Privacy Policy

Last updated: September 29, 2025

Introduction

Blayre & Company (“we,” “us,” or “our”) is committed to safeguarding your personal data. This Privacy Policy explains the categories of personal information we collect, how and why we process it, who we share it with, and the rights you have under applicable laws. It applies to information collected through our website (www.blayreandcompany.com) and any related services. This Policy is designed to comply with the GDPR, CCPA/CPRA, VCDPA, CPA, and similar state privacy laws. By using our Site, you consent to the practices described herein.

Information We Collect

We collect several categories of personal information:

1) Information You Provide Directly
  • Identity & Contact Data: name, company, email, postal address, telephone number.
  • Account Data: usernames, passwords, security questions, and account preferences.
  • Communications: inquiries, complaints, feedback, survey responses, support tickets.
  • Transaction Data: purchases, subscriptions, billing addresses, payment card or bank details.
  • Professional Data: job titles, work history, professional qualifications.
2) Information Collected Automatically
  • Usage Data: how you interact with the Site, navigation patterns, pages visited, clicks, time spent.
  • Log Data: server logs, IP address, browser type, device operating system.
  • Device Data: hardware model, unique identifiers, mobile carrier details.
  • Location Data: approximate location derived from IP or device settings.
  • Cookies & Tracking Data: collected via cookies, pixels, and similar technologies.
3) Information from Third Parties
  • Business Partners: marketing, analytics, and referral partners.
  • Service Providers: payment processors, fraud detection services, CRM platforms.
  • Public Sources: professional directories, social media accounts.

How We Use Personal Data

  • Service Delivery: creating and maintaining accounts, processing orders, delivering services.
  • Communication: responding to inquiries, sending confirmations, delivering security alerts, providing updates.
  • Marketing & Promotion: newsletters, targeted advertisements, promotions, surveys (with consent where required).
  • Service Improvement: analyzing usage data, developing new features, troubleshooting issues, improving user experience.
  • Security & Legal Compliance: fraud prevention, identity verification, complying with regulations, enforcing agreements.

Legal Bases for Processing (GDPR)

For users in the EEA, UK, or Switzerland, we process personal data based on:

  • Consent: newsletters, promotional emails, cookies, or sensitive data categories.
  • Performance of a Contract: providing requested services, processing transactions.
  • Legitimate Interests: site security, fraud prevention, improving services, direct marketing to existing clients.
  • Legal Obligation: compliance with tax laws, accounting obligations, responding to lawful requests.

Disclosure of Personal Data

  • Service Providers: hosting, storage, analytics (e.g., Google Analytics), CRM (e.g., Salesforce), marketing (e.g., Mailchimp), payment processors (e.g., Stripe, PayPal).
  • Affiliates & Business Partners: to help deliver and improve services.
  • Corporate Transactions: in mergers, acquisitions, reorganizations, or bankruptcy.
  • Legal Authorities: when required by law, regulation, or court order.
  • Other Third Parties: with your explicit consent.

Some cookie-based advertising may be considered a “sale” or “sharing” under the CCPA/CPRA.

Your Rights

Under GDPR (EU/UK/Switzerland)
  • Right of access, rectification, erasure, restriction, portability, objection, and not to be subject to automated decisions.
  • Right to withdraw consent at any time.
  • Right to lodge a complaint with supervisory authorities.
Under CCPA/CPRA (California)
  • Right to Know (categories and specific pieces of data collected).
  • Right to Delete (subject to exceptions).
  • Right to Correct inaccurate data.
  • Right to Opt-Out of sale or sharing.
  • Right to Limit use of sensitive personal data.
  • Right to Non-Discrimination for exercising your rights.

Other U.S. states (e.g., Virginia, Colorado, Connecticut, Utah) grant similar rights. Requests can be made via privacy@blayreandcompany.com. We verify identities before fulfilling requests. Responses are within statutory timeframes (GDPR: 1 month, extendable; CCPA: 45 days, extendable).

Data Retention

We retain personal data for defined periods:

  • Account & Transaction Data: duration of account + 7 years.
  • Transaction Data: 7 years (tax/accounting).
  • Marketing Data: until withdrawal of consent or 3 years of inactivity.
  • Log Data: 13 months.
  • Customer Service Communications: 3 years after resolution.

