How we handle personal data on this website.
This notice applies when you visit the Blindstairs marketing website, contact our team, or ask us to help you evaluate or pilot Blindstairs. It does not replace the contractual privacy and data-processing terms that apply when an organisation uses the Blindstairs product.
1. Who is responsible for your data
BLINDSTAIRS, S.L. is the controller of the personal data described in this notice. You can contact us at hello@blindstairs.com.
2. Information we collect
- Information you provide: your name, work email, organisation, team size, and any decision context you choose to send.
- Technical information: standard request, device, browser, and security information generated when the website and its hosting infrastructure are used.
- Scheduling information: when you continue to an external scheduling service, the information collected there is handled under that provider's privacy terms.
3. Why we use it
- To respond to questions, commercial requests, and pilot enquiries.
- To prepare a demonstration, proposal, technical review, or implementation conversation requested by you.
- To operate, secure, troubleshoot, and improve the website.
- To comply with legal obligations and establish or defend legal claims where necessary.
4. Legal basis
We process enquiry and pilot-request data to take steps at your request before entering into a contract. We process limited technical and security information on the basis of our legitimate interest in operating a reliable and secure website. Where a separate optional activity requires consent, we will ask for it specifically.
5. How long we keep it
We keep personal data only for as long as needed to handle the request or relationship for which it was collected. We may then retain limited information for the periods required by law or while relevant legal claims could arise.
6. Service providers and transfers
We use selected providers for hosting, infrastructure, communications, and request handling. They process data on our instructions and only to provide their services. Current website infrastructure includes Vercel for hosting, Supabase for content and request handling, and Loops for newsletter subscriptions and email updates. Protected forms may also use Google reCAPTCHA for abuse prevention when that protection is configured.
Some providers may process information outside the European Economic Area. Where this happens, we use an applicable legal transfer mechanism and contractual safeguards.
7. Your rights
You may request access, correction, deletion, restriction, portability, or object to processing where applicable. You may also withdraw consent without affecting earlier lawful processing. To exercise a right, email hello@blindstairs.com and identify the request clearly.
You may lodge a complaint with the Spanish Data Protection Agency or the competent supervisory authority in your country.
8. Changes to this notice
We may update this notice when our website, providers, or legal obligations change. The date at the top identifies the latest published version.