BLUEFAUCET PRIVACY POLICY
Effective Date: Dec 12, 2025
THIS PRIVACY POLICY (“POLICY”) DESCRIBES HOW BLUEFAUCET, INC. (“BLUEFAUCET,” “WE,” “US,” OR “OUR”) COLLECTS, USES, DISCLOSES, AND PROTECTS PERSONAL INFORMATION WHEN YOU USE OUR WEBSITE AND MOBILE APPLICATIONS (THE “SERVICE”). BY ACCESSING OR USING THE SERVICE, YOU ACKNOWLEDGE THAT YOU HAVE READ AND UNDERSTOOD THIS POLICY. IF YOU DO NOT AGREE, DO NOT USE THE SERVICE.
1. SCOPE & APPLICABILITY
This Policy applies to BlueFaucet’s processing of personal information in connection with www.bluefaucet.com, the BlueFaucet mobile applications, and related services.
Public Business Information (Not Covered by This Policy). Information that a Merchant intentionally publishes on profiles, listings, pages, or promotions within the Service is public and not governed by this Privacy Policy. BlueFaucet may display, index, cache, share, syndicate, and distribute such Public Business Information as part of the Service (including via search, embeds, links, and partner surfaces). Search engines and third parties may index or cache this content; we cannot control third-party retention once published. Do not place personal details (e.g., personal mobile number or home address) in public fields if you do not want them to be public.
Important: If you place personal details (e.g., a personal mobile number or home address) in public fields, they will be publicly visible. Do not publish information you do not want to be public.
2. ROLES; CONTROLLER/PROCESSOR; SERVICE PROVIDER
For information we collect directly from individuals (e.g., site/app accounts, support, marketing), BlueFaucet acts as a controller (or ‘business’ where applicable). For information Merchants collect about their Members using the Service, BlueFaucet acts as a processor/service provider under applicable law; Merchants are responsible for their own privacy notices and compliance.
3. DEFINITIONS
- “Personal Information” or “PI” means data that identifies or can reasonably be used to identify an individual.
- “Customer Data” means information relating to Members or other individuals that a Merchant submits to or collects through the Service (e.g., names, contact details, membership status, appointment and visit history, transactional metadata). Customer Data excludes payment credentials processed by Stripe (e.g., full card numbers, CVV/CVC, bank account numbers.
- “Aggregated/De-identified Data” means data that has been aggregated and/or de-identified so it cannot reasonably be used to identify a specific individual or the Merchant/Subscriber.
- “Public Business Information” means information a Merchant intentionally makes public via the Service, such as business name, phone number, street address, website/links, hours, product and service descriptions, prices, images/media, promotions/coupons, and announcements. Public Business Information is not Personal Information under this Policy.
4. CATEGORIES OF PERSONAL INFORMATION WE COLLECT
- Identifying Information (e.g., name, postal address, email, phone number, date of birth).
- Transactional/Account Data (e.g., payment history, appointment schedules, receipts).
- Usage/Device Data (e.g., log data, device/browser identifiers, cookies, IP address, interaction history).
- Merchant-Collected Information about Members (collected by Merchants using the Service).
- Inferences and Aggregated/De-identified analytics.
5. SOURCES OF PERSONAL INFORMATION
- Information you provide directly (e.g., in your profile; information you provide to place orders or book appointments).
- Information collected automatically (e.g., transaction logs, engagement history, cookies, device data).
- Information collected by Merchants using the Service (BlueFaucet is not responsible for Merchant-collected data; review Merchant privacy notices).
- Payment information processed by Stripe; BlueFaucet does not store card or bank account numbers.
6. HOW WE USE PERSONAL INFORMATION (PURPOSES)
- Provide, operate, and support the Service; respond to inquiries and provide customer support.
- Personalize and improve experiences; customize content and features.
- Send service communications and, with your preferences, marketing communications.
- Conduct business analytics (using Aggregated/De-identified Data where possible).
- Maintain safety, security, fraud detection/prevention, and legal compliance.
- Data Use & Consent. BlueFaucet analyzes personal information and Customer Data to provide, maintain, and improve the Service and to develop new features (including future AI-powered features). BlueFaucet may create and use aggregated or de-identified analytics derived from such data.
7. DATA OWNERSHIP; PROCESSING ROLES
As between BlueFaucet and Merchants, Merchants retain rights in Customer Data they submit to or collect through the Service. BlueFaucet processes such Customer Data on behalf of Merchants as a service provider/processor, and uses Aggregated/De-identified Data as described in this Policy.
