Privacy Policy

1. Data Controller

The data controller responsible for your personal data is:

• Bluix Group LTD
• Company No. 17097946 (England and Wales)
• 41 Devonshire Street, London W1G 7AJ, United Kingdom
• Email: privacy@bluix.net
• Phone: +44 7459 329416

2. Data We Collect

2.1 Information You Provide

• Account data: name, email address, postal address, phone number, company name
• Billing data: payment method details (processed by Stripe; we do not store full card numbers)
• Support data: information you provide in support tickets, live chat, or emails
• Domain registration data: registrant contact information required by ICANN

2.2 Information Collected Automatically

• Technical data: IP address, browser type, operating system, device type
• Usage data: pages visited, time spent, referral source, click patterns
• Cookie data: as described in our Cookie Policy
• Log data: server access logs, error logs for troubleshooting and security

3. Legal Basis for Processing (GDPR Article 6)

We process your personal data on the following legal bases:

4. How We Use Your Data

• To create and manage your account
• To provision, maintain, and support your hosting and domain services
• To process payments and send invoices
• To communicate about your services (renewal reminders, service updates, outage notifications)
• To respond to support requests
• To detect and prevent fraud, abuse, and security incidents
• To comply with legal obligations (e.g., tax records, law enforcement requests)
• To improve our services and website based on aggregated usage patterns

5. Data Sharing

We never sell your personal data to third parties.

We may share your data with:

• Payment processors (Stripe) — to process your payments securely
• Domain registrars (RealTimeRegister) — to register and manage domains as required by ICANN
• Infrastructure providers (Netcup, Contabo) — only to the extent necessary to provision servers
• Legal authorities — when required by law or to protect our rights

All third-party processors are bound by data processing agreements that ensure GDPR compliance.

6. Data Location and Transfers

Your data is primarily stored and processed in the European Economic Area (EEA). Our servers are located in Tier III+ European data centres.

Where data is transferred outside the EEA (e.g., to payment processors), we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) or adequacy decisions.

7. Data Retention

We retain your personal data only for as long as necessary:

• Active account data: for the duration of your account
• Billing and invoice data: 7 years after the transaction (legal/tax requirement)
• Support tickets: 3 years after resolution
• Server logs: 90 days
• Deleted accounts: personal data is anonymised within 30 days of account deletion, except where retention is required by law

8. Your Rights

Under the UK GDPR and the Data Protection Act 2018, you have the following rights:

To exercise any of these rights, email privacy@bluix.net. We will respond within 30 days.

If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO): ico.org.uk.

9. Security

We implement appropriate technical and organisational measures to protect your personal data, including:

• SSL/TLS encryption for all data in transit
• AES-256 encryption for sensitive data at rest
• Tier III+ European data centres with physical security
• Regular security audits and vulnerability assessments
• Access controls and authentication for all systems
• 24/7 infrastructure monitoring and intrusion detection

10. Children

Our services are not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that a child under 18 has provided us with personal data, we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date. We will notify active customers of material changes via email.

12. Bluix ID and Sign in with Google

Bluix ID (auth.bluix.net) is the single account used to sign in to Bluix Group products such as Comitix, Dronetrake, Protue and Operula. You can sign in with a one-time link sent by email, with a password, or with your Google account.

What we receive from Google. When you choose “Continue with Google”, we ask Google only for the basic sign-in permissions (openid, email, profile). Google sends us your Google account identifier, your email address and whether Google has verified it, and your name. We do not receive your Google password, and we do not access your contacts, files, calendar, mailbox or any other Google data.

How we use it. Only to sign you in: the Google account identifier links your Google account to your Bluix ID, the verified email address finds your existing Bluix ID or creates a new one, and your name fills in your profile the first time (you can change it at any time). We do not keep Google access tokens after you have signed in.

Sharing. When you sign in to a Bluix Group product through Bluix ID, that product receives your Bluix ID identifier, name and email address so it can open your account there. We do not sell Google user data, we do not use it for advertising, and we do not share it with anyone else, except where required by law.

Storage and retention. This data is stored with your Bluix ID on our servers in the European Economic Area for as long as your account exists. A record of each sign-in (date, IP address and outcome) is kept for security and fraud prevention.

Removing it. You can remove Bluix ID’s access from your Google Account at any time (myaccount.google.com/permissions). To delete your Bluix ID and its link to your Google account, write to privacy@bluix.net: we delete them within 30 days.

Bluix ID’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.