Privacy Policy

1. INTRODUCTION

The Blue Consult Ltd trading as Blue Edge (“Blue Edge”, “we”, “our” or “us”) is committed to protecting personal data and respecting privacy. This Privacy Policy explains how we collect, use, store, share and protect personal data when providing consultancy services, operating our AI-enabled SaaS platform and conducting our business operations.

This policy is intended for clients, prospective clients, platform users, suppliers, associates, contractors, job applicants and visitors to our website. We process personal data in accordance with the UK GDPR, the Data Protection Act 2018 and applicable privacy legislation.

2. WHO WE ARE

Blue Edge is a UK-based provider of expert bid services and AI-enabled software solutions, providing bid management and bid writing services, framework and tender support services, strategic bid and capture planning services, and an AI-enabled SaaS platform for bid and proposal management.

Depending on the services provided and the nature of the processing, Blue Edge may act as either a Data Controller or a Data Processor.

3. Controller and Processor Responsibilities 

Blue Edge acts as a Data Controller when processing personal data for its own business purposes, including client relationship management, supplier management, recruitment, finance, marketing communications, website administration and information security.
Blue Edge acts as a Data Processor where we process Client Information on behalf of clients while delivering consultancy services or providing access to our SaaS platform.

This includes processing personal data contained within bid documents, CVs, project documentation, connected Microsoft SharePoint repositories and other information provided by clients to enable delivery of our services.

Where Blue Edge acts as a Data Processor, we process Client Information only in accordance with our clients’ documented instructions and applicable contractual obligations.

4. Personal Data We Collect

Client Contacts:

Business contact information, communications, meeting notes and contract-related information.

Client Information:

Information provided by or on behalf of our clients during the delivery of consultancy services or through our SaaS platform. This may include contact details, CVs, organisational information, project information, bid documentation and other information relevant to the services we provide.

Prospective Clients:

Business contact information, marketing preferences, business relationship information and communications.

Suppliers, Associates and Contractors:

Business contact information, professional qualifications, contractual information, payment information and communications.

Job Applicants:

Application information, CVs, employment history, qualifications, references and recruitment records.

Website Users:

Technical information, website usage information and information submitted through website forms.

5. Client Content and SharePoint Integrations

As part of delivering our consultancy services and operating our AI-enabled SaaS platform, Blue Edge processes Client Information provided by or on behalf of our clients.

Information may be uploaded directly to the platform, accessed through approved client-managed repositories such as Microsoft SharePoint, or shared securely as part of consultancy engagements.

This information may include bid documentation, CVs, contact details, project information, organisational information and other content provided by or on behalf of our clients

Where Blue Edge processes personal data on behalf of a client, we do so solely for the purposes of delivering the agreed consultancy services or platform functionality.

6. How We Use Personal Data

We use personal data to deliver consultancy services, provide and support our AI-enabled SaaS platform, manage client relationships and contracts, process payments, recruit personnel, manage suppliers, maintain information security, provide support services, improve our services, and comply with legal and regulatory obligations.

7. Legal Bases for Processing

Where Blue Edge acts as a Controller, processing may be based on contract performance, legitimate interests, legal obligations, consent or vital interests, depending on the purpose of processing.

8. Artificial Intelligence Processing

Blue Edge operates an AI-enabled SaaS platform. Information submitted to the platform may be processed using Microsoft Azure OpenAI services to support content generation, search, document analysis, knowledge retrieval and related functionality.
Blue Edge does not use Client Information submitted to the platform to train publicly available artificial intelligence models. Appropriate technical and organisational controls are implemented to protect information processed through AI-enabled services.

9. Marketing Communications

We may send service announcements, platform updates, AI software updates, newsletters and industry insights. Recipients may opt out of marketing communications at any time. Service and security notifications relating to existing products or services may still be sent where necessary.

10. Sharing Personal Data

We may share personal data with cloud hosting providers, technology providers, cloud hosting providers, payment service providers, professional advisers, regulators, law enforcement agencies where legally required and approved subcontractors supporting service delivery. Blue Edge does not sell personal data.

11. Data Hosting and Residency

Blue Edge systems and services are hosted within Microsoft Azure infrastructure located within the United Kingdom and Europe. Data may be processed within these regions to support service delivery, resilience, backup and disaster recovery.

12. International Transfers

Where personal data is transferred outside the United Kingdom or European Economic Area, Blue Edge implements appropriate safeguards including the UK International Data Transfer Agreement (IDTA), UK Addendum to Standard Contractual Clauses, adequacy decisions or other lawful transfer mechanisms.

13. Data Retention

Client Information is retained in accordance with contractual obligations, client instructions, applicable legal requirements and operational needs.

Recruitment records are typically retained for up to 12 months unless longer retention is agreed.

Supplier and contractor information is retained for the duration of the engagement and relevant statutory retention periods. Platform data retention is governed by client contractual requirements and operational needs.

When information is no longer required, it is securely deleted, anonymised or archived.

Retention periods are reviewed periodically to ensure they remain appropriate for legal, regulatory and business purposes.

14. Security

Blue Edge regularly reviews its privacy practices and information security controls to help ensure that personal data is processed lawfully, fairly, transparently and securely.

Blue Edge maintains technical and organisational measures designed to protect personal data. Controls include:

  • Role-based access controls
  • Multi-factor authentication
  • Encryption
  • Secure cloud infrastructure
  • Monitoring and logging
  • Supplier management controls
  • Incident response procedures
  • Security awareness training
  • Regular security reviews and continual improvement of information security controls

Blue Edge applies the same information security controls to personal data processed through both consultancy engagements and the SaaS platform.

15. Your Rights

Subject to applicable law, individuals may have rights to access personal data, correct inaccuracies, request deletion, restrict processing, object to processing, request data portability and withdraw consent where we rely on consent as the lawful basis for processing. Requests may be submitted using the contact details below.

16. Cookies and Analytics

Our website may use cookies and analytics technologies to improve functionality, understand website usage and enhance user experience. Additional information may be provided through separate cookie notices and consent mechanisms.

17. Complaints

If you have concerns regarding how Blue Edge processes personal data, please contact us first. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO).

18. Contact Details

Blue Edge Email: info@blue-edge.co.uk

Website: www.blue-edge.co.uk

19. Changes to this Policy

We may update this Privacy Policy from time to time. The latest version will be made available through our website and will take effect from the date of publication.