Privacy Policy
Black Flag Security Group — Effective March 31, 2026
Black Flag Security Group ("BFSG", "we", "us", or "our") operates the website blackflag-sec.com. This Privacy Policy explains what information we collect, how we use it, and your rights with respect to that information. We do not sell your personal data. Period.
1. Information We Collect
We collect only what is necessary to operate our services and respond to inquiries.
- ▸Contact Form Data: When you submit our contact form, we collect your name, email address, and the content of your message. This data is transmitted via Resend to info@blackflag-sec.com and is not stored on third-party servers beyond delivery.
- ▸Purchase Data: Digital product purchases are processed through Gumroad. We do not collect or store payment card information. Gumroad handles all transaction data subject to their own privacy policy.
- ▸Server Logs: Our hosting provider (Vercel) may collect standard server log data including IP addresses, browser type, and page requests for operational and security purposes.
2. How We Use Information
Information collected is used solely for:
- ▸Responding to contact form submissions and service inquiries
- ▸Fulfilling digital product orders processed via Gumroad
- ▸Maintaining and improving the security and performance of this website
- ▸Complying with legal obligations
We do not use your information for advertising, profiling, or sale to third parties under any circumstances.
3. Third-Party Services
This site integrates with the following third-party services. Each operates under its own privacy policy:
Gumroad
Handles all digital product payments and delivery. When you purchase through Gumroad, your payment and transaction data is governed by Gumroad's Privacy Policy. We receive only order confirmation and email address for fulfillment purposes.
Resend
Used for transactional email delivery of contact form submissions. Message content is transmitted to our inbox at info@blackflag-sec.com. Resend's infrastructure may temporarily process message data in transit, subject to their Privacy Policy.
Vercel
Hosts this website. Vercel collects standard server log data for operational purposes per their Privacy Policy. No personally identifiable information is passed to Vercel beyond standard web server logs.
4. Cookies
This site does not use tracking cookies, advertising cookies, or analytics cookies. We do not use Google Analytics or similar tracking services. Only functional cookies strictly necessary for site operation may be set, and no consent banner is required under applicable law for such limited use.
5. Data Retention
Contact form submissions delivered to our inbox are retained only as long as necessary to respond to your inquiry and fulfill any resulting engagement. Emails are not archived indefinitely and are purged in accordance with standard business record-keeping practices. Gumroad retains transaction records per their own data retention policies and applicable financial regulations.
6. Security
We implement technical and organizational security measures appropriate to the sensitivity of the data we handle. All data in transit is encrypted via TLS. We do not store payment card data. As a cybersecurity firm, security is not an afterthought — it is our primary discipline. That said, no transmission over the internet can be guaranteed 100% secure.
7. Your Rights
Depending on your jurisdiction, you may have the following rights regarding your personal data:
- ▸Access: Request a copy of the personal data we hold about you
- ▸Correction: Request correction of inaccurate personal data
- ▸Deletion: Request deletion of your personal data where we have no legal obligation to retain it
- ▸Objection: Object to processing of your personal data
To exercise any of these rights, contact us at info@blackflag-sec.com. We will respond within 30 days.
8. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, the effective date at the top of this page will be updated. Continued use of this site after changes constitutes acceptance of the updated policy. Material changes will be noted prominently.
Contact
Questions about this Privacy Policy or your personal data: