Confidential correspondence, carefully held.

When a vendor or principal submits the confidential register form, we collect and store: company or legal entity name, stated capability or discipline, an optional portfolio or reference URL, the named contact principal, and a working email address.

We do not request, store, or retain payment data, government identification documents, financial records, or any special-category personal data through this site. We do not operate user accounts, login systems, or persistent tracking profiles.

Submissions are reviewed privately by Blck Box principals to assess alignment with the current development cycle. The information is used solely to evaluate a potential working relationship and, where appropriate, to initiate direct correspondence with the listed principal.

We do not use submission data for marketing, do not build lookalike audiences, and do not share vendor lists with external parties for any commercial purpose.

All traffic to and from this site is served over TLS (HTTPS). Submission records are stored on managed backend infrastructure with row-level access controls and encrypted transport in transit. Direct database access is restricted to authorised principals of the firm.

We do not store raw passwords or payment credentials. Access logs are retained for operational and security review only and are not used to build behavioural profiles.

The firm engages in periodic review of its access controls and infrastructure posture. No security architecture is absolute, and we treat every submission with the discretion expected of private advisory practice.

This site does not use third-party advertising cookies, social-media pixels, or cross-site tracking scripts. We do not deploy analytics platforms that fingerprint visitors or correlate behaviour across domains.

A small number of first-party, session-level cookies may be used to maintain the integrity of form submissions and basic site functionality. These are not used for profiling or retargeting.

Records are retained while a submission remains under active consideration and for a reasonable archival period thereafter to preserve continuity across development cycles. We do not maintain indefinite archives of unsuccessful vendor correspondence.

Submissions may be removed on written request from the named principal. Upon verified request, we will delete the relevant record from our active systems within a reasonable period, subject to any legal or regulatory obligation that may require retention.

We do not sell, rent, syndicate, or otherwise disclose vendor information to third parties for marketing purposes. Information may be shared with engaged legal, technical, or commercial advisors strictly to the extent required to evaluate a prospective engagement, and only under confidentiality.

The site is hosted on managed cloud infrastructure. Our hosting and database providers process data only as necessary to deliver the service and are bound by standard data-processing terms.

Named principals may request access to, correction of, or removal of their submission by writing to the firm at the address below. Requests are acknowledged in writing and actioned within a reasonable period.

Where applicable under Dominican or international privacy frameworks, you may also have the right to object to processing, request restriction, or lodge a concern with a supervisory authority. We will respond to all good-faith inquiries directly and in plain language.

This notice may be updated as our practices evolve or as legal requirements change. Material changes will be reflected by an updated effective date. We do not routinely notify individual submitters of minor edits; we encourage principals to review this page periodically.

Last updated: 17 June 2026