Privacy Policy
At Blaxline Group, LLC (“Blaxline,” “we,” “us,” or “our”), we are dedicated to safeguarding your privacy and ensuring the security of your personal information. Blaxline Group, LLC, operating under the commercial name Blaxline, provides innovative AI-powered services for business transformation, including workflow automation (Ignite Fusion), digital marketing (Boost Rush), and cybersecurity solutions (Digital Fortress). This Privacy Policy explains how we collect, use, disclose, and protect your information when you visit our website (blaxline.com), use our services, or interact with us. By accessing our website or services, you agree to be bound by this Privacy Policy.
This policy complies with applicable laws and regulations, including:
- United States: Federal laws such as the California Consumer Privacy Act (CCPA) and other state-specific regulations, as well as general U.S. privacy standards.
- Colombia: Ley 1581 de 2012 and Decreto 1377 de 2013, which govern the protection of personal data and habeas data rights.
- European Union: The General Data Protection Regulation (GDPR, Regulation EU 2016/679), ensuring compliance with data protection standards for EU residents.
We are committed to transparency and accountability, aligning our practices with these legal frameworks to protect your rights and maintain trust across our global user base.
We may collect the following categories of personal information:
- Personal Data: Name, email address, phone number, company name, and billing details when you contact us, request services, or subscribe to our newsletter.
- Usage Data: IP address, browser type, pages visited, and time spent on our website, collected via cookies and tracking technologies.
- Service-Related Data: Information related to your business operations (e.g., workflow details for Ignite Fusion, marketing analytics for Boost Rush, cybersecurity logs for Digital Fortress) to deliver and enhance our services.
- Communication Data: Content of emails, calls, or form submissions when you interact with us.
We do not knowingly collect personal data from individuals under 16 in the European Union without verifiable parental consent, as required by GDPR Article 8, or from those under 18 in the U.S. and Colombia, in compliance with CCPA and Ley 1581 de 2012. We do not process special categories of data (e.g., health or biometric data) unless you provide explicit consent under GDPR Article 9.
We use your information for the following purposes, based on the following legal grounds under GDPR Article 6:
- To provide and improve our services (e.g., Ignite Fusion, Boost Rush, Digital Fortress), based on contractual necessity.
- To communicate with you (e.g., responding to inquiries, sending service updates), based on our legitimate interests or your consent.
- To process transactions and manage billing, as required for contract fulfillment.
- To analyze usage patterns and enhance website functionality, based on our legitimate interests, ensuring a better user experience.
- To send marketing communications (e.g., newsletters, offers), with your prior consent, which you can withdraw at any time by clicking the unsubscribe link or contacting us.
- To comply with legal obligations under U.S., Wyoming, Colombian (Ley 1581 de 2012), and EU (GDPR) laws.
- To protect our rights, property, or safety by detecting fraud, based on our legitimate interests.
You have the right to object to processing based on legitimate interests, including marketing, under GDPR Article 21.
Payment processing: If you make a purchase on our website, we use third-party payment providers such as Stripe and PayPal to securely process payments. The payment information you provide, such as credit card or bank account details, is transmitted directly to these providers and is not stored or processed by us. These third parties handle your information in accordance with their own privacy and security policies.
We do not sell or rent your personal information to third parties. We may share it in the following cases:
- Service Providers: With trusted third-party vendors (e.g., hosting providers, payment processors, analytics tools) who act as data processors under GDPR-compliant contracts, ensuring data protection standards.
- Legal Compliance: When required by law, such as court orders or subpoenas in the U.S., Colombia, or the EU, respecting GDPR Article 6(1)(c) and Colombian Ley 1581 de 2012.
- Business Transfers: In the event of a merger or sale of assets, your information may be transferred, with prior notice, in compliance with GDPR Article 6(1)(f).
- With Your Consent: We may share your information with other parties if you provide explicit consent, as required by GDPR.
International transfers outside the EU or EEA are safeguarded with Standard Contractual Clauses (SCCs) or other GDPR-approved mechanisms under Chapter V. - Payment providers: To securely process transactions, we share payment-related information with our payment providers, Stripe and PayPal. These providers handle payment information according to their own privacy and security policies. We recommend reviewing their policies to understand how they protect your data.
We use cookies and similar technologies (e.g., web beacons, pixels) to enhance your experience on our website. These include:
- Essential Cookies: Necessary for the website to function properly, exempt from consent.
- Analytics Cookies: To analyze traffic and behavior (e.g., Google Analytics), requiring your consent.
- Marketing Cookies: To deliver targeted ads, also requiring consent.
We use non-essential cookies only with your prior, explicit consent, as mandated by the GDPR and the ePrivacy Directive. You can manage your preferences via a cookie consent banner on your first visit. Cookies store limited data (e.g., IP address) and are retained for up to 12 months unless you withdraw consent. In Colombia, we comply with Decreto 1377 de 2013 by requesting consent for non-essential tracking.
We implement reasonable physical, technical, and administrative measures (e.g., encryption, secure servers, access controls) to protect your personal information from unauthorized access, loss, or misuse, as required by GDPR Article 32. However, no internet transmission is 100% secure. In the event of a data breach, we will:
- Notify affected EU residents and the relevant supervisory authority within 72 hours, as per GDPR Article 33.
- Comply with Wyoming law (Wyo. Stat. § 40-12-501 et seq.) by notifying affected individuals promptly.
- Follow Colombian Ley 1581 de 2012 by reporting breaches to the Superintendencia de Industria y Comercio (SIC) as required.
Our security practices are documented to ensure ongoing compliance.
You have the following rights based on your location:
- U.S. Residents: Under the California Consumer Privacy Act (CCPA), you can request access to, correction of, or deletion of your personal information.
- Colombian Residents: Under Ley 1581 de 2012 and Decreto 1377 de 2013, you have the right to know, update, rectify, delete, or revoke consent for your data, with complaints filed with the SIC.
- EU Residents: Under GDPR, you have the right to access, rectify, erase (right to be forgotten, Article 17), restrict processing (Article 18), object to processing (Article 21), and data portability (Article 20). We will respond to your requests within one month, extendable to three months for complex cases, as per GDPR Article 12.
To exercise your rights, contact us at the details below. For GDPR inquiries, you may also contact our Data Protection Officer.
We retain your personal information only for as long as necessary to fulfill the purposes outlined in this policy, comply with legal obligations, or resolve disputes, in line with GDPR Article 5(1)(e). For example:
- Billing data is retained for 7 years under U.S. tax laws.
- Marketing data is kept until you withdraw consent.
- You may request deletion at any time, unless retention is required by law (e.g., legal or tax obligations in the U.S., Wyoming, Colombia, or EU).
