Privacy Policy

1. Information We Collect

Information You Provide Directly

We collect information that you voluntarily provide to us, including:

• Contact Information: Your name, business name, email address, phone number, and any other information you include when you submit our contact form, request a quote, or communicate with us.
• Project Information: Business details, service areas, service descriptions, hours of operation, and other content you provide for website development.
• Payment Information: When you make a purchase, your payment is processed by Stripe, Inc. We do not store your credit card number, expiration date, or CVV on our servers. Stripe handles all payment processing in accordance with PCI-DSS standards. We receive only a transaction confirmation, the last four digits of your card, and billing details necessary to maintain your account.
• Communications: Records of correspondence if you contact us via email, phone, or our contact form.

Information Collected Automatically

When you visit our Site, we may automatically collect certain information, including:

• Log Data: Your IP address, browser type and version, operating system, referring URL, pages visited, time and date of your visit, and time spent on pages.
• Cookies and Similar Technologies: We use essential cookies that are strictly necessary for the operation of our Site. These cookies enable basic functions like page navigation and access to secure areas. We do not use advertising, tracking, or marketing cookies. See Section 5 (Cookies) for more details.
• Analytics Data: We may use Google Analytics to understand how visitors interact with our Site. Google Analytics collects information such as how often users visit the Site, what pages they visit, and what other sites they used prior to coming to our Site. Google Analytics collects only the IP address assigned to you on the date you visit our Site, rather than your name or other identifying information. We do not combine the information collected through Google Analytics with your personal information. You can opt out of Google Analytics by installing the Google Analytics Opt-Out Browser Add-on, available at https://tools.google.com/dlpage/gaoptout.

Information from Third Parties

We may receive information about you from third parties, such as Stripe (payment confirmation details), in connection with transactions you initiate.

2. How We Use Your Information

We use the information we collect for the following purposes:

• To provide, maintain, and improve our Services, including designing, developing, and hosting your website.
• To process transactions and send related information, including purchase confirmations and invoices.
• To respond to your inquiries, comments, or questions submitted through our contact form or other channels.
• To send you service-related communications, such as project updates, technical notices, security alerts, and support messages.
• To monitor and analyze usage trends to improve our Site and Services.
• To detect, prevent, and address technical issues, fraud, or security concerns.
• To comply with legal obligations, resolve disputes, and enforce our agreements.

We do not use your personal information for automated decision-making or profiling.

3. How We Share Your Information

We do not sell, rent, or trade your personal information to third parties for their marketing purposes. We may share your information in the following circumstances:

• Service Providers: We share information with third-party service providers who perform services on our behalf, including:
  • Stripe, Inc. — Payment processing. Stripe's privacy policy is available at https://stripe.com/privacy.
  • Google LLC (Google Analytics) — Website analytics. Google's privacy policy is available at https://policies.google.com/privacy.
  • Cloudflare, Inc. — Website hosting, content delivery, and security. Cloudflare's privacy policy is available at https://www.cloudflare.com/privacypolicy/.
  • Web3Forms — Contact form submission processing.
• Legal Compliance: We may disclose your information if required to do so by law, regulation, legal process, or governmental request, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others, to investigate fraud, or to respond to a government request.
• Business Transfers: If we are involved in a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. We will notify you via email or a prominent notice on our Site of any change in ownership or use of your personal information.
• With Your Consent: We may share your information for any other purpose with your express consent.

4. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements.

• Client project data (website content, business details): Retained for the duration of our business relationship and for up to one (1) year after the termination of services, unless you request earlier deletion.
• Payment records: Retained for up to seven (7) years as required for tax and accounting purposes.
• Contact form submissions: Retained for up to one (1) year, then deleted.
• Analytics data: Retained in accordance with Google Analytics' data retention settings, which we have configured to the minimum available period.

When your personal information is no longer needed, we will securely delete or anonymize it.

5. Cookies

Our Site uses only essential cookies that are strictly necessary for the Site to function. These cookies do not track you across other websites and do not collect information for advertising purposes.

