Privacy Policy

1. Data Controller

The data controller responsible for your personal data is:

2. What Personal Data We Collect

We may collect and process the following categories of personal data:

• Contact and identity data: name, job title, company name, work email address.
• Communications data: messages and enquiries you send via our contact form or email.
• Technical data: IP address, browser type and version, time zone, operating system, and other technology identifiers collected automatically when you visit our website.
• Usage data: information about how you use our website and services.
• Audio and voice data (platform clients only): audio recordings submitted for processing through our enterprise platform. See Section 6 for specific provisions.

We do not collect special category data (such as health, biometric, or financial data) through this website.

3. How We Use Your Data

We process your personal data for the following purposes and on the following legal bases:

4. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected:

• Contact enquiries: up to 24 months from last contact.
• Client account data: for the duration of the contract plus 6 years (to comply with UK statutory requirements).
• Website analytics data: up to 26 months.
• Audio data (platform): permanently deleted after structuring is complete — we do not retain raw voice recordings. See Section 6.

5. Sharing Your Data

We do not sell, rent, or trade your personal data. We may share data with:

• Service providers acting as processors on our behalf (e.g. cloud infrastructure, email delivery), bound by strict data processing agreements.
• Professional advisers (lawyers, accountants, auditors) under duties of confidentiality.
• Regulatory authorities when required by law or to respond to legal process.

Where we transfer personal data outside the United Kingdom, we ensure appropriate safeguards are in place in accordance with Chapter V UK GDPR (e.g. International Data Transfer Agreements or adequacy decisions).

6. Audio and Voice Data — Special Provisions

7. Your Rights Under UK GDPR

Depending on circumstances, you have the right to:

• Access the personal data we hold about you.
• Rectification of inaccurate or incomplete data.
• Erasure ("right to be forgotten") in certain circumstances.
• Restriction of processing.
• Data portability — receive your data in a structured, machine-readable format.
• Object to processing based on legitimate interests.
• Withdraw consent at any time where processing is based on consent.

To exercise any of these rights, please contact us at info@blumera.co.uk. We will respond within 30 days as required by UK GDPR.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

8. Cookies

Our website uses only technically necessary cookies to ensure basic functionality. We do not use tracking, advertising, or third-party analytics cookies without your explicit consent. You may control cookie settings through your browser at any time.

For full details, please read our dedicated Cookie Policy.

9. Security

We implement appropriate technical and organisational measures to protect personal data against accidental loss, unauthorised access, alteration, or disclosure, including encryption, access controls, and regular security reviews.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page reflects the most recent revision. Continued use of our services after any changes constitutes acceptance of the updated policy.

11. Contact Us