Last Updated:
June 2024.
1. PURPOSE OF THIS PRIVACY NOTICE
This Privacy Notice ("Notice") outlines how Blak Inc. processes your personal data in relation to our business activities, encompassing the operation of our website located at www.blakinc.com/ ("Site") and the services we provide ("Services"). The Notice specifically details how we handle personal data collected: (i) when you utilize our Site or Services, (ii) during any other interactions with us, or (iii) when we process data while delivering Services to our clients. It covers the types of personal data we collect, the reasons for collection, and your rights regarding our processing of your personal data. This Notice is designed to help you make informed decisions regarding your use of the Site and our Services. Please take a moment to review and understand this Notice, which should be read together with our Terms of Use.
2. SCOPE OF THIS PRIVACY NOTICE
This Privacy Notice pertains solely to the use of your personal data obtained by us, whether directly from you or from a third party. It does not extend to personal data collected by third parties during your interactions with them or your use of their products or services (for instance, when following links on our Site to third-party websites beyond our control). Additionally, this Privacy Notice does not address the processing of workplace personal data. Therefore, if you are employed or engaged by us, please refer to our Workplace Privacy Notice for detailed information on how we handle your personal data in relation to your employment and/or engagement.
3. CHANGES TO THIS POLICY
We will periodically update this Privacy Notice to reflect changes or proposed changes in how we use your personal data, or to comply with alterations in applicable laws or regulatory requirements. While we may notify you via email of significant changes, we recommend that you regularly review this Privacy Notice to stay informed about how we handle your personal data. Any updates to this Privacy Notice will include a revised effective date at the top of the page.
4. ABOUT US
The Site and Services are provided by Blak Inc. ("Blak," "we," "us," "our"). Blak Inc., headquartered in Tustin, CA, USA, is responsible for your personal data as the data controller.
For the purposes of this Privacy Notice and under the GDPR, unless stated otherwise, we act as the data controller for your personal data as described in this Privacy Notice. It's important to note that in many instances where we process data related to the Services we offer, we may act as a data processor on behalf of our clients. We have clarified this distinction within the Privacy Notice.
5. HOW TO CONTACT US
If you have any questions about this Privacy Notice or wish to exercise your rights as a data subject as outlined herein, you can reach out to us using the following methods:
Email
Send us an email at: [email protected]
6. TYPE OF PERSONAL DATA WE COLLECT/PROCESS
When we refer to personal data, we mean any information that relates to an identified or identifiable living individual. This can include details that could identify someone, such as a name, identification number, location data, online identifier (like an IP address), or other specific factors pertaining to them, such as physical characteristics. The categories of personal data we may collect and process about you include:
Identity Data
First name; last name.
Contact Data
Delivery address; billing address; email address; telephone number; social media handle.
Applicant Data
Date of birth; gender; country; nationality; CVs, work experience; dietary requirements any other personal data that you may provide in advance of/during your supply of services to us.
Image Data
Photos; video recordings.
Financial Data
Bank account details; partial payment card details.
Transaction Data
Details about payments made between you and us; details of services purchased from us.
Profile Data
Interests and preferences; contact preferences; participation in promotions or competitions; feedback and survey responses; and the content of any messages sent using Enquiry Forms or Chat functions on the Site.
Behavioural Data
Information regarding your browsing activity, collected via pixel tags and similar technologies; timestamps indicating the start times of your current or past sessions; and specifics regarding services viewed on the Site.
Technical Data
IP address; browser type and operating system; geolocation for accurate notice and information display; and any other unique identifiers assigned to a device.
Marketing and Communications Data
I. Marketing preferences; service communication preferences.
II. Publicly Available Data:
Information about articles (or similar) you may have published.
Information about your interests, affiliations, or publicly stated positions on political matters, corporate matters, and similar topics.
For more information about the personal data we collect please refer to section ‘HOW WE USE PERSONAL DATA’ below.
