Privacy Policy
Last updated: September 29, 2025
Introduction
Blayre & Company (“we,” “us,” or “our”) is committed to safeguarding
your personal data. This Privacy Policy explains the categories of
personal information we collect, how and why we process it, who we share
it with, and the rights you have under applicable laws. It applies to
information collected through our website (www.blayreandcompany.com) and any related services. This Policy is designed to comply with the
GDPR, CCPA/CPRA, VCDPA, CPA, and similar state privacy laws. By using
our Site, you consent to the practices described herein.
Information We Collect
We collect several categories of personal information:
1) Information You Provide Directly
- Identity & Contact Data: name, company,
email, postal address, telephone number.
- Account Data: usernames, passwords, security
questions, and account preferences.
- Communications: inquiries, complaints,
feedback, survey responses, support tickets.
- Transaction Data: purchases, subscriptions,
billing addresses, payment card or bank details.
- Professional Data: job titles, work history,
professional qualifications.
2) Information Collected Automatically
- Usage Data: how you interact with the
Site, navigation patterns, pages visited, clicks, time spent.
- Log Data: server logs, IP address, browser
type, device operating system.
- Device Data: hardware model, unique identifiers,
mobile carrier details.
- Location Data: approximate location derived
from IP or device settings.
- Cookies & Tracking Data: collected
via cookies, pixels, and similar technologies.
3) Information from Third Parties
- Business Partners: marketing, analytics,
and referral partners.
- Service Providers: payment processors,
fraud detection services, CRM platforms.
- Public Sources: professional directories,
social media accounts.
How We Use Personal Data
- Service Delivery: creating and maintaining
accounts, processing orders, delivering services.
- Communication: responding to inquiries,
sending confirmations, delivering security alerts, providing updates.
- Marketing & Promotion: newsletters,
targeted advertisements, promotions, surveys (with consent where required).
- Service Improvement: analyzing usage data,
developing new features, troubleshooting issues, improving user experience.
- Security & Legal Compliance: fraud
prevention, identity verification, complying with regulations, enforcing
agreements.
Legal Bases for Processing (GDPR)
For users in the EEA, UK, or Switzerland, we process personal data based
on:
- Consent: newsletters, promotional emails,
cookies, or sensitive data categories.
- Performance of a Contract: providing requested
services, processing transactions.
- Legitimate Interests: site security, fraud
prevention, improving services, direct marketing to existing clients.
- Legal Obligation: compliance with tax
laws, accounting obligations, responding to lawful requests.
Disclosure of Personal Data
- Service Providers: hosting, storage, analytics
(e.g., Google Analytics), CRM (e.g., Salesforce), marketing (e.g., Mailchimp),
payment processors (e.g., Stripe, PayPal).
- Affiliates & Business Partners: to
help deliver and improve services.
- Corporate Transactions: in mergers, acquisitions,
reorganizations, or bankruptcy.
- Legal Authorities: when required by law,
regulation, or court order.
- Other Third Parties: with your explicit
consent.
Some cookie-based advertising may be considered a “sale” or “sharing”
under the CCPA/CPRA.
Your Rights
Under GDPR (EU/UK/Switzerland)
-
Right of access, rectification, erasure, restriction, portability,
objection, and not to be subject to automated decisions.
- Right to withdraw consent at any time.
- Right to lodge a complaint with supervisory authorities.
Under CCPA/CPRA (California)
-
Right to Know (categories and specific pieces of data collected).
- Right to Delete (subject to exceptions).
- Right to Correct inaccurate data.
- Right to Opt-Out of sale or sharing.
- Right to Limit use of sensitive personal data.
- Right to Non-Discrimination for exercising your rights.
Other U.S. states (e.g., Virginia, Colorado, Connecticut, Utah) grant
similar rights. Requests can be made via
privacy@blayreandcompany.com. We verify identities before fulfilling requests. Responses are within
statutory timeframes (GDPR: 1 month, extendable; CCPA: 45 days,
extendable).
Data Retention
We retain personal data for defined periods:
- Account & Transaction Data: duration
of account + 7 years.
- Transaction Data: 7 years (tax/accounting).
- Marketing Data: until withdrawal of consent
or 3 years of inactivity.
- Log Data: 13 months.
- Customer Service Communications: 3 years
after resolution.
