Privacy Policy

1. Overview & Commitment

At blanczero ("we", "our", or "us"), we design and build digital transformation systems, SaaS applications, and workflow automations. We believe privacy is a fundamental architectural requirement, not an afterthought.

This Privacy Policy explains how blanczero collects, uses, protects, and discloses personal information when you visit our website (blanczero.com) or communicate with us regarding potential projects, proposals, and consulting engagements.

2. Information We Collect

We collect only the minimum necessary information required to evaluate your business inquiry and provide our digital services.

A. Information You Voluntarily Provide

• Contact Information: Full name, business email address, company name, and website URL submitted via our contact form or direct email.
• Project Specifications: Selected service areas (Branding, SaaS Development, AI Automations), budget ranges, project timelines, and project descriptions.
• Direct Correspondence: Any communications exchanged via email, video discovery calls, or shared specification documents.

B. Automatically Collected Technical Data

• HTTP & Server Telemetry: Standard web server access logs (IP address, browser user-agent, operating system, referrer URL, and timestamp) collected solely for server health, DDoS mitigation, and security diagnostics.

3. Legal Bases for Processing (GDPR / UK GDPR)

If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, we process your personal data under the following lawful bases established by the General Data Protection Regulation (GDPR):

• Contractual Necessity: Processing required to take pre-contractual steps at your request (e.g., scoping a project proposal, drafting Statements of Work, and executing client agreements).
• Legitimate Interests: Operating and securing our website, preventing spam/abuse, and communicating with business prospects.
• Legal Compliance: Retaining financial or transaction records where mandated by applicable tax and accounting laws.
• Consent: Where you have granted explicit consent for specific communications.

4. How We Use Your Information

We use information collected strictly for legitimate business and client service purposes:

• To review and respond to your project inquiries and schedule discovery sessions.
• To formulate customized proposals, scope architecture, and deliver technical deliverables.
• To defend against automated bot spam, unauthorized access, and cyber threats.
• To fulfill our contractual obligations to existing clients.

We do not use submitted project details for automated newsletters or marketing spam.

5. Cookies & Tracking Technologies

blanczero operates a privacy-first web property:

• No Third-Party Advertising Cookies: We do not deploy third-party advertising cookies, retargeting pixels (such as Meta Pixel or Google Ads), or data brokers.
• Essential Operational Storage: Our site uses minimal, non-identifying local state solely for core UI performance and progressive enhancement flags.

6. Service Providers & Subprocessors

We may engage trusted third-party infrastructure providers to host our systems and facilitate business operations. All providers are bound by strict Data Processing Agreements (DPAs) and confidentiality obligations:

• Cloud Infrastructure & Hosting: Edge hosting and CDN providers to deliver static web assets securely with SSL/TLS encryption.
• Email & Communication: Business email and workspace collaboration platforms for client communications.

7. Data Retention & Minimization

We retain personal information only for as long as necessary to fulfill the purposes outlined in this policy:

• Inquiry Data: Inquiries that do not convert into active client engagements are retained for up to 12 months for reference and auditing, after which they are securely deleted or anonymized.
• Client Project Records: Contracts, invoices, and architectural deliverables are retained for the duration of the engagement plus statutory periods required by corporate and tax law.

8. Your Privacy Rights

Depending on your jurisdiction (including the EU, UK, California CCPA/CPRA, and other US states), you have specific statutory privacy rights:

• Right of Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete information.
• Right to Erasure ("Right to be Forgotten"): Request deletion of your personal information where no overriding legal basis exists.
• Right to Restrict or Object: Object to our processing of your personal data under legitimate interests.
• Right to Data Portability: Receive your data in a structured, machine-readable format.

To exercise any of these rights, please email us at hello@blanczero.com. We will respond within 30 days without charge.

9. Security Standards

We enforce rigorous technical and organizational safeguards to protect personal data against unauthorized access, loss, alteration, or disclosure. All web traffic is encrypted in transit using industry-standard TLS 1.3 encryption. Access to client information is restricted to authorized personnel under strict need-to-know access controls.

10. Privacy Inquiries & Contact

If you have any questions, concerns, or requests regarding this Privacy Policy or our data governance practices, please reach out to our team: