Privacy Policy & Data Protection

At Blue Streak Group, we believe that compliance isn't just about buildings—it's about information. This document outlines how we protect the data of our clients, partners, and visitors in an increasingly connected world.

1. The Controller

For the purposes of the United Kingdom General Data Protection Regulation (UK GDPR), the data controller is Blue Streak Group. We are a technology-led compliance company based in London, UK. Our operations span energy assessment, fire safety, facilities management, and retrofit coordination.

We value your privacy and are committed to protecting your personal data. This policy explains how we collect, use, and safeguard your information when you visit our website or engage with our services.

2. The Information We Collect

We operate on a principle of data minimisation. We only collect data that is necessary for the function of our business and the facilitation of our services. This falls into two distinct categories:

• Volunteered Data: Information you explicitly provide to us via our "Join Network" forms, exit-intent popups, or direct email enquiries. This includes your Full Name, Email Address, Professional Discipline, and Accreditation details.
• Technical Data: Information automatically collected when you interact with our digital infrastructure, such as IP addresses, browser types, and navigation paths.

3. Digital Telemetry and Analytics

To ensure the security, performance, and usability of our digital platforms, we utilise various monitoring technologies. It is important to note that our technical architecture is dynamic; different versions of our site may employ different analytical tools.

Conditional Use of Metrics: Depending on the specific version of the website you are accessing, or the specific portal you are logged into, we may or may not be collecting metrics via third-party providers. Specifically:

• Google Analytics: We may utilise Google Analytics to understand user behaviour, page popularity, and traffic sources. This data is aggregated and anonymised where possible. If active, this helps us improve the user experience.
• Cloudflare: We may utilise Cloudflare for content delivery, security, and traffic analysis. Cloudflare collects data primarily to identify malicious threats (bots, DDoS attacks) and ensure the site loads quickly from a server near you.

If you are accessing a version of the site where these scripts are disabled or not present, this data collection does not occur. We recommend using your browser's "Do Not Track" settings if you wish to opt-out of non-essential analytics universally.

4. How We Use Your Data

We process your personal data under specific legal bases defined by the UK GDPR:

• Legitimate Interest: To vet and onboard contractors (Assessors, Engineers, Trades) into our delivery network. We need your credentials to verify your suitability for compliance work.
• Consent: When you voluntarily submit your email via our exit popup to receive communications or speak with our team. You may withdraw this consent at any time.
• Contractual Obligation: If you are engaged as a supplier or client, we process data to fulfil our service agreement (e.g., issuing works orders, processing invoices).

5. Data Sharing and Third Parties

Blue Streak Group operates a "Remote-First" and "Network" model. This means we do not sell your data, but we may share it with trusted third parties to facilitate our operations:

• Form Processing: Our website forms may utilise third-party processing services (such as FormSubmit) to securely route your application to our internal teams.
• Compliance Databases: For assessors and coordinators, accreditation details may be verified against public registers (e.g., TrustMark, Elmhurst).
• Regulatory Bodies: Where required by law, data regarding compliance assessments (EPCs, Fire Risk Assessments) is lodged with relevant government registers.

6. Your Sovereignty (User Rights)

Under UK data protection law, you retain full sovereignty over your personal data. You have the right to:

• Access: Request copies of the personal data we hold about you.
• Rectification: Request that we correct any information you believe is inaccurate.
• Erasure: Request that we delete your personal data ("The Right to be Forgotten"), subject to legal retention requirements for compliance records.
• Restriction: Request that we restrict the processing of your data.

7. Contact Us

If you have any concerns about how your data is handled, or if you wish to exercise your rights, please contact our data protection team directly.