- DOCUMENT
- PRIVACY POLICY
- ISSUER
- BLUEPRINT CODE AI LTD
- UPDATED
- 2 OCTOBER 2026
Privacy Policy
How Blueprint Code AI handles personal information when you visit our website, use our tools, get in touch or work with us.
In short
- We collect what you choose to send us — mainly enquiry details and project information — plus basic technical data needed to run the site securely.
- Analytics (Microsoft Clarity) only runs if you allow it. You can change that at any time.
- Enquiries that don’t turn into a project are deleted after 90 days.
- We use a small number of service providers to run the site. Some are in the United States, with legal safeguards in place.
- We do not sell personal information. You can ask to see, correct or delete yours by emailing hello@blueprintcode.ai.
Who we are
Blueprint Code AI Ltd (“BPC”, “we”, “us”) is a UK solutions architecture studio. We design and build digital systems, interactive tools, ecommerce experiences and automation for businesses.
For the personal information described in this policy, BPC is the controller. Where we process information only on a client’s instructions as part of a project, the client is the controller and separate data processing terms apply.
- Company
- Blueprint Code AI Ltd
- Registered in
- England and Wales
- Company number
- 17490525
- Registered office
- 66 Paul Street, London, England, EC2A 4NA
- Contact
- hello@blueprintcode.ai
What we collect
Depending on how you interact with us, this may include:
- Enquiry details — from the project enquiry form and the free accessibility pre-check: your name, company, email address, phone number, location, a description of your project, a website link, any file you attach, and your answers about budget, timeframe and project stage.
- Blueprint Builder account details — your email address (used to send sign-in links), your organisation, and the project information you enter and choose to send to us.
- Correspondence — emails and messages you exchange with us.
- Client project information — files, comments, approvals, specifications and other material needed to deliver work you commission.
- Commercial records — proposals, quotes, contracts, invoices and payment status.
- Technical information — IP address, browser and device type, time zone, and request and security logs generated when you use the site.
- Usage information — only if you allow analytics: how you move through the site, including clicks, scrolling and page visits, recorded by Microsoft Clarity. See our Cookie & Tracking Policy.
The Process Blueprinter saves your work in your own browser only. Nothing you enter there is sent to us unless you separately choose to share it.
We don’t ask for, and you shouldn’t send us, special category information (such as health information) through our website or tools.
Where it comes from
Mostly directly from you. It can also come from a colleague at your organisation who involves you in a project, from your use of our website and tools, or from clients, suppliers and advisers we work with. We may use publicly available business information (such as a company website) when preparing for a conversation you have asked for.
How we use it, and our lawful basis
UK data protection law requires a lawful basis for each use. Ours are:
| What we do | Lawful basis |
|---|---|
| Reply to your enquiry, prepare a proposal or run a pre-check you asked for | Steps you asked for before a contract; otherwise our legitimate interest in responding to people who contact us |
| Provide Blueprint Builder sign-in and keep your projects | Contract (providing the service you signed up for) |
| Deliver, support and invoice client projects | Contract |
| Keep the site secure, prevent abuse and keep technical logs | Legitimate interests (protecting our services and users) |
| Analytics with Microsoft Clarity | Consent — only if you allow it |
| Occasional relevant business updates to business contacts | Legitimate interests, within electronic marketing rules; you can opt out at any time |
| Keep accounting, tax and legal records | Legal obligation |
Where we rely on legitimate interests, we have considered your interests and expectations, and you can object at any time.
Marketing
We don’t use enquiry details for unrelated marketing. If we send you business updates, every message will let you opt out, and we follow the Privacy and Electronic Communications Regulations. After an opt-out we keep just enough information to make sure we don’t contact you again.
Automation and AI
We may use automation and AI tools to help structure information, analyse what you send us, draft material and support our own decisions. We don’t treat AI output as automatically correct, and a person stays responsible for anything we send you or decide about you.
We don’t make decisions based solely on automated processing that have legal or similarly significant effects on you.
Who we share it with
We use these service providers to run our website and business. They process information for us under contract:
| Provider | What they do for us | Location |
|---|---|---|
| Vercel Inc. | Website hosting, request and security logs | United States and global network |
| Neon | Database hosting for enquiries, Blueprint Builder and our content system | Cloud hosting (see transfers below) |
| Cloudflare, Inc. | File and media storage (R2) | United States and global network |
| Resend | Delivery of enquiry notifications and sign-in emails | United States |
| Microsoft (Clarity) | Website analytics and session recording — only with your consent | United States |
| Delivers the website’s fonts (which means your browser contacts Google’s servers); sign-in for BPC staff to our content system | United States and global network | |
| Our business email provider | Email correspondence with you | Cloud hosting |
We may also share information with professional advisers (such as accountants and lawyers), where the law requires it, to protect our legal rights, or as part of a genuine sale or restructuring of our business.
We do not sell personal information, and we don’t share it for advertising.
International transfers
Several of our providers are based in, or may process information in, the United States and other countries outside the UK. Where UK law requires a safeguard, we rely on one of: the UK Extension to the EU–US Data Privacy Framework (the “UK–US data bridge”) where the provider is certified under it; the ICO’s International Data Transfer Agreement or Addendum to the EU Standard Contractual Clauses; or another transfer mechanism permitted by law. Contact us if you would like more detail.
How long we keep it
| Information | How long |
|---|---|
| Enquiries, pre-check requests and Builder submissions that don’t become a project | 90 days from receipt |
| Client project records | The life of the project, then 6 years (the usual period for contract claims) |
| Accounting and transaction records | 6 years from the end of the financial year they relate to |
| Blueprint Builder accounts | While the account is in use; deleted on request |
| Server and security logs | Short-term, normally no more than 90 days |
| Clarity analytics (with consent) | Held by Microsoft: session recordings up to 30 days, aggregated reports up to 13 months |
| Marketing opt-out records | For as long as needed to respect the opt-out |
We may keep anonymised or aggregated information that no longer identifies anyone.
Security
We use proportionate technical and organisational measures to protect personal information, including encrypted connections, access controls, short-lived single-use sign-in links and signed session cookies. No internet-connected system can be guaranteed completely secure. Please keep access to your email account secure, as Blueprint Builder sign-in links are sent there.
Your rights
Under UK data protection law you have the right to access your information; to have it corrected or erased; to restrict or object to how we use it; to receive certain information in a portable form; and to withdraw consent where we rely on it. Some rights depend on the circumstances.
To use any of these rights, email hello@blueprintcode.ai. We will respond within one month, and we won’t charge you in normal circumstances. We may need to confirm your identity first.
If you are in the European Union, you have equivalent rights under the EU GDPR, and you can contact us in the same way.
Complaints
You can complain to the UK Information Commissioner’s Office at ico.org.uk/make-a-complaint or on 0303 123 1113. We’d appreciate the chance to put things right first, but you don’t have to contact us before going to the ICO.
Children
Our website and services are for businesses and are not aimed at children. We don’t knowingly collect information from anyone under 18.
Other websites
Websites and services we link to have their own privacy information, which applies when you use them.
Changes and contact
We will update this policy as our services, technology or the law change; the date at the top shows the latest revision. Questions about this policy or your information: hello@blueprintcode.ai, or write to Blueprint Code AI Ltd, 66 Paul Street, London, England, EC2A 4NA.