Elite Strategic Support Services LLC

Privacy notice

BUSINESS IN A BOX — PRIVACY POLICY Elite Strategic Support Services LLC Version 1.0 This notice describes how Elite Strategic Support Services LLC (Elite, we, us) handles personal information for Business in a Box (BiB). It is separate from the privacy notice of a customer's own public website. The applicable effective date is identified when this version is authorized and published. Describing a provider or communication purpose does not itself authorize a payment, purchase or message. 1. Information we handle We handle business and contact information you provide, including names, email addresses, business details, project requirements, domain preferences and authorized content. Intake, uploads, previews, approval and revision records, portal messages, support requests and handover records may contain personal information. We also handle order and subscription references, payment and refund status, authorization records and service history. For account security and operation, we handle authentication and session records, timestamps, access and audit events, technical request information and IP addresses where generated by the service or its infrastructure. We do not ask you to place passwords, recovery codes, full payment card details, government identifiers or sensitive health information in ordinary intake or messages. Let us know if you have supplied information that requires special handling. 2. Purposes We use information to scope and deliver purchased services; manage customer access; review intake, authorized files and website versions; document decisions; provide revisions, support and handover; administer billing and renewals; investigate failed payments, refunds, disputes and security issues; protect accounts; and meet legal obligations. We may use contact information for service-related notices when the applicable communication channel is authorized and available. We do not use customer project material for unrelated advertising or publish it as a portfolio example without separate permission. We do not sell personal information or use BiB customer information for cross-context behavioral advertising. We do not represent that general marketing consent authorizes third-party purchases, publication or access to another customer's records. 3. Intake, files, previews and messages Access to customer records and files is restricted by account authorization. Uploaded files may be quarantined pending review and are not publicly available merely because they were uploaded. A private preview is not a published website. Customer-facing messages and internal Elite notes have different access scopes. We do not describe a manual file-review attestation as a guaranteed antivirus scan. Only submit material you are authorized to share and that is needed for the service. If your project requires processing another person's information, disclose that requirement and obtain any necessary authority before submission. We will assess whether additional instructions or an agreement are needed; this policy does not certify suitability for regulated or highly sensitive data. 4. Service providers and disclosures Cloudflare provides the verified BiB application infrastructure and database and private object-storage services. Stripe is the configured payment service for hosted checkout and billing when those functions are activated. Full payment card entry is handled by Stripe rather than ordinary BiB intake. We retain transaction identifiers, status and related business records needed to administer the order; Stripe's own privacy terms also apply to its processing. We may give necessary information to an authorized domain registrar, hosting provider, mailbox or software provider, or another subcontractor specifically selected for your accepted order. The provider and continuing charge must be identified in the order or separate authorization before purchasing or provisioning that service. No unselected registrar, email sender or mailbox vendor is represented here as an existing BiB production provider. Authorized Elite personnel and professional advisers may receive information needed to perform their role. We may disclose information when required by law or legal process, to establish or protect legal rights, investigate misuse or security incidents, or with your direction. We limit disclosures to what is appropriate for the purpose. If a business transfer affects control of service records, we will handle it consistently with applicable law and provide any required notice; we do not promise that ownership of Elite can never change. 5. Cookies and authentication BiB uses secure sign-in and session mechanisms and authentication-related browser storage needed to maintain access and protect requests. Sign-in links and session credentials must be kept private. We do not identify advertising cookies or third-party behavioral tracking as part of the accepted BiB configuration. Additional optional tracking would require assessment, appropriate notice and any legally required choice before activation. 6. Retention and minimization We use storage-conscious retention tied to the service and its renewal needs. We retain approved final deliverables needed for an active service and information needed to maintain or renew care and email services. We also retain relevant financial, contractual, authorization, approval, support, security and dispute records for the purposes for which they remain necessary and for applicable legal obligations. We review temporary uploads, duplicates, incomplete intake, abandoned unpaid orders and superseded drafts for removal or minimization when they are no longer needed. Those objectives are not a promise of a fixed automatic deletion schedule. The current reviewed application does not implement a general automated purge across all records. We do not promise a particular number of days for every category, permanent storage of every draft, or deletion solely because storage is becoming full. Required final deliverables for active services are preserved. A legal hold, active dispute, investigation, required financial record or other lawful preservation need may delay deletion. We separate unnecessary large file content from audit or approval evidence where practicable. Deleting an active file does not necessarily remove associated non-content evidence that must be retained. Access to retained information remains restricted. Backups may contain earlier copies. A deletion request does not instantly erase every backup. Copies are handled through the actual authorized backup and recovery process and any applicable preservation requirements. We do not claim an unimplemented automatic backup-expiry schedule or an immediate complete erase capability. If information is restored, relevant deletion restrictions and holds must be reapplied. Ask us for the retention status of a particular service or request. 7. Requests and choices Contact sawan@elitestrategicsupport.com to request access, correction, an available copy of your information or deliverables, or deletion, or to raise a privacy concern. We verify the requester's authority before releasing or changing records. We explain any applicable limitation, retained categories and available next steps. We respond within time limits required by applicable law; this notice does not assume that every privacy law or every requested right applies to every business customer. You may stop providing optional information, but missing information needed for the agreed service may prevent fulfillment. Cancellation of a subscription and deletion of personal information are separate requests. We do not require you to surrender a refund or other mandatory right in order to exercise a legally applicable privacy right. 8. Security and incidents We use account authorization, private file storage, protected sessions and other safeguards appropriate to the service. No system can guarantee complete security. Notify us promptly if you suspect a compromised account or unauthorized disclosure; do not send secrets in the report. We investigate, take appropriate containment and recovery steps and make notices required by the applicable facts and law. We do not claim certified compliance, zero risk or a universal incident-notification deadline that has not been established. 9. Location, children and third-party sites Our service is intended for business users able to authorize the order, not for children. Do not submit children's personal information for a project without first arranging appropriate authority and safeguards. We do not intentionally solicit a child's account through BiB. Service providers may process information outside your state or country according to their operations and applicable agreements. This notice makes no promise that every copy remains in Georgia or in a particular data center. If your order requires a processing-location restriction, raise it before acceptance so it can be evaluated. A link to another website does not make Elite responsible for that site's independent practices. 10. Changes and contact We identify the policy version and effective date when a notice is authorized and published. We provide notice of material changes as required and obtain consent where the law requires it. We do not silently apply a new notice as permission for unrelated use of existing customer content. Privacy contact: Elite Strategic Support Services LLC — sawan@elitestrategicsupport.com.