Privacy Notice

1. Who we are

BioBlend is operated by Ruqayya Ishfaq ("we", "us", "our"). We are the data controller responsible for the personal data described in this notice. You can contact us at ruqayyaishfaq389@gmail.com.

2. Data we collect

• Account data: name, email address, login credentials.
• Profile data: bio page content, links, images, and any other content you upload.
• Support data: messages you send us and related correspondence.
• Usage data: pages visited, features used, device identifiers, IP address, and basic analytics.

Payment data (card details, billing address) is collected directly by our payment provider, Paddle, and is not stored by us.

3. Why we use your data

• To create and operate your account (contract performance).
• To provide, maintain, and improve the Service (legitimate interests).
• To respond to support requests (contract performance / legitimate interests).
• To prevent fraud and abuse and secure the Service (legitimate interests).
• To comply with legal obligations (legal obligation).

4. Who we share data with

• Service providers / subprocessors that help us host, monitor, and operate the Service.
• Paddle, our Merchant of Record, for processing payments, subscription management, tax compliance, invoicing, and handling refunds.
• Professional advisers (legal, accounting) where necessary.
• Authorities where required by law.

We do not sell your personal data.

5. Data retention

We keep your personal data for as long as your account is active and for a reasonable period afterwards to comply with legal, tax, and accounting obligations. When data is no longer needed, we delete or anonymise it.

6. Your rights

Depending on where you live, you may have the right to access, correct, delete, restrict, or port your personal data, to object to processing, and to withdraw consent. You also have the right to lodge a complaint with your local data protection authority. To exercise these rights, email ruqayyaishfaq389@gmail.com.

7. Security

We use appropriate technical and organisational measures (including encryption in transit, access controls, and authentication) to protect your data. No system is 100% secure, but we work to keep your data safe.

8. International transfers

Your data may be processed in countries outside your own. Where required, we rely on appropriate safeguards (such as Standard Contractual Clauses) for these transfers.

9. Cookies

We use cookies and similar technologies that are strictly necessary to run the Service (for example, to keep you signed in). We may also use limited analytics cookies to understand how the Service is used. You can manage cookies through your browser settings.

10. Changes to this notice

We may update this notice from time to time. Material changes will be communicated through the Service.