Privacy Policy
Last updated: February 25, 2026
Bluechainlogic ("Company", "we", "us", or "our"), registered in the Netherlands, is committed to protecting your privacy and handling your personal data responsibly. This Privacy Policy explains how we collect, use, store, and protect personal data in connection with our website, services, and business operations.
This policy is compliant with the General Data Protection Regulation (EU) 2016/679 ("GDPR") and the Dutch Implementation Act of the GDPR (Uitvoeringswet AVG).
1. Data Controller
The data controller for the personal data described in this policy is:
Bluechainlogic
Utrecht, the Netherlands
Email: privacy@bluechainlogic.com
2. What Data We Collect
We collect and process the following categories of personal data:
2.1 Website Visitors
- Technical data: browser type, device type, operating system, referring URL, and country. Your IP address reaches our hosting provider as part of any web request, but our analytics does not store it.
- Usage data: which pages were viewed and which buttons were clicked, collected in aggregate by a cookieless analytics tool. We cannot tie this to you as an individual and we do not attempt to.
- Booking data: name, email address, and any information you provide when scheduling a call through our Calendly integration.
2.2 Clients
- Contact information: name, email address, phone number, company name, job title.
- Business information: ideal customer profile details, CRM credentials (where access is granted), campaign preferences, and feedback.
- Billing information: invoicing details, company registration number, VAT number, and payment records.
2.3 Prospects (Outreach Recipients)
- Professional contact information: name, business email address, job title, company name, and company information sourced from publicly available business directories, company websites, LinkedIn, and licensed third-party data providers.
- Behavioural signals: business activities and publicly available information used to determine outreach timing and relevance (e.g., funding announcements, hiring activity, product launches).
3. How We Use Your Data
| Purpose | Legal Basis (GDPR) |
|---|---|
| Providing and delivering our services to clients | Performance of a contract (Art. 6(1)(b)) |
| Conducting prospect research and outreach campaigns on behalf of clients | Legitimate interest (Art. 6(1)(f)) — direct marketing of relevant B2B services |
| Processing booking requests and discovery calls | Consent / Pre-contractual measures (Art. 6(1)(a)/(b)) |
| Sending invoices and processing payments | Performance of a contract (Art. 6(1)(b)) |
| Analysing website usage and improving our services | Legitimate interest (Art. 6(1)(f)) |
| Complying with legal and regulatory obligations | Legal obligation (Art. 6(1)(c)) |
| Protecting against fraud, abuse, and security threats | Legitimate interest (Art. 6(1)(f)) |
Legitimate Interest Assessment: Where we rely on legitimate interest, we have conducted a balancing test to ensure our interests do not override the rights and freedoms of the data subjects. For B2B outreach, we only contact individuals in their professional capacity using publicly available business information, and we provide a clear and easy opt-out mechanism in every communication.
4. Data Sharing
We do not sell personal data. We may share personal data with the following categories of recipients:
- Clients: Qualified lead information (prospect name, company, contact details, and context) is shared with the client on whose behalf the outreach was conducted.
- Service providers: We use trusted third-party tools and services for email delivery, CRM integration, analytics, hosting, and scheduling. These providers process data on our behalf under Data Processing Agreements compliant with GDPR Article 28.
- Legal authorities: Where required by law, regulation, or valid legal process.
We do not transfer personal data outside the European Economic Area (EEA) unless adequate safeguards are in place (such as Standard Contractual Clauses approved by the European Commission).
5. Data Retention
- Client data: Retained for the duration of the engagement and for 5 years thereafter (in accordance with Dutch statutory retention obligations for financial records).
- Prospect data: Retained for up to 12 months from the date of last outreach activity. Data is deleted or anonymized after this period unless the prospect has entered into an active business relationship with our client.
- Website analytics data: Aggregate and non-personal, retained by our analytics provider for up to 12 months. It contains no identifier that could be traced back to an individual visitor, so there is nothing here to export or erase on request.
- Booking data: Retained for 12 months after the scheduled call, unless a business relationship is established.
6. Your Rights
Under GDPR, you have the following rights regarding your personal data:
- Right of access — Request a copy of the personal data we hold about you.
- Right to rectification — Request correction of inaccurate or incomplete data.
- Right to erasure — Request deletion of your data ("right to be forgotten"), subject to legal retention obligations.
- Right to restriction — Request that we limit the processing of your data in certain circumstances.
- Right to data portability — Request your data in a structured, machine-readable format.
- Right to object — Object to the processing of your data based on legitimate interest, including direct marketing. We will cease processing upon receipt of a valid objection unless we can demonstrate compelling legitimate grounds.
- Right to withdraw consent — Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of processing prior to withdrawal.
To exercise any of these rights, please contact us at privacy@bluechainlogic.com. We will respond within 30 days.
7. Opt-Out of Outreach
Every outreach message we send includes a clear and functional opt-out mechanism. If you wish to stop receiving communications from us or from any campaign we operate on behalf of a client, you may:
- Click the unsubscribe link in any email you receive from us.
- Reply to any outreach message requesting removal.
- Email us directly at privacy@bluechainlogic.com.
We process all opt-out requests within 5 business days and maintain a suppression list to prevent future contact.
8. Cookies and Tracking
This website sets no analytics cookies. We measure visits with Vercel Web Analytics, which is cookieless: it records the page visited, the referring site, and coarse device and country information, and does not store your IP address, set an identifier on your device, or follow you to other websites.
The only cookies you may encounter come from Calendly, and only if you open the scheduling widget to book a call. Those are set by Calendly under its own privacy policy and are needed for the booking to work.
We do not use advertising or retargeting cookies, and we run no cross-site tracking of any kind. Because nothing we set requires consent, this site shows no cookie banner. You can still manage cookie preferences through your browser settings.
9. Data Security
We implement appropriate technical and organizational measures to protect personal data against unauthorized access, loss, alteration, or destruction. These measures include:
- Encryption of data in transit (TLS/SSL) and at rest.
- Access controls with role-based permissions and two-factor authentication.
- Regular security assessments and monitoring.
- Confidentiality agreements with all employees and contractors.
- Secure cloud infrastructure with providers that maintain SOC 2 or equivalent certification.
10. Data Breach Notification
In the event of a personal data breach that poses a risk to the rights and freedoms of individuals, we will:
- Notify the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) within 72 hours of becoming aware of the breach.
- Notify affected individuals without undue delay where the breach is likely to result in a high risk to their rights and freedoms.
- Document the breach, its effects, and the remedial actions taken.
11. Third-Party Links
Our website may contain links to third-party websites or services (e.g., Calendly, LinkedIn). We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing personal data.
12. Children's Data
Our services are not directed at individuals under the age of 16. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child, we will delete it promptly.
13. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be posted on this page with an updated "Last updated" date. For active clients, we will also notify changes via email.
14. Complaints
If you believe we have not handled your personal data in accordance with this policy or applicable law, you have the right to lodge a complaint with:
Autoriteit Persoonsgegevens (Dutch Data Protection Authority)
Website: autoriteitpersoonsgegevens.nl
Phone: +31 (0)70 888 85 00
We encourage you to contact us first at privacy@bluechainlogic.com.