Privacy Policy

1. Who we are

This website is a demonstration (“demo”) website for a fictional plastering brand named CALX Studio. It is operated by BliBling Agency (“we”, “us”, “our”) to showcase web design, animations, and AI chatbot features.

CALX Studio is not a real operating business. Names, addresses, phone numbers, craftspeople, project stories, and service claims on the site are placeholders for demonstration only.

Controller / operator contact
BliBling Agency
Email: web@blibling.com
Website: www.blibling.com

2. Scope of this policy

This Privacy Policy explains what personal data we collect when you visit or use plastering.blibling.com (including the free quote form, AI craft guide chatbot, cookie notice, and related server scripts), why we collect it, how long we keep it, who we share it with, and what rights you have.

It applies to processing carried out through this demo site’s code as deployed. If you later rebrand or re-host this template for a real business, you must update this policy to match your own legal entity, purposes, and tools.

3. What we collect (based on how this site works)

We only process data that the live site’s code actually handles. There is no advertising pixel network and no third-party analytics suite (such as Google Analytics) built into this demo.

3.1 Data you provide voluntarily

3.2 Data collected automatically

3.3 What we do not intentionally collect

• No payment card data (there is no checkout).
• No account registration or passwords.
• No marketing newsletter signup beyond the quote form itself.
• No cross-site advertising trackers or social media pixels in this demo’s first-party code.
• No precise geolocation API calls from our scripts.

4. How we use your data & legal bases

Depending on your location, we rely on one or more of the following bases under GDPR / UK GDPR and similar laws:

• Steps prior to a contract / responding to your request — when you submit a quote form or leave contact details for follow-up (Art. 6(1)(b) GDPR where applicable).
• Legitimate interests — operating a secure demo website, preventing spam, diagnosing errors, and improving the demonstration (Art. 6(1)(f)), balanced against your rights.
• Consent — where required for non-essential storage such as remembering your cookie notice choice, or where you choose optional features (e.g. attaching an image, voice input) (Art. 6(1)(a)).
• Legal obligation — if we must retain or disclose data to comply with law (Art. 6(1)(c)).

Purposes in practice:

• Answer enquiries and demo “quote” requests via email to our operator inbox.
• Power the AI craft guide replies and optional human-handover workflow.
• Protect the site and AI/email quotas from automated abuse.
• Remember that you dismissed the cookie notice so it does not reappear every visit.

5. Cookies, local storage & similar technologies

This demo uses a minimal cookie notice. Strictly speaking, the notice preference is stored in the browser’s localStorage (key: calx_cookie_consent), not as a classic HTTP cookie. Functionally it serves the same purpose: remembering your choice.

Your browser may still send technical cookies set by the hosting platform or by third-party resources you load (see section 6). We do not run a separate advertising cookie stack on this demo.

You can clear localStorage and cookies in your browser settings at any time, or reopen the notice via Cookie settings in the site footer.

6. Who we share data with (processors & infrastructure)

We use service providers to run this demo. They process data only as needed to provide their service:

Some providers may process data in the United States or other countries outside your own. Where required, we rely on appropriate transfer mechanisms offered by those providers (such as Standard Contractual Clauses) and their published compliance documentation.

We do not sell your personal data.

7. How long we keep data

• Contact emails — retained in the operator mailbox for as long as needed to handle the demo enquiry and for ordinary business/email hygiene (typically up to 24 months, unless a longer period is required for legal claims or disputes).
• Chat / handover rows in Google Sheets — retained for operating the demo lead workflow, usually reviewed and purged periodically (target: within 12–24 months, or sooner on request).
• Rate-limit files & technical error logs — short-lived operational data (days to a few weeks in normal operation).
• localStorage consent record — until you clear it or we change the consent version.
• In-browser chat history — only for the current page session.

8. Security

We apply reasonable technical measures appropriate to a small demo site, including: HTTPS on the live host (when TLS is enabled by the host), server-side rate limiting, honeypot field on the contact form, restricted access to configuration files via .htaccess, and validation of form inputs. No method of transmission or storage is 100% secure; please avoid sending highly sensitive data (e.g. government IDs, health details, payment numbers) through this demo.

9. Your rights

Depending on where you live, you may have rights to:

• Access the personal data we hold about you
• Rectify inaccurate data
• Erase data (“right to be forgotten”) in certain cases
• Restrict or object to certain processing
• Data portability for data you provided
• Withdraw consent where processing is consent-based (without affecting prior lawful processing)
• Lodge a complaint with a supervisory authority (for example, in the EEA/UK, your local data protection authority)

To exercise these rights regarding this demo site, email web@blibling.com with the subject line “CALX demo privacy request” and enough detail for us to locate your data (e.g. the email you used on the form, approximate date, and whether you used chat). We will respond within a reasonable period and within legal deadlines where they apply.

California / similar US state laws: We do not “sell” or “share” personal information for cross-context behavioral advertising as those terms are commonly defined. You may still contact us to request access or deletion of demo-related personal information we control.

10. Children

This demo is aimed at adults evaluating web design for trade businesses. We do not knowingly collect personal data from children under 16 (or the applicable age of digital consent). If you believe a child has submitted data, contact us and we will delete it promptly.

11. Third-party links & external resources

The site may link to BliBling Agency pages or other external URLs. Those sites have their own privacy policies. Loading fonts or scripts from CDNs (section 6) means those providers receive standard connection data from your browser.

12. Automated decision-making

The AI chatbot generates automated text replies. It does not make legally significant automated decisions about you (for example, credit scoring or legal rights). Responses are for demonstration and general information only and are not professional advice or a binding quote.

13. Changes to this policy

We may update this page when the demo’s code, hosting, or legal requirements change. The “Last updated” date at the top will be revised. Material changes may also be reflected by raising the cookie-notice consent version so the notice can be shown again.

14. Contact

Privacy questions or data requests for this demo:
Email: web@blibling.com
Site: plastering.blibling.com
Agency: www.blibling.com