7. HOW WE COLLECT PERSONAL DATA
We collect and process personal data from the following individuals:
A. OPERATION OF SITE, PROVISION OF SERVICES, AND MARKETINGI. Operation of the Site
Our legal basis for processing
It is in our legitimate interest to utilize personal data as described above to ensure effective provision of the Site and to promote our Site via social media.
Website insight and analysis
We and our third-party partners may employ cookies, web beacons, pixel tags, and similar technologies (collectively referred to as "Cookies") to gather data from the devices you use to access our Site. This data includes Behavioral Data, Technical Data, and certain Profile Data. Please see our Cookie Notice for further information, including details of our third-party partners.
We and our third-party partners use this data for the following purposes:
In certain circumstances, we may rely on another lawful basis for using your personal data collected via the use of Cookies. For instance, when we analyze how you use our Site using data collected through analytics cookies, it is in our legitimate interest to use this data to enhance our Site and Services.
II. Provision of our Services
Content creation and talent management:
As part of our content creation services for clients, we maintain talent databases containing Identity Data, Contact Data, Applicant Data, Publicly Available Data, biographies, and personal preferences of individuals considered for specific campaigns. This information is used to select and collaborate with talent.
We gather this information directly from individuals, third-party recruiters or agents, and publicly available sources. In creating content featuring talent, we process their Image Data alongside Identity and Applicant Data.
Our legal basis for processing
It is in our legitimate interests (or those of our clients) to process talent personal data in this manner to facilitate the provision of our services. When processing special category data collected directly from you for this purpose, we will do so only with your explicit consent. If we obtain such special category data from publicly available sources, we rely on the fact that you made this information manifestly public. When acting as a data processor on behalf of our clients, no additional legal basis is required for such processing.
Client data insight and analysis.
We may collect data about you, both independently and on behalf of our clients, in connection with providing our services to conduct insight and analysis in an anonymized and/or aggregate form. This helps us enhance our services and assists our clients in better understanding their customers' interests to improve their products/services. The data collected includes Behavioral Data, Technical Data, and certain Profile Data.
Our legal basis for processing
Where personal data is involved in the activities described above, it is in our legitimate interests (or those of our clients) to process personal data in this manner to facilitate the provision of our services. When acting as a data processor on behalf of our clients, no additional legal basis is required for such processing.
Please note that these services often involve anonymous data sets (such as aggregated or statistical data sets) used for high-level market analytics or understanding macro consumer habits, among other purposes. In such cases, neither we nor our clients are processing personal data.
III. Marketing and Media Enquires
Marketing.
We may use your Identity Data, Contact Data, and Marketing and Communications Data to send you (or the organization you represent) marketing communications via email or phone. Our marketing efforts may include press releases and information about our services.
Our legal basis for processing
It is in our legitimate interest to use your personal data in this manner to ensure our marketing efforts are targeted and appealing to you and/or the organization you represent. Please note that we will only send you marketing communications with your consent.
Media and informational inquiries.
We may gather personal data (including Identity Data, Contact Data, and Publicly Available Data) about journalists, client contacts, or industry contacts for interview requests, media inquiries, or requests for information about BLAK. Additionally, we may offer individuals the option to subscribe to newsletters or receive copies of blogs and other available information. For each subscription, Contact Data may be required along with other pertinent personal details necessary for these inquiries. This information enables us to effectively respond to individual or media requests.
Our legal basis for processing
It is in our legitimate interests (as well as those of our clients) to process personal data in this manner to ensure efficient delivery of services requested by our clients and to provide accurate information to those seeking it.
B: BUSINESS ADMINISTRATION, FINANCIAL AND LEGAL
Receipt of services
If we engage an organization to provide services to us or our clients (such as IT support or financial advice), we collect and process your personal data (including Contact and Identity Data) if you are a contact within that organization. This facilitates managing our relationship with the organization, receiving services from them, and potentially delivering services to others, including our clients.
