How Blackridge Global Inc. handles website and inquiry data.

Scope and controller identity

This policy covers personal data collected through blackridgeglobal.xyz, its inquiry flow, analytics, security tooling, and related operational records. Blackridge Global Inc. is the identified business entity responsible for the site. Its jurisdiction of incorporation, controller status in each applicable jurisdiction, and verified contact addresses remain configuration requirements in the accompanying panel.

This page describes the repository's current data flows. It is not a substitute for jurisdiction-specific advice, contractual processor review, or a completed privacy and cookie compliance assessment.

Categories of data collected

The site collects information a visitor submits and limited technical, attribution, and interaction data used to operate, secure, and improve the website and inquiry process.

• Inquiry data: name, work email, organization, objective, market or region, message, and any context voluntarily included.
• Interaction data: landing and current pages, referring or campaign information, clicked calls to action, scroll depth, and session activity.
• Technical and security data: visitor and session identifiers, IP address, user agent, device type, browser, operating system, timestamps, and rate limiting signals.
• Operational records: submission status, review state, follow-up records, and notification metadata generated when an inquiry is processed.

Purposes of processing

Data is used to receive and review inquiries, assess potential service fit, respond to relevant requests, protect the intake flow, prevent abuse, maintain operational records, understand how the site is used, improve content and conversion paths, and meet applicable legal or compliance obligations.

The applicable legal basis depends on the visitor's jurisdiction and the nature of the interaction. That assessment must be confirmed as part of the jurisdiction and counsel review configuration before the policy is treated as final.

Processors, hosting, form, and analytics providers

The deployed repository uses Cloudflare Pages and Functions for hosting and form processing, and Cloudflare D1 for inquiry records. It loads Microsoft Clarity, PostHog, and an external tracking script hosted at link.msgsndr.com. The first-party tracking package also records site events and identifiers in browser storage or cookies.

Google Analytics or Google Tag Manager and Telegram inquiry notifications may be enabled through deployment configuration. Provider roles, account regions, subprocessors, contracts, and the identity of the operator behind the link.msgsndr.com service must be verified against the production accounts and recorded in the final processor inventory.

Cross-border processing

Cloud and analytics providers may store or process data in more than one country. The actual locations, transfer mechanisms, contractual safeguards, and any localization requirements depend on the production accounts, the confirmed controller jurisdiction, and the visitor's location.

Blackridge Global Inc. must verify those arrangements and obtain advice appropriate to the jurisdiction before publishing definitive transfer language. No specific transfer mechanism is asserted here without that verification.

Retention approach

Inquiry and site data should be retained only while it is reasonably needed for intake review, correspondence, relationship and record management, security, abuse prevention, legal obligations, and operational continuity, then deleted or anonymized where appropriate.

Exact retention periods have not been supplied and are deliberately not invented. A verified schedule by data category must be configured, documented, and aligned with production systems before a specific period is promised.

Privacy rights and requests

Depending on applicable law, a person may have rights to request access, correction, deletion, restriction, objection, portability, withdrawal of consent, or review of certain automated processing, and may be able to complain to a supervisory authority. These rights can be limited by lawful exceptions and identity verification requirements.

The applicable rights, response procedure, complaint route, and monitored privacy address remain explicit configuration requirements. Until a privacy email is verified, the website contact form can be used for an initial request without attaching sensitive identity documents.

Cookies, analytics, and browser storage

The site and its providers may use cookies, local storage, session storage, pixels, and similar technologies for visitor and session identifiers, attribution, security, aggregate usage analysis, interaction events, and service performance. The current tracking stack is described more fully in the Cookie Notice.

Cookie duration, consent requirements, provider settings, and opt-out controls must be verified against the production deployment and applicable jurisdictions. Browser controls may limit storage, but disabling technology can affect measurement or site functions.

Confidentiality and data minimization

The public form is a first contact channel, not a secure diligence room. Visitors should provide only enough information for an initial review and should not submit sensitive documents, credentials, private keys, financial account data, special category data, or material non-public information unless a separate protected channel has been agreed.

Submitting an inquiry does not create an advisory, fiduciary, legal, tax, investment, or other professional relationship.