Criteria include nature of data, legal obligations, risk of harm, and business need. When no longer required, data is securely deleted or anonymized. Exceptions apply if retention is legally required.

International Transfers

We may transfer personal data outside your jurisdiction. Safeguards include Standard Contractual Clauses (SCCs), Binding Corporate Rules (if applicable), adequacy decisions, and supplementary measures (encryption, access controls, contractual protections). Limited derogations under Article 49 GDPR may apply (e.g., explicit consent, performance of a contract).

Data Security

  • Encryption (TLS/SSL) for data in transit and encryption at rest.
  • Access controls: multi-factor authentication, principle of least privilege.
  • Network security: firewalls, intrusion detection systems.
  • Endpoint protection and secure configurations.
  • Employee training and awareness programs.
  • Vendor risk assessments and security certifications.
  • Incident Response Plan: detection, containment, assessment, notification, remediation.

While robust, no system is entirely secure. Users should adopt strong security practices.

Children’s Data

Our services are not directed to children under 13 (COPPA in the U.S.) or under 16 in the EU/UK. We do not knowingly collect such data. If discovered, it will be deleted. Parents/guardians may contact us to raise concerns.

Cookies and Tracking

We use cookies for strictly necessary, functional, analytical/performance, and targeting purposes. You may manage cookies in your browser or our cookie management tool. Some browsers support “Do Not Track” signals; our Site may not currently respond to them. For more information, please refer to our Cookie Policy below.

Changes to this Policy

We may update this Policy to reflect new practices, legal requirements, or technologies. When material changes occur, we will post notices on our Site, update the “Last Updated” date, and, if required, notify you directly. Archived versions are available upon request.

Contact Us

Blayre & Company Email: contact@blayreandcompany.com Complaints: EU: Local supervisory authorities (see the EDPB website). UK: Information Commissioner’s Office (https://ico.org.uk/). California: Attorney General’s Office (https://oag.ca.gov/privacy).


Cookie Policy

Last updated: September 29, 2025

What Are Cookies

Cookies are small text files that a website places on your device when you visit it. They allow the Site to recognize your browser, remember your preferences, and enhance your experience. For purposes of this Policy, “cookies” also includes pixels, web beacons, SDKs, local storage, and similar technologies.

Types of Cookies We Use

  • Strictly Necessary: essential for Site operation, security, and network management. These cannot be switched off.
  • Performance & Analytics: help us understand Site usage, measure performance, and improve features (in aggregate).
  • Functionality: remember choices (such as login status, form preferences, or language selection) to personalize content.
  • Advertising & Social Media: enable ad networks or social platforms to deliver relevant ads and track campaign effectiveness.

Why We Use Cookies

  • Site Functionality: maintain secure access, process contact or scheduling requests, ensure smooth browsing.
  • Analytics: identify popular pages and improve navigation, content, and load times (e.g., via Google Analytics).
  • Personalization: remember your settings and preferences when returning to the Site.
  • Marketing: measure effectiveness of campaigns and serve ads that better match your interests.

Third-Party Cookies

Certain third parties (such as Google, LinkedIn, or other analytics/advertising providers) may set cookies when you interact with embedded content or links on the Site. Blayre & Company does not control these cookies. Please review the relevant third-party privacy or cookie policies for details.

Your Cookie Choices

  • Consent Banner: on your first visit, you may accept all cookies or customize non-essential cookies.
  • Cookie Settings Center: revisit your preferences at any time via the “Cookie Settings” link in the Site footer.
  • Browser Controls: block or delete cookies, clear them on exit, or send a Do Not Track (DNT) signal.
  • Mobile SDK Opt-Out: adjust ad-tracking settings in your device’s system preferences.

Consequences of Disabling Cookies

If you disable or reject certain cookies, some Site features (such as contact forms, scheduling tools, or personalized content) may not function properly.

Updates to this Policy

We may amend this Cookie Policy to reflect changes in technology, legislation, or our business practices. When material changes occur, we will post a prominent notice on our website at least 30 days before the changes take effect and update the “Last Updated” date above. Continued use of the Site after such changes constitutes acceptance of the revised policy.

Contact Us

If you have questions about our use of cookies, please contact: Blayre & Company Email: contact@blayreandcompany.com