Privacy Policy

1. About this policy

This policy explains personal information handling in connection with BlazoData’s website, inquiries and business communications. Personal information means information that identifies someone or can reasonably be linked to them. The legal entity responsible for these activities is [Approved controller name and postal address]. Privacy questions and requests can be sent to [Monitored privacy email].

Service-related handling is covered to the extent described in [Approved service scope and applicable service-specific notices]. The responsibilities for a particular engagement also depend on the customer’s instructions and the relevant agreement. Sections 5 and 6 explain the distinction between website communications, customer-directed collection and AI or browser processing.

2. Information you provide

A business inquiry can include your name, work email, company, service interests, target website addresses and the data fields you want to collect. Messages and supporting material can contain further personal information, including information about colleagues or other people. Please provide only what is relevant to your inquiry and avoid unnecessary sensitive details.

You can choose what to include in a message. Without enough contact or requirement information, however, we might be unable to respond meaningfully or assess the work. Do not send passwords, authentication tokens or identity documents through a general inquiry. Any need for authenticated access should be addressed separately before such information is supplied.

3. Website information and cookies

Technical information associated with a website visit can include an internet address, browser information, access events and usage records. The categories collected, their sources and their purposes are set out below, together with the technologies used to store or transmit them.

[Verified website-data and cookie inventory: categories, technologies, providers, purposes, storage duration and available controls.]

Cookies and similar technologies store information on, or read information from, your device. Their purposes and available choices are described in the inventory. Browser settings offer some storage controls, but do not necessarily control every data flow. Where permission is required, you have a choice before the relevant processing begins. Visiting the website alone is not blanket consent to processing.

4. Purposes and processing grounds

Inquiry information is used to understand the requested work, discuss requirements, prepare proposals and respond to business communications. Technical information, where collected, supports the specific website functions, maintenance or security purposes identified in the inventory. A new, unrelated use requires its own assessment rather than being assumed from the original inquiry.

The legal grounds for processing depend on the activity and applicable law. They can involve steps requested before an agreement, performance of an agreement, a legal obligation, consent or another ground available under that law. These are not interchangeable permissions. Each actual purpose must have an appropriate basis; consent, where used, must be distinguishable from simply contacting us. An inquiry should not automatically be treated as agreement to unrelated promotional communications.

5. Customer-directed collection and service data

Website communications are distinct from information processed to carry out a customer’s collection instructions. A service engagement can involve requested sources, collection specifications and delivered datasets. Where BlazoData processes personal information on a customer’s behalf, the responsibilities, permitted purposes and handling instructions belong in the relevant service agreement and, where applicable, a data processing agreement.

Collected source material can concern people who are neither website visitors nor customers. Public visibility does not by itself authorize collection, profiling or reuse. Customer instructions also do not settle every legal obligation. Source selection, authority to collect, notice duties and permitted uses need assessment for the particular engagement. This policy is not a data processing agreement or a license to use third-party personal information.

6. AI-assisted work and browser sessions

AI-assisted requests and developer browser work can involve information beyond an ordinary business inquiry. The processing details for the applicable service are set out in the following schedule.

[Verified AI/browser schedule: activities; request details, source content, inputs and outputs processed; AI providers and retention/secondary-use settings; human access; any automated decisions affecting people; browser session content, cookies, credentials, screenshots, recordings and logs handled, with purposes, recipients and retention, or verified absence.]

Read the relevant schedule before supplying personal information for this work. Keep requests and source selections limited to the information needed for the engagement. Do not put passwords or authentication tokens in general messages. Any necessary authenticated access must use the method separately agreed for that engagement.

7. Recipients and processing locations

We share personal information with the recipients identified below for the stated activities. The details distinguish providers acting on instructions from recipients using information for their own purposes, and identify any legally required disclosures or other independent uses. Sharing is limited to the information needed for the relevant activity.

[Verified recipients and locations: provider identities or meaningful categories, information shared, purposes and recipient roles, independent or advertising-related uses and other disclosures, processing/access countries and applicable transfer arrangements.]

Storage location alone does not describe all access: support or other provider access can occur elsewhere. The location details cover both storage and access. Cross-border processing is subject to the requirements applicable to the activity; the relevant transfer arrangements are identified alongside the recipients concerned.

8. Retention and protection

We retain personal information according to its purpose, the relevant engagement and applicable legal requirements. Inquiry records, delivered data, browser material and technical logs can have different retention periods. The arrangements below describe when records are deleted or returned and how backups and legal holds affect that process.

[Approved retention periods or criteria, including deletion/return procedures, backups and exceptions for each actual data category.]

No online transmission or storage method eliminates all risk, and absolute security cannot be guaranteed. Avoid including sensitive information that is unnecessary for the work. Report a suspected privacy or information exposure concern through the privacy contact in section 1, with enough detail to identify the issue but without resending the exposed information unnecessarily.

9. Privacy requests and choices

Depending on applicable law and the processing context, you can have rights to access, correct or delete personal information, restrict or object to processing, receive portable information or raise a complaint with the appropriate authority. These rights have conditions and exceptions; not every right applies to every record or jurisdiction.

Send a request to the privacy contact above, describing your relationship with BlazoData and the information concerned. We will assess the request, seek proportionate verification where necessary and respond within the applicable requirements. Please avoid sending unnecessary identity documents initially. For customer-directed processing, the request might need to be handled with the responsible customer. Where processing depends on consent, you can request withdrawal; this does not undo processing that was lawful before withdrawal.

10. Other websites and policy changes

External websites have their own privacy information. Review it before providing information to another service; this policy does not describe or approve that service’s practices. If an inquiry contains a child’s information, contact us so its handling can be assessed.

We will review this policy when the activities it describes change. The effective date identifies the approved version, and material changes will be communicated in a manner appropriate to the change and applicable requirements. For clarification about this policy or a particular activity, use the privacy contact in section 1.