Privacy Policy

Last updated: 4 October 2026

1. Introduction

This Privacy Policy explains how BluTree IT Solutions (“BluTree”, “we”, “us” or “our”) collects, uses, stores and protects personal data when you visit or use our website:

https://blutree.pt

BluTree is a technology consultancy based in Portugal. We are committed to handling personal data responsibly and in accordance with applicable data protection laws, including the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and applicable Portuguese data protection legislation.

This Privacy Policy applies to personal data collected through the Website.

It does not replace specific data-processing arrangements that may apply when BluTree provides professional technology services to a client. Where BluTree processes personal data on behalf of a client as part of a contracted service, the applicable contractual and data-processing arrangements will govern that processing.

2. Who Is Responsible for Your Personal Data?

The data controller responsible for the processing described in this Privacy Policy is:

BluTree IT Solutions
Email: hello@blutree.pt
Website: https://blutree.pt

If you have questions about how your personal data is processed or wish to exercise your data protection rights, you can contact us using the email address above.

3. What Personal Data Do We Collect?

The personal data we collect depends on how you interact with the Website.

3.1 Contact Form

If you contact BluTree through our website contact form, we may collect:

• Your name;
• Your email address;
• Your company name, if provided; and
• The information contained in your message.

The information required to submit an enquiry may vary according to the configuration of the contact form.

We ask you not to submit unnecessary sensitive personal information through the Website contact form.

3.2 Technical Information

Certain technical information may be processed when you visit the Website as part of operating, maintaining and securing the Website and its underlying infrastructure.

Depending on the technical configuration of the Website and our service providers, this may include:

• IP address;
• Date and time of access;
• Browser and device information;
• Requested pages or resources; and
• Technical or security-related information.

BluTree does not currently use Google Analytics or Google Tag Manager.

BluTree also does not currently use Meta Pixel.

4. Categories of Personal Data

Depending on how you interact with the Website, BluTree may process the following categories of personal data:

Identification Data

Information that identifies you, such as your name.

Contact Data

Information that allows us to communicate with you, such as your email address.

Professional or Business Information

Information you voluntarily provide about your company, role, business requirements or potential project.

Communication Data

Information contained in messages, enquiries or other communications you send to BluTree.

Technical Data

Information that may be generated through your use of the Website, such as technical, browser, device or security information.

We only process the information reasonably necessary for the relevant purpose.

5. How We Use Your Personal Data

BluTree may use personal data collected through the Website for the following purposes:

• Responding to enquiries and requests for information;
• Understanding your business requirements;
• Discussing potential technology services or business opportunities;
• Arranging meetings or further communications;
• Providing information about BluTree’s services;
• Managing and maintaining the Website;
• Protecting the Website and our systems against security threats, abuse or unauthorized access;
• Establishing, exercising or defending legal rights; and
• Complying with applicable legal obligations.

We do not use information submitted through the contact form for unrelated purposes without an appropriate legal basis.

Submitting an enquiry does not automatically subscribe you to a marketing mailing list.

6. Legal Bases for Processing

Depending on the circumstances, BluTree may process personal data on the following legal bases under the GDPR.

6.1 Taking Steps at Your Request

Where you contact us to request information about our services or discuss a potential engagement, processing your information may be necessary to take steps at your request before entering into a contract.

6.2 Legitimate Interests

BluTree may process personal data where necessary for our legitimate interests, provided those interests are not overridden by your rights and freedoms.

Examples may include:

• Responding to business enquiries;
• Managing business communications;
• Maintaining and securing the Website;
• Preventing misuse or security incidents; and
• Establishing, exercising or defending legal rights.

6.3 Legal Obligations

BluTree may process personal data where necessary to comply with a legal obligation applicable to us.

6.4 Consent

Where applicable law requires consent for a particular processing activity, BluTree will request consent before carrying out that processing.

Where processing is based on consent, you may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

7. Cookies and Similar Technologies

The Website uses cookies and similar technologies where necessary for its operation, security and functionality.

BluTree currently provides a cookie-consent mechanism through the Website for managing applicable non-essential cookies.

At the time of publication of this Privacy Policy:

• BluTree does not use Google Analytics;
• BluTree does not use Google Tag Manager; and
• BluTree does not use Meta Pixel.

If BluTree introduces analytics, advertising or other non-essential tracking technologies in the future, we will review the applicable privacy and cookie requirements and update the relevant information and consent mechanisms where required.

You can manage available cookie preferences through the cookie-consent mechanism provided on the Website.

Where a separate Cookie Policy applies, it should be read together with this Privacy Policy.

8. Who May Receive Your Personal Data?

BluTree does not sell or rent personal data.

Where reasonably necessary, we may share personal data with:

• Website hosting and infrastructure providers;
• Email and communication service providers;
• Technology providers supporting the Website;
• Professional advisers, where necessary;
• Legal, regulatory or governmental authorities where required by law; and
• Other service providers acting on our behalf where access to personal data is necessary to provide their services.