Criteria include nature of data, legal obligations, risk of harm, and
business need. When no longer required, data is securely deleted or
anonymized. Exceptions apply if retention is legally required.
International Transfers
We may transfer personal data outside your jurisdiction. Safeguards
include Standard Contractual Clauses (SCCs), Binding Corporate Rules (if
applicable), adequacy decisions, and supplementary measures (encryption,
access controls, contractual protections). Limited derogations under
Article 49 GDPR may apply (e.g., explicit consent, performance of a
contract).
Data Security
-
Encryption (TLS/SSL) for data in transit and encryption at rest.
-
Access controls: multi-factor authentication, principle of least
privilege.
- Network security: firewalls, intrusion detection systems.
- Endpoint protection and secure configurations.
- Employee training and awareness programs.
- Vendor risk assessments and security certifications.
-
Incident Response Plan: detection, containment, assessment,
notification, remediation.
While robust, no system is entirely secure. Users should adopt strong
security practices.
Children’s Data
Our services are not directed to children under 13 (COPPA in the U.S.)
or under 16 in the EU/UK. We do not knowingly collect such data. If
discovered, it will be deleted. Parents/guardians may contact us to
raise concerns.
Cookies and Tracking
We use cookies for strictly necessary, functional,
analytical/performance, and targeting purposes. You may manage cookies
in your browser or our cookie management tool. Some browsers support “Do
Not Track” signals; our Site may not currently respond to them. For more
information, please refer to our Cookie Policy below.
Changes to this Policy
We may update this Policy to reflect new practices, legal requirements,
or technologies. When material changes occur, we will post notices on
our Site, update the “Last Updated” date, and, if required, notify you
directly. Archived versions are available upon request.
Contact Us
Blayre & Company Email: contact@blayreandcompany.com Complaints: EU:
Local supervisory authorities (see the EDPB website). UK: Information
Commissioner’s Office (https://ico.org.uk/). California: Attorney
General’s Office (https://oag.ca.gov/privacy).
Cookie Policy
Last updated: September 29, 2025
What Are Cookies
Cookies are small text files that a website places on your device when
you visit it. They allow the Site to recognize your browser, remember
your preferences, and enhance your experience. For purposes of this
Policy, “cookies” also includes pixels, web beacons, SDKs, local
storage, and similar technologies.
Types of Cookies We Use
- Strictly Necessary: essential for Site
operation, security, and network management. These cannot be switched off.
- Performance & Analytics: help us understand
Site usage, measure performance, and improve features (in aggregate).
- Functionality: remember choices (such
as login status, form preferences, or language selection) to personalize
content.
- Advertising & Social Media: enable
ad networks or social platforms to deliver relevant ads and track campaign
effectiveness.
Why We Use Cookies
- Site Functionality: maintain secure access,
process contact or scheduling requests, ensure smooth browsing.
- Analytics: identify popular pages and
improve navigation, content, and load times (e.g., via Google Analytics).
- Personalization: remember your settings
and preferences when returning to the Site.
- Marketing: measure effectiveness of campaigns
and serve ads that better match your interests.
Third-Party Cookies
Certain third parties (such as Google, LinkedIn, or other
analytics/advertising providers) may set cookies when you interact with
embedded content or links on the Site. Blayre & Company does not
control these cookies. Please review the relevant third-party privacy or
cookie policies for details.
Your Cookie Choices
- Consent Banner: on your first visit, you
may accept all cookies or customize non-essential cookies.
- Cookie Settings Center: revisit your preferences
at any time via the “Cookie Settings” link in the Site footer.
- Browser Controls: block or delete cookies,
clear them on exit, or send a Do Not Track (DNT) signal.
- Mobile SDK Opt-Out: adjust ad-tracking
settings in your device’s system preferences.
Consequences of Disabling Cookies
If you disable or reject certain cookies, some Site features (such as
contact forms, scheduling tools, or personalized content) may not
function properly.
Updates to this Policy
We may amend this Cookie Policy to reflect changes in technology,
legislation, or our business practices. When material changes occur, we
will post a prominent notice on our website at least 30 days before the
changes take effect and update the “Last Updated” date above. Continued
use of the Site after such changes constitutes acceptance of the revised
policy.
Contact Us
If you have questions about our use of cookies, please contact: Blayre
& Company Email: contact@blayreandcompany.com