Privacy Policy

Blue Internet Solutions Ltd. (“we”, “us”, “our”) operates websites, software applications, digital tools, educational products and marketing services.

• Company registration number: 10878997
• VAT number: GB281190412
• Address: 128 City Road, London EC1V 2NX, United Kingdom
• Privacy contact: info@blueinternetsolutions.com

This policy applies to blueinternetsolutions.com, organictrafficstudio.com and other websites, brands, applications and services operated by Blue Internet Solutions Ltd. that link to this policy, including their temporary preview domains.

Additional product-specific notices explain processing unique to a service. This policy does not automatically apply to client-owned services merely because we supplied their software or marketing.

We act as controller when we decide why and how personal information is used. Where a business customer uses our software to process its own contacts or customer information, we may act as its processor under its instructions. That customer’s privacy notice governs its own processing.

Depending on the service and features you use, we may collect:

• Contact and account information, including your name, email, telephone number, company, account identifiers and preferences.
• Order, billing, subscription and payment-status information.
• Enquiries, support correspondence, form submissions, bookings and chat conversations.
• Workspace information, including brand profiles, campaigns, prompts, drafts, uploaded media, reference images, generated content, schedules and exports.
• Inputs and results from tools, such as debt and payment figures, budgets, property requirements, relocation preferences or lifestyle information you choose to submit.
• Information from authorised integrations, including social account and Page identifiers, permissions, access tokens, selected publishing destinations and publishing results.
• Technical information, including IP address, browser and device details, timestamps, security logs and diagnostic information.
• Marketing preferences and, where enabled and permitted, cookie, analytics and advertising identifiers.

We receive information from you, through your use of our services, and through integrations you authorise. Where information comes from public professional sources or another business, the relevant notice or communication explains that source and purpose.

Required information is identified at collection. Without it, we may be unable to provide the requested feature.

Where UK or EU data protection law applies:

• We rely on contract or requested pre-contract steps to provide accounts, tools, purchases, content generation and authorised integrations.
• We rely on contract or legitimate interests to answer enquiries and provide support.
• We rely on legitimate interests in security, reliability and service improvement to prevent misuse, investigate errors and maintain our services, subject to your rights.
• We rely on legal obligations for applicable accounting, tax and regulatory duties.
• We rely on consent for marketing and optional tracking where required. Otherwise, marketing occurs only where an applicable lawful basis and communication rules permit it.

Where sensitive information is needed, the relevant service must explain the additional basis and safeguards at collection.

Some features send prompts, uploaded reference material and other necessary inputs to third-party AI providers, such as OpenAI, to generate text, images, audio, summaries or recommendations.

The information sent depends on the feature requested. Provider processing and retention depend on the provider and applicable service agreement.

Do not include unnecessary sensitive information or third-party confidential data. Only upload material you are authorised to use.

AI output may be inaccurate and should be reviewed. AI personas are not human professionals. Product-specific notices explain the limitations of financial, property, relocation and wellbeing tools.

Any automated decision-making producing legal or similarly significant effects requires additional disclosures and safeguards specific to that feature.

Where supported, you authorise an integration through the platform’s permission process.

We use authorised information to identify available accounts, connect selected accounts to your workspace and carry out supported actions you request, such as publishing content and retrieving publishing results.

In Organic Traffic Studio, connecting an account or approving a draft does not itself publish content. Publishing requires a separate instruction. Scheduling applies only where available and explicitly enabled.

Organic Traffic Studio handles access tokens server-side and stores them encrypted. We do not need your Facebook or Instagram password.

You can disconnect using the application where available, or revoke access through the platform’s settings. Disconnecting does not automatically delete previously stored workspace content or posts already published externally.

Meta and other platforms process information under their own privacy notices.

Depending on the service, information may be shared with hosting, database, authentication, storage, AI, payment, email, CRM, support and analytics providers; integrations you authorise; authorised workspace members; professional advisers; and authorities where legally required.

