Last Updated: 2026-08-20
1. Operator Identity and Policy Scope
This Privacy Policy is provided by Blue Head Studios LLC, a limited liability company organized under the laws of the State of Georgia and operating as the website operator ("we," "us," or "our"). This Privacy Policy applies to the Blue Head Studios website at its primary online location, blueheadstudios.com (the "Website").
This Privacy Policy is effective as of 2026-08-20 and describes how we collect, use, disclose, and otherwise process information from individuals who visit, access, use, or interact with the Website, including visitors, prospective customers, and individuals who communicate with us through the Website.
Unless stated otherwise, this Privacy Policy covers information collected through the Website itself, including its pages, the contact form, and other online functionality that links to or displays this Privacy Policy. It does not apply to information collected offline, to the separate applications we build or operate for clients, or to third-party websites, services, or applications that are not owned or controlled by us, even if those services are linked from the Website.
2. Information We Collect
We collect only the information needed to respond to enquiries and to operate and secure the Website. The categories of information we collect are:
- Enquiry information. When you submit the contact form, we collect the information you enter: your name, email address, company name (optional), the type of project you are interested in, an optional budget range, and your message.
- Usage data. When you access the Website, we automatically collect standard technical information through server logs, including IP address, browser type, pages requested, referring page, and access timestamps. This information is used to operate, secure, and troubleshoot the Website.
- Security verification data. The contact form is protected by Cloudflare Turnstile, a bot-detection service. When you submit the form, Cloudflare may process technical information about your browser and device to determine whether the submission comes from a person. We receive only a pass/fail token from Cloudflare; we do not receive the underlying data it evaluates.
We do not require you to create an account, and the Website does not offer accounts or logins.
We do not sell personal information. The Website does not display advertising and does not use advertising or analytics trackers of any kind.
3. How Information Is Collected
- Directly from you. We collect information you provide when you submit the contact form or otherwise communicate with us by email.
- Automatically from your device. Our web server records standard access logs (IP address, browser type, pages requested, access timestamps) for every request, as virtually all web servers do. The Website does not set cookies for tracking or analytics. The only cookie-like mechanism in use is a short-lived, anonymous token used to protect the contact form against cross-site request forgery; it contains no personal information and expires as soon as the form is submitted.
- From Cloudflare Turnstile. As described above, Cloudflare evaluates form submissions to block automated abuse. Cloudflare's processing is governed by Cloudflare's own privacy policy.
4. How We Use Information
We use the information we collect for the following limited purposes:
- To respond to your enquiry. We use your name, email address, and message to reply to you, to ask follow-up questions, and, if you engage us, to prepare a proposal or scope of work.
- To operate, secure, and maintain the Website. We use server logs and security verification results to keep the Website available, detect and block abuse (including automated form spam), diagnose technical problems, and protect the integrity of the Website.
- To keep business records. Enquiries are stored so that no message is lost if an email notification fails, and so that we can refer back to the original request during a project.
- To comply with legal obligations and to enforce our Terms of Use where necessary.
We do not use enquiry information for marketing email lists. You will only hear from us in response to something you sent us, unless you separately ask to be kept informed.
5. Cookies and Tracking Technologies
We do not use first-party cookies for analytics, advertising, or behavioral tracking, and we do not use any third-party analytics or advertising services.
The Website uses a single functional mechanism: a stateless anti-forgery token, stored briefly in a cookie when you open the contact form and removed when the form is submitted. It is strictly necessary for security and contains no personal data.
Cloudflare Turnstile, which protects the contact form, may set its own cookies or use similar technologies as part of its bot-detection process. These are controlled by Cloudflare and governed by Cloudflare's privacy policy.
You can control or delete cookies through your browser settings. Blocking the anti-forgery cookie will prevent the contact form from being submitted; the rest of the Website works without any cookies.
Because the Website does not track you across other websites, there is nothing for a Do Not Track or Global Privacy Control signal to switch off; the Website behaves the same regardless of such signals.
