Privacy Policy

1. Who we are

This website is operated by PT Blue Dragon Consulting, trading as Blue Dragon Technology (referred to in this policy as “Blue Dragon”, “we”, “us” or “our”). Our website address is https://bluedragontechnology.com/.

For personal information processed through this website, Blue Dragon is the data controller or equivalent responsible organization unless another notice states otherwise.

2. Scope of this policy

This policy applies when you:

• browse or use the Blue Dragon Technology website;
• submit a contact, quotation, application or support request;
• send us an email through an address published on the website;
• leave a comment where commenting is enabled;
• create or use a website account, where account functionality is enabled; or
• interact with embedded media, analytics or other website features.

This policy does not govern independent third-party websites that may be linked from our website. Their own privacy notices apply when you visit or use those services.

3. Information we collect

Information you provide directly

Depending on how you interact with us, this may include:

• your name, job title, company and country or region;
• business email address, telephone number and other contact details;
• information about an industrial process, application, sample, measurement requirement or project;
• quotation, purchasing, service, training or support requirements;
• documents, photographs or technical files that you choose to submit;
• the content of emails, forms, comments and other communications;
• account and profile information, if website registration is available; and
• your cookie and analytics consent choice.

Information collected automatically

When you access the website, our server and permitted website tools may process technical information such as your IP address, browser type, device type, operating system, referring page, pages requested, date and time of access, approximate region, language settings, error logs and security-related events.

Analytics information is collected only in accordance with the cookie choice described below. We do not use the website to make decisions that produce legal or similarly significant effects solely through automated processing.

4. How and why we use personal information

We process personal information only when we have an appropriate reason to do so. Depending on the context and applicable law, our reasons may include consent, steps requested before entering a contract, performance of a contract, compliance with legal obligations, and our legitimate interests in operating a secure business-to-business website and responding to genuine enquiries.

We do not sell personal information. Information submitted for an enquiry, quotation or support request is not used for unrelated advertising without an appropriate legal basis or permission.

5. Contact forms, comments and accounts

Contact, quotation and support forms

When you submit a form, we process the information shown in the form and associated technical information needed to deliver, secure and respond to the submission. A copy stored within the website system is removed from the website server within 30 days where technically and operationally applicable.

The resulting email or business correspondence may be retained for longer when necessary to answer your request, prepare or perform a contract, maintain support history, document a commercial relationship, resolve a dispute or comply with legal and accounting requirements.

Please do not submit sensitive personal information or confidential files that are unnecessary for us to understand your industrial application or support request.

Comments

If comments are enabled and you leave a comment, we collect the information entered into the comment form together with your IP address and browser user-agent string to assist with moderation, security and spam detection. Approved comments and the name you provide may be publicly visible.

An anonymized value created from your email address may be sent to the Gravatar service to determine whether you use that service. If a comment is approved, your Gravatar profile image may be publicly visible beside the comment. Gravatar is operated by Automattic; its privacy notice is available at Automattic Privacy.

Registered users

If website registration is enabled, we store the account and profile information provided by registered users. Users may generally view, edit or delete their profile information, except for information that the system must preserve for security or account integrity, such as a username. Authorized website administrators may also access and update account information when required to administer the service.

6. Cookies and consent choices

Cookies are small text files stored on your device. Some cookies are necessary for website security, login functionality and remembering your privacy choice. Optional analytics cookies are used only after you select Accept in our cookie banner.

Selecting Reject keeps optional Google Analytics cookies disabled. You can revisit your decision at any time by selecting Cookie Settings in the website footer or by using the button below.

Cookie names and durations can change when WordPress, Google Analytics or other website components are updated. Browser controls can also be used to delete or block cookies, although blocking necessary cookies may affect login or administration functionality.

7. Google Analytics

We may use Google Analytics 4 (“GA4”) to understand aggregate website use, such as visited pages, engagement, approximate geographic region, device and browser characteristics, referral sources and technical performance.

The Blue Dragon cookie-consent system is configured so that GA4 loaded through the Blue Dragon Global Site plugin does not load before analytics consent is accepted. If you reject analytics cookies, the plugin keeps analytics storage denied and removes common Google Analytics cookies that it can access from this website.

Google may process analytics information on systems located in multiple countries. Analytics data is retained according to the retention settings configured in our GA4 property and Google’s applicable systems and terms. We review those settings and seek to limit collection to information useful for website measurement and improvement.

Google explains its data practices in its Privacy Policy and its information about Google Analytics privacy disclosures.