Our legal basis for processing
It is necessary for us to use personal data in this way to fulfill our contractual obligations with the organization, or it is in our legitimate interest to maintain effective working relationships and deliver services efficiently. When acting as a data processor on behalf of our clients, no additional legal basis is required for such processing.
Recruitment
If individuals apply for a job with us or express interest in working for us, we will collect their contact details and CV or resume information. We use this personal data for the following purposes:
a) Assessing the individual’s suitability for current or future positions, including employment, freelance roles, summer placements, internships, or business support/services roles, whether the application is submitted online, via email, hard copy, or in person.
b) Taking necessary steps to potentially enter into a contract of employment or other agreements with the individual.
c) Compliance with regulatory or legal obligations related to the application process.
d) Reviewing our equal opportunity profile as required by applicable legislation. We do not discriminate based on gender, race, ethnic origin, age, religion, sexual orientation, disability, or any other protected status under local laws.
What is our legal basis?
When using personal data for recruitment and talent management purposes, our legal basis is either:
We do not process any special categories of data unless permitted under applicable legislation or with the explicit consent of the individual.
Visiting our premises, studios or production sites
If an individual visits any of our premises, studios, or production sites, we may collect their Identity or Contact Data as part of our sign-in process. Additionally, their image may be captured on our surveillance cameras or CCTV systems. We may also collect data related to COVID-19 vaccination or testing in accordance with government regulations or guidance.
If an individual registers as a guest user for free Wi-Fi access at any of our premises, we may collect their personal data, including Identity and Contact Data, during the registration process. Additionally, we may process Behavioural and Technical Data related to their use of the free Wi-Fi service. This includes monitoring and record-keeping to identify service requests, optimize Wi-Fi performance, and investigate and prevent system abuse. For detailed information on how we process your personal data in this context, please refer to our Portal Privacy Notice available at the respective location.
Our legal basis for processing
Business administration, finance, and legal compliance.
We may use an individual’s personal data (including Identity Data, Contact Data, Financial Data, Transaction Data, and Publicly Available Data) for the following business administration and legal compliance purposes:
We will not process any special categories of personal data or personal data relating to criminal convictions or offences unless permitted under applicable legislation or with the explicit consent of the individual. Such processing may be undertaken for the following reasons:
Our legal basis for processing:
10. IF YOU FAIL TO PROVIDE YOUR PERSONAL DATA
If we are required by law to collect your personal data, or if we need to collect your personal data under the terms of a contract we have with you, and you fail to provide that personal data when requested, we may not be able to fulfill the contract or service we have agreed upon or are trying to establish with you. This situation may arise if you do not provide the necessary personal data required for us to provide the services you have requested or to process an employment application with us. In such instances, we may need to cancel your application or the provision of the relevant services, and we will notify you accordingly.
11. SHARING YOUR PERSONAL DATA
We share personal data with others only when legally permitted. When we do, we establish contractual arrangements and security measures to safeguard the shared personal data and adhere to our data protection, confidentiality, and security standards. Personal data may be shared with third parties as outlined below. This list is not exhaustive, and there may be additional instances where sharing with other third parties is necessary:
Clients
We may share personal data with our clients for the purposes of providing them with Services.
Third-party IT suppliers
Personal data may be shared with third parties that assist us in operating our website and managing internal IT systems. These may include providers of IT services, cloud-based software, identity management, website hosting, data analysis, security, and storage services. Data may be stored in secure data centers globally.
Payment providers and banks
Personal data may be shared with third parties that support us in invoicing and processing payments.
Third-party post/email marketing and CRM specialists
We share personal data with specialists who help manage our marketing database and send email marketing communications.
Recruitment agencies and related organisations
We may share personal data with external recruiters, third-party providers conducting background checks on our behalf, and other entities within our group of companies for recruitment purposes.ehalf and other entities within our group of companies for recruitment purposes.