Essential Cookies: These cookies are required for the basic operation of the Site. They enable core functionality such as page navigation. The Site cannot function properly without these cookies.

We do not use marketing cookies, advertising cookies, or social media cookies. If we add analytics (such as Google Analytics), it may place cookies on your device to collect anonymized usage data. You can control cookies through your browser settings. Most browsers allow you to refuse or delete cookies. Please note that disabling essential cookies may affect the functionality of the Site.

6. Data Security

We implement reasonable administrative, technical, and physical safeguards to protect your personal information from unauthorized access, use, alteration, or destruction. These measures include:

• Encryption of data in transit via TLS/SSL.
• Secure hosting through Cloudflare with DDoS protection, Web Application Firewall, and security headers (HSTS, CSP, X-Frame-Options).
• Limiting access to personal information to those who need it to perform their job functions.
• Payment processing handled entirely by Stripe's PCI-DSS compliant infrastructure.

However, no method of transmission over the Internet or method of electronic storage is completely secure. While we strive to protect your personal information, we cannot guarantee its absolute security.

7. Your Rights and Choices

Depending on where you reside, you may have certain rights regarding your personal information under applicable state privacy laws.

Rights Under California Law (CCPA/CPRA)

If you are a California resident, you may have the following rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act:

• Right to Know: You have the right to request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources from which the information was collected, the business purpose for collecting the information, and the categories of third parties with whom we share the information.
• Right to Delete: You have the right to request that we delete your personal information, subject to certain exceptions.
• Right to Correct: You have the right to request that we correct inaccurate personal information.
• Right to Opt Out of Sale/Sharing: We do not sell or share your personal information for cross-context behavioral advertising. Therefore, there is no need to opt out.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your privacy rights.

Rights Under Other State Privacy Laws

Residents of states with comprehensive privacy laws — including but not limited to Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Iowa, Tennessee, Indiana, Kentucky, Rhode Island, Nebraska, New Hampshire, New Jersey, Delaware, Maryland, and Minnesota — may have similar rights, including the right to access, correct, delete, and obtain a copy of their personal information, and the right to opt out of the sale of personal information, targeted advertising, and certain profiling activities. Some states also provide the right to appeal a denial of a privacy request.

How to Exercise Your Rights

To exercise any of the rights described above, please contact us at:

Email: hello@blueworksites.com

We will respond to your request within the timeframe required by applicable law (generally 45 days for California residents, with the possibility of a 45-day extension if reasonably necessary). We may need to verify your identity before processing your request.

You may also designate an authorized agent to make a request on your behalf. If you use an authorized agent, we may require proof that you have authorized the agent to act on your behalf and may still ask you to verify your identity directly.

8. Do Not Track Signals

Some browsers transmit "Do Not Track" (DNT) signals. Our Site does not currently respond to DNT signals. However, as noted above, we do not use tracking or advertising cookies.

Where required by applicable state law, we will honor opt-out preference signals, including the Global Privacy Control (GPC), as a valid request to opt out of the sale or sharing of personal information.

9. Children's Privacy

Our Site and Services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children under 16. If we learn that we have collected personal information from a child under 16, we will take steps to delete such information promptly. If you believe we have collected information from a child under 16, please contact us at hello@blueworksites.com.

10. Third-Party Links

Our Site may contain links to third-party websites or services that are not operated by us. This Privacy Policy does not apply to those third-party sites. We encourage you to review the privacy policies of any third-party sites you visit. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.

11. International Users

Our Site and Services are intended for users in the United States. If you are accessing our Site from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your country of residence. By using our Site or Services, you consent to such transfer and processing.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make changes, we will update the "Last Updated" date at the top of this page. If we make material changes, we will provide notice through the Site or by other means as required by applicable law. Your continued use of the Site or Services after any changes indicates your acceptance of the updated Privacy Policy.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

BlueWorkSites
Email: hello@blueworksites.com
Website: https://blueworksites.com