6. How We Share Information
We do not sell personal information. We share personal information only with the following categories of recipients, and only to the extent necessary to operate the Website and respond to you:
- Infrastructure and hosting providers. The Website and its database run on third-party hosting infrastructure. These providers process data on our behalf under contractual confidentiality obligations and do not use it for their own purposes.
- Email delivery providers. We use a third-party transactional email service to deliver contact-form notifications to us. The provider receives the contents of your enquiry solely for delivery purposes.
- Security providers. Cloudflare processes contact-form submissions for bot detection, as described above.
- Legal and safety disclosures. We may disclose personal information where required by law, legal process, or governmental request, or where necessary to protect the rights, safety, or property of our business, our clients, the public, or the Website.
- Business transfers. If Blue Head Studios LLC is involved in a merger, acquisition, financing, reorganization, or sale of assets, enquiry records may be transferred as part of that transaction, subject to this Privacy Policy.
We do not share your enquiry with any third party for that party's own use.
7. Service Providers and Third-Party Tools
We use a small number of service providers to run the Website: a hosting provider for the web and database servers, a transactional email provider for notifications, and Cloudflare for form protection. These providers process information on our behalf to perform the functions we request, and we take reasonable steps to limit their access to what is necessary for those functions.
Use of third-party services may involve processing on systems we do not directly control. You should review the applicable third-party privacy notices (in particular Cloudflare's) if you want to understand their practices in detail.
8. Data Retention
We retain contact-form enquiries for as long as reasonably necessary to respond to you and to keep a record of the resulting business relationship, if any. Enquiries that do not lead to an engagement are deleted within twenty-four (24) months of receipt. Enquiries that lead to an engagement are retained as part of our business records for the duration of the engagement and for the period required by applicable tax and legal obligations afterwards.
Server access logs are retained for a rolling period of ninety (90) days and then overwritten, except where a specific log entry must be preserved to investigate a security incident.
You may ask us to delete your enquiry at any time (see Section 10). Residual copies may persist in encrypted backups for a limited period before being overwritten in the ordinary course of our backup rotation.
9. Data Security
We maintain administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, use, disclosure, alteration, and destruction, including:
- Technical safeguards. All traffic to the Website is encrypted in transit using TLS. The Website sends strict security headers (including a Content Security Policy) and rate-limits the contact form. The database that stores enquiries is reachable only over a private network from the Website's application server, never from the public internet.
- Access controls. Access to stored enquiries and server logs is restricted to the principal of Blue Head Studios LLC and to the systems required to operate the Website.
- Organizational safeguards. We review our security practices on an ongoing basis and update them as appropriate to address evolving threats.
No method of transmission over the Internet or method of electronic storage is completely secure, and we cannot guarantee absolute security. You provide information to the Website at your own risk.
10. Your Rights and Choices
Subject to applicable law, you may request access to the personal information we hold about you, request correction of inaccurate or incomplete information, request deletion of your personal information, and object to or ask us to limit certain processing.
To submit a privacy question or request, email us at privacy@blueheadstudios.com. Please include the email address you used on the contact form so we can locate your records. We may need to verify your identity before acting on a request, and we will respond within the timeframe required by applicable law. If you are not satisfied with our response, you may have the right to lodge a complaint with your local data protection authority.
We may decline or limit a request to the extent permitted by applicable law, including where we must retain information for legal, security, fraud-prevention, recordkeeping, or operational purposes.
11. Children's Privacy
The Website is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13, we will delete it in accordance with applicable law.
12. International Visitors
The Website is operated from the United States. If you access it from outside the United States, you understand that your information will be transferred to, stored, and processed in the United States, where privacy laws may differ from those in your jurisdiction.
13. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other operational needs. When we make changes, we will post the revised policy on this page and update the "Last Updated" date at the top. Your continued use of the Website after the revised policy takes effect constitutes acknowledgment of the revised Privacy Policy to the extent permitted by applicable law.
14. Contact Information
If you have any questions about this Privacy Policy or would like to submit a request regarding your personal information, you may contact us by email at privacy@blueheadstudios.com or by mail at 5456 Peachtree Blvd # 271, Chamblee, GA 30341.
Please include enough information in your request for us to understand, evaluate, and respond to it, including your name, contact information, and the nature of your question or request.