Privacy Policy & Data Protection Notice
1. Data Controller & Statutory Identification
This website (blue-core.tech) is owned and operated by Bluecore Software PLC, a private limited company duly incorporated and registered under the laws of the Federal Democratic Republic of Ethiopia.
Principal Place of Business & Registered Office: Addis Ababa, Ethiopia.
Commercial Registration & Business License No.: AACATB/14/672/50471350/2018, issued by the Addis Ababa City Trade Bureau.
Official Contact for Data Privacy Matters: team@blue-core.tech, telephone: +251 978 939 312.
2. Information We Collect
We collect personal information through two primary mechanisms: information you provide to us directly, and information collected automatically through privacy-respecting website analytics.
- Information Provided Directly: When you submit our website contact form or communicate with us via email, telephone, WhatsApp, or Telegram, we may collect your name, email address, company or institutional affiliation, telephone number, and the contents of your message.
- Cookieless Analytics Telemetry: We use Vercel Web Analytics to collect aggregated, privacy-preserving metrics such as page paths, referrer URLs, browser type, operating system category, and country of origin. Vercel Web Analytics operates completely without cookies and does not collect or store any personal data or persistent visitor identifiers.
- Google Analytics 4 (GA4): Subject to your consent, we utilize Google Analytics 4 (Measurement ID: G-VVMVSLLBVB) to gather pseudonymous telemetry, including first-party cookie identifiers, truncated/anonymized IP addresses, session duration, interaction events (e.g., CTA clicks, content engagement, navigation flows), and approximate geographic location.
3. Purposes and Legal Bases for Processing
We process your data strictly for legitimate business, contractual, and technical purposes:
- Responding to Business Inquiries: Processing contact form inquiries to evaluate potential software engineering projects, provide architectural advice, and communicate pre-contractual proposals (Legal Basis: Legitimate commercial interest and taking requested pre-contractual steps).
- Website Performance & Optimization: Evaluating user engagement patterns, optimizing load times, and enhancing accessibility across devices (Legal Basis: Legitimate interest for cookieless telemetry; explicit consent for cookie-based Google Analytics 4).
- Security & Fraud Prevention: Protecting our infrastructure, preventing spam, mitigating denial-of-service risks, and enforcing our terms (Legal Basis: Legitimate security interest and compliance with statutory obligations).
5. Third-Party Service Providers & Processors
We do not sell, rent, or trade your personal data. We engage vetted service providers who process data strictly on our behalf under secure processing agreements:
- Vercel Inc. (USA): Provides edge application hosting, content delivery network (CDN), and cookieless web analytics under strict data privacy safeguards.
- Google LLC (USA): Provides Google Analytics 4 services. Google processes analytics data in accordance with Google's Data Processing Terms and Standard Contractual Clauses (SCCs).
- Resend Inc. (USA): Provides transactional email transmission infrastructure used to securely relay website contact form submissions to our engineering and management team.
6. Data Retention
We retain personal data only for as long as necessary to fulfill the purposes for which it was gathered:
Inquiries submitted through the contact form are retained for up to three (3) years to manage business correspondence, client relations, and commercial records.
Google Analytics 4 event and user data is automatically set to standard retention (up to 14 months) before automated deletion by Google.
7. Your Rights as a Data Subject
Depending on your jurisdiction and in accordance with international data protection frameworks, you have specific rights concerning your personal data:
- Right of Access: You may request confirmation of whether we process your personal data and receive a copy thereof.
- Right to Rectification: You may request prompt correction of inaccurate or incomplete personal information.
- Right to Erasure: You may request the deletion of your personal data where it is no longer required for its original purpose.
- Right to Restrict or Object: You may object to or request restriction of data processing based on our legitimate interests.
- Right to Withdraw Consent: Where processing relies on consent (such as analytics cookies), you may withdraw consent at any time without affecting prior lawful processing.
To exercise any of these statutory rights, please contact our privacy team at team@blue-core.tech.
8. Data Security Safeguards
We employ industry-standard administrative, physical, and technical safeguards to protect your personal data. All traffic to and from blue-core.tech is encrypted in transit using modern Transport Layer Security (TLS/HTTPS). Internal access to inquiry data is strictly limited to authorized personnel with a business need.