Privacy Policy

Version 1.0 · Effective Date: August 20, 2026

1. Our Approach to Privacy

Pinnacle Market treats privacy as an obligation of stewardship.

People and businesses entrust information to us so that we can create connections, verify listings, maintain accurate records, communicate with participants, and strengthen communities.

That trust should not require unnecessary exposure of personal information.

Our governing privacy standard states that information should be collected only when reasonably necessary to fulfill Pinnacle Market’s mission, and that when uncertainty exists institutional judgment should favor protecting information.

SOP-010: Sensitive Information & Privacy Protection

This Privacy Policy explains how information may be collected, used, disclosed, protected, and retained through Pinnacle Market and its regional initiative Support Black Arizona.

2. The Most Important Privacy Distinction

Pinnacle Market recognizes two fundamentally different categories of information in the business-submission process:

A. Business Information Submitted for Publication

This is information that you provide for the purpose of creating, maintaining, or promoting a public business or organizational listing.

It may be displayed publicly after review and approval.

B. Private Owner/Applicant Information

This is information collected to communicate with you, evaluate a submission, verify eligibility or ownership, administer the Platform, protect safety and integrity, maintain institutional records, or perform another legitimate operational function.

Private Owner/Applicant Information is not automatically public merely because it was submitted alongside public business information.

This distinction governs our approach to business submissions.

3. Business Information That May Be Published

Depending upon the information you choose to provide and the type of listing, public business information may include:

• business or organization name;
• public description;
• category;
• public business telephone number;
• public business email;
• website;
• social-media profiles;
• business hours;
• public location or service area;
• services;
• booking information;
• business photographs and logos;
• public business attributes or classifications;
• events;
• other information identified as intended for public display.

Publication occurs only after applicable review and does not necessarily include every field submitted.

4. Private Owner/Applicant Information

Private information may include:

• owner’s personal name;
• private email address;
• private phone number;
• residential address;
• private mailing address;
• ownership-verification materials;
• identification or supporting documentation if verification requires it;
• applicant correspondence;
• reviewer communications;
• internal review status;
• reviewer notes;
• appeals;
• reports or complaints;
• unpublished business information;
• security information; and
• other information not intended for unrestricted public disclosure.

Pinnacle Market’s institutional privacy standard specifically recognizes residential addresses, personal phone numbers, personal emails, ownership-verification documents, reviewer notes, internal investigations, and unpublished business information as potentially sensitive information.

SOP-010: Sensitive Information & Privacy Protection

5. Information We Collect

Depending upon how you interact with the Platform, we may collect information you:

• submit through business forms;
• provide through contact forms;
• provide during verification;
• provide when requesting corrections;
• provide during appeals;
• provide when reporting content;
• provide when communicating with Pinnacle Market;
• submit through future account or community features; or
• otherwise voluntarily provide.

The Platform and its service providers may also process technical information necessary to operate websites and digital services.

Specific technical collection practices should be documented as the production analytics, cookie, hosting, security, and integration stack is finalized.

6. Why We Use Information

Pinnacle Market may use information as reasonably necessary to:

• process business submissions;
• evaluate eligibility;
• verify businesses or ownership;
• create and maintain approved listings;
• maintain directory accuracy;
• communicate with applicants and business owners;
• process corrections;
• respond to privacy requests;
• conduct moderation;
• investigate reports;
• document institutional decisions;
• administer appeals;
• improve Platform operations;
• protect Platform integrity;
• maintain appropriate institutional records;
• comply with applicable legal obligations; and
• perform other functions reasonably related to the purpose for which information was provided.

Pinnacle Market’s governing privacy procedure directs the institution to avoid unnecessary or duplicative collection whenever practical.

SOP-010: Sensitive Information & Privacy Protection

7. Home-Based and Residential Address Privacy

Pinnacle Market recognizes that discoverability and privacy should coexist whenever reasonably possible.

Unless a business specifically requests or authorizes appropriate public publication, Pinnacle Market should generally avoid publicly displaying private residential addresses.

For qualifying home-based, mobile, online, or service-area businesses, public information may instead identify:

• city;
• community;
• neighborhood where appropriate;
• ZIP code;
• county;
• service area; or
• region served.

A residential address retained for verification or administrative purposes remains different from a public business location.

The governing address-protection SOP specifically states that precise residential coordinates should not be displayed publicly when generalized location or service-area information can reasonably support discovery.

SOP-009: Home-Based Business Privacy & Address Protection

8. Public Information and Maps

Information intentionally published in a business listing may be visible to anyone who accesses the Platform and may be discoverable through search engines or other public services.

Where map functionality is provided, Pinnacle Market seeks to use location information in a manner consistent with its address-protection standards.

Business owners should therefore clearly distinguish between:

a public business location, and · a private residential or administrative address.

9. Information Sharing

Sensitive information should not be disclosed except when reasonably appropriate, including:

• with your authorization;
• when reasonably necessary to operate the Platform;
• when shared with authorized service providers supporting Platform operations;
• when required by applicable law;
• when reasonably necessary to protect the institution or affected individuals; or
• when otherwise authorized under applicable institutional policy.

When sensitive information must be shared, Pinnacle Market’s institutional standard is to limit disclosure to the minimum reasonably necessary.

