Privacy Policy for SBC Innovations
Last Updated: September 4, 2025
SBC Innovations (“we,” “us,” or “our”) is committed to protecting the privacy and security of personal information we collect, process, or store as a Business-to-Government (B2G) IT contractor. This Privacy Policy outlines how we handle personal information in connection with our services, websites, and interactions with clients, partners, and visitors.This policy applies to all personal information we collect in our capacity as a data controller or processor, including information provided by individuals, government entities, or third parties in the course of delivering IT services, consulting, or related activities.
1. Information We Collect
We may collect and process the following types of personal information:
- Contact Information: Name, email address, phone number, job title, and organization details provided when you interact with us, such as through our website, contracts, or communications.
- Professional Information: Employment history, certifications, or other professional data submitted for project-related purposes or employment opportunities.
- Government-Related Data: Information required for government contracts, such as security clearance details, identification numbers, or other data mandated by federal, state, or local regulations.
- Website Usage Data: Information collected through cookies, IP addresses, browser type, device information, and pages visited on our website (www.sbcinnovations.com).
- Sensitive Data: In certain cases, we may process sensitive personal information (e.g., health data or biometric information) as required for specific government contracts, subject to strict compliance with applicable laws.
- Third-Party Data: Information provided by government agencies, subcontractors, or partners in the course of delivering IT services.
2. How We Collect Information
We collect personal information through:
- Direct interactions, such as forms submitted on our website, emails, or contracts.
- Automated technologies, such as cookies and analytics tools on our website (see our Cookie Policy for details).
- Third parties, including government agencies, subcontractors, or service providers acting on our behalf.
- Publicly available sources, where permitted and necessary for contract fulfillment.
3. How We Use Your Information
We use personal information for the following purposes:
- Contract Fulfillment: To deliver IT services, manage government contracts, and comply with legal or regulatory obligations.
- Business Operations: To communicate with clients, subcontractors, or partners; process payments; or manage relationships.
- Website Functionality: To improve our website, analyze usage, and enhance user experience.
- Compliance and Security: To verify identities, maintain security clearances, and comply with laws such as the Federal Information Security Management Act (FISMA) or the General Data Protection Regulation (GDPR).
- Marketing and Communications: To send updates, newsletters, or event invitations, where permitted and with your consent (if required).
- Employment Purposes: To process job applications or manage employee data.
4. Legal Basis for Processing
We process personal information based on the following legal grounds:
- Contractual Necessity: To fulfill contracts with government agencies, clients, or subcontractors.
- Legal Obligation: To comply with federal, state, or local regulations, including government reporting requirements.
- Legitimate Interests: For business operations, website improvement, or fraud prevention, where these interests do not override your rights.
- Consent: Where required (e.g., for marketing communications or certain sensitive data processing).
- Public Interest: When processing is necessary for tasks carried out in the public interest, such as government IT projects.
5. How We Share Your Information
We may share personal information with:
- Government Agencies: As required for contract performance, compliance, or audits.
- Subcontractors and Service Providers: Third parties who assist in delivering IT services, subject to strict confidentiality agreements.
- Legal Authorities: When required by law, court order, or government regulation.
- Business Transfers: In the event of a merger, acquisition, or sale of assets, with safeguards to protect your data.
We do not sell personal information or share it with unauthorized third parties.
6. Data Security
We implement industry-standard technical and organizational measures to protect personal information, including:
- Encryption of sensitive data in transit and at rest.
- Access controls and authentication protocols.
- Regular security assessments and compliance with FISMA, NIST, and other relevant standards.
- Employee training on data protection and privacy.
Despite our efforts, no system is completely secure. In the event of a data breach, we will notify affected individuals and authorities as required by law.
7. Data Retention
We retain personal information only for as long as necessary to fulfill the purposes outlined in this policy, comply with legal obligations, or resolve disputes. Retention periods vary based on:
- Contractual requirements with government agencies.
- Applicable laws (e.g., tax or employment regulations).
- The nature of the data and its purpose.
When data is no longer needed, we securely delete or anonymize it.
8. Your Rights
Depending on your location and applicable law (e.g., GDPR, CCPA), you may have the following rights regarding your personal information:
- Access: Request a copy of the personal information we hold about you.
- Correction: Request corrections to inaccurate or incomplete data.
- Deletion: Request deletion of your data, subject to legal or contractual obligations.
- Restriction: Request that we limit the processing of your data.
- Objection: Object to processing based on legitimate interests or for direct marketing.
- Data Portability: Request a copy of your data in a structured, machine-readable format.
- Opt-Out: Opt out of marketing communications or certain data-sharing practices (e.g., under CCPA).
To exercise your rights, contact us at privacy@sbcinnovations.com. We will respond within the timeframes required by law (e.g., 30 days under GDPR or 45 days under CCPA). Note that some rights may be limited due to government contract requirements or legal obligations.
9. International Data Transfers
As a B2G contractor, we may transfer personal information to government agencies or partners in other countries. When transferring data internationally, we ensure compliance with applicable laws, such as GDPR’s Standard Contractual Clauses or equivalent safeguards.
10. Cookies and Tracking Technologies
Our website uses cookies and similar technologies to enhance functionality, analyze usage, and provide personalized content. You can manage cookie preferences through your browser settings or our Cookie Policy.
11. Third-Party Links
Our website may contain links to third-party websites. We are not responsible for the privacy practices of these sites. We encourage you to review their privacy policies.
12. Children’s Privacy
Our services are not directed to individuals under 16. We do not knowingly collect personal information from children. If we learn that we have collected such data, we will take steps to delete it.
13. Changes to This Privacy Policy
We may update this Privacy Policy to reflect changes in our practices or legal requirements. We will notify you of material changes by posting the updated policy on our website or through other appropriate channels. The “Last Updated” date at the top indicates when the policy was last revised.
14. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:
SBC Innovations
Email: innovate@sbcinnovations.com
Phone: (804) 256-0501
For complaints, you may also contact your local data protection authority (e.g., under GDPR or CCPA).