Privacy Policy

1. Introduction

Blue Projects and Services ("Blue Projects", "we", "us", "our") is a company registered under the Companies Act, 2013, based in Davanagere, Karnataka, India. This Privacy Policy explains how we collect, use, store, share, and protect information — both information collected through our website (blueprojects.in) and information collected during our field operations, including survey data, AI training data, and human-subject research data collected on behalf of our clients.

This policy applies to all visitors to our website, all participants in our field data collection programmes, and all clients and partners who engage our services.

2. Information we collect

Website visitors

• Contact form submissions — name, organisation, phone, email, service requirements, geography, and budget information
• Job application data — name, phone, email, location, role applied for, and application content
• Website usage data — via Google Analytics (pages visited, time on site, general location, device type)

Clients and business partners

• Company registration details — for contracting, invoicing, and compliance purposes
• Project specifications and requirements shared for service delivery
• Communication records related to project execution

3. Field-collected human subject data

A core part of our business involves field data collection on behalf of clients — including surveys, AI training datasets (video, audio, image), egocentric/POV data, computer vision data, and other research data. This section describes how we handle data about individuals (data subjects) who participate in these programmes.

• Types of data collected: Depending on the project, this may include video footage, audio recordings, images, survey responses, demographic information (age, gender, occupation, location), and in some cases health-related information for medical/clinical research programmes.
• Purpose: Data is collected solely for the specific research, AI training, survey, or programme purpose disclosed to participants at the time of collection, and for delivery to the contracting client for that stated purpose.
• Ownership: Unless otherwise agreed in a specific service agreement, collected data is delivered to and becomes the property of the contracting client, subject to the consent terms agreed with data subjects.
• Anonymisation: Where requested by the client or required by the nature of the programme, personally identifying information is removed or obscured before delivery.

4. Informed consent for data collection programmes

For every field data collection programme involving human subjects, Blue Projects follows an informed consent protocol:

• Participants are informed, in their preferred language, about what data is being collected, how it will be used, and who it will be shared with
• Participation is voluntary — participants may decline or withdraw at any point before data delivery to the client
• Written or recorded verbal consent is obtained and documented for every participant
• Age verification is performed; we do not knowingly collect data from minors without parental/guardian consent where legally required
• For medical and clinical research programmes, consent procedures additionally comply with applicable Indian Council of Medical Research (ICMR) guidelines and ethics committee requirements where applicable

5. Data sharing and third parties

We do not sell personal data or field-collected data to third parties. We share data only in the following circumstances:

• With the client who commissioned the specific data collection programme, per the agreed scope and consent terms
• With our own field staff and supervisors strictly on a need-to-know basis for project execution
• With service providers that support our operations (e.g. cloud storage, form platforms such as ODK/KoBoToolbox, Formspree for website forms) under appropriate confidentiality terms
• Where required by Indian law, regulation, or a valid government/legal request

6. International data transfers and GDPR alignment

Many of our clients are based outside India, including in the European Union, United States, and other jurisdictions. Where we collect or process data on behalf of such clients, we apply data handling practices aligned with the principles of the General Data Protection Regulation (GDPR), including purpose limitation, data minimisation, and security safeguards — even where Indian law does not strictly mandate this. Specific data transfer mechanisms (such as standard contractual clauses) are agreed on a per-client basis as required.

7. Data security

We implement reasonable technical and organisational measures to protect data we hold or process, including:

• Access controls limiting data access to authorised personnel only
• Secure storage and transfer protocols for video, audio, image, and survey datasets
• Confidentiality agreements (NDAs) with staff and subcontractors handling sensitive data
• Prompt secure deletion of working copies of data once delivered to the client, unless retention is otherwise agreed

8. Data retention and deletion

Website contact form and job application data is retained only as long as necessary to respond to enquiries and for legitimate business record-keeping, generally not exceeding 24 months unless a business relationship continues. Field-collected project data is retained per the terms agreed with the specific client for that project — typically, working copies are deleted from our systems once final datasets are delivered and accepted by the client, unless a longer retention period is contractually required (e.g. for compliance or audit purposes).

9. Your rights

Depending on your location and applicable law, you may have rights including the right to access, correct, or request deletion of your personal data, to withdraw consent (where data collection is based on consent and prior to data being delivered to the client), and to object to certain processing. To exercise these rights, contact us using the details below. For field data collection participants, requests should be directed to the project supervisor or to Blue Projects directly, and we will coordinate with the relevant client as needed.

10. Cookies and website analytics

Our website uses Google Analytics 4 to understand visitor traffic and improve our website. This may use cookies or similar technologies to collect anonymised or pseudonymised usage data. We do not use this data to identify individual visitors. You can control cookies through your browser settings.

11. Children's data

Our website is not directed at children. For field research programmes, we do not knowingly collect data from individuals under 18 without appropriate parental/guardian consent, and only where the specific research protocol explicitly permits and requires this with appropriate safeguards.

12. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal requirements. The "Last updated" date at the top of this page indicates when this policy was last revised. Material changes will be reflected with an updated date and, where appropriate, additional notice.

13. Contact us

For any questions about this Privacy Policy, to exercise your data rights, or to raise a concern about data collected as part of a Blue Projects field programme, please contact us: