Privacy policy
Privacy policy
This policy explains how Bletchley Int. OÜ ("Bletchley", "we", "us") handles personal data when you visit bletchleyint.com, contact us or ask for a demo. If you apply for a role, the Candidate privacy notice applies as well.
1. Who is responsible
Bletchley Int. OÜ is the controller of the personal data described here. Company details are in our Legal notice. For any privacy question or request, write to privacy.bi@bletchleyint.com.
2. What we collect, why, and for how long
| Purpose | Data | Legal basis (GDPR) | Kept for |
|---|---|---|---|
| Running and securing the website | IP address, browser and device type, pages requested, date and time (hosting logs) | Legitimate interest in delivering and protecting the site (Art. 6(1)(f)) | Short term, as set by our hosting provider |
| Understanding how the site is used | Page views, referring page, country, browser and device type, collected by cookieless analytics without cross-site tracking | Legitimate interest in improving the site (Art. 6(1)(f)) | Aggregated statistics held by the analytics provider; we do not receive individual visitor profiles |
| Answering enquiries sent through the contact form | Name, work email, company, monthly report volume and your message | Taking steps at your request before a contract, and our legitimate interest in answering business enquiries (Art. 6(1)(b) and (f)) | 24 months after our last contact with you |
| Protecting the contact form from spam and abuse | IP address, approximate location derived from it (country, region, city), browser and operating system, language setting, referring page, time taken to complete the form, a fingerprint (hash) of the message text and the result of our checks | Legitimate interest in protecting our systems and mailbox from automated abuse (Art. 6(1)(f)) | 90 days |
| Booking a demo | Name, email and time slot you enter on the Microsoft booking page, which Microsoft operates | Taking steps at your request before a contract (Art. 6(1)(b)) | 24 months after our last contact with you |
| Email correspondence | The messages and details you send us | Taking steps at your request, and our legitimate interest in managing business relationships (Art. 6(1)(b) and (f)) | 24 months after our last contact with you |
We may keep records longer where the law requires it or where we need them to establish, exercise or defend a legal claim.
3. Who receives your data
We use the following service providers, who process data on our behalf under data processing terms:
- Vercel Inc.: website hosting and cookieless analytics.
- Supabase: database that stores contact enquiries, the abuse-protection log and recruitment records.
- Resend: delivery of the notification emails the contact form sends to our team.
- Microsoft: email, calendar and the demo booking page.
We may share data with professional advisers where needed and with authorities where the law requires it. We do not sell personal data and we do not use it for advertising.
4. Transfers outside the European Economic Area
Our website functions run in the European Union. Some of the providers above are US companies or may access data from outside the EEA. Where data leaves the EEA we rely on an adequacy decision, including the EU-US Data Privacy Framework for certified providers, or on the European Commission's Standard Contractual Clauses.
5. Cookies and local storage
We do not set cookies, and our analytics are cookieless, so this site shows no cookie banner. Two pieces of browser storage are used for functionality only:
- The careers pages keep a short list of open roles in your browser's local storage so they load quickly. It contains no personal data.
- Our internal tools use session storage for staff sign-in. It is cleared when the tab closes.
6. Automated checks
We do not make decisions about you based solely on automated processing. The contact form uses automated checks (a security question, a hidden field and rate limits) to block spam. If a check blocks you by mistake, email contact@bletchleyint.com and we will help.
7. Your rights
Subject to applicable law you can ask us to give you access to your personal data, correct it, delete it, restrict its use, or send it to you in a portable format. You can object to processing based on our legitimate interests. To use these rights, write to privacy.bi@bletchleyint.com. We may ask you to verify your identity first.
You also have the right to complain to a data protection authority. For us this is the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, aki.ee), or the authority in the country where you live or work.
8. Security
We protect personal data with technical and organizational measures described on our Security page.
9. Children
This website is intended for business users and is not directed at children.
10. Changes to this policy
We will update this page when our practices change and show the date of the latest update at the top.