Privacy Policy

This policy explains what personal data Blumah collects, why we collect it, how we look after it and the rights you have over it. It applies to this website and any enquiry you send us. We aim to keep it short and in plain language.

Who we are

Blumah is a growth studio working with local businesses. For the purposes of UK and EU GDPR, Blumah is the data controller for the personal data described in this policy. You can reach us at hello@blumah.com.

What we collect

• Enquiry details. When you submit our enquiry form or email us, we collect the information you choose to share — typically your name, business, email, phone number and a short note about what you're trying to achieve.
• Chat messages. If you use the chat widget, the messages you send are processed so we can reply.
• Technical data. Basic information your browser sends automatically, such as IP address, device type and pages visited. We use this to keep the site secure and to understand which pages are useful.
• Cookies. See our Cookie Policy for details and to change your preferences.

Why we use it

• To reply to your enquiry and have a conversation about your business.
• To send you information you've asked for.
• To run, secure and improve this website.
• To meet our legal and accounting obligations where work is agreed.

Our lawful bases under GDPR are typically your consent (for non-essential cookies and the chat widget), our legitimate interests (to respond to your enquiry and run our business) and, where we work together, the performance of a contract.

Who we share it with

We don't sell your data. We use a small number of trusted processors to run the business, including:

• HighLevel (LeadConnector). Hosts our enquiry form and chat widget.
• Email and hosting providers. For correspondence and to serve this website.

Where data is transferred outside the UK or EEA, we rely on appropriate safeguards such as the UK International Data Transfer Agreement or EU Standard Contractual Clauses.

How long we keep it

We keep enquiry data for as long as we're in active conversation and for a reasonable period after, so we can pick up where we left off. When we work together, we keep records for as long as required by tax and accounting law. You can ask us to delete your data sooner.

Your rights

Under UK and EU GDPR you have the right to access, correct, delete, restrict or object to the processing of your personal data, and to data portability. You can also withdraw consent at any time. To exercise any of these rights, email hello@blumah.com.

You also have the right to complain to a supervisory authority. In the UK that is the Information Commissioner's Office (ICO) at ico.org.uk.

Changes

If we make material changes to this policy we'll update the date at the top of the page and, where appropriate, let you know directly.