Privacy Policy

BluPlan Studio ("BluPlan," "we," "us," or "our") is a residential design and permitting studio serving homeowners across San Diego County, California. We operate as a service-area business and do not maintain a public office address.

This Privacy Policy describes how we collect, use, disclose, and protect personal information when you visit bluplanstudio.com, use our project questionnaire at /start, contact us through our forms, call or email us, or use our invite-only client portal. It also explains the rights available to California residents under the California Consumer Privacy Act as amended by the California Privacy Rights Act (the "CCPA").

If you have questions about this policy or your information, contact us at admin@bluplanstudio.com or (619) 830-8110.

At or before the point of collection, California law requires us to tell you what we collect and why. In short: we collect the contact and project details you submit to us, plus limited device and usage data collected automatically. We use this information to respond to inquiries, prepare consultations, provide our services, keep the site secure, and measure our advertising. We share identifiers and internet activity data with advertising platforms (Google and Meta), which California law treats as "sharing" for cross-context behavioral advertising. We do not sell personal information for money. You can opt out of sharing at any time using the "Do Not Sell or Share My Personal Information" link in the site footer, or automatically by browsing with a Global Privacy Control signal enabled. The full details follow below.

The table below lists the categories of personal information, as defined in California Civil Code section 1798.140, that we have collected in the preceding 12 months, with examples specific to how our site actually works.

We collect personal information from the following sources:

• Directly from you: when you submit our contact form, complete the /start project questionnaire, email or call us, or use the client portal (including messages, comments, and documents you upload).
• Automatically: through cookies and similar technologies described in our Cookie Policy, and through standard server logs kept by our hosting provider.
• Google address services: when you type a property address, we use Google's address lookup to normalize it and obtain the property's coordinates.
• Public records: after you submit a property address, we may retrieve publicly available parcel and assessor data for that property from San Diego County and City of San Diego government mapping services. This can include the property owner's name as it appears on the public assessor roll, which may be a person other than you (for example, if you inquire about a property you do not own).
• Advertising platforms: attribution data indicating that you arrived from an ad or social link (for example, an Instagram or Google Ads campaign).

• Responding to your inquiries and scheduling consultations.
• Researching your property's feasibility for a project (zoning, parcel, and permitting research) and preparing proposals.
• Providing services to clients, including the client portal (projects, messaging, document sharing, and notifications).
• Security and abuse prevention: spam filtering (including Google reCAPTCHA), rate limiting, and protecting our systems.
• Understanding how visitors use the site (analytics).
• Measuring the effectiveness of our advertising, including confirming when an ad leads to an inquiry.
• Complying with legal obligations and enforcing our agreements.

We do not use personal information for automated decision-making that produces legal or similarly significant effects.

Sharing for cross-context behavioral advertising.We do not sell personal information for money. We do "share" certain personal information with advertising platforms as that term is defined by the CCPA:

• Meta Platforms (Facebook and Instagram): when you have not opted out, the Meta Pixel on our site and our server-side connection to Meta report ad-related events. This can include a hashed (irreversibly encoded) version of your email address, phone number, and name, plus your IP address, browser information, and Meta cookie IDs.
• Google: Google Analytics receives usage and device data, and Google Ads measurement may connect visits and inquiries to ad clicks.

You can opt out of this sharing at any time; see section 8. Opting out does not affect our ability to respond to your inquiry.

Service providers and contractors. We disclose personal information to vendors who process it on our behalf under contracts that restrict their use of it. These fall into the following categories:

• Website hosting and infrastructure providers (including server logs)
• Database, authentication, and secure file storage providers supporting the client portal
• Email delivery providers
• Spam protection and address lookup services
• Content management tools for our blog and project pages
• Providers of individual features inside the client portal
• Independent contractors who maintain our website and systems under confidentiality obligations, and who may incidentally access personal information in the course of maintenance and support

Legal disclosures. We may disclose personal information when required by law, to respond to lawful requests by public authorities, or to protect our rights, safety, or property.

In the preceding 12 months, we disclosed identifiers, customer records, commercial information, and internet activity data to the service providers above for the business purposes in section 5, and shared identifiers and internet activity data with the advertising platforms above.

We keep personal information only as long as reasonably necessary for the purposes described in this policy, determined by criteria including:

• Inquiry and lead information: kept while your inquiry is active and for as long as reasonably needed afterward for business records and follow-up.
• Client and portal data: kept for the duration of your account and engagement with us, and afterward as needed to meet legal, tax, and professional recordkeeping obligations.
• Analytics and advertising data: retained according to the retention settings of Google and Meta, as described in their policies.

You may request deletion at any time as described in section 9.

California residents have the right to:

• Know and access: request the categories and specific pieces of personal information we have collected about you, the sources, the purposes, and the categories of third parties we disclose it to.
• Delete: request that we delete personal information we collected from you, subject to legal exceptions.
• Correct: request that we correct inaccurate personal information.
• Opt out of sale or sharing: direct us not to share your personal information for cross-context behavioral advertising. Use the "Do Not Sell or Share My Personal Information" link in the site footer, or enable a Global Privacy Control signal in your browser (see section 10).
• Limit sensitive personal information: we use sensitive personal information only to provide requested services, so no separate limit option is required.
• Non-discrimination: we will not discriminate against you for exercising any of these rights.

To exercise any right, email admin@bluplanstudio.com with the subject line "Privacy Request," or call (619) 830-8110. For opt-out of sharing, you can also simply use the footer link or a Global Privacy Control browser signal; we do not require an account or verification to honor an opt-out.

For access, deletion, and correction requests, we will verify your identity by matching the information you provide (such as the email address or phone number you used with us) against our records. We may ask for additional information if needed to verify your request, and we will use that information only for verification.

You may authorize an agent to submit a request on your behalf; we will ask the agent for proof of your written permission and may ask you to verify your identity directly. We respond to verifiable requests within 45 days, extendable once by an additional 45 days with notice.

We treat a Global Privacy Control (GPC) signal from your browser as a valid request to opt out of the sharing of personal information for that browser. When we detect GPC, analytics and advertising tools are turned off automatically, including our server-side ad reporting, without any further action needed from you. GPC is honored even if you previously accepted cookies on this site.

Some browsers offer a legacy "Do Not Track" (DNT) setting. There is no common standard for interpreting DNT signals, and this site does not respond to them. We do respond to Global Privacy Control signals, as described above.

Our site and services are directed to adults, and we do not knowingly collect personal information from anyone under 16 years of age. We do not sell or share the personal information of consumers we know to be under 16. If you believe a child has provided us personal information, contact us and we will delete it.

We use reasonable technical and organizational safeguards appropriate to the nature of the information, including encrypted connections (HTTPS), role-based access controls in our client portal, and access limited to people who need it to provide our services. No method of transmission or storage is completely secure, but we work to protect your information against unauthorized access, use, and disclosure.

We may update this policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Material changes will be highlighted on this page for a reasonable period.

BluPlan Studio is a service-area business serving San Diego County, California.

• Email: admin@bluplanstudio.com
• Phone: (619) 830-8110

See also our Cookie Policy and Terms of Service.