Privacy
Privacy Notice
Controller and contact
Bluedog Cloud Service Ltd is the data controller for Workbench. Privacy enquiries and GDPR rights requests may be sent to termini@bluedog.net.
What we collect at registration
Workbench currently collects your name, business email address, organisation name, selected plan and product interests. Telephone number is optional. Workbench is currently free to use, so no payment information is required for registration.
Why we process personal data
| Purpose | Typical data | Lawful basis |
|---|---|---|
| Evaluate access requests and establish an account | Name, business email, organisation, selected plan/interests | Steps requested before entering a service contract and, where applicable, performance of that contract |
| Operate accounts, tenant membership, roles, and settings | Account and service administration data | Performance of the service contract |
| Secure Workbench, prevent abuse, investigate incidents, and maintain audit evidence | Security events, IP/address-derived security data, user-agent and access events | Legitimate interests in operating a secure and reliable service, subject to appropriate safeguards |
| Maintain accounting or other legally required records where applicable | Transaction and accounting metadata | Legal obligation and/or performance of the service contract, as applicable |
| Optional marketing, if introduced | Contact details and communication preferences | Consent where consent is the appropriate lawful basis |
Consent is not used as a substitute for data minimisation or for processing required to provide the service.
Who may receive the data
Where necessary, personal data may be processed by hosting/infrastructure, email/communications, support, and security providers, professional advisers, or public authorities where disclosure is legally required. A payment provider would be added only if Workbench later introduces paid billing.
If paid billing is introduced, Workbench will use provider-hosted or tokenised processing and will retain only the minimum provider reference and transaction/reconciliation metadata necessary to operate the service. Workbench will not act as a card-data vault.
International transfers
If a processor or service transfers personal data outside the European Economic Area, Workbench will document that transfer and use an appropriate GDPR transfer mechanism and safeguards before relying on that service.
How long we keep data
Personal data is retained only for as long as necessary for the purpose for which it was collected, including legitimate operational, contractual, security, accounting, and legal requirements.
- Registration requests are kept while the request is being considered and thereafter only as reasonably necessary for onboarding, support, security, or legal purposes.
- Active account and tenant records are kept while the service relationship remains active and during any documented closure/archive period.
- Operational logs currently use a 14-day default retention period.
- Security/audit evidence is retained for an appropriate accountability, incident, and legal period.
- Accounting/financial records are retained for applicable accounting, tax, contractual, or legal requirements.
- Backups expire according to the documented production backup lifecycle once that lifecycle has been formally verified.
Your GDPR rights
Subject to applicable GDPR conditions and limitations, you may have rights to access, rectify, erase, restrict processing, object to certain processing, and receive portable data where the portability right applies. Where a specific activity relies on consent, you may withdraw that consent without affecting earlier lawful processing.
Some information may need to be retained despite an erasure request where a legal, contractual, accounting, security, or other lawful retention requirement applies.
Complaints
You have the right to lodge a complaint with a supervisory authority. In Ireland, this is the Data Protection Commission (DPC).
Required and optional fields
Name, business email, and organisation name are required to evaluate and operate an account request. Selected plan/interests are used to route and configure the requested service. Telephone number is optional. If required information is not supplied, Workbench may be unable to process the request.
Automated decisions
Workbench does not currently use solely automated decision-making or profiling to make registration decisions that produce legal or similarly significant effects.
Sensitive information we do not want
Do not submit raw payment-card credentials, bank-login credentials, medical records/PHI, government-classified information, or other specialist regulated datasets unless Workbench has specifically introduced and approved a capability designed for that information.