Privacy Notice

1. Who we are

Norbeck Technologies, Inc., trading as SBAdvisoryBoard (sbadvisorygroup.com), is the data controller for personal data processed through the Service. We decide why and how that data is used. Contact us at privacy@sbadvisorygroup.com.

2. Personal data we collect

• Account data — name, business email, password credentials, role, and membership tier.
• Company and eligibility data — legal entity name, UEI/CAGE codes, NAICS codes, socio-economic certifications, and SAM.gov registration status.
• Platform content — rate cards, capability statements, deal room messages, teaming documents, past performance and CPARS records you upload.
• Support data — messages, attachments, and correspondence you send us.
• Usage and technical data — log records, device and browser identifiers, IP address, pages viewed, and error diagnostics including correlation identifiers.

We do not collect or store your card details. Payment data is collected directly by Stripe, our PCI-compliant payment processor.

3. Why we use it and our legal bases

• Providing the Service (account creation, matchmaking, deal rooms, escrow tracking) — performance of our contract with you.
• Eligibility and compliance verification against public registries — performance of contract and our legitimate interest in a trustworthy marketplace.
• Security, fraud prevention, and abuse monitoring — legitimate interests.
• Product improvement and analytics — legitimate interests, or consent where required for non-essential cookies.
• Customer support and service emails — performance of contract.
• Marketing emails — consent, withdrawable at any time.
• Legal, tax, and accounting obligations — compliance with a legal obligation.

4. Who we share data with

• Service providers and subprocessors — hosting, database, authentication, email delivery, and analytics providers acting on our instructions.
• Stripe, Inc., our payment processor, for card processing, subscription management, tax calculation, and invoicing.
• Other members — only the profile, capability, and deal room information you choose to publish or share within a pursuit.
• Professional advisers — legal, accounting, and audit advisers under duties of confidentiality.
• Authorities — where required by law or to establish or defend legal claims.

We do not sell personal data.

5. International transfers

We operate from the United States. Where personal data originates in the UK or EEA, we rely on appropriate safeguards such as Standard Contractual Clauses or an applicable adequacy decision for transfers to us and our subprocessors.

6. Retention

We keep account and company data for as long as your membership is active and for up to 24 months after closure to handle disputes and support requests. Financial and tax records are retained for the period required by law (generally seven years). Log and diagnostic data is retained for up to 12 months. When data is no longer needed it is deleted or anonymised.

7. Your rights

Depending on where you live, you may have the right to access, correct, delete, restrict, or object to our processing of your personal data, to receive a portable copy, and to withdraw consent at any time. Requests to privacy@sbadvisorygroup.com are answered within one month. UK and EEA residents may also complain to their supervisory authority; US residents may have equivalent rights under applicable state privacy laws, and we will not discriminate against you for exercising them.

8. Security

We apply appropriate technical and organisational measures, including encryption in transit and at rest, row-level access controls, least-privilege administration, audit logging, and regular security scanning of the platform.

9. Cookies

We use essential cookies for authentication and session security, and analytics cookies (Google Analytics) to understand aggregate usage. Essential cookies cannot be disabled without breaking the Service. You can block or delete other cookies in your browser settings at any time.

10. Changes and contact

We will post any changes on this page and update the date above. See also our Terms & Conditions and Refund Policy. Contact Norbeck Technologies, Inc. at privacy@sbadvisorygroup.com.