Privacy Policy

Bluelink Global Holdings Ltd ("we", "us", "our") is an AI and technology company registered in England and Wales (Company No. 16889566). We are the data controller for personal data collected through this website and our services.

Contact: info@bluelinkglobalholding.co.uk

• Enquiry data — name, email address, phone number, message, and the service you enquire about when you submit a contact form.
• Application data — CV, cover letter, right-to-work declaration, and disclosure/convictions information when you apply for a vacancy.
• Transaction data — name, email and billing information processed by Stripe when you purchase a package.
• Usage data — anonymous session identifiers, UTM parameters, and page-view analytics (via Google Analytics and Plausible) to understand how the site is used.
• Technical data — IP address, browser type, and device information collected automatically.

• To respond to your enquiry or process your application (Legitimate Interests / Contract).
• To send service updates, invoices, or status notifications (Contract).
• To comply with legal obligations including employment law and financial record-keeping (Legal Obligation).
• To improve our services and website through aggregated analytics (Legitimate Interests).

We do not sell your personal data. We do not use it for automated decision-making or profiling that produces legal effects.

If you disclose criminal conviction information or home address details as part of a job application, this data is encrypted at rest using AES-256 and is accessible only to authorised HR personnel. We retain this data for no longer than 6 months from the date your application is decided, unless a legal obligation requires longer retention.

• Enquiries — 2 years from the date of submission.
• Unsuccessful job applications — 6 months from decision date.
• Employee / contractor records — 6 years from end of engagement (legal requirement).
• Financial/transaction records — 7 years (HMRC requirement).

We share data only as necessary:

• Resend — email delivery infrastructure (EU/US data processing agreement in place).
• Stripe — payment processing (PCI-DSS Level 1 certified).
• Vercel / Neon — cloud hosting and database infrastructure (GDPR-compliant processors).
• Google reCAPTCHA — bot-detection on public forms (Google Privacy Policy applies).
• Law enforcement or regulators where required by law.

Under UK GDPR you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request erasure of your data (where no legal obligation requires retention).
• Object to processing based on legitimate interests.
• Data portability for data you provided to us.
• Withdraw consent at any time (where consent is the legal basis).

To exercise any right, email info@bluelinkglobalholding.co.uk. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO).

We use essential cookies required for the site to function, and optional analytics cookies (Google Analytics, Plausible). See our Cookie Policy for details. You can manage cookie preferences at any time.

We may update this policy from time to time. Material changes will be notified via a notice on this page. Continued use of our services after changes take effect constitutes acceptance of the revised policy.