8. Embedded content and external services

Pages or articles may include embedded or externally hosted content such as videos, maps, images, documents or other media. Embedded content can behave as though you visited the third-party website directly.

Depending on the provider and your browser or account status, that provider may collect technical information, use cookies, apply its own tracking and record your interaction with the embedded content. We seek to limit unnecessary third-party tracking and may use consent controls where appropriate, but the provider’s own privacy notice governs its independent processing.

9. Who receives personal information

We do not sell personal information. We disclose it only when reasonably necessary for the purposes described in this policy, including to:

• authorized Blue Dragon personnel who need the information to respond or perform their duties;
• website hosting, infrastructure, backup, security and technical-support providers;
• email and communication providers used to receive and respond to enquiries;
• Google, when you consent to Google Analytics;
• Automattic or Gravatar, if comments and Gravatar profile images are used;
• spam-prevention, firewall or security providers used to protect forms, comments and the website;
• professional advisers, auditors, insurers or authorities where reasonably necessary; and
• a successor organization in connection with a lawful restructuring, merger or transfer of the relevant business, subject to appropriate safeguards.

Service providers are permitted to process information only for the services they provide or as otherwise allowed by law and their applicable terms.

We may also disclose information when required by law, court order, regulatory request, or when reasonably necessary to protect rights, security, users or the integrity of our services.

10. International data transfers

Blue Dragon operates internationally, and some hosting, email, analytics, security or technical providers may process information in countries other than the country where you are located. Privacy and data-protection laws in those locations may differ.

Where applicable law requires transfer safeguards, we rely on recognized legal mechanisms, contractual protections, provider safeguards or other permitted measures. You may contact us for additional information about the safeguards relevant to your information.

11. How long we retain information

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, including business, contractual, security, dispute-resolution and legal requirements. Relevant periods include:

• Website form copies: removed from website servers within 30 days where technically and operationally applicable.
• Enquiry and email correspondence: retained for the time needed to respond and, where relevant, manage a commercial relationship, support history or legal obligation.
• Quotation, transaction and contractual records: retained for the period required to administer the relationship and meet applicable accounting, tax and legal requirements.
• Comments: an approved comment and its metadata may be retained indefinitely to preserve the discussion and recognize follow-up comments, unless deletion is appropriate and legally permitted.
• Registered-user profiles: retained while the account is active and then deleted or restricted when no longer required, subject to security and legal obligations.
• Security and server logs: retained for a limited period appropriate to security, troubleshooting and abuse prevention.
• Cookie consent: the current Blue Dragon consent choice is normally stored for 180 days.
• Google Analytics: retained according to the configured GA4 retention settings and Google’s processing systems.

When information is no longer required, we delete, anonymize or securely restrict it, subject to backup cycles and lawful retention requirements.

12. How we protect information

We use reasonable administrative, technical and organizational measures designed to protect personal information against unauthorized access, loss, misuse, alteration or disclosure. These measures may include HTTPS encryption, access controls, security updates, backups, logging, anti-spam controls and limited administrative access.

No internet transmission or storage system can be guaranteed to be completely secure. Please use appropriate care when deciding what information to submit through the website or email.

13. Your privacy rights

Depending on your location and the law that applies, you may have the right to:

• request confirmation of whether we process your personal information;
• request access to and a copy of your personal information;
• ask us to correct inaccurate or incomplete information;
• request deletion of information in applicable circumstances;
• request restriction of certain processing;
• object to processing based on legitimate interests or to direct marketing;
• receive certain information in a portable format where applicable;
• withdraw consent at any time, without affecting processing that occurred before withdrawal; and
• complain to an appropriate privacy or data-protection authority.

These rights are not absolute. We may need to retain certain information to comply with law, protect security, complete a contract, preserve legal claims or respect the rights of others.

To exercise a right, email info@bluedragontechnology.com with the subject “Privacy Request”. We may ask for information reasonably necessary to verify your identity and locate the relevant records. We aim to respond within the period required by applicable law, ordinarily within one month where that timeframe applies.

You may also complain to the privacy regulator or supervisory authority in your country or region. Individuals in the United Kingdom can find information from the Information Commissioner’s Office.

14. Children’s privacy

This website is intended for business and professional audiences and is not directed to children. We do not knowingly seek to collect personal information from children through the website. If you believe that a child has submitted personal information to us, please contact us so that we can review and, where appropriate, delete it.

15. Changes to this policy

We may update this Privacy Policy when our website, services, providers or legal obligations change. The revised version will be published on this page with an updated date. Material changes may also be highlighted through the website where appropriate.