Legal & privacy

Privacy Policy

How we handle information when you visit the Noetic Labs website or contact our company.

Noetic Labs Limited · Last updated 27 October 2026

Scope: this notice covers the Noetic corporate website and related enquiries. It is not a substitute for Bluedash’s application-specific privacy disclosures or an OAuth consent notice.

1. Who we are

Noetic Labs Limited, company number 17533678, is responsible for personal information processed for the corporate website at noeticlabs.si and the business enquiries described in this notice. Our registered office is 1 Stirling Way, Borehamwood, England, WD6 2FX. Noetic Labs is our public-facing company name; Bluedash is our product.

Contact hello@bluedash.ai or write to the Privacy Team at our registered office. To request contact with our Data Protection Officer, mark the message For the Data Protection Officer. You may also send a sealed letter marked Private and confidential - For the Data Protection Officer to that address. We use the Bluedash email domain for both Noetic Labs and its product.

This is a shared initial contact address. For confidential evidence, ask for a suitable restricted-access submission method before sending details. No particular subject line, legal wording or account login is required to exercise your rights. Tell us if you need an accessible alternative.

2. Information we handle

When you contact us by email or post, we receive the contact details, organisation information, correspondence and attachments you choose to send. We may also receive relevant business contact information from a colleague who introduces you or a representative acting for your organisation.

When a browser requests this website, the hosting and network services receive technical information needed to deliver and protect it. This may include an IP address, request time, requested page, browser or device information, referrer information and relevant security events. The information actually logged depends on the hosting configuration.

These corporate pages do not contain an account-registration form, payment form, embedded meeting recorder or a connection to your Google or Meta account. Clicking an email link opens your email application; it does not submit information until you send the message. Please do not send passwords, authentication codes, payment-card details or unnecessary sensitive information.

3. Purposes and lawful bases

Responding to enquiries: we use the information needed to answer your message and manage the relationship. Our basis is our legitimate interest in communicating with prospective customers, partners and other business contacts. Where you are personally entering a contract with us, necessary pre-contractual steps or performance of that contract may apply instead.

Delivering and protecting the website: necessary technical and security information supports our legitimate interests in a functioning, secure website and preventing abuse. An applicable legal obligation may also require particular security or compliance activity.

Records, complaints and legal obligations: we keep necessary evidence to handle requests, resolve disputes and comply with applicable legal duties. Depending on the record, we rely on the relevant legal obligation or our legitimate interest in establishing, exercising or defending legal claims.

We consider necessity and the impact on individuals when relying on legitimate interests. Contact us for more information about the assessment. You are not required to send an enquiry, but without an adequate reply address and relevant details we may be unable to respond. Browsing the website does not subscribe you to marketing. Any future optional marketing collection will have its own information and choices.

5. International processing

The location of processing depends on the hosting, email and support providers used for the relevant service. The .si domain does not mean that Noetic Labs is registered in Slovenia or that all information is stored there. Nor does our UK registered office mean every provider operates only in the UK.

Where processing involves a restricted international transfer, we require an applicable lawful mechanism, such as a relevant adequacy arrangement or approved contractual safeguards, together with any necessary assessment and supplementary protections. Contact hello@bluedash.ai for information about the locations and safeguards relevant to your enquiry or a copy of applicable safeguards, subject to limited lawful redactions.

6. How long information is kept

Enquiries and correspondence: we keep the information needed to answer an open enquiry and manage any resulting relationship. Once the enquiry is resolved and no further follow-up is reasonably needed, we review whether a record is still necessary for an active complaint, a specific record-keeping duty or an identifiable legal claim. We delete or anonymise records that no longer serve such a purpose, rather than retaining all correspondence indefinitely.

Website delivery and security records: the retention decision depends on the limited troubleshooting or security purpose, the provider's configured retention and whether a particular incident still requires investigation. An incident may justify keeping the relevant evidence longer, but not every visitor's record without a continuing purpose.

Privacy requests, complaints and legal records: we retain the minimum record necessary to demonstrate how a request was handled and meet applicable duties or defend a relevant claim. The type of record, the applicable legal period and whether the matter remains open determine retention. Unnecessary attachments and duplicate information are removed when no longer needed.

Backups and legal holds: backup copies may expire separately from live records and remain protected during that period. A legal hold is limited to the necessary records and purpose. Contact hello@bluedash.ai for the retention period or criteria relevant to a particular record. These criteria do not authorise indefinite retention or reuse for unrelated purposes.

7. Your rights and choices

Your right to object: you may object to processing based on legitimate interests for reasons relating to your situation. We will consider the objection under the applicable law. You may object to direct marketing at any time, and we will stop that use.

Depending on the applicable law and basis of processing, you may request access, correction, erasure, restriction or portability and obtain information about how we use your data. Where consent is the basis, you may withdraw it for future processing without invalidating earlier lawful processing.

Email hello@bluedash.ai or write to the Privacy Team. For UK GDPR rights requests, we respond without undue delay and normally within one calendar month. Where the law permits extra time for a complex request or a number of requests, we may take up to two further months and will explain the reasons within the initial applicable month. If information is lawfully needed to verify your identity or clarify a request, we will request only what is necessary and explain any effect on the statutory deadline.

Requests are normally free. Any fee, refusal or limitation must have a lawful basis which we will explain, along with your complaint and court rights. We protect other people's information and do not routinely require a copy of an identity document. For information controlled by your organisation, we will help direct the request to it and assist as required; your rights are not lost merely because you no longer have a workspace login.

8. Concerns and complaints

Please tell us about a privacy concern at hello@bluedash.ai or by post to the Privacy Team at our registered office. We will acknowledge the complaint within 30 days, investigate without undue delay, keep you informed and explain the outcome. You may ask for the matter to be referred to the Data Protection Officer. A rights request follows its own statutory deadline; acknowledging a complaint does not extend that deadline.

You may complain to the UK Information Commissioner’s Office through its official complaints service, or another competent regulator where applicable. You do not need our permission to use those rights.

9. Bluedash, external links and changes

Following the Bluedash link takes you to a separate application. This corporate-website notice does not describe all processing inside a customer workspace and does not authorise access to an external account. Product-specific information must be considered alongside the applicable product contract and processing arrangements. Contact hello@bluedash.ai for the information applicable to your workspace.

This website does not itself carry out solely automated decisions with legal or similarly significant effects on you. It is not aimed at children, and we do not invite children to submit personal information. Tell us if information has been submitted inappropriately.

The Cookie Policy explains these pages’ device technologies. External websites and your email provider have their own practices. We will update this notice when relevant practices change and provide additional notice or a choice where required. An update is not blanket consent to a new use.