Blueprint Demand LLC — Privacy Policy

Last updated: September 2, 2025

1) Who we are and scope

Blueprint Demand LLC (”Blueprint Demand,” “we,” “us”) provides B2B demand generation and lead generation services (the “Services”). This Privacy Policy explains how we collect, use, disclose, and protect information related to visitors to our websites, landing pages, and forms (the “Site”), prospective and current customers and their representatives, and professional contacts whose information we process in connection with our Services.

This Policy does not apply to information we process on behalf of customers as their processor under a separate contract (e.g., an MSA/SOW). Where we act as a processor, our processing is governed by that agreement and any applicable Data Processing Addendum (”DPA”).

Contact us: [email protected] • Blueprint Demand LLC, Raleigh, NC, USA

2) Information we collect

We collect the following categories of information about business professionals:

Identifiers & contact details: name, business email, phone number, postal address, online identifiers (e.g., cookie ID, IP address), social profiles or LinkedIn URL.
Professional information: job title, department, company, seniority, skills, industry, firmographics (e.g., company size, revenue), buying committee role.
Commercial & interaction data: form fills, content downloads, webinar registrations, campaign responses, meeting notes, email engagement, call outcomes.
Internet/network activity: browsing and interaction data on our Site and campaign pages, referral URLs/UTM parameters, device/browser information, approximate geolocation derived from IP.
Inferences & enrichment: segments or scores we derive (e.g., fit/intent/propensity), and appended public business data from third‑party sources.
Communications: emails you send us, and (if we notify you first) recorded calls for quality/training.

We do not intentionally collect sensitive personal information (e.g., health, precise geolocation, government IDs) and our Services are not directed to children under 16.

3) Sources of information

Directly from you: forms, emails, calls, meetings, event registrations.
Our customers and partners: contact lists provided by customers; CRM and marketing systems we integrate with at a customer’s direction.
Public and licensed sources: professional networking sites, company websites, trade publications, conferences, and reputable data providers.
Automated means: cookies, pixels, tags, SDKs, and similar technologies on our Site and campaign assets.

4) How we use information (purposes)

We use information for:

Providing and improving Services: verifying and enriching B2B contacts, routing and confirming leads, campaign execution, quality assurance, analytics, troubleshooting.
Communications and marketing: sending B2B emails/SMS/calls about our Services; tailoring content and ads; recording preferences and honoring opt‑outs.
Security and fraud prevention: protecting accounts, investigating suspicious activity, preventing abuse and spam.
Compliance and legal: complying with laws, enforcing terms, and responding to lawful requests.

Where required by law, we will obtain consent (e.g., for certain SMS or telemarketing). Otherwise, we rely on legitimate interests such as B2B marketing, account management, and service delivery.

5) Disclosures of information

We may disclose the categories of information above to:

Service providers/processors: cloud hosting, email/SMS/voice platforms, analytics, enrichment, security, and customer support vendors bound by contract.
Customers: to deliver Services (e.g., validated B2B leads and campaign results), consistent with our contracts.
Partners and affiliates: for joint activities and internal operations.
Ad/analytics providers: to measure and improve performance, and (where permitted) for targeted advertising.
Professional advisors and legal authorities: as needed for compliance, protection of rights, and business transactions (e.g., mergers, acquisitions).

We do not publicly post or expose B2B data. We do not knowingly disclose information to data brokers for their independent use.

6) Selling, sharing, and targeted advertising

Some U.S. state privacy laws define a “sale” very broadly to include transfers for value, and “sharing” to include cross‑context behavioral advertising. In the context of our Services, we may provide business contact information and insights to our customers for their B2B sales and marketing. Depending on the jurisdiction, this may be considered a sale or sharing of personal information.

Your choices: You can opt out of “sale,” “sharing,” or targeted advertising by emailing [email protected] with the subject line “Privacy Choice” (include your name, company, and the business email/phone to apply). Where supported, we honor Global Privacy Control (GPC) signals for browser‑based opt‑outs. You may also opt out of marketing at any time via the unsubscribe link in our emails or by replying “STOP” to SMS.

We do not knowingly sell or share the personal information of individuals under 16.

7) Cookies and similar technologies

We use cookies, pixels, and similar technologies to operate the Site, understand performance, and personalize content/ads. You can manage cookies through your browser settings. Where required by law, we display a consent banner and/or provide a Cookie Settings link to adjust preferences. Disabling cookies may impact Site functionality.

8) Data retention

We retain personal information for as long as reasonably necessary to fulfill the purposes above, comply with our legal obligations, resolve disputes, and enforce agreements. Retention periods vary by data type and context; as a general guide, B2B marketing interaction data is usually retained up to 24–36 months unless a longer period is required or permitted by law or contract.

9) Security

We implement reasonable and appropriate technical and organizational measures to protect personal information, including access controls, encryption in transit, and vendor due diligence. No method of transmission or storage is 100% secure; we cannot guarantee absolute security.

10) Your privacy rights

Depending on your location, you may have rights to access, correct, delete, or receive a portable copy of your personal information, and to opt out of targeted advertising, sale, or sharing. You may also have the right to limit use of sensitive personal information (which we do not intentionally collect), and to appeal a decision if we deny your request.

How to exercise your rights: Email [email protected] with the subject “Privacy Request” and indicate the right(s) you wish to exercise. We may need to verify your identity and, where applicable, your authority as an authorized agent. We will not discriminate against you for exercising your rights.

California notices: If you are a California resident, our Notice at Collection below describes the categories we collect, the purposes, whether we “sell”/“share,” and retention. You may also request information about our disclosures for direct marketing under Cal. Civ. Code §1798.83 (Shine the Light).

EEA/UK residents: Where the GDPR/UK GDPR applies, Blueprint Demand LLC is the controller for Site data. Legal bases include legitimate interests (e.g., B2B marketing, fraud prevention), consent (where required), contract, and legal obligation. You have rights similar to those described above and the right to lodge a complaint with your supervisory authority. We may transfer data to the U.S. and other countries using approved safeguards (e.g., Standard Contractual Clauses). Contact us at [email protected] for more details.

11) Notice at Collection (California)

Category	Examples	Sources	Purpose	Disclosed to	Sold/Shared?	Retention
Identifiers	name, business email, phone, IP, cookie ID	you; customers; public/licensed sources; automated means	provide Services; marketing; security	service providers; customers; ad/analytics	May be sold/shared for B2B marketing; opt‑out available	generally 24–36 months
Professional info	title, role, company, department	same as above	same as above	same as above	May be sold/shared; opt‑out available	generally 24–36 months
Internet activity	page views, referrers, device/browser	automated means	analytics, security, personalization	service providers; ad/analytics	Shared for targeted ads; opt‑out available	up to 24 months
Commercial/interaction	campaign responses, downloads, meetings	you; customers; our operations	deliver and measure campaigns; client reporting	service providers; customers	Not sold outside Services; shared with customer per contract	per contract or 24–36 months
Inferences	scores/segments about professional interests	derived by us	targeting and measurement	customers; service providers	May be sold/shared; opt‑out available	up to 24 months

We do not intentionally collect or use sensitive personal information for inferring characteristics.

12) International data transfers

We may transfer, store, and process information in the United States and other countries where we or our service providers operate. Where required, we use appropriate safeguards for cross‑border transfers.

13) Changes to this Policy

We may update this Policy from time to time. The “Last updated” date indicates the latest revision. Material changes will be posted on this page and, where required, notified by other means.

14) How to contact us

Questions or requests? Email [email protected].