Relevant providers may include GoHighLevel, Supabase, OpenAI, Cloudflare, Stripe and Meta, depending on the product. Not every provider receives information from every project.

Where you interact with a form or service operated for a business customer, that business may receive the information as explained at collection.

Some providers act under our instructions; others act as independent controllers for their own activities. Information may also be transferred in a business restructuring, subject to appropriate protections.

Contact us for information about providers relevant to your use.

Providers may process information outside your country, including in the United Kingdom, European Economic Area and United States.

Where transfers are restricted by applicable law, an appropriate transfer mechanism and any required additional safeguards must apply. Contact us for information about the arrangements relevant to a service.

Services may use cookies, local storage and similar technologies for authentication, security, preferences and operation.

Where optional analytics or advertising technologies are used, the relevant site’s cookie information explains their purposes and providers. Consent is obtained where required, and choices can be changed through the controls provided.

Browser settings can also manage cookies. Blocking essential storage may affect sign-in or other essential functions.

We retain information according to its purpose, applicable legal requirements and relevant customer agreements.

Account and workspace information is kept while needed to provide services and subsequently only for justified purposes. Enquiries are kept for handling and relevant follow-up. Billing records are retained for applicable tax and accounting requirements.

Integration credentials are retained while needed for the authorised connection. Security logs are retained as needed for security and investigation. A minimal suppression record may be kept to respect marketing objections.

Deleted information may remain temporarily in restricted backups until replaced under the relevant retention cycle.

We delete or anonymise information when no longer needed unless continued retention is justified. Contact us for the period or criteria applying to your information.

We use technical and organisational measures appropriate to the information and risks, including access restrictions and credential safeguards. No system provides absolute security.

Keep your credentials private and report suspected unauthorised use.

Depending on applicable law, you may request access, correction, deletion, restriction or portability, and object to processing. You can withdraw consent without affecting earlier lawful processing.

You may object to direct marketing at any time using an unsubscribe link or emailing info@blueinternetsolutions.com.

For privacy or deletion requests, email info@blueinternetsolutions.com with the subject “Privacy / Data deletion request.” Include the service name, account email and information concerned. Do not send passwords or access tokens.

We may reasonably verify your identity. We respond within applicable legal timeframes and explain any permitted extension or information that must be retained.

For customer-controlled information, we may refer the request to that customer and assist under our agreement.

You can complain to the UK Information Commissioner’s Office at https://ico.org.uk/make-a-complaint/ or your competent local data protection authority. Contacting us first is optional.

Our services are intended for adults unless a particular service states otherwise. Contact us if you believe a child has provided information inappropriately.

External websites and platforms have their own privacy practices. Publicly shared content may be copied or retained by others.

We may update this policy as services or requirements change. The page shows its update date, and material changes are communicated where appropriate.

Privacy contact: info@blueinternetsolutions.com

Blue Internet Solutions Ltd., 128 City Road, London EC1V 2NX, United Kingdom.

This is the marketing website for Blue Internet Solutions. It does not require an account and does not create user profiles.

Personal information you provide here comes from the contact form: your name, email, phone, agency name, current website, the markets you sell to, and your message. We use it to answer your enquiry and follow up about our services, on the lawful bases of contract / pre-contract steps and legitimate interests.

When you submit the contact form, your details are sent to our CRM provider so we can manage the enquiry and reply. The site itself is served from an edge hosting provider (Cloudflare), and web fonts are loaded from Google Fonts. Your browser sends standard technical data (IP address, browser and device) to these providers as part of serving the page.

This site uses a single first-party session cookie to keep your visit consistent. It does not run advertising or analytics trackers and does not connect to Facebook or Instagram.

Retention: we keep contact-form enquiries for as long as needed to handle the enquiry and relevant follow-up, and longer where a legal obligation applies. The exact retention period applied by our CRM and hosting providers to their own logs is set by those providers; contact us and we will confirm what applies to your information.

To request deletion of the details you submitted through this site, see our Data Deletion Instructions or email info@blueinternetsolutions.com.