Where third parties process personal data on BluTree’s behalf, we take appropriate steps to ensure that the processing is carried out in accordance with applicable data protection requirements.

BluTree only provides third parties with access to personal data where there is an appropriate reason and legal basis for doing so.

9. International Transfers

Where personal data is transferred to or accessed from a country outside the European Economic Area (“EEA”), BluTree will take appropriate steps to ensure that the transfer is carried out in accordance with applicable data protection law.

Depending on the circumstances, this may include relying on:

• An adequacy decision;
• Standard Contractual Clauses; or
• Another legally recognized safeguard.

The specific technology and service providers used by BluTree may change over time as our infrastructure develops.

10. Data Security

BluTree takes appropriate technical and organizational measures to protect personal data against unauthorized access, accidental loss, alteration, disclosure or destruction.

The measures used may include appropriate access controls, secure communications, system security measures and other safeguards appropriate to the nature and risks of the processing.

However, no method of transmission or storage over the internet can be guaranteed to be completely secure.

If you believe that information submitted to BluTree may have been compromised or that you have identified a security issue affecting the Website, please contact:

hello@blutree.pt

11. How Long Do We Keep Personal Data?

BluTree does not retain personal data for longer than reasonably necessary for the purposes for which it was collected, unless a longer period is required or permitted by law.

Retention periods are determined based on factors including:

• The purpose for which the information was collected;
• Whether an ongoing business relationship exists;
• Whether further communication is reasonably expected;
• Applicable legal or contractual obligations;
• Accounting or other record-keeping requirements, where applicable; and
• The need to establish, exercise or defend legal claims.

For example, information contained in a business enquiry may be retained for as long as reasonably necessary to respond to the enquiry, continue relevant business discussions or protect BluTree’s legitimate business and legal interests.

Where information is no longer required, BluTree will take reasonable steps to delete or anonymize it, subject to applicable legal obligations.

12. Your Data Protection Rights

Subject to the conditions and limitations established by applicable law, you may have the right to:

• Request access to your personal data;
• Request correction of inaccurate or incomplete personal data;
• Request deletion of your personal data;
• Request restriction of processing;
• Object to certain processing activities;
• Request portability of your personal data where the right applies;
• Withdraw consent where processing is based on consent; and
• Object to direct marketing, where applicable.

The availability of each right depends on the legal basis and circumstances of the particular processing activity.

These rights are subject to the conditions and limitations established by the GDPR and other applicable law.

13. How to Request Deletion or Exercise Your Rights

To request deletion of your personal data or exercise another applicable data protection right, contact us at:

hello@blutree.pt

To help us process your request efficiently, please include:

• Your name;
• The email address or other information you used to communicate with BluTree;
• The right you wish to exercise; and
• Sufficient information for us to identify the relevant personal data or interaction.

We may request additional information where reasonably necessary to verify your identity and protect personal data from unauthorized disclosure.

BluTree will respond to your request in accordance with applicable data protection law.

Data-subject requests are generally handled without charge. However, applicable law may permit a reasonable fee or refusal where a request is manifestly unfounded or excessive.

14. Right to Complain to the CNPD

If you believe that BluTree’s processing of your personal data infringes applicable data protection law, you have the right to lodge a complaint with the competent supervisory authority.

In Portugal, the supervisory authority is:

Comissão Nacional de Proteção de Dados (CNPD)

Address:
Av. D. Carlos I, 134, 1.º
1200-651 Lisboa
Portugal

Website: https://www.cnpd.pt

You may contact the CNPD directly regarding concerns about the processing of your personal data.

Where appropriate, we encourage you to contact BluTree first so that we can try to resolve your concern directly. This does not affect your right to lodge a complaint with the CNPD.

15. Third-Party Websites

The Website may contain links to third-party websites, platforms or services.

This Privacy Policy does not apply to those third-party services.

BluTree does not control the privacy practices, security or content of external websites and is not responsible for their processing of personal data.

We recommend reviewing the privacy policies of third-party websites before providing them with personal information.

16. Changes to This Privacy Policy

BluTree may update this Privacy Policy from time to time to reflect:

• Changes to the Website;
• Changes to the personal data we process;
• Changes to our technology or service providers;
• Changes to applicable legal or regulatory requirements; or
• Improvements to our privacy practices.

When we make changes, we will update the “Last updated” date at the beginning of this Privacy Policy.

Where required by applicable law, BluTree will provide additional notice or obtain consent for material changes.

17. Contact Us

If you have questions about this Privacy Policy, our privacy practices, or the way we process your personal data, please contact:

BluTree IT Solutions
Praceta Augusto Ferreira Geirinhas 8
2865-023 Sacavém, Lisbon, Portugal

Email: hello@blutree.pt
Website: https://blutree.pt

Last updated: 4 October 2026