Blutui Platform Policy Statement: GDPR, CCPA, and CCPR Compliance

At Blutui, we take privacy and data protection seriously. Our commitment is to ensure that your data is processed transparently, securely, and in accordance with relevant data protection laws, including the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and the California Privacy Rights Act (CPRA).

This Platform Policy Statement outlines how Blutui handles your personal data, as well as your rights under these privacy regulations.

1. Information We Collect

Blutui collects and processes personal data to deliver our services effectively. The types of personal data we collect may include:

Personal identification information (such as name, email address, phone number)
Technical data (such as IP address, browser type, device type, and usage data)
Account-related information (such as account preferences, project details, and billing information)
Communication data (including customer service inquiries and feedback)

We collect this data directly from you when you interact with our platform, through cookies, or when you communicate with us.

2. Legal Basis for Processing (GDPR)

Under the General Data Protection Regulation (GDPR), Blutui relies on the following legal bases for processing personal data:

Consent: When you provide us with personal data, you consent to our processing of that data.
Contractual necessity: To fulfill contractual obligations related to the services we provide to you.
Legitimate interests: We may process personal data where it is necessary for our legitimate business interests, provided this does not override your data protection rights.

You have the right to withdraw your consent at any time, and we will respect your choice.

3. Your Data Protection Rights (GDPR, CCPA, CPRA)

You have certain rights regarding your personal data under GDPR, CCPA, and CPRA:

Right to Access: You have the right to request a copy of your personal data we hold.
Right to Rectification: You can request that we correct any inaccurate or incomplete personal data.
Right to Erasure (Right to be Forgotten): You can request the deletion of your personal data under certain circumstances.
Right to Restrict Processing: You can request that we restrict the processing of your data.
Right to Data Portability: You can request a copy of your data in a structured, commonly used format to transfer to another service provider.
Right to Object: You can object to our processing of your personal data under certain conditions, especially where our processing is based on legitimate interests.
Right to Non-Discrimination (CCPA/CPRA): Under CCPA and CPRA, you have the right to request that we do not discriminate against you for exercising your privacy rights, such as the right to access or delete your data.

To exercise these rights, please contact us via the details provided in the Contact Information section.

4. Data Retention

Blutui retains personal data for as long as necessary to fulfill the purposes for which it was collected, including to comply with legal, accounting, or reporting requirements. Once personal data is no longer needed, it will be securely deleted or anonymized.

5. Data Sharing and Third Parties

Blutui may share your personal data with third parties in the following circumstances:

Service Providers: We may share data with trusted third-party service providers that assist us with delivering our platform services (e.g., cloud hosting, payment processors).
Legal Requirements: We may disclose personal data if required to do so by law, in response to legal processes, or to protect our rights, privacy, safety, or property.
Business Transfers: If Blutui undergoes a merger, acquisition, or asset sale, your personal data may be transferred as part of the transaction.

All third-party data processing is conducted in compliance with applicable privacy laws, including the GDPR, CCPA, and CPRA.

6. Data Security

Blutui implements appropriate technical and organizational measures to ensure the security of your personal data. We use encryption, secure servers, and access control mechanisms to protect your data from unauthorized access, alteration, or disclosure. Despite these measures, please note that no method of electronic transmission or storage is 100% secure, and we cannot guarantee the absolute security of your data.

7. International Data Transfers

Blutui may transfer your personal data to countries outside of the European Economic Area (EEA) or the United States. In such cases, we ensure that appropriate safeguards are in place, such as standard contractual clauses or other lawful mechanisms for data transfer, in accordance with the GDPR and applicable privacy laws.

8. California Privacy Rights (CCPA/CPRA)

Under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), California residents have specific rights regarding their personal data:

Right to Know: You have the right to request information about the personal data we have collected, used, shared, and sold.
Right to Delete: You have the right to request the deletion of your personal data.
Right to Opt-Out: You can request to opt-out of the sale of your personal data. Blutui does not sell personal data.
Right to Non-Discrimination: You have the right to exercise your rights without facing discrimination from Blutui.

To submit a CCPA/CPRA request, please contact us through the details provided in the Contact Information section.

9. Cookies and Tracking Technologies

Blutui uses cookies and similar tracking technologies to enhance your user experience, analyze usage patterns, and personalize content. You can manage your cookie preferences through your browser settings or by using our cookie management tools. For more detailed information on how we use cookies, please refer to our Cookie Policy.

10. Changes to this Privacy Policy

We may update this Platform Policy Statement from time to time to reflect changes in privacy laws, our practices, or our services. Any changes will be posted on this page with the updated date. We encourage you to review this policy periodically for the latest information on our privacy practices.

11. Contact Information

If you have any questions or concerns regarding this Platform Policy Statement, your rights under GDPR, CCPA, or CPRA, or wish to exercise any of your data protection rights, please contact us at:

Email: GDPR@blutui.com
Address: Blutui, 95a Collingwood Street, Hamilton, NZ.
Phone Number: +64 21 728092

This policy is designed to inform and protect you while using the Blutui platform, and we are committed to maintaining the highest standards of privacy and data security.

GDPR, CCPA & CPRA