Privacy Policy
Last Updated: February 22, 2026 · Applies to: bluarc.app and all related services
1. Introduction
BluArc is committed to protecting the privacy of individuals who interact with our website and services. This Privacy Policy explains how we collect, use, disclose, and safeguard personal information in accordance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and, where applicable, the General Data Protection Regulation (GDPR).
By using our website or engaging our services, you consent to the practices described in this policy.
2. Who We Are
BluArc is a web design and development studio based in Toronto, Ontario, Canada. For privacy-related inquiries, you may contact us at: [email protected].
3. Information We Collect
We may collect the following categories of personal information:
- Contact information: full name, email address, phone number (if provided)
- Inquiry and project details submitted through our contact forms
- Technical data: IP address, browser type, device type, pages visited, and session duration, collected through cookies and analytics tools
- Communication records: emails, messages, or correspondence exchanged in connection with our services
- Billing information: invoicing details where applicable (we do not store payment card data)
4. How We Collect Information
We collect information in the following ways:
- Directly from you when you complete a contact or inquiry form
- Through email or other direct communications
- Automatically through cookies and analytics tools when you browse our website (see our Cookie Policy)
5. Why We Collect Information
We collect and use personal information for the following purposes:
- To respond to inquiries and provide requested services
- To manage client relationships and deliver contracted work
- To send service-related communications, including project updates and invoices
- To improve our website and understand how visitors interact with it
- To comply with legal obligations
- With your consent, to send marketing or promotional communications in the future
6. Legal Basis for Processing (GDPR)
For individuals in the European Economic Area, we process personal data on the following legal bases:
- Contractual necessity: to fulfil a contract or respond to a pre-contractual request
- Legitimate interests: to improve our services and website
- Legal obligation: to comply with applicable law
- Consent: where you have expressly provided it, including for marketing communications
7. Sharing of Information
We do not sell, rent, or trade personal information. We may share information in limited circumstances:
- With service providers who assist us in operating our business (e.g., email platforms, analytics providers), under confidentiality obligations
- With Google Analytics for website performance analysis (see Cookie Policy)
- If required by law, legal process, or government authority
- To protect the rights or safety of BluArc, our clients, or others
8. Data Retention
We retain personal information only for as long as necessary to fulfil the purposes described in this policy, or as required by law. Client project data is generally retained for a period of five (5) years following project completion for tax and record-keeping purposes. Inquiry data from non-clients is retained for up to twelve (12) months.
9. Your Rights
Subject to applicable law, you have the right to:
- Access the personal information we hold about you
- Request correction of inaccurate or incomplete information
- Request deletion of your personal information, subject to legal retention requirements
- Withdraw consent at any time, where processing is based on consent
- Lodge a complaint with the Office of the Privacy Commissioner of Canada or your local supervisory authority
To exercise any of these rights, please contact us at [email protected].
10. Security
We implement reasonable administrative, technical, and physical safeguards to protect personal information from unauthorized access, disclosure, or misuse. No method of transmission over the internet is completely secure, and we cannot guarantee absolute security.
11. Third-Party Links
Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to review their respective privacy policies.
12. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be posted on our website with a revised effective date. Continued use of our website or services after such changes constitutes your acceptance of the updated policy.
13. Contact
For privacy-related questions or requests: [email protected]