Privacy Policy

Thank you for your interest in this Privacy Policy! As a software provider, we are committed to protecting and respecting your privacy when you use our website at Blesta.Club.

In principle, we will only use your personal data in accordance with applicable data protection laws, in particular the UK`s Data Protection Act (“DPA”) and only as described in this privacy policy.

What is Personal Data?

Personal data is any information relating to personal or material circumstances that relates to an identified or identifiable individual. This includes, for example, your name, date of birth, e-mail address, postal address, or telephone number as well as online identifiers such as your IP address. In contrast, information of a general nature that cannot be used to determine your identity is not personal data. This includes, for example, the number of users of a website.

Responsible for data processing is:
Christopher Best
Blesta Club LTD
The Pavilion
29 Church Street
Digby
Lincolnshire
LN4 3LZ
Link to Information Commissioners Office (ICO)

General information on data processing

In the course of our business and website operations, we process data. This also includes disclosure by transmission to third parties and, where applicable, to so-called third countries outside the UK and the EEA. Where we transfer data outside the UK or EEA, we have highlighted this accordingly below.

All personal data that we obtain from you via the website will be processed for the purposes described in more detail below. This is done within the framework of the respective legal regulations mentioned above or with your consent.
In particular, only when data processing is permitted and if:

you have given your consent,
the data is necessary for the fulfilment of a contract / pre-contractual measures,
the data is necessary for the fulfilment of a legal obligation or
the data is necessary to protect the legitimate interests of our company, provided that your interests are not overridden.

Blesta Club processes and stores your personal data only for the period of time required to achieve the respective processing purpose or for as long as a legal retention period (in particular commercial and tax law) exists. Once the purpose has been achieved or the retention period has expired, the corresponding data is routinely deleted.

Processing of Automatically Collected Data

Collection of access data and log files
We also collect data on every access to our website. The access data includes the name of the website accessed, file, date and time of access, amount of data transferred, notification of successful access, browser type and version, the user's operating system, referrer URL (the previously visited page), IP address and the requesting provider.
Log file information is stored for security reasons (e.g., for the clarification of abuse or fraud) for a maximum of 7 days and then deleted. Data whose further storage is necessary for evidentiary purposes is exempt from deletion until the respective incident is finally clarified. The legal basis for the data processing is our legitimate interest in providing an appealing website.
Use of cookies
We use so-called cookies on our web site. Cookies are small text files that are stored on your respective device (PC, smartphone, tablet, etc.) and saved by your browser. For further information please refer to our Cookie Policy. The legal basis for the use of cookies is your consent as well as our legitimate interest.
Google Fonts
We integrate the fonts of the provider Google Inc, whereby the user's data is used solely for the purpose of displaying the fonts in the user's browser. The integration is based on my legitimate interest in a technically secure, maintenance-free and efficient use of fonts, their uniform display and taking into account possible licensing restrictions for their integration. The legal basis for this processing is our legitimate interest.
Cloudflare Turnstile CAPTCHA
We also use Turnstile's CAPTCHA from Cloudflare. to check whether data input is made by a human being or by an automated program. For this purpose, Turnstile analyses the behaviour of the website visitor on the basis of various characteristics. This analysis begins automatically as soon as the website visitor enters the website. The legal basis for the data processing is our legitimate interest in operating a secure and spam free website.
Google Analytics
We also use Google's Analytics from Google Inc. This is purely to see site visits and monitor user engagement

Data processing when you submit it to our website and when you use our services

When you contact us through our website or use our services, some data is collected and processed by us or on our behalf by our selected third-party providers.

Contacting us
If you contact us, we process the following data from you for the purpose of processing and handling your request: first name, last name, e-mail address, and, if applicable, other information if you have provided it, and your message. The legal basis for the data processing is our obligation to fulfil the contract and/or to fulfil our pre-contractual obligations and/or our overriding legitimate interest in processing your request.
Registration
On our website, we offer you the opportunity to register by providing Personal Data. The data is entered in the registration form is transmitted to us and stored and includes your full name, your e-mail address, and your password plus any information submitted in order to process card payments. We will also send you a verification e-mail to ensure that the account creation is made for the intended person. The processing of the data for this registration thus serves the fulfillment of the contract of use or the implementation of pre-contractual measures. You can delete your account at any time either by using the delete function in your account or by contacting us.
Data management and customer support
For optimal customer support, we use first name, last name, e-mail address, and the data related to your contract with us. Your data may be stored on our website and or our customer relationship management system ("CRM system"). This data processing is based on our legitimate interest in providing our customer service.
Contract processing
We process your first name, last name, e-mail address, and the data related to your contract with us data to handle the contractual relationship between you and us. The legal basis for the data processing is the fulfilment of our contractual obligations and, in individual cases, the fulfilment of our legal obligations.
When using our services
We process the data of our clients and registered users, in order to be able to provide our contractual services as well as to ensure the security of our services and to be able to develop it further. The required information is identified as such in the context of the order, purchase order or comparable contract conclusion and includes the information required for the provision of services and billing as well as contact information.
Unless otherwise specified the purposes of processing are contractual performance and service, contact requests and communication, office and organisational procedures, administration, and response to requests.
To protect your privacy, we only collect the information necessary, to let you access and utilise our services. All information sent from your web browser to our web server or from our web server to your web browser is protected by encryption technology. We do NOT sell your information to 3rd parties. We may suggest a 3rd party to you during the course of communication but your details will never be passed to them.
The legal basis for the data processing is the fulfilment of our contractual obligations and, in individual cases, the fulfilment of our legal obligations as well as your Consent.
Financial Information
To make a purchase, you may need to provide a valid payment method (e.g., credit or debit card). Your payment information will be collected and processed by our authorised payment vendor Stripe and PayPal. We do not directly collect or store credit or debit card numbers or wallet details ourselves in the ordinary course of processing transactions favouring a tokenised approach where the Payment processor only stores the data. Accordingly, the data is processed on the basis of our contractual relationship. We also use fraud prevention software "Maxmind" as a pre-signup check.
Affiliate Sign Up
When you sign up for our Referral program, we process your contract information. We use your information in order to perform our contractual obligations to you. We also have a legitimate interest in marketing and analysing trends and patterns among our affiliate members and your consent.

Duration of data storage

We only store personal data for as long as it is necessary for the purposes for which it is processed or for as long as any consent you have given us has been revoked by you. Insofar as statutory retention obligations must be observed, the storage period for certain data may be up to 10 years, irrespective of the processing purposes.

Transfer of personal data

We will not disclose or otherwise distribute your personal data to third parties unless this:

is necessary for the performance of our services,
you have consented to the disclosure,
or the disclosure of data is permitted by relevant legal provisions.

However, we are entitled to outsource the processing of your personal data in whole or in part to external service providers acting as processors within the framework of the GDPR. External service providers support us, for example, in the technical operation and support of the website, data management, the provision and performance of services, marketing, as well as the implementation and fulfilment of reporting obligations. The service providers commissioned by us however will process your data exclusively in accordance with our instructions and we remain in accordance with the GDPR responsible for the protection of your data. Doing so we always make sure that service providers commissioned by us are carefully selected, follow strict contractual regulations, technical and organisational measures, and additional controls by us.

Direct marketing in the context of a customer relationship

Insofar as you have also given us your separate consent to process your data for consulting, marketing and advertising purposes, we are entitled to contact you for these purposes via the communication channels you have given your consent to.

Your data subject rights

These rights are:

the right to information,
the right to rectification,
the right to erasure,
the right to restriction of data processing,
the right to data portability,
the right to object to data processing,
the right to revoke any consent you have given, and
the right to lodge a complaint with the competent supervisory authority.

Please contact us at any time with questions and suggestions regarding data protection and to enforce your rights as a data subject.

We encourage you to contact us if you have any information requests, requests for information or objections about data processing or concerns. However, you also have the right to file a complaint with your local supervisory authority. However, we would appreciate it if you would contact us with your concern before turning to a supervisory authority.

Security

State-of-the-art internet technologies are used to ensure the security of your data. During the online enquiry process, your details are secured with SSL encryption. For secure storage of your data, the systems are protected by firewalls that prevent unauthorised access from outside. In addition, technical and organisational security measures are used to protect the personal data you have provided against accidental or intentional manipulation, loss, destruction, or access by unauthorised persons.

Updating your information

If you believe that the information, we hold about you is inaccurate or that we are no longer entitled to use it and want to request its rectification, deletion, or object to its processing, please do so by contacting us. For your protection and the protection of all of our users, we may ask you to provide proof of identity before we can answer the above requests. Keep in mind, we may reject requests for certain reasons, including if the request is unlawful or if it may infringe on trade secrets or intellectual property or the privacy of another user. Also, we may not be able to accommodate certain requests to object to the processing of personal information, notably where such requests would not allow us to provide our service to you anymore.

Personal information and children

Our services are aimed at people aged 18 and over. We will not knowingly collect, use or disclose personal information from minors under the age of 18 without first obtaining consent from a legal guardian through direct offline contact.

Online presences in social media

We maintain online presences within social networks and platforms (Discord, YouTube, Facebook, Twitter) in order to be able to communicate with the customers, interested parties and users active there and to inform them about our services there. When using the respective networks and platforms, the terms and conditions and data processing guidelines of their respective operators apply. Unless otherwise stated in our privacy policy, we process the data of users if they communicate with us within the social networks and platforms, e.g., write posts on our online presences or send us messages.

Changes and updates to the privacy policy

We kindly ask you to regularly inform yourself about the content of our privacy policy. We will amend the privacy policy as soon as changes to the information processing activities we carry out make this necessary. We will inform you as soon as the changes require an act of cooperation on your part (e.g., consent) or other individual notification. This Privacy Policy was last updated on Monday, 02 October 2023

Concerns and Contact

If you have any questions or comments about our Privacy Policy or wish to exercise your rights or withdraw any consents given to us, please contact us.