1. Who controls your data
Blanche is currently operated in Ireland by Mihails Belovs. For the purposes of the GDPR, Mihails Belovs is the controller of personal data processed in connection with this website and Blanche enquiries.
- Operator
- Mihails Belovs
- Trading name
- Blanche
- Jurisdiction
- Ireland
- Privacy contact
- hi@blanche.ie
No Data Protection Officer is identified because Blanche has not stated that one has been appointed or is required.
2. What the current website processes
Enquiries
The contact form asks for your name, company, work email, optional phone number and message. When you submit it, the enquiry is stored in the website's protected enquiry database, delivered to Blanche by Zoho ZeptoMail and followed by a transactional confirmation email to the address you provide.
Company AI Use Policy questionnaire
The questionnaire collects business contact details and high-level categories of tools, AI use, information and existing controls to review your order and prepare your policy. Answers are stored in the protected enquiry database and sent to Blanche through Zoho ZeptoMail. They are not sent to a generative AI model or included in general analytics. Do not provide confidential records, sensitive data or documents. Draft answers remain in page memory and are cleared when you leave or reload.
Separate policy funnel reporting records a random page-attempt identifier, view, start, completed steps, questionnaire completion, successful stored submission, timestamps and a predefined referral category. It uses no analytics cookies or persistent browser storage, and contains no questionnaire answers or contact details. These operational counts measure the order journey; reloading creates a new attempt.
Pricing estimator and AI Risk Check
The pricing estimator and AI Risk Check use predefined rules in your browser. They do not send answers to a generative AI model. Results remain in your browser unless you choose to discuss or email the result and submit the contact form, in which case the assessment answers, suggested package and indicative estimate are stored with your enquiry.
Technical website information
Like most hosted websites, technical information such as IP address, browser or device information, request time and security events may be processed by the hosting/platform layer to deliver and protect the site. Blanche records a random assessment-attempt identifier and timestamps for starts, completions and associated enquiries to measure use of the AI Compliance Check. This counter does not collect answers, names, email addresses or IP addresses, and does not use cookies or browser storage. Reloading or starting again creates a new attempt. The website also aggregates successful public full-page loads by date, public page path, broad referral category, estimated device class and predefined campaign category, with a separate aggregate country breakdown from the hosting platform’s approximate location signal. These counts use ordinary server requests without analytics cookies or visitor identifiers. No IP addresses, raw browser strings, full referrers or query strings are retained in these aggregates. Internal client-side navigation without a new document load is not counted. Signed-in owner traffic, known bots and requests signalling Do Not Track or Global Privacy Control are excluded. Aggregate reporting is used to understand website performance. No advertising pixels are enabled.
3. Why information is used and the legal basis
| Purpose | GDPR basis |
|---|---|
| Responding to a request for a quotation, consultation or other steps you ask us to take before a contract | Article 6(1)(b), steps at your request before entering a contract, where applicable |
| Responding to general business enquiries that are not pre-contractual | Article 6(1)(f), legitimate interests in communicating with prospective and existing business contacts |
| Operating, securing and troubleshooting the website | Article 6(1)(f), legitimate interests in providing a secure and reliable website, and Article 6(1)(c) where a specific legal obligation applies |
| Keeping records required by law | Article 6(1)(c), compliance with a legal obligation, where applicable |
Blanche does not require you to consent to this Privacy Policy in order to make an ordinary enquiry. Submitting an enquiry does not subscribe you to marketing.
4. Recipients and service providers
Personal data is shared only with providers needed to run the service. The current categories are the website hosting and protected database platform, and Zoho ZeptoMail for transactional enquiry delivery. These providers process information only for hosting, security, storage or requested email delivery. Professional advisers may receive information where reasonably necessary and legally permitted.
5. International transfers
Blanche does not state that all website data remains in the EU. Provider locations and contractual safeguards are reviewed as part of the service-provider assessment. Where personal data is transferred outside the EEA, the transfer must rely on a lawful mechanism, such as an adequacy decision or appropriate safeguards including Standard Contractual Clauses where applicable. You may contact Blanche for information about the safeguards relevant to your enquiry.
6. How long information is kept
Submitted enquiries are retained in the protected website enquiry store and reviewed under a documented retention schedule. Enquiries that do not become client matters are scheduled for deletion no later than 24 months after the last meaningful contact, unless they must be retained for a specific legal reason.
Records connected with a client engagement are normally retained for six years after the engagement ends, subject to applicable contractual, tax and legal record-keeping requirements and any genuine need to establish or defend legal claims. Records are deleted or anonymised when they are no longer required.
7. Your data protection rights
Depending on the circumstances, you may have rights of access, rectification, erasure, restriction, objection and data portability. Where processing is based on consent, you may withdraw that consent without affecting earlier lawful processing.
To exercise a right, email hi@blanche.ie. You also have the right to complain to the Irish Data Protection Commission. Read the DPC guidance on GDPR rights
8. Cookies, AI and marketing
See the Cookie Policy for the current tracking-technology position and AI Transparency for how Blanche identifies AI-generated Insights content. The current site does not automatically subscribe enquiry, estimator or assessment users to marketing communications.
9. Keeping this policy current
This policy must be reviewed before Blanche introduces a new form, CRM, analytics service, chatbot, newsletter, booking tool, embedded media, payment flow, AI processing of visitor submissions or any other feature that changes how personal data is collected, used, stored or shared.
When one of those changes occurs, Blanche should review this Privacy Policy, the Cookie Policy, the AI Transparency notice and the Website Terms together so the legal layer stays aligned with the actual website.