Auditors, lawyers, accountants and other professional advisers
Personal data may be shared with professional services firms that advise and assist us in managing our organization lawfully and effectively, including handling disputes.
Law enforcement, government, and regulatory agencies
Personal data may be shared with law enforcement, government, regulatory agencies, or other third parties as required and in compliance with applicable laws and regulations.
Other third parties
Occasionally, we may receive requests from third parties authorized to obtain disclosure of personal data, such as to ensure compliance with laws and regulations, investigate alleged crimes, or assert legal rights. We only disclose personal data when permitted by applicable laws and regulations.
12. OBTAINING YOUR CONSENT
If our use of your personal data requires your consent, you can provide consent:
Please note, if you consent to additional uses of your personal data, we may use it accordingly, consistent with your consent.
13. CONFIDENTIALITY AND SECURITY OF YOUR PERSONAL DATA
We are dedicated to ensuring the security of the personal data you provide to us. We have established information security policies, rules, and technical measures to safeguard your personal data from unauthorized access, improper use or disclosure, unauthorized modification, unlawful destruction, or accidental loss. Moreover, all our employees and data processors (i.e., those who process your personal data on our behalf) are required to uphold the confidentiality of personal data for all users of our Site and customers of our Services.
Data Subject Rights
Data subjects can exercise these rights verbally or in writing using the contact information provided in the ‘How to contact us’ section. We will make every effort to promptly respond to your requests. If you request a copy of your personal data, we are legally obliged to respond within one month of receiving such a request. If your request is denied, we will provide you with the reasons for denial.
Please note, to exercise these rights, we may need to verify your identity to confirm your entitlement to access your personal data. This is a security measure to ensure that personal data is not disclosed to unauthorized individuals. To verify your identity, we may require additional personal data from you beyond what we currently possess.
Lodging complaints
Additionally, you may have the right to lodge complaints regarding our processing of your personal data with regulators in your jurisdiction. If you have concerns about any aspect of our privacy practices, including how we have handled your personal data, we encourage you to contact us first using the information provided in the ‘How to contact us’ section. If the GDPR applies, you can also report your concerns to the following organizations:
European Economic Area
You can find a list of supervisory authorities and their contact details for the EEA at http://ec.europa.eu/justice/data-protection/bodies/authorities/index_en.htm
United Kingdom
The Information Commissioner’s Office (“ICO”) is the supervisory authority in the United Kingdom. Contact details for the ICO can be found at https://ico.org.uk.
Switzerland
The Federal Data Protection and Information Commissioner (“FDPIC”) is the supervisory authority in Switzerland. Contact details for the FDPIC can be found at https://www.edoeb.admin.ch/.
United States of America
In compliance with the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF, BLAK Inc. commits to refer unresolved complaints concerning our handling of personal data received in reliance on the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF to JAMS, an alternative dispute resolution provider based in the United States.
If you do not receive timely acknowledgment of your DPF Principles-related complaint from us, or if we have not addressed your DPF Principles-related complaint to your satisfaction, please visit https://www.jamsadr.com/dpf-dispute-resolution for more information or to file a complaint. The services of JAMS are provided at no cost to you.
Following the dispute resolution process, JAMS or you may refer the matter to the U.S. Federal Trade Commission, which has investigatory and enforcement powers over us. Under certain circumstances, you also may be able to invoke binding arbitration to address complaints about our compliance with DPF Principles.
14. YOUR DATA PROTECTION RIGHTS
You have the following rights regarding the personal data we hold about you under certain circumstances:
15. OPT OUT AND UNWANTED COMMUNICATIONS
To opt-out of any future promotional or marketing communications or any other commercial communications from us, you should send a request to us at the contact information in the ‘How to contact us’ section.
16. THIRD PARTY LINKS AND SERVICES
This Site includes links to websites and services provided by third parties. Please be aware that once you use a link to leave our Site or engage a service from a third party, this Privacy Notice no longer applies to those third-party websites and service providers, unless we are acting as joint controllers of your personal data with such third parties.
