EU-EEA-UK Privacy Notice Effective Date: April 30, 2025
Blue Ridge provides supply chain planning and demand forecasting SaaS software (our “Platform”) to business customers, including distributors, retailers, and suppliers (“Customers”). This Privacy Notice describes how Blue Ridge collects, shares, or otherwise processes personal information in the context of our Platform and our website, www.blueridgeglobal.com (our “Website”), and is addressed to actual and prospective Customers and Website visitors (“Visitors”) in the European Union (“EU”), the European Economic Area (“EEA”) and the United Kingdom (“UK”).
For individuals who interact with us online, we collect information you choose to give us and other information that may be collected from your use of our Website and Platform, including from your device. We use that information to operate our business and for the purposes set forth below. Below, we also describe the choices we offer with respect to your information.
This Privacy Notice does not apply to information for which Blue Ridge does not determine the purpose and means of processing. This Privacy Notice does not apply to information that cannot be identified to any individual, household, or their devices, such as de-identified or anonymized information. If you are a client of one of our Customers and have questions regarding our Customers’ collection and processing of personal data, including through their use of our Platform, please contact them directly and/or see their privacy notices.
The sections of this EU/EEA/UK Privacy Notice are hyperlinked below for your convenience:
Information Collection and Purpose of Processing
For information regarding the personal data we collect, the types and sources of collection, and the purposes for which we process personal data, please see the “Data Collection” and “Use of Data” sections of our general Privacy Notice. Note that for EU/EEA/UK individuals, we may further limit our information use and disclosure practices. Blue Ridge does engage in email and other marketing and analytics activity as permitted by law.
Failure to provide certain personal information may result in Blue Ridge being unable to provide our Website or the services associated with our Platform.
Legal Basis for Processing
Blue Ridge processes personal data of Customers and Website Visitors in the EU/EEA/UK pursuant to the following legal bases for processing:
- We have obtained consent from you for such processing for one or more specific purposes;
- Processing is necessary for the performance of a contract to which you are party or in order to take steps at your request prior to entering into a contract;
- Processing is necessary in order to protect the vital interests of a data subject or of another natural person;
- Processing is necessary for compliance with a legal obligation to which Blue Ridge is subject;
- Processing is necessary for the purposes of our or a third party’s legitimate interests.
Where relying on legitimate interests for processing, such legitimate interests may include any or all the uses detailed above in this EU/EEA/UK Privacy Notice and incorporated by reference from our general Privacy Notice, taking into consideration reasonable expectations of data subjects based on the relationship with us.
Where we rely on your consent, you may withdraw your consent at any time, without affecting the lawfulness of processing based on your consent before withdrawal.
How We Share Personal Information
We may share your information with third parties as reasonable to operate our business (including for the purposes described above), to provide the Website and Platform to you and others, as permitted or required by law, or as directed or authorized by you. For example, we may share data with:
Affiliated Organizations. We may share some or all of your information with our parent organizations, subsidiaries, affiliates, joint ventures, or other organizations or entities under common control with us.
Customers. We may share certain personal information we collect about you, including data we aggregate from third party sources, with our Customers.
Third Party Sharing. We work with third parties to help us provide our Website and Platform and to support advertising, marketing, and internal operations. In some cases, they may use your information subject to their own privacy policies and to comply with their own legal and regulatory obligations. We work with different types of third parties, presently including:
- Data hosting, storage and cloud service providers;
- Payment processors;
- Platform and/or application security service providers;
- Technical and customer support providers;
- Marketing, advertising, and analytics providers; and
- Other third parties.
Professional Advisors, Law Enforcement and Regulators. We share information with our professional advisors who provide legal, compliance, auditing, accounting, banking, consulting, or other professional services, and with regulators, law enforcement, or government agencies, including to:
- Comply with our legal and regulatory obligations, including those compliance obligations of federal, state or local regulators;
- Protect our interests, property or legal rights, or those of our customers or third parties;
- Respond to a subpoena, court order, or similar law enforcement request, or when we believe in good faith that the disclosure of personal information is necessary to prevent physical harm or financial loss, to report suspected illegal activity, or to investigate violations of this Privacy Notice or other applicable terms; and
- For other legal purposes, such as to enforce our terms and conditions, or to exercise or defend legal claims.
Transaction Impacting the Organization as a Whole. In the event of a transaction or reorganization impacting us as an entity or organization, we may share your personal information. We may share your information in connection with, or during the diligence or negotiation of, any merger, sale of company stock or assets, financing, acquisition, restructuring, divestiture or dissolution of all or a portion of our business, or other similar event.
Other Data Exchanges. As permitted by law, or if you consent, we may share information we collect in exchange for monetary or other consideration.
Other Disclosures. In addition to the above disclosures, we may disclose personal information in the event that we believe such disclosure is (i) necessary to provide our products and services or operate our business; (ii) in accordance with purposes we describe when you share it with us; (iii) permitted by law; or (iv) with your consent or at your direction.
We may disclose aggregated or deidentified information that does not identify any individual without restriction.
