How BluWebMedia collects, uses and protects your personal data.

Last updated: 29 October 2026

Introduction

This Privacy Policy explains how BluWebMedia IT Services Pvt. Ltd. ("BluWebMedia", "we", "us") collects, uses and protects personal data when you visit www.bluwebmedia.co.in, including our blog Blu Ocean, contact us or apply for a job. For this data, BluWebMedia is the Data Fiduciary under India's Digital Personal Data Protection Act, 2023 and the controller under the EU and UK General Data Protection Regulation (GDPR).

We follow the Digital Personal Data Protection Act, 2023 and the rules made under it, the Information Technology Act, 2000 and the rules made under it, including the Reasonable Security Practices and Procedures and Sensitive Personal Data or Information Rules, 2011, and, where it applies to you, the GDPR.

Information we collect

We collect only what you give us, what your browser sends, and what you allow:

Contact and quote forms: your name, email address, phone number, the service you are interested in and your message.
Job applications: your name, email address, phone number, the position, your message and the CV you upload.
Analytics, only if you accept analytics cookies: pages visited, device and browser type, approximate location and page-load speed, collected through Google Analytics and GoDaddy's Real User Metrics.
Form protection: Google reCAPTCHA checks that a form is sent by a person, and may read browser and device signals for that purpose.
Your cookie choice: a random consent ID, the date and your selections. It contains no name, email or IP address.
Server records: our hosting provider records technical data about each request, such as IP address and browser type, to run and protect the website.

How we use your information and why we are allowed to

To reply to your enquiry, prepare a quote or proposal and provide the services you ask for. Basis: you sent us the information for this purpose (DPDP Act, section 7(a)); steps taken at your request before a possible contract, and our legitimate interest in answering business enquiries (GDPR Article 6(1)(b) and (f)).
To assess job applications and contact applicants. Basis: you sent us the information for this purpose (DPDP Act, section 7(a)); steps taken at your request (GDPR Article 6(1)(b)).
To understand how the site is used and improve it (analytics). Basis: your consent, which you can withdraw at any time (DPDP Act, section 6; GDPR Article 6(1)(a)).
To keep the site and our forms secure and prevent spam and abuse. Basis: reasonable security safeguards required by law, and our legitimate interest in protecting our services (DPDP Act, section 8(5); GDPR Article 6(1)(f)).
To meet our legal obligations. Basis: compliance with law (DPDP Act, section 7; GDPR Article 6(1)(c)).

We do not sell your personal data and do not use it for advertising. We do not use your enquiry details for marketing without your separate consent.

Where we rely on your consent, you give it by a clear action, such as accepting analytics cookies. You can withdraw it at any time: for cookies, through "Cookie settings" at the bottom of every page; otherwise, by writing to our Grievance Officer. Withdrawing is as easy as giving consent and does not affect processing that took place before withdrawal.

Cookies and analytics

We use cookies and similar technologies to help our website function, remember your preferences and understand how visitors use our services.

Essential and preference technologies: We use technologies necessary for website functionality and to remember preferences, such as your light or dark theme choice and your cookie choices. These do not all necessarily involve cookies; some preferences may be stored locally in your browser.

Analytics: We use Google Analytics and our hosting provider GoDaddy's Real User Metrics to understand how visitors interact with our website and to help us improve its content and performance. These use cookies and are switched on only if you agree.

Security: We use Google reCAPTCHA to help protect our forms against spam and automated abuse. This service may process technical information and use cookies or similar technologies in accordance with Google's applicable terms and privacy documentation.

We ask for your consent before using any non-essential cookies or similar technologies. You can change or withdraw your choice at any time through "Cookie settings" at the bottom of every page, or through your browser settings. We keep a record of your choice (a random ID, the date and your selections, but not your name or IP address) to show that we asked. Withdrawing consent does not affect processing that took place before withdrawal.

For more information about the cookies and similar technologies used on this website, their purposes and durations, please see our Cookie Policy.

We share personal data only where it is needed to run the site and our business:

GoDaddy, our hosting provider, which stores the website and delivers the emails sent through our forms, and, if you accept analytics cookies, measures page-load speed.
Google, for reCAPTCHA and, if you accept analytics cookies, Google Analytics.
Authorities, when the law requires it.

International transfers

Google and GoDaddy may process data outside India, including in the United States. Where the GDPR applies, these transfers rely on the providers' Standard Contractual Clauses or other safeguards recognised by law. We do not transfer personal data to any country to which the Government of India has restricted transfers.

How long we keep it

Enquiries: up to 3 years after our last contact with you, then deleted, unless the law requires us to keep them longer.
Job applications and CVs: CVs are sent to us by email and are not kept on the website. We delete applications when the hiring decision is made, or keep them for up to 12 months for future roles if you agree.
Analytics data: kept by Google Analytics for 14 months.
Records of your cookie choice: 2 years, then deleted automatically.
Our website's error logs: 180 days. They contain no form contents.

Security

We use reasonable technical and organisational measures, including encrypted connections (HTTPS), restricted access, separate databases with limited permissions and checks on uploaded files. No method of sending data over the internet is completely secure, so we cannot promise absolute security.

Your rights

Under India's DPDP Act you may:

ask for a summary of the personal data we hold about you and how we use it;
ask us to correct, complete, update or erase it;
withdraw your consent;
have your grievance addressed by us;
nominate a person to exercise your rights if you die or become unable to.

If the GDPR applies to you, you may also ask us to restrict processing, receive your data in a portable format, and object to processing based on our legitimate interests, and you may complain to your local data protection authority.

To use any of these rights, write to our Grievance Officer (below). We may ask you to confirm your identity. We do not charge for this.

Grievance Officer and privacy contact

If you have a question, request or complaint about how we handle your personal data, including a request to access, correct, erase or stop using it, or to withdraw your consent, please contact our Grievance Officer:

Name: [Placeholder]

Designation: Grievance Officer

Email: [Placeholder]

Address: BluWebMedia IT Services Pvt. Ltd., [registered office address]

Please include enough detail for us to identify you and understand your request. We may ask you to confirm your identity before acting on it.

We acknowledge requests promptly and resolve grievances within one month of receipt [and in any case within the period required by law]. If you are not satisfied with our response, you may complain to the Data Protection Board of India. If you are in the European Union or the United Kingdom, you may also complain to your local data protection authority.

You may ask for this notice or any consent request in English or in any language listed in the Eighth Schedule to the Constitution of India by writing to the email above.

Children

The site is meant for businesses and adults. We do not knowingly collect personal data from anyone under 18, and we do not track or target children. If you think a child has sent us information, tell us and we will delete it.

Changes to this policy

We may update this policy. The date at the top shows when it last changed. If a change affects something you consented to, we will ask for your consent again where required.

Contact us

Questions about this policy? Write to our Grievance Officer at [Placeholder].

Privacy Policy