Privacy Policy — Blue Bridge Global Connection

1. Who We Are

The data controller responsible for your personal information is:

THE BLUE BRIDGE CONNECTION CO SOCIEDAD DE RESPONSABILIDAD LIMITADA

Trading as: Blue Bridge Global Connection
Registration No.: 3-102-880-591
Registered Office: Alpha Legal, Boulevard Dent, Barrio Dent, San Pedro, Montes de Oca, San José 11501, Costa Rica
Email: privacy@bluebridge.es

2. Data We Collect

We collect information you provide directly and data collected automatically when you use our services:

2.1 Information You Provide

Contact details: name, email address, phone number, company name
Account information: username, password (hashed), preferences
Business information: company type, industry, company size
Communications: messages sent through our contact forms or support channels
Payment information: processed by our payment processors (we do not store card details)

2.2 Data Collected Automatically

Usage data: pages visited, features used, time spent, clickstream data
Technical data: IP address, browser type, device type, operating system
Cookies and similar tracking technologies (see our Cookie Policy)

3. Legal Basis for Processing

Under GDPR Article 6, we process your data based on the following legal grounds:

Contractual necessity (Art. 6.1.b): To provide our services and fulfill our contractual obligations to you.

Legitimate interests (Art. 6.1.f): To improve our services, prevent fraud, and ensure security.

Consent (Art. 6.1.a): For marketing communications and non-essential cookies (where explicitly obtained).

Legal obligation (Art. 6.1.c): To comply with applicable laws and regulatory requirements.

4. How We Use Your Data

To provide and manage our AI services and platforms
To process payments and manage subscriptions
To communicate with you regarding your account and our services
To send service notifications and (with consent) marketing communications
To analyze and improve our products and services
To detect and prevent fraud, abuse, and security incidents
To comply with legal obligations and regulatory requirements

5. Data Sharing & Sub-Processors

We do not sell, rent, or trade personal data. We share data only with trusted sub-processors necessary for service delivery, under appropriate data protection agreements:

Sub-Processor	Purpose	Location
Amazon Web Services (AWS)	Cloud hosting and infrastructure	USA / EU
Anthropic	AI model API processing	USA
Twilio	Voice calls and SMS	USA
Cloudflare	CDN and DDoS protection	USA / EU
PayPal	Payment processing	USA / Luxembourg
Google (Analytics)	Website analytics (with consent)	USA

All international data transfers are covered by appropriate safeguards including Standard Contractual Clauses (SCCs) where applicable.

6. Data Retention

Account data: retained for the duration of the contract plus 3 years
Contact form submissions: retained for 2 years from submission date
Analytics data: retained for 26 months (anonymized after 14 months)
Financial records: retained for 7 years as required by applicable law
Security logs: retained for 12 months

7. Your Rights Under GDPR

Under GDPR and applicable privacy laws, you have the following rights:

Right of Access

Request a copy of your personal data held by us

Right to Rectification

Request correction of inaccurate or incomplete data

Right to Erasure

Request deletion of your personal data ("right to be forgotten")

Right to Portability

Receive your data in a structured, machine-readable format

Right to Object

Object to processing based on legitimate interests or for marketing

Right to Restrict

Request restriction of processing in certain circumstances

Exercise Your Rights

Submit rights requests to privacy@bluebridge.es. We will respond within 30 days. You also have the right to lodge a complaint with your local data protection authority.

8. Security

We implement appropriate technical and organizational security measures including AES-256 encryption at rest, TLS 1.3 in transit, access controls, and regular security assessments. See our Security Overview for full details.

9. Cookies

We use cookies and similar technologies. See our Cookie Policy for detailed information on cookie types, consent, and how to manage your preferences.

10. Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be communicated by email or via a prominent notice on our website. The date of the latest revision is shown at the top of this document.

11. Contact Us

For privacy-related questions, data subject requests, or to exercise your rights:

Email: privacy@bluebridge.es

Address: THE BLUE BRIDGE CONNECTION CO SRL, Alpha Legal, Boulevard Dent, Barrio Dent, San Pedro, Montes de Oca, San José 11501, Costa Rica