Profiling
As a part of our services, we may utilize automated processing to evaluate certain personal aspects relating to you, including online behavior. In order to produce such analysis, we may collect/process information, including through automated processing, to personalize your experience on the Platform, identify key demographics for marketing purposes, and/or to provide in-Platform content customized to you. For more information regarding your rights regarding profiling, see the “Your Rights Under EU/EEU/UK Law” section below.
Data Retention
Blue Ridge will maintain your personal data for as long as we have a business purpose to do so related to the purposes of collection. We will delete your account information, including login and password, upon request.
We may retain personal data when required by law, regulation, or professional standards to maintain the data for a longer period of time.
Your Rights Under EU/EEA/UK Law
Under EU/EEA/UK law, you have the following rights:
- Right of access. You have the right to obtain from the us confirmation as to whether or not personal data concerning you is being processed, and, where that is the case, access to the personal data certain other information, including the purposes of processing, the categories of data concerned, and information regarding recipients. You also have the right to be informed of any appropriate safeguards related to transfers of your personal data to third countries.
- Right of Rectification. You have the right to obtain from us without undue delay the rectification of inaccurate personal data concerning you. Taking into account the purposes of the processing, you have the right to have incomplete personal data completed, including by means of providing a supplementary statement.
- Right to be Forgotten. You have the right to obtain from us the erasure of personal data concerning you without undue delay where certain grounds apply.
- Right to Restriction of Processing. You have the right to obtain from us restriction of processing where one of the following applies:
- You contest the accuracy of the personal data.
- The processing is unlawful and you oppose the erasure of the personal data.
- We no longer need the personal data for the purposes of the processing, but you require the data for the establishment, exercise, or defense of legal claims.
- You have objected to processing and the objection is pending verification as to whether our legitimate grounds override your objection.
- Right to portability. You have the right to receive personal data concerning you, which you provided to Blue Ridge, in a structured, commonly used and machine-readable format and you have the right to transmit that data to another controller without hindrance from us.
- Right to object. You have the right to object on grounds related to your particular situation to our processing on the basis of legitimate interests and/or processing for direct marketing purposes.
- Right to lodge a complaint. You have the right to lodge a complaint with a supervisory authority, in particular in the UK or EU/EEA Member State of your habitual residence, place of work, or place of the alleged infringement if you consider that the processing infringes the GDPR.
- Right to opt out of profiling. You have the right not to be subject to decisions based solely on automated processing, including profiling, which produce legal effects concerning you or that similarly significantly affects you.
Please note that Blue Ridge may limit its response to your rights requests described above as permitted by law.
International Data Transfers
Blue Ridge may engage in international transfers of personal data of EU/EEA/UK residents to the categories of parties described in the “How We Share Personal Information” section, and internally, within the Blue Ridge organization. We transfer data across borders for the purposes described above, including as necessary to operate our business and to provide and support our Website and Platform.
Contact Information
Blue Ridge operates via the following legal entity:
Blue Ridge Solutions Inc. (dba Blue Ridge Global)
VeraSafe has been appointed as Blue Ridge Solutions Inc’s representative in the European Union for data protection matters, pursuant to Article 27 of the General Data Protection Regulation of the European Union. If you are in the European Economic Area, VeraSafe can be contacted in addition to privacy@blueridgeglobal.com, only on matters related to the processing of personal data. To make such an inquiry, please contact VeraSafe using this contact form or via telephone at: +420 228 881 031.
Alternatively, VeraSafe can be contacted at:
VeraSafe Ireland Ltd.
Unit 3D North Point House
North Point Business Park
New Mallow Road
Cork T23AT2P
Ireland
VeraSafe has been appointed as Blue Ridge Solutions Inc’s representative in the United Kingdom for data protection matters, pursuant to Article 27 of the United Kingdom General Data Protection Regulation. If you are located within the United Kingdom, VeraSafe can be contacted in addition to or instead of privacy@blueridgeglobal.com, only on matters related to the processing of personal data. To make such an inquiry, please contact VeraSafe using this contact form or via telephone at: +44 (20) 4532 2003.
Alternatively, VeraSafe can be contacted at:
VeraSafe United Kingdom Ltd.
37 Albert Embankment
London SE1 7TL
United Kingdom
If you have any questions or concern about this Privacy Notice or the privacy practices at Blue Ridge, please contact us at privacy@blueridgeglobal.com.
Dispute Resolution
If a privacy complaint or dispute relating to Personal Data received by Blue Ridge Solutions in reliance on the Data Privacy Framework (or any of its predecessors) cannot be resolved through our internal processes, we have agreed to participate in the VeraSafe Data Privacy Framework Dispute Resolution Procedure. Subject to the terms of the VeraSafe Data Privacy Framework Dispute Resolution Procedure, VeraSafe will provide appropriate recourse free of charge to you. To file a complaint with VeraSafe and participate in the VeraSafe Data Privacy Framework Dispute Resolution Procedure, please submit the required information here: https://www.verasafe.com/privacy-services/dispute-resolution/submit-dispute/
Binding Arbitration
If your dispute or complaint related to your Personal Data that we received in reliance on the Data Privacy Framework cannot be resolved by us, nor through the dispute resolution mechanism mentioned above, you may have the right to require that we enter into binding arbitration with you under the Data Privacy Framework “Recourse, Enforcement and Liability” Principle and Annex I of the Data Privacy Framework.
