Legal
Enterprise Privacy Policy
Effective Date: May 4, 2026
1. Scope and Applicability
This Privacy Policy applies to all services, platforms, applications, and interactions provided by the Small Business Enterprise Center (SBEC), including SaaS offerings, consulting services, affiliate programs, and digital marketing solutions.
2. Categories of Data Collected
SBEC collects and processes:
- Identifiers (name, email, IP address)
- Commercial information (transaction data, service usage)
- Financial and credit-related information
- Internet activity and behavioral analytics
- Professional and business-related information
3. Data Processing Framework
SBEC processes data under:
- Contractual necessity
- Legitimate business interests
- Legal compliance obligations
- Explicit user consent where required
4. Data Sharing and Third Parties
SBEC may share data with:
- Payment processors and financial institutions
- SaaS vendors and CRM platforms
- Affiliate and reseller partners
- Government and regulatory agencies when legally required
SBEC does not sell personal data as defined under CCPA.
5. International Data Transfers
Data may be transferred and processed outside of your jurisdiction, including the United States. Appropriate safeguards such as Standard Contractual Clauses (SCCs) are implemented where applicable.
6. Data Security and Risk Management
SBEC implements enterprise-grade security controls including encryption, access controls, monitoring, and compliance frameworks aligned with NIST and ISO standards.
7. Data Retention Policy
Data is retained based on business necessity, contractual obligations, and regulatory requirements. Retention periods vary depending on the type of data processed.
8. User Rights and Regulatory Compliance
Users may exercise rights under GDPR and CCPA including access, deletion, correction, and opt-out rights. Requests can be submitted via official SBEC contact channels.
9. HIPAA and Sensitive Data
Where applicable, SBEC complies with HIPAA regulations and ensures Business Associate Agreements (BAAs) are executed when handling protected health information.
10. Arbitration and Legal Jurisdiction
Any disputes arising from this Privacy Policy shall be resolved through binding arbitration in accordance with the laws of the United States. Jurisdiction shall be determined based on SBEC’s principal place of business. See our Terms & Conditions for the full arbitration provision.
11. Affiliate and Vendor Disclosure
SBEC operates a network of affiliate and vendor partnerships. Data may be shared within this ecosystem to deliver services, subject to contractual confidentiality obligations.
12. Updates and Modifications
SBEC reserves the right to modify this Privacy Policy at any time. Updates will be posted with a revised effective date.
13. Contact Information
Small Business Enterprise Center (SBEC)
Website: www.smallbusinessec.com
Email: support@smallbusinessec.com
