Privacy Policy

1. Introduction & Scope

BlueforceOps ("BlueforceOps", "we", "us", or "our") respects your privacy and is committed to protecting the personal data of everyone who visits our website at blueforceops.com (the "Website"), submits a demo request, or otherwise communicates with us.

This Privacy Policy explains what personal data we collect through the Website, why we collect it, how we use, share, store and protect it, and the rights available to you under Indian law. It applies to the marketing Website and the demo-request process described here. Our workforce management platform, once you become a customer, is separately governed by the commercial agreement and any data processing terms signed between BlueforceOps and your organization.

By using the Website or submitting information to us through it, you agree to the practices described in this Privacy Policy. If you do not agree, please do not use the Website or submit your information to us.

2. Who We Are

For the purposes of the DPDP Act, 2023, BlueforceOps acts as the Data Fiduciary in relation to personal data collected through the Website.

The registered entity details above are placeholders and should be completed with BlueforceOps' actual incorporated entity information before this page is treated as final.

3. Key Definitions

• Personal Data — any data about an individual who is identifiable by or in relation to such data.
• Data Principal — the individual to whom the personal data relates (i.e., you).
• Data Fiduciary — the entity that determines the purpose and means of processing personal data (i.e., BlueforceOps).
• Data Processor — any entity that processes personal data on behalf of a Data Fiduciary.
• Processing — any operation performed on personal data, including collection, storage, use, sharing, and deletion.
• Consent — your free, specific, informed, unconditional and unambiguous agreement to the processing of your personal data for a specified purpose.

4. Personal Data We Collect

We collect the following categories of personal data when you interact with the Website:

4.1 Information you provide directly

• Full name
• Email address
• Phone / contact number
• Company or organization name (where provided in your message)
• Any details you include in the "Request a Demo" message field
• Any information you share with us via WhatsApp, phone, or email if you contact us directly through those channels

4.2 Information collected automatically

• Standard web server logs (IP address, browser type, device type, pages visited, referring URL, timestamps) collected as part of normal website operation
• Basic campaign-attribution parameters present in the URL when you arrive at the Website (for example, from a Google Ads or LinkedIn Ads click), used only to record which channel a demo request came from

We do not use first-party cookies or browser local storage to track you across the Website. The only cookies set are those placed by the third-party services described in Section 7.

5. How We Collect Your Data

• Directly from you — when you fill out and submit the "Request a Demo" form, click a WhatsApp or call button, or email us.
• Automatically — through standard web server logging when you browse the Website.
• From third parties — Google reCAPTCHA verifies that form submissions are not automated (bot) traffic; no personal data is exchanged with Google beyond what is necessary for this verification, subject to Google's own privacy policy.

6. Why We Process Your Data

We process your personal data, with your consent given at the point of submission, for the following specified purposes:

• To respond to your demo request and get in touch with you about BlueforceOps' products and services
• To understand which marketing channel or campaign brought you to the Website, for our own internal reporting
• To protect the Website and our systems from spam, abuse, and automated submissions
• To comply with applicable law, regulation, or a valid legal request
• To maintain records of business inquiries for legitimate internal business purposes

We do not use your personal data for any purpose incompatible with the purpose for which it was collected, and we do not sell your personal data to any third party.

7. Cookies & Third-Party Tools

The Website itself does not set tracking cookies. It does load the following third-party services, which may set their own cookies or process limited technical data under their own privacy policies:

• Google reCAPTCHA — used on the demo-request form to prevent spam and automated abuse. See Google's Privacy Policy.
• Google Fonts — used to load the Website's typography. See Google's Privacy Policy.

You can control or disable cookies through your browser settings at any time; doing so may affect the reCAPTCHA verification used on our contact form.

8. How We Share Your Data

We share personal data collected through the demo-request form only as necessary to operate our business, and only with the following categories of recipients:

• Internal team members at BlueforceOps and its group offices who need the information to follow up on your request
• Our CRM / lead-management service provider, who stores and helps us manage incoming demo requests on our behalf, acting as a Data Processor under our instructions
• Our email and hosting service provider, used to deliver notification emails when a demo request is submitted
• Professional advisers, auditors, or regulators, where required by law or to protect our legal rights
• A successor entity, in the event of a merger, acquisition, or sale of business assets, subject to the same or equivalent privacy protections

We do not sell, rent, or trade your personal data to third parties for their own independent marketing purposes.

9. Cross-Border Data Transfer

BlueforceOps has offices and team members in India, the United Arab Emirates, the United States, and the European Union (Netherlands). As a result, personal data you submit may be accessed or processed by team members or service providers located outside India.

Where we transfer personal data outside India, we do so in accordance with Section 16 of the DPDP Act, 2023, which permits such transfers except to countries specifically restricted by the Central Government. We take reasonable steps to ensure that any recipient of your personal data outside India provides an appropriate level of protection consistent with this Policy.

10. Data Retention

We retain personal data collected through the demo-request form for as long as necessary to fulfil the purposes described in this Policy, including to respond to your inquiry, maintain business records, and comply with our legal and accounting obligations. Where we no longer have an ongoing business or legal reason to retain your personal data, we will delete or anonymize it.

11. How We Protect Your Data

We maintain reasonable security practices and procedures consistent with the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, including:

• Encrypting data in transit between your browser and our servers (HTTPS)
• Server-side validation and sanitization of all form submissions
• Bot- and spam-prevention controls (reCAPTCHA, honeypot fields, and rate limiting) on our contact form
• Restricting access to submitted personal data to authorized personnel who need it to do their jobs

No method of transmission or storage is completely secure. While we work to protect your personal data, we cannot guarantee its absolute security.

12. Your Rights as a Data Principal

Under the DPDP Act, 2023, you have the following rights in relation to your personal data:

• Right to access information — a summary of the personal data we hold about you and the processing activities we carry out on it
• Right to correction and updating — to have inaccurate or incomplete personal data corrected or completed
• Right to erasure — to have your personal data deleted once it is no longer necessary for the purpose it was collected for, subject to any legal retention requirements
• Right to grievance redressal — to have any complaint about our processing of your personal data addressed in a timely manner (see Section 14)
• Right to nominate — to nominate another individual to exercise these rights on your behalf in the event of your death or incapacity
• Right to withdraw consent — you may withdraw your consent to our processing of your personal data at any time, without affecting the lawfulness of processing carried out before withdrawal

To exercise any of these rights, write to us at hello@blueforceops.com. We will respond within a reasonable time and in accordance with applicable law.

13. Children's Privacy

The Website is intended for business use by working professionals and is not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will take steps to delete it.

14. Grievance Redressal

In accordance with the Information Technology Act, 2000 and the DPDP Act, 2023, we have designated a Grievance Officer to address any concerns or complaints regarding your personal data.

If you are not satisfied with our response, you may escalate your complaint to the Data Protection Board of India, once its complaint-handling mechanism is operative, or pursue any other remedy available to you under applicable law.

15. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, our services, or applicable law. The "Last updated" date at the top of this page indicates when this Policy was last revised. We encourage you to review this page periodically.

16. Governing Law

This Privacy Policy is governed by and construed in accordance with the laws of India, including the Digital Personal Data Protection Act, 2023, the Information Technology Act, 2000, and the rules made thereunder. Any dispute arising out of or in connection with this Policy shall be subject to the exclusive jurisdiction of the courts at [City, State], India.