Privacy Policy

BLUE PRO LTD (trading as BluePro) is the data controller for personal data processed through bluepro.shop. We are registered in England and Wales.

Registered office: 8 Millbrook Business Park Hoe Lane, Nazeing, EN9 2RJ, United Kingdom. For any privacy question or request, contact support@bluepro.shop or call +44 7905931765.

We collect only what we need to run the store and fulfil orders:

• Order, delivery & fulfilment data — name, email, phone (optional), your shipping address and delivery address, city, postal code and country. We use this order data for order fulfilment, to ship your kits and to handle returns.
• Purchase data — the kits you buy, order totals and order status. Card details are entered directly with our payment processor; we never see or store full card numbers.
• Account & membership data — if you join Crew or Pro Crew, your subscription status and billing history held by our payment processor.
• Support & enquiry data — messages you send through our contact and bulk-order forms, including any details you choose to include.
• Technical & usage data — IP address, device and browser type, and essential cookies needed to keep your cart and session working.

Our collection sources for your personal data are:

• Directly from you — the details you enter at checkout, in our contact and bulk-order forms, and when you email or call us.
• Automatically from your device — technical and usage data collected by your browser when you use the site.
• From our payment processor — subscription and payment status received when you buy or manage a membership.
• From our delivery partners — delivery status and tracking updates for your order.

• To fulfil your order and deliver your kits — performance of a contract.
• To take payment and manage memberships — performance of a contract.
• To provide support and answer enquiries — our legitimate interest in helping customers, or steps before a contract.
• To retain checkout and enquiry details for follow-up — our legitimate interest in recovering abandoned orders and responding to leads; you may object at any time.
• To keep the site secure and prevent fraud — our legitimate interest and legal obligations.
• To send marketing — only with your consent, which you can withdraw at any time.

We share personal data only with processors that help us operate the store:

• Payment processing — Stripe, Inc. handles card payments, subscriptions and refunds. Stripe receives the data needed to process your transaction.
• Hosting & infrastructure — Vercel Inc. hosts the site and serves pages.
• Database & storage — Supabase stores order leads, enquiries and account records.
• Delivery & fulfilment — our logistics and courier partners receive your delivery address to ship your order.
• Email — our email provider delivers order and support messages.

We do not sell your personal data. We disclose data to authorities only where legally required.

Some processors (including our payment processor and hosting provider) operate outside the UK and EEA. Where personal data is transferred internationally, we rely on appropriate safeguards such as the UK International Data Transfer Agreement, the EU Standard Contractual Clauses, or an adequacy decision, so your data remains protected.

• Order and transaction records: kept for up to 6 years to meet tax and accounting obligations.
• Checkout and enquiry leads that do not become orders: kept for up to 24 months, then deleted.
• Marketing consent records: kept until you withdraw consent, then removed from active lists.
• Support correspondence: kept for up to 24 months after the query is resolved.

Depending on where you live, you have the right to access, correct, delete, restrict or object to processing of your personal data, to data portability, and to withdraw consent. UK and EEA residents may lodge a complaint with a supervisory authority (in the UK, the Information Commissioner's Office).

California residents have the right to know what personal information we collect, to request deletion, to correct it, and to not be discriminated against for exercising these rights. To exercise any right, email support@bluepro.shop.

We do not sell your personal information and we do not share it for cross-context behavioural advertising. Because we do not sell or share in this sense, there is nothing to opt out of, but you may still contact us at support@bluepro.shop with any request.

We use strictly necessary cookies to keep your cart and session working. Any analytics or preference cookies are optional. Full details, categories and how to control cookies are in our Cookie Policy.

We do not make solely automated decisions with legal or similarly significant effects. Our Kit Builder produces guidance suggestions only; it does not profile you.

Our store is not directed at children. It is not for use by anyone under 13, and customers aged 13–17 must have guardian consent to purchase. We do not knowingly collect data from children under 13.

Payments are processed by Stripe. When you pay, your card details are collected directly by Stripe over an encrypted connection — BluePro never receives or stores your full card number, CVC or expiry. We receive only the outcome of the payment, an order reference, and the billing details and your shipping address needed for order fulfilment and accounting. Your shipping address is passed to our courier and logistics partners solely to complete order fulfilment and deliver your kits.

We use encryption in transit, access controls and reputable processors to protect your data. No method of transmission or storage is completely secure, but we take reasonable steps to protect your information and will notify you and the relevant authority of any breach where legally required.

To exercise a right, ask a question or make a complaint, email support@bluepro.shop, call +44 7905931765, or write to us at 8 Millbrook Business Park Hoe Lane, Nazeing, EN9 2RJ, United Kingdom. We aim to respond within one month.