The Official Black Sheep Company

Privacy Policy

Last updated: September 18, 2026

The Official Black Sheep Company ("we," "us," "the Company") operates theofficialblacksheepco.com and theofficialblacksheepco.store (the "Sites"). This policy explains what we collect, why, and what you can do about it.

What we collect

• Account information. If you register on the client portal, we store your name, email address, and sign-in credentials (managed by our Keycloak identity service; passwords are never stored in plain text).
• Order information. Purchases through the store are processed by Stripe. We receive your name, email, shipping address, and order details — we never see or store your full card number.
• Contact form submissions. Name, email, and the contents of your message when you write to us.
• Usage data. Standard server logs (IP address, browser type, pages visited) kept for security and diagnostics.
• Support chats. Messages sent through the on-site chat widget are retained so our team can respond.

How we use it

• Fulfilling orders and providing the services you request
• Operating and securing your portal account
• Responding to enquiries and support requests
• Detecting fraud, abuse, and unauthorized access
• Meeting legal, tax, and accounting obligations

What we never do

We do not sell your personal information. We do not share it with third parties for their own marketing. Data is shared only with the processors required to run the Sites: Stripe (payments), our hosting and identity providers, and shipping carriers where a delivery requires it.

Retention

Order and account records are kept for as long as your account is active and as required by tax and accounting law (generally 7 years for transaction records). Server logs rotate within 90 days. You may request deletion of your account and associated personal data at any time.

Your rights

Depending on your jurisdiction (including Washington State and, for EU/UK visitors, GDPR), you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. To exercise any of these, write to us.

Security

All traffic is served over TLS. Account sign-in uses industry-standard OAuth 2.0 / OpenID Connect with PKCE. Administrative access to systems holding personal data is restricted and logged.

Children

The Sites are not directed at children under 13, and we do not knowingly collect their data.

Changes

If this policy changes materially, we will post the updated version here with a new date.

Contact

Privacy questions or requests: info@theofficialblacksheepcompany.com · +1 (425) 517-9528 · Washington State, USA.

← Back to The Black Sheep Company