8. AGGREGATED/DE-IDENTIFIED DATA; NO RE-IDENTIFICATION; BUSINESS DEVELOPMENT
BlueFaucet may create and use Aggregated and/or De-identified Data derived from Personal Information and Customer Data. We implement technical and organizational measures and maintain policies designed to prevent re-identification. We contractually require service providers that receive Aggregated/De-identified Data to not attempt re-identification and to apply comparable safeguards. We may use Aggregated/De-identified Data to develop, improve, and commercialize products and services; generate insights and benchmarks; train and operate algorithms and models; and identify opportunities for Merchants and/or BlueFaucet. We strictly isolate Merchant transaction data. Your raw customer data is never used to train predictive models for other Merchants.
9. COOKIES & TRACKING; YOUR CHOICES
We use cookies and similar technologies to operate the Service, understand usage, and (where enabled) measure the effectiveness of promotions. You can disable or manage cookies in your browser/device settings; some features may not function without cookies. You may opt out of marketing emails via the unsubscribe link or by contacting privacy@bluefaucet.com. If we later use partners for analytics or advertising, we will disclose the categories of data involved and provide applicable opt-outs (including a “Do Not Sell or Share My Personal Information” option where required).
10. SHARING & DISCLOSURE; NO SALE
- We do not sell Personal Information. We may ‘share’ data strictly for analytics and advertising performance as defined by CPRA, and we provide an opt-out.
- With trusted third-party service providers (e.g., payment processors, hosting, analytics) under confidentiality and security obligations.
- To comply with law, legal process, or enforceable government requests; to protect rights, safety, and the integrity of the Service.
- In connection with corporate transactions (e.g., mergers, acquisitions), subject to this Policy.
- Users may opt out of non-mandatory sharing by contacting privacy@bluefaucet.com.
11. PAYMENT PROCESSING WITH STRIPE
- BlueFaucet uses Stripe to process payments. Stripe is a PCI-DSS Level 1 certified processor.
- Payment information is sent directly to Stripe and is never stored on BlueFaucet servers.
- Payments are made directly to the Merchant you choose, not to BlueFaucet. Disputes or incorrect payments must be resolved with the Merchant.
- By making a payment, you agree to Stripe’s Services Agreement and Privacy Policy.
12. SECURITY
- We implement administrative, technical, and physical safeguards, including encryption, secure access controls, and regular security reviews.
- Employees receive data security training appropriate to their roles.
- In the event of a data breach, we will notify affected users within required timeframes (e.g., 72 hours where applicable), take remedial steps, and cooperate with authorities.
13. RETENTION
We determine retention periods based on factors such as the nature of the information, the purposes for which it is processed, legal or regulatory requirements, dispute resolution, security, and fraud prevention.
14. CHILDREN’S PRIVACY
We do not knowingly collect data from children under 13. Parents may request deletion at privacy@bluefaucet.com.
15. YOUR RIGHTS
- Depending on your jurisdiction, you may have rights to access, correct, delete, restrict or object to processing, and obtain a portable copy of your data.
- You have the right to non-discrimination for exercising privacy rights.
- To exercise rights, contact privacy@bluefaucet.com. We respond to verifiable requests within 45 days.
16. CALIFORNIA RESIDENTS (CCPA/CPRA)
The Service is intended for users located in the United States.
- Right to Know/Access, Delete, and Non-Discrimination; ability to use an Authorized Agent.
- Submit requests at privacy@bluefaucet.com or via the California Attorney General’s resources.
17. INTERNATIONAL DATA TRANSFERS
If your data is transferred outside your country, we rely on Standard Contractual Clauses (SCCs) and other legally recognized safeguards as required by law.
18. COMPLAINTS
Contact us first at privacy@bluefaucet.com. If unresolved, you may lodge a complaint with your local data protection authority.
19. RELATIONSHIP TO OTHER TERMS; ORDER OF PRECEDENCE (DATA CARVE-OUT)
This Policy works together with the BlueFaucet User Agreement, Free Trial Program Agreement, and Subscription Agreement. Notwithstanding anything to the contrary in those agreements, for privacy and data-handling matters (including ownership, collection, use, processing, retention, de-identification, and disclosure), this Policy controls.
20. GOVERNING LAW; DISPUTE RESOLUTION
This Policy is governed by the laws of the State of Washington, without regard to conflict-of-laws rules; the CISG does not apply. Before any formal proceeding, the parties will attempt to resolve disputes in good faith within 30 days after written notice. Except for equitable relief/small claims, disputes will be resolved by binding arbitration administered by the AAA under its Commercial Rules in Seattle, Washington, before one arbitrator, in English. Class Action Waiver: claims may be brought only individually. Either party may seek temporary/injunctive relief or bring a claim in small claims court in King County, Washington.
21. CHANGES TO THIS POLICY
We may update this Policy. Changes take effect upon posting. If changes materially affect how we handle personal information, we will notify you via email or in-app notice.
22. CONTACT US
Email: privacy@bluefaucet.com
