Project information is used to respond, build, bill, and support.
Blotling does not sell personal information or use it for cross-context behavioral advertising. Payment credentials are handled by the payment processor, not stored by Blotling.
Scope and controller
This Privacy Policy explains how Blotling LLC (“Blotling,” “we,” “us,” or “our”) handles personal information through blotling.com, project inquiries, client communications, private invoices, and related services. Blotling LLC is the controller of the information described here. This Policy does not govern a third party’s independent website or service.
Information we collect
Information you provide
- Contact and business details, including name, email, company, website, industry, and audience.
- Project details, including goals, preferred styles, colors, brand assets, requested features, pages, content status, budget, launch timing, maintenance preferences, and messages.
- Client and transaction records, including quotes, invoices, payment status, project notes, approvals, support requests, and correspondence.
- Materials you choose to provide for a project. Please do not submit sensitive personal data that is not necessary for the work.
Information collected automatically
Our hosting and security systems may process IP address, browser or device information, request time, referring page, requested page, and security logs. The inquiry form creates a one-way hash from IP address and browser information to prevent spam and rate-limit repeated submissions; the raw values are not stored in that rate-limit record.
Information from others
We may receive payment status and transaction identifiers from a payment processor, project information from a person authorized by your organization, or publicly available business information when needed to respond to an inquiry or perform requested services.
How we use information
- Respond to inquiries, evaluate project fit, prepare quotes, and communicate about requested work.
- Design, develop, deliver, host, maintain, and support client projects.
- Create and administer invoices, confirm payments, provide receipts, maintain accounting records, and prevent fraud.
- Secure the website, enforce rate limits, diagnose errors, and protect Blotling, clients, and visitors.
- Comply with law, resolve disputes, enforce agreements, and establish or defend legal claims.
- Improve internal processes and service quality using aggregated or de-identified information where practical.
We do not use inquiry content for unrelated advertising and do not make decisions producing legal or similarly significant effects solely through automated processing.
Legal bases where applicable
Where a law such as the GDPR requires a legal basis, Blotling relies on: steps requested before entering a contract; performance of a contract; legitimate interests in responding to business inquiries, operating securely, preventing fraud, and improving services; compliance with legal obligations; and consent where specifically requested. You may withdraw consent for future processing when consent is the basis, without affecting prior lawful processing.
Payments and processors
Payments may be processed by PayPal or another provider identified on the invoice. The processor collects and handles payment-account, card, bank, authentication, and transaction information under its own privacy policy. Blotling receives limited information such as payer identity, email, transaction identifier, amount, currency, status, and timestamps. Blotling does not store complete card or bank-account credentials.
Cookies, analytics, and tracking
The public Blotling site does not currently use advertising cookies or cross-site behavioral tracking. Essential hosting, security, authentication, or payment services may use cookies or similar technologies necessary to operate their features. If optional analytics or marketing technologies are added, this Policy and any legally required consent controls will be updated before use.
Some browsers transmit “Do Not Track” or other preference signals. Because there is not one universally accepted standard for every such signal, the site does not currently respond to general Do Not Track signals. Blotling does not currently sell or share personal information for targeted advertising. Where applicable law requires recognition of a supported opt-out preference signal, Blotling will honor it.
Retention
We retain information only as long as reasonably necessary for the purposes described here, including contractual, security, tax, accounting, dispute, and legal obligations. Typical periods are:
- Anti-abuse inquiry fingerprints: up to 24 hours.
- Inquiries that do not become projects: generally up to 24 months after the last communication.
- Client, project, quote, invoice, payment, and business records: generally up to seven years after the last relevant transaction or longer if required for an active claim or legal duty.
- Project assets and correspondence: for the project term and a reasonable support or archival period, unless the parties agree otherwise.
Backups and security logs may remain for a limited additional period before routine deletion.
Security
Blotling uses reasonable administrative, technical, and organizational safeguards appropriate to the information and the size of the service. These include access restrictions, private administrative tools, transport encryption where supported, security monitoring, and limited data collection. No system or transmission is completely secure, and we cannot guarantee absolute security.
Your privacy rights
Subject to identity verification, legal exceptions, and applicable law, you may ask to access, correct, delete, restrict, or receive a portable copy of personal information, or object to certain processing. You may also withdraw consent for future processing and opt out of marketing communications. Blotling will not unlawfully discriminate against you for exercising a privacy right.
California residents may request the categories and specific pieces of personal information collected, sources, purposes, recipients, correction, or deletion where applicable. Blotling does not sell personal information and does not share it for cross-context behavioral advertising. California visitors may also request information about how the site responds to browser preference signals as described above.
Residents of the EEA, United Kingdom, and other jurisdictions may have additional rights and may lodge a complaint with their local data-protection authority. To make a request, email blotlingllc@gmail.com. We may request information reasonably necessary to verify your identity and authority. Authorized agents must provide proof of authorization where permitted.
International visitors
Blotling is based in Illinois, United States. Information may be processed in the United States and other locations used by service providers, which may have different data-protection laws. Where required, Blotling will use an approved legal mechanism for restricted international transfers and provide information about that mechanism on request.
Children’s privacy
Blotling’s services are intended for adults and businesses, not children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child provided information, contact us so it can be reviewed and deleted where required.
Changes and contact
We may update this Policy to reflect changes in services, vendors, or legal requirements. The effective date above shows the latest revision. Material changes will be communicated in a manner appropriate to their impact.
For questions, privacy requests, or complaints, contact Blotling LLC at blotlingllc@gmail.com. You may also contact the appropriate regulator or data-protection authority where you live.