Your activities on other websites or interactions with other third-party service providers are governed by their own privacy policies and terms. We do not monitor, control, or endorse the privacy practices of these third parties.
This Site may also connect with social networking services. Please understand that we do not oversee these services and are not responsible for their operations. While we may offer integration with these services on our Site, we do so as a convenience and rely on these third-party services to operate reliably and ethically.
17. HOW LONG DO WE KEEP YOUR PERSONAL DATA?
We keep personal data only for as long as necessary for the purposes outlined in this Privacy Notice, after which it is removed from our systems.
If certain personal data is only relevant for a short period (e.g., for a specific event, marketing campaign, or recruitment process), we will delete it at the conclusion of that period. Please note, if you are an unsuccessful candidate, we may retain your information for a brief period.
If you have opted out of receiving marketing communications from us, we will retain specific personal data on a suppression list to ensure we do not send you further marketing communications in the future.
18. PERSONAL DATA OF MINORS
Our website is designed for use by adults and is not directed at minors (individuals under the age of 18). We do not knowingly collect personal data from minors. However, given the nature of our organization and the services we offer, there may be instances where we inadvertently collect and process personal data pertaining to minors. Should we collect personal data from minors, we will adhere to all applicable laws and regulations governing the processing of such data.
19. Notice of Collection and Use of Personal Information
We may collect the following categories of personal information about you:
We may utilize the categories of personal information mentioned above for purposes outlined in our Privacy Policy. Additionally, these categories may be used for specific business purposes detailed in accordance with the California Consumer Privacy Act (CCPA), as specified in the following table:
Purposes \ Categories of Personal Information
Performing services, including maintaining or servicing accounts, providing customer service, processing orders and transactions, verifying customer information, processing payments, providing advertising or marketing services, offering analytics services, or providing similar services: Categories of personal information potentially involved include Identifiers; Additional Data Subject to Cal. Civ. Code § 1798.80; Protected Classifications; Employment Information; Education Information and Inferences.
Auditing related to a current interaction with you and concurrent transactions, including counting ad impressions to unique visitors, verifying positioning and quality of ad impressions, and auditing compliance: Categories of personal information potentially involved include Identifiers; Additional Data Subject to Cal. Civ. Code § 1798.80; Protected Classifications; Employment Information; Education Information and Inferences.
Short-term, transient use, including contextual customization of ads shown as part of the same interaction: Categories of personal information potentially involved include Identifiers; Additional Data Subject to Cal. Civ. Code § 1798.80; Protected Classifications; Employment Information; Education Information and Inferences.
Detecting security incidents, protecting against malicious, deceptive, fraudulent, or illegal activity, and prosecuting those responsible for that activity: Categories of personal information potentially involved include Identifiers; Additional Data Subject to Cal. Civ. Code § 1798.80; Protected Classifications; Employment Information; Education Information and Inferences.
Debugging to identify and repair errors that impair existing intended functionality: Categories of personal information potentially involved include Identifiers; Additional Data Subject to Cal. Civ. Code § 1798.80; Protected Classifications; Employment Information; Education Information and Inferences.
Undertaking internal research for technological development and demonstration: Categories of personal information potentially involved include Identifiers; Additional Data Subject to Cal. Civ. Code § 1798.80; Protected Classifications; Employment Information; Education Information and Inferences.
Undertaking activities to verify or maintain the quality or safety of a service or device that is owned, manufactured, manufactured for, or controlled by us, and to improve, upgrade, or enhance the service or device that is owned, manufactured, manufactured for, or controlled by us: Categories of personal information potentially involved include Identifiers; Additional Data Subject to Cal. Civ. Code § 1798.80; Protected Classifications; Employment Information; Education Information and Inferences.