SOP-010: Sensitive Information & Privacy Protection

10. Service Providers and Third-Party Systems

Pinnacle Market may rely on third-party technology providers for functions such as:

• website hosting;
• form processing;
• email;
• customer or relationship management;
• mapping;
• analytics;
• security;
• backups;
• scheduling;
• media;
• communications; or
• other operational functions.

Information processed through a third-party service may also be subject to that provider’s privacy practices.

Pinnacle Market seeks to provide third parties only the information reasonably necessary for the service they perform.

Before final publication, this section should be updated to identify the production systems actually used by the final website and intake workflow.

11. Business Feature Interest

The business submission process may allow applicants to indicate:

“I’m interested in participating in a Support Black Arizona Business Feature.”

Selecting this option permits Pinnacle Market to understand that the applicant is interested in being contacted regarding the program.

It does not constitute:

• interview consent;
• recording consent;
• a media release;
• authorization to publish an interview;
• acceptance into the Business Feature program; or
• a requirement to purchase any service.

Business Feature participation and media authorization are governed through a separate consent/release process.

12. Optional Communications

Pinnacle Market may communicate with applicants and participants about matters reasonably related to their submissions, listings, requests, verification, Platform participation, or other services they request.

Where optional promotional, educational, or community communications are offered, Pinnacle Market’s institutional commercial framework distinguishes essential service communications from optional communications and supports participant choice regarding optional updates.

Commercial Constitution

13. Data Access

Access to sensitive information should be limited to individuals who reasonably need that information to perform authorized responsibilities.

Pinnacle Market applies the principle of least privilege as an institutional privacy standard.

Employees, contractors, volunteers, reviewers, administrators, and authorized technology providers should not receive unrestricted access merely because information exists within Pinnacle Market systems.

SOP-010: Sensitive Information & Privacy Protection

14. Data Security

Pinnacle Market seeks to use reasonable administrative, technical, and physical safeguards appropriate to its operations and available resources.

Where practical, institutional standards call for:

• authentication;
• protected backups;
• restricted access;
• appropriate protection during storage and transmission; and
• removal of unnecessary access.

No information system can guarantee absolute security.

15. Retention

Pinnacle Market seeks to retain sensitive information only for as long as reasonably necessary to:

• fulfill operational responsibilities;
• maintain appropriate institutional records;
• satisfy legal requirements;
• resolve disputes;
• support appeals;
• maintain directory integrity; or
• preserve appropriate historical documentation.

Information no longer reasonably required should be securely disposed of when practical.

Your current governing documents intentionally establish this purpose-based retention principle rather than a fixed universal retention period, so I have not invented one here.

SOP-010: Sensitive Information & Privacy Protection

16. Corrections and Privacy Requests

Individuals may contact Pinnacle Market regarding:

• inaccurate information;
• privacy concerns;
• public/private information classification;
• residential-address protection;
• listing corrections;
• requests concerning information they previously provided; or
• suspected inappropriate handling of private information.

Pinnacle Market’s institutional standard is to acknowledge reported privacy concerns within approximately five business days and begin review as promptly as practical, while prioritizing protection over speed.

SOP-010: Sensitive Information & Privacy Protection

Some records may need to be retained when reasonably necessary for legal, security, dispute-resolution, historical, or institutional-recordkeeping purposes.

17. Security or Privacy Incidents

When Pinnacle Market reasonably suspects unauthorized access, disclosure, alteration, or loss of sensitive information, its institutional process calls for:

• taking reasonable steps to secure the information;
• documenting the incident;
• notifying appropriate institutional leadership;
• investigating the cause and scope;
• determining corrective actions; and
• evaluating opportunities to prevent similar incidents.

Applicable legal notification obligations, when any apply, remain separate requirements.

18. Children’s Privacy

Pinnacle Market is primarily designed as a business, organizational, and community-discovery platform.

The governing documents reviewed for this policy do not establish a detailed children’s-data policy.

Accordingly, before final publication Pinnacle Market should determine whether any production feature intentionally collects personal information from children and obtain appropriate legal review if such collection is contemplated.

I recommend that the initial Platform not intentionally solicit personal information from children unless and until a separately reviewed youth-data policy and appropriate safeguards exist.

19. Cookies, Analytics and Similar Technologies

The governing documents establish privacy-by-design and data-minimization principles but do not specify the final production cookie, analytics, advertising, or tracking configuration.

This section should therefore be completed after the production technology audit identifies what the live Platform actually uses.

Pinnacle Market should not claim that it uses—or does not use—specific tracking technologies until that technical behavior has been verified.

20. Changes to This Privacy Policy

Privacy practices should mature as Pinnacle Market grows.

This Policy may be revised to reflect:

• Platform changes;
• new services;
• technology changes;
• operational improvements;
• evolving privacy risks;
• legal requirements; or
• institutional policy changes.

Material revisions should be communicated or published transparently.

The current version and effective date should remain publicly available.

21. Contact Pinnacle Market About Privacy

Privacy questions or concerns may be directed to:

Pinnacle Market / Support Black Arizona · Operated by: Pinnacle Market Co. · Privacy Email: admin@pinnaclemarketco.com ·