Privacy Policy
Effective Date: 10/10/2024
Last Updated: 15/10/2025
- Introduction
BHLUEMOUNTAIN Services (“Company”, “we”, “our”, “us”) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website www.bhluemountain.com or engage our managed IT and cybersecurity services.
This policy applies to:
- Website visitors
- Clients and prospective clients
- Vendors and partners
- Information We Collect
2.1 Personal Data
We may collect:
- Full name
- Email address
- Phone number
- Company name and job title
- Billing and payment information
2.2 Technical Data
Automatically collected:
- IP address
- Browser type and version
- Device identifiers
- Log data and usage patterns
2.3 Service Data (MSP Context)
As a Managed Service Provider, we may process data on behalf of clients, including:
- User account credentials (encrypted)
- System logs and monitoring data
- Security event and incident data
- Backup and recovery data
In such cases, we act as a Data Processor, while our client remains the Data Controller.
- Legal Basis for Processing
We process personal data under the following lawful bases:
- Contractual necessity
- Legitimate business interests
- Legal and regulatory obligations
- Consent (where applicable)
- How We Use Your Information
We use data to:
- Provide and manage IT services
- Monitor and secure IT infrastructure
- Respond to inquiries and support requests
- Improve our website and services
- Comply with legal obligations
- Prevent fraud and cyber threats
- Data Sharing and Disclosure
We may share your information with:
- Trusted technology vendors and partners
- Cloud service providers
- Regulatory authorities where required
- Professional advisors (legal, audit, compliance)
We ensure all third parties adhere to strict data protection and confidentiality obligations.
- International Data Transfers
Where data is transferred outside Nigeria, we ensure appropriate safeguards such as:
- Standard Contractual Clauses (SCCs)
- Data Processing Agreements (DPAs)
- Transfers to jurisdictions with adequate data protection laws
- Data Security
We implement enterprise-grade security controls including:
- Encryption (data at rest and in transit)
- Multi-factor authentication (MFA)
- Endpoint detection and response (EDR)
- Security monitoring and logging
- Access control and least privilege
- Data Retention
We retain personal data only for as long as necessary to:
- Fulfill contractual obligations
- Meet regulatory requirements
- Resolve disputes and enforce agreements
- Your Data Protection Rights
Depending on your jurisdiction, you may have the right to:
- Access your personal data
- Request correction or deletion
- Restrict or object to processing
- Data portability
- Withdraw consent
To exercise your rights, contact us at: dataprotection@bhluemountain.com
- Cookies and Tracking Technologies
We use cookies to:
- Enhance user experience
- Analyze website traffic
- Improve functionality
You can manage cookie preferences via your browser settings.
- Third-Party Links
Our website may contain links to external sites. We are not responsible for their privacy practices.
- Children’s Privacy
Our services are not intended for individuals under 18. We do not knowingly collect data from children.
- Incident Response and Breach Notification
In the event of a data breach, we will:
- Assess and contain the incident promptly
- Notify affected clients and authorities as required
- Provide remediation guidance
- Changes to This Privacy Policy
We may update this policy periodically. Changes will be posted on this page with an updated revision date.
- Contact Us
If you have any questions or concerns:
Bhluemountain Services
Website: www.bhluemountain.com
Email: info@bhluemountain.com
Phone: +2348060231580
Address: 4, Francis Oremeji Street, Ikeja, Lagos
- Data Protection Officer (Optional)
If applicable:
Data Protection Officer (DPO)
Email: NA
- Governing Law
This Privacy Policy is governed by the laws of the Federal Republic of Nigeria, including the Nigeria Data Protection Act.