Your browser is no longer supported. Please upgrade your browser to improve your experience.

Privacy Policy

Last updated: March 2026

Who we are

Bluefruit Software Limited is a data controller responsible for your personal data.

Registered address: Bluefruit Software Limited Gateway Business Centre Barncoose Gateway Park Redruth, Cornwall TR15 3RQ
Company registration number: 05249561
Data Protection Officer: Raven Beale [email protected]


What this policy covers

This policy explains how Bluefruit Software collects, uses, stores, and protects personal data when you use our website (bluefruit.co.uk) or interact with us. It also explains your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

We may update this policy from time to time. The date at the top of this page reflects when it was last revised.


What data we collect and why

Contact form enquiries

When you submit an enquiry via our website contact form, we collect your name, email address, phone number, company name, and the contents of your message.

Lawful basis: Legitimate interests. We have a legitimate interest in responding to genuine business enquiries submitted to us.

Retention: Contact form submissions are added to our CRM (HubSpot). We retain this data for two years from the date of your last interaction with us, after which it is deleted.


Job applications

When you apply for a role at Bluefruit, we collect the personal data you provide as part of your application, which may include your name, email address, phone number, employment history, and CV.

Lawful basis: Legitimate interests. We have a legitimate interest in assessing job applications submitted to us.

Retention: Application data is deleted within 6–12 months of the conclusion of the recruitment process.


Ebook downloads and newsletter sign-ups

When you download a resource or sign up to our newsletter, we collect your name and email address. We will only contact you for marketing purposes where you have given explicit consent by ticking the relevant checkbox at the point of submission.

Lawful basis: Consent.

Retention: We retain your data for two years from the date of your last interaction with us. You may withdraw your consent and unsubscribe at any time by clicking the unsubscribe link in any email we send you, or by contacting us directly at [email protected]. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.


Website usage data

We collect anonymous data about how visitors use our website, including pages visited, time spent on pages, and traffic sources. This data does not identify you personally and is used solely to improve our website and understand how it is being used.

Lawful basis: Legitimate interests.


Company-level visitor identification

We use Leadfeeder to identify which companies are visiting our website based on IP address matching. This identifies organisations, not individuals. No personally identifiable information about individual visitors is collected through this process.

Lawful basis: Legitimate interests.


Cookies

We use cookies and similar tracking technologies on our website. A cookie is a small file placed on your device that helps us analyse web traffic, remember your preferences, and deliver relevant advertising.

You will be asked for your consent to non-essential cookies when you first visit our website. You can change your cookie preferences at any time by clicking the Cookies link in our website footer.

We use the following categories of cookies:

Essential cookies — required for the website to function. These cannot be disabled.
Analytics cookies — help us understand how visitors interact with our website (via Google Analytics). Only set with your consent.
Advertising cookies — used to deliver relevant ads via Google Ads and LinkedIn. Only set with your consent.


Third-party processors

We use the following third-party services which may process personal data on our behalf. Where these services are based outside the UK, data transfers are carried out under appropriate safeguards, including the ICO’s International Data Transfer Agreement (IDTA) or equivalent Standard Contractual Clauses.

(i) Google LLC Purpose: Website analytics (Google Analytics) and advertising (Google Ads) Address: 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA Privacy policy: policies.google.com/privacy Data transfers: Standard Contractual Clauses

(ii) HubSpot, Inc. Purpose: CRM and email marketing Address: Two Canal Park, Cambridge, MA 02141, USA Data Protection Officer: Nicholas Knoop — [email protected] Privacy policy: legal.hubspot.com/privacy-policy Data transfers: Standard Contractual Clauses

(iii) Leadfeeder (Dealfront Finland Oy) Purpose: Company-level website visitor identification Privacy contact: [email protected] Privacy policy: leadfeeder.com/privacy Data transfers: Standard Contractual Clauses

(iv) LinkedIn Ireland Unlimited Company (Microsoft) Purpose: Advertising and campaign tracking via LinkedIn Insight Tag Address: Wilton Place, Dublin 2, Ireland Privacy policy: linkedin.com/legal/privacy-policy Data transfers: Standard Contractual Clauses

(v) Wistia, Inc. Purpose: Video hosting (Do Not Track enabled on all embeds) Address: 17 Tudor Street, Cambridge, MA 02139, USA Privacy policy: wistia.com/privacy Data transfers: Standard Contractual Clauses

(vi) Cloudflare, Inc. Purpose: Website security, performance, and content delivery Address: 101 Townsend St, San Francisco, CA 94107, USA Privacy policy: cloudflare.com/privacypolicy Data transfers: Standard Contractual Clauses

(vii) Automattic Inc. (Akismet) Purpose: Spam filtering on contact forms Address: 60 29th Street #343, San Francisco, CA 94110, USA Privacy contact: [email protected] Privacy policy: akismet.com/privacy Data transfers: Standard Contractual Clauses


International data transfers

Several of our third-party processors are based in the United States. Where personal data is transferred outside the UK, we ensure appropriate safeguards are in place in accordance with UK GDPR, including Standard Contractual Clauses and, where applicable, the ICO’s Approved Addendum.


Your rights

Under UK GDPR, you have the following rights in relation to your personal data:

  • Right of access — you can request a copy of the personal data we hold about you.
  • Right to rectification — you can ask us to correct inaccurate or incomplete data.
  • Right to erasure — you can ask us to delete your personal data where there is no compelling reason for us to continue processing it.
  • Right to restriction — you can ask us to restrict processing of your data in certain circumstances.
  • Right to data portability — you can request your data in a structured, machine-readable format.
  • Right to object — you can object to processing based on legitimate interests or for direct marketing purposes.
  • Rights related to automated decision-making — you have the right not to be subject to decisions made solely by automated processing where those decisions significantly affect you.

To exercise any of these rights, please contact our Data Protection Officer at [email protected]. We will respond within one calendar month.


Right to complain

If you have concerns about how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO):

Website: ico.org.uk Telephone: 0303 123 1113

We would, however, appreciate the opportunity to address your concerns directly before you contact the ICO. Please contact Raven Beale in the first instance.


Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. These measures are reviewed and updated as necessary.


Links to other websites

Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites and recommend you review their privacy policies independently.


Contact us

For any questions about this privacy policy or how we handle your personal data, please contact:

Raven Beale, Data Protection Officer [email protected]

Bluefruit Software Limited Gateway Business Centre, Barncoose Gateway Park Redruth, Cornwall, TR15 3RQ