In addition, we may also use the following categories of personal information for purposes of managing our career opportunities: Identifiers; Additional Data Subject to Cal. Civ. Code § 1798.80; Protected Classifications; Employment Information; Education Information and Inferences.
20. Our Prior Collection, Use and Disclosure of Personal Information
During the 12-month period prior to the effective date of this California Consumer Privacy Statement, we may have collected and utilized your personal information as outlined in section 1 above. For the personal information collected during that period, we provide the following details:
(a) The categories of sources from which we may have obtained the personal information; (b) The categories of third parties with whom we may have shared the information; and (c) The categories of personal information we may have disclosed for a business purpose.
a. Sources of Personal Information
We may have obtained personal information about you from various sources, as detailed below:
Categories of Sources of Data Collection / Categories of Personal Information:
b. Sharing of Personal Information
We may have shared your personal information with certain categories of third parties, as described below.
Categories of Third Parties \ Categories of Personal Information
Our affiliates and subsidiaries
Identifiers; Additional Data Subject to Cal. Civ. Code § 1798.80; Protected Classifications; Employment Information; Education Information and Inferences
Vendors who provide services on our behalf
Identifiers; Additional Data Subject to Cal. Civ. Code § 1798.80; Protected Classifications; Employment Information; Education Information and Inferences
Professional services organizations, such as auditors and law firms
Identifiers; Additional Data Subject to Cal. Civ. Code § 1798.80; Protected Classifications; Employment Information; Education Information and Inferences
Our business partners
Identifiers; Additional Data Subject to Cal. Civ. Code § 1798.80; Protected Classifications; Employment Information; Education Information and Inferences
Advertising networks
Identifiers; Additional Data Subject to Cal. Civ. Code § 1798.80; Protected Classifications; Employment Information; Education Information and Inferences
Internet service providers
Identifiers; Additional Data Subject to Cal. Civ. Code § 1798.80; Protected Classifications; Employment Information; Education Information and Inferences
Data analytics providers
Identifiers; Additional Data Subject to Cal. Civ. Code § 1798.80; Protected Classifications; Employment Information; Education Information and Inferences
Government entities
Identifiers; Additional Data Subject to Cal. Civ. Code § 1798.80; Protected Classifications; Employment Information; Education Information and Inferences
Operating systems and platforms
Identifiers; Additional Data Subject to Cal. Civ. Code § 1798.80; Protected Classifications; Employment Information; Education Information and Inferences
Social networks
Identifiers; Additional Data Subject to Cal. Civ. Code § 1798.80; Protected Classifications; Employment Information; Education Information and Inferences
c. Sale of Personal Information
We do not and will not sell your personal information.
d. Disclosure of Personal Information for a Business Purpose
We may have disclosed the following categories of personal information to third parties for business purposes:
21. California Consumer Privacy Rights
You have certain choices regarding our use and disclosure of your personal information, as outlined below. This statement excludes Blak personnel. The terms used in this California Consumer Privacy Statement have the meanings defined in the California Consumer Privacy Act of 2018 and its implementing regulations ("CCPA").
Access: You may have the right to request, up to twice in a 12-month period, that we disclose to you the personal information we have collected, used, and disclosed about you during the past 12 months.
Deletion: You have the right to request that we delete certain personal information we have collected from you.
Opt-Out of Sale: We do not sell your personal information in exchange for monetary compensation, nor have we done so in the preceding 12 months.
Verifying Requests: To safeguard your privacy and ensure security, we will take steps to verify your identity before granting you access to your personal information or fulfilling your request. If you request access to or deletion of your personal information, we may require you to provide any of the following information: name, address, state-issued photo identification. Additionally, if you request specific pieces of personal information, we will ask you to sign a declaration under penalty of perjury confirming that you are the consumer whose personal information is being requested. If you authorize an agent to make an access, deletion, or opt-out request on your behalf, (1) we may request written permission from you for the agent, and (2) for access and deletion requests, we may require you to independently verify your identity with us (as described above).