machine viewenglishraw: /privacy.mdbuild: d68074d2026-08-05T14:02Z
This notice covers what this website collects — through contact forms, job applications, scheduling, and analytics — and what happens to that data. Data inside client projects is governed by each client’s contract, not this page.
The controller is BLEU LTDA, CNPJ 32.895.825/0001-08, Florianópolis, SC, Brazil. José Ribeiro is the privacy contact for this website: privacy@bleu.builders.
Contact forms: name, work email, optional phone number, company, selected situation, and message.
Job applications: the contact and application information submitted for an open role.
Scheduling: information submitted to the calendar provider after a contact form.
Abuse prevention: temporary request and network information used to rate-limit public forms.
Analytics: aggregate visit information collected through Umami, plus website-interaction data such as clicks, scrolls, heatmaps, and session recordings collected through Microsoft Clarity. When a website experiment is running, analytics also records the website experiment assignment shown to that visit. Clarity masks sensitive page content by default. Apollo records company-level visit activity, including pages viewed, to identify organizations visiting the site.
We use this information to answer you, prepare the conversation you asked for, evaluate applications, keep the website running, and protect the public forms from abuse. In LGPD terms, contact-form data is processed as a preliminary step toward a possible contract, at your request (art. 7, V). No form on this site makes automated decisions about you.
Cloudflare hosts the website and handles form traffic and stored contact records.
Commercial contacts may be sent to HubSpot.
Job applications are sent to Bleu’s recruitment system.
Scheduling and business email use the configured calendar and email providers.
Umami processes aggregate website analytics.
Microsoft Clarity processes clicks, scrolls, heatmaps, and session recordings so we can understand how people use the website; it masks sensitive page content by default.
Google Ads receives the accepted lead identifier and a hashed email address to improve advertising conversion measurement.
LinkedIn processes advertising measurement and audience data (Insight Tag); when the contact form is submitted, it may also receive a hashed email address, an advertising click identifier when present, and the submission time to measure an advertising conversion.
RB2B processes visitor identification data to tell us which companies visit the site.
Apollo processes company-level website visit data, including visited pages and visit activity, so we can identify organizations showing interest in Bleu.
Your browser keeps a local record of how you first arrived at the site (campaign link, referrer) for up to 90 days; it never leaves your device unless you submit the contact form. The contact record stored at Cloudflare expires within 30 days. If your contact becomes a commercial lead in HubSpot, it stays there for as long as its business purpose and the law require. Some of these providers process data outside Brazil. To see what we hold about you, or have it deleted, write to privacy@bleu.builders.
The LGPD gives you the right to know whether we process your data, see it, correct it, have it anonymized or deleted where applicable, know who we share it with, and withdraw consent. One email to privacy@bleu.builders starts any of these. Do not send identity documents in the first message.
PRIVACY
How this website handles personal data
This notice covers what this website collects — through contact forms, job applications, scheduling, and analytics — and what happens to that data. Data inside client projects is governed by each client’s contract, not this page.
Who is responsible
The controller is BLEU LTDA, CNPJ 32.895.825/0001-08, Florianópolis, SC, Brazil. José Ribeiro is the privacy contact for this website: privacy@bleu.builders.
Data we collect
- Contact forms: name, work email, optional phone number, company, selected situation, and message.
- Job applications: the contact and application information submitted for an open role.
- Scheduling: information submitted to the calendar provider after a contact form.
- Abuse prevention: temporary request and network information used to rate-limit public forms.
- Analytics: aggregate visit information collected through Umami, plus website-interaction data such as clicks, scrolls, heatmaps, and session recordings collected through Microsoft Clarity. When a website experiment is running, analytics also records the website experiment assignment shown to that visit. Clarity masks sensitive page content by default. Apollo records company-level visit activity, including pages viewed, to identify organizations visiting the site.
How we use it
We use this information to answer you, prepare the conversation you asked for, evaluate applications, keep the website running, and protect the public forms from abuse. In LGPD terms, contact-form data is processed as a preliminary step toward a possible contract, at your request (art. 7, V). No form on this site makes automated decisions about you.
Service providers
- Cloudflare hosts the website and handles form traffic and stored contact records.
- Commercial contacts may be sent to HubSpot.
- Job applications are sent to Bleu’s recruitment system.
- Scheduling and business email use the configured calendar and email providers.
- Umami processes aggregate website analytics.
- Microsoft Clarity processes clicks, scrolls, heatmaps, and session recordings so we can understand how people use the website; it masks sensitive page content by default.
- Google Ads receives the accepted lead identifier and a hashed email address to improve advertising conversion measurement.
- LinkedIn processes advertising measurement and audience data (Insight Tag); when the contact form is submitted, it may also receive a hashed email address, an advertising click identifier when present, and the submission time to measure an advertising conversion.
- RB2B processes visitor identification data to tell us which companies visit the site.
- Apollo processes company-level website visit data, including visited pages and visit activity, so we can identify organizations showing interest in Bleu.
How long we keep it, and where
Your browser keeps a local record of how you first arrived at the site (campaign link, referrer) for up to 90 days; it never leaves your device unless you submit the contact form. The contact record stored at Cloudflare expires within 30 days. If your contact becomes a commercial lead in HubSpot, it stays there for as long as its business purpose and the law require. Some of these providers process data outside Brazil. To see what we hold about you, or have it deleted, write to privacy@bleu.builders.
Your rights
The LGPD gives you the right to know whether we process your data, see it, correct it, have it anonymized or deleted where applicable, know who we share it with, and withdraw consent. One email to privacy@bleu.builders starts any of these. Do not send identity documents in the first message.