BlueRitt Privacy Policy

Effective Date: 18-Jan-2025

Last Updated: 18-Jan-2025

ReverCe Technologies Ltd, trading as BlueRitt, (“we,” “our,” “us”) is committed to protecting your personal data in accordance with the UK GDPR, UK Data Protection Act, and ICO guidelines. This Privacy Policy outlines how we collect, process, and safeguard your data when you use our AI-powered eCommerce platform.


Introduction and Scope

This Privacy Policy applies to all users accessing our services, including:

  • Web Application, Mobile App, and Browser Extension.
  • Services provided under the BlueRitt subscription model.
  • Businesses and direct consumers engaging with our platform.
  • Training and consultancy services, which are offered separately from the subscription model and subject to specific terms and conditions.


Types of Data Collected

BlueRitt collects the following categories of personal data:

a. Data You Provide Directly:

  • Account Information: Name, email, and contact details provided during registration.
  • Search Inputs: Any fields where users are required to input data to generate the required output, including product searches, saved product data, and user preferences, as part of BlueRitt login, tools, and related features.


b. Data Collected Automatically:

  • Browser Extension Activity: User actions within the extension.
  • Usage Analytics: Interaction data for platform optimization.


c. Payment Data (Third-Party Managed):

  • Payments are processed through a PCI-compliant payment services provider, ensuring secure handling of payment information.
  • Financial data such as card details is not stored or processed by BlueRitt.
  • BlueRitt does not store or process financial data such as card details. However, customers or clients may choose to save their card details at their discretion.


Purpose of Data Collection (Lawful Basis for Processing)

We collect personal data for the following purposes under the lawful bases defined in UK GDPR:

Purpose

Lawful Basis

Providing core platform services

Contractual necessity

Managing subscriptions & billing

Contractual necessity

Enhancing user experience

Legitimate interest

Compliance with legal obligations

Legal obligation

Fraud prevention and security

Legitimate interest


How Your Data is Used

We may use your data to:

  • Provide core platform features like product discovery and supplier matching.
  • Personalize your experience on the platform.
  • Monitor platform performance and improve services.
  • Process payments securely through a PCI-compliant payment services provider, ensuring secure handling of payment information.


Third-Party Integrations and Data Sharing

BlueRitt enables functionality through third-party integrations, including APIs for specific businesses. These integrations may be established either directly with the businesses or indirectly through third-party providers, ensuring seamless connectivity and functionality for users.

BlueRitt leverages native and third-party APIs to access and process required source data.

These APIs include, but are not limited to:

  • E-commerce APIs: For product details, analytics, and inventory management.
  • Advertising APIs: For campaign data and performance metrics.
  • Social Media APIs: For content and user engagement insights.
  • AI and Data Processing APIs: To enhance platform intelligence and automation.
  • Payment APIs: To ensure secure and PCI-compliant payment processing.


Third-Party Access Policy:

  • No personal data is shared with these services without lawful justification.
  • Payment data is processed exclusively by PCI-compliant payment services provider under PCI DSS compliance.
  • Data shared with third-party APIs involves platform analytics only, not personal identifiers.


Cookies and Tracking Technologies

BlueRitt uses cookies in compliance with the UK GDPR and ICO standards.

Types of Cookies Used:

  • Essential Cookies: Required for platform functionality.
  • Functional Cookies: Enhance platform usability (e.g., saving preferences).
  • Analytics Cookies: For performance monitoring.
  • Targeting/Advertising Cookies: (Future Use) Reserved for potential marketing campaigns.
  • Separate Cookie Policy: Full details available in the BlueRitt Cookie Policy.

Consent Management:

  • Users can accept or decline non-essential cookies via a pop-up banner.
  • Consent preferences can be managed directly from the cookie settings page.


Data Retention Policy

BlueRitt retains personal data only for as long as necessary:

  • Subscription Management Data: Retained during the active subscription and for 180 days post-cancellation for compliance purposes.
  • Search History and Activity Data: Retained for service optimization unless deleted by the user.
  • Payment Data: Not stored by BlueRitt but handled by PCI-compliant payment services provider
  • Data Minimization: Data is retained only as long as necessary for its original purpose.


Your Rights Under UK GDPR

Under the UK GDPR, you have the following rights:

  • Right to Access: Request a copy of your personal data.
  • Right to Rectification: Request corrections to inaccurate data.
  • Right to Erasure: Request deletion of personal data where legally applicable.
  • Right to Data Portability: Request a portable format of your data.
  • Right to Object: Object to data processing based on legitimate interest.
  • Right to Restriction: Request limited data processing under certain circumstances.


Data Security Measures

BlueRitt implements industry-standard security practices to safeguard your data:

  • Encryption: All data is encrypted using SSL/TLS.
  • Secure Payment Processing: Handled through PCI-compliant payment services provider.
  • Access Controls: Limited access to authorized personnel only.
  • Data Breach Management: In case of a data breach, affected users and the ICO will be notified within 72 hours.


International Data Transfers

BlueRitt Limited is a UK-based company and uses Hyperscale/Cloud services for data storage, which may be hosted outside the UK and EEA. BlueRitt does not control the location of these services. Where data is transferred outside the UK or EEA, we ensure compliance with data protection laws by implementing Standard Contractual Clauses (SCCs) or other appropriate safeguards.


Children's Data Protection

  • BlueRitt services are not intended for users under 18.
  • We do not knowingly collect data from minors.


Policy Updates and Notification Mechanism

  • BlueRitt Limited reserves the right to amend or update this Privacy Policy at any time, with changes reflected on this page and the “Last Updated” date revised accordingly.
  • Significant updates will be communicated via website banner announcements or email notifications to registered users.
  • Continued use of the platform after updates constitutes acceptance of the revised policy.


Governing Law and Dispute Resolution

  • This Privacy Policy is governed by the laws of England and Wales.
  • Any disputes will be handled under the jurisdiction of UK courts.


Links to Third-Party Websites

Our website may include links to external third-party websites. We do not assume responsibility for the privacy practices or content of these websites and recommend that you review their privacy policies.


Contact Information

If you have any questions or concerns about this Privacy Policy or your data rights, you can contact us:

  • Email: contact@blueritt.com
  • Address: Suite 6, Beaufort Court, Admirals Way, E14 9XL, London, UK