Privacy Policy
Last updated: 1 May 2025
1. Who we are
Bluelink Property Services Ltd ("we", "us", "our") is a company registered in England and Wales (Company No. 12345678), trading under Bluelink Global Holding Ltd. We are the data controller for personal data collected through this website and our services.
2. What data we collect
- Enquiry data — name, email address, phone number, message, and the service you enquire about when you submit a contact form.
- Application data — CV, cover letter, right-to-work declaration, and disclosure/convictions information when you apply for a vacancy.
- Transaction data — name, email and billing information processed by Stripe when you purchase a package.
- Usage data — anonymous session identifiers, UTM parameters, and page-view analytics (via Google Analytics and Plausible) to understand how the site is used.
- Technical data — IP address, browser type, and device information collected automatically.
3. How we use your data
- To respond to your enquiry or process your application (Legitimate Interests / Contract).
- To send service updates, invoices, or status notifications (Contract).
- To comply with legal obligations including employment law and financial record-keeping (Legal Obligation).
- To improve our services and website through aggregated analytics (Legitimate Interests).
We do not sell your personal data. We do not use it for automated decision-making or profiling that produces legal effects.
4. Sensitive data (job applicants)
If you disclose criminal conviction information or home address details as part of a job application, this data is encrypted at rest using AES-256 and is accessible only to authorised HR personnel. We retain this data for no longer than 6 months from the date your application is decided, unless a legal obligation requires longer retention.
5. How long we keep your data
- Enquiries — 2 years from the date of submission.
- Unsuccessful job applications — 6 months from decision date.
- Employee / contractor records — 6 years from end of engagement (legal requirement).
- Financial/transaction records — 7 years (HMRC requirement).
6. Sharing your data
We share data only as necessary:
- Resend — email delivery infrastructure (EU/US data processing agreement in place).
- Stripe — payment processing (PCI-DSS Level 1 certified).
- Vercel / Neon — cloud hosting and database infrastructure (GDPR-compliant processors).
- Google reCAPTCHA — bot-detection on public forms (Google Privacy Policy applies).
- Law enforcement or regulators where required by law.
7. Your rights
Under UK GDPR you have the right to:
- Access the personal data we hold about you.
- Request correction of inaccurate data.
- Request erasure of your data (where no legal obligation requires retention).
- Object to processing based on legitimate interests.
- Data portability for data you provided to us.
- Withdraw consent at any time (where consent is the legal basis).
To exercise any right, email enquiries@bluelinkpropertyservices.co.uk. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO).
8. Cookies
We use essential cookies required for the site to function, and optional analytics cookies (Google Analytics, Plausible). See our Cookie Policy for details. You can manage cookie preferences at any time.
9. Changes to this policy
We may update this policy from time to time. Material changes will be notified via a notice on this page. Continued use of our services after changes take effect constitutes acceptance of the revised policy.