black Skull is involved in a merger, acquisition, restructuring, financing, sale of assets, transfer of business operations, bankruptcy, or similar transaction, personal information may be transferred as part of that transaction where permitted by applicable law.

Any successor organization or relevant third party receiving personal information will be expected to handle that information in accordance with applicable legal requirements and any commitments that continue to apply to the information.

22.Legal and Regulatory Disclosures

We may retain, use, or disclose personal information when reasonably necessary to comply with applicable laws, regulations, legal processes, court orders, government requests, or other lawful requirements.

We may also use or disclose information when reasonably necessary to enforce our agreements, establish or defend legal claims, investigate suspected fraud or unlawful activity, protect our systems, or protect the rights, safety, and property of Black Skull, our clients, users, employees, contractors, or other individuals.

23.Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, technology, business practices, legal requirements, or privacy practices.

When we make changes, we will update the "Last Updated" date at the beginning of this Privacy Policy. Where required by applicable law, we will provide additional notice of material changes through our website, email, or another appropriate method.

We encourage you to review this Privacy Policy periodically to understand how we handle personal information.

24.Contact Us

If you have questions about this Privacy Policy, our privacy practices, or the way we handle personal information, please contact us:

We will make reasonable efforts to respond to privacy questions and requests in accordance with applicable law.