Privacy notice

1. Who we are

blng studio and blng sprint are trading names of Bieling Ltd, registered in England and Wales, company no. 14298710. Registered office: 3 Dericote Street, London, England, E8 4PG.

Bieling Ltd is the controller of the personal data described in this notice. You can contact us about it at info@blng.studio. ICO registration number: ICO registration pending.

This notice explains what personal data we collect, why, on what lawful basis, who we share it with and how long we keep it, under the UK GDPR and the Data Protection Act 2018.

2. What we collect, why, and our lawful basis

Checklist sign-up (Notion form). Name, work email, organisation (optional), the kind of setting you run or plan, your stage, and whether you tick the marketing box. You give us this. We use it to send you the free checklist and calculator you asked for. Lawful basis: our legitimate interests in responding to your request. Name and email are needed to send the checklist; the other fields are optional.

Marketing emails. Only if you tick the box "Send me occasional emails from blng sprint. Unsubscribe any time." Lawful basis: your consent, which you can withdraw at any time by unsubscribing or emailing us. We keep a record of each consent.

Intro-call booking (HubSpot meetings). Name, email, company, the time you choose, your answers to the booking questions and video-call details. You give us this. We use it to arrange and hold the call and to follow up. Lawful basis: steps you ask us to take before entering into a contract, and our legitimate interests in following up an enquiry. Without it we can't arrange the call.

Proposals, contracts and sprints. Contact names, roles, company, address, site or building details and your acceptance. Documents you send, such as plans, leases, heads of terms, business plans and site details, which may include personal data about other people (for example landlords, agents or staff). Correspondence and project files, kept in Microsoft 365 and Notion. We get this from you, from your colleagues, and, for contact details only, from referral partners (see below). We use it to prepare your proposal, carry out the sprint and keep a record of the work. Lawful basis: performing our contract with you; our legitimate interests for data about your colleagues and other people named in documents, and for keeping records and dealing with claims. We need it to contract with you and carry out the work.

Invoices and payments (Xero and our bank). Billing contact name, email, company, address, VAT number, and invoice and payment records. Lawful basis: performing our contract, and our legal obligations for tax and accounting.

Referral partners. If a referral partner introduces you, we receive your contact details from them. We may tell the partner whether the introduction went ahead and the fee position. We do this on the basis of our legitimate interests, we use the minimum data, and we don't share any sprint content with a partner without your consent.

Website visits (GitHub Pages). Our site is hosted on GitHub Pages. GitHub processes visitors' IP addresses and request data in its server logs for security and operation, as an independent controller; see GitHub's privacy statement. Our site sets no cookies of its own, so we don't show a cookie banner. If you click a "Book a free intro call" link, you go to HubSpot, which may set its own cookies; see HubSpot's privacy policy. We don't use analytics; if we add them, we will ask for your consent first.

Children. We don't want personal data about children. Please don't send any, for example in forms, plans or documents. If we receive it, we may delete it.

We don't make decisions about you by automated means, and we don't profile you.

3. Who we share it with

• Service providers acting for us (processors): Notion (forms, records and project files), HubSpot (meeting bookings and the contact records they create), Microsoft 365 (email, correspondence and project files), Xero (invoicing and accounting) and our bank (payments).
• Sub-consultants working on a sprint, such as a quantity surveyor, fire engineer or surveyor. Where they act on their own professional judgement, they are independent controllers; where they act on our instructions, they are our processors.
• Referral partners: only as described above.
• Professional advisers, insurers, HMRC and other authorities, where needed or required by law.

We don't sell personal data.

4. Transfers outside the UK

Some of our providers (HubSpot, Microsoft 365, GitHub and Notion) may process data in the United States. Where a provider is certified, we rely on the UK–US data bridge; otherwise, or as a backup, on the UK International Data Transfer Agreement or standard contractual clauses with the UK Addendum. For Xero, we rely on the safeguards in its data processing agreement.

5. How long we keep it

• Checklist sign-ups and marketing: until you unsubscribe, or after 2 years without activity.
• Intro-call bookings that don't go ahead: 24 months.
• Accounting records: 6 years.
• Client and sprint files: 15 years from delivery, kept to the minimum needed.

6. Your rights

You have the right to access your personal data, to have it corrected or erased, to restrict or object to our use of it (including, at any time, to direct marketing and to our use based on legitimate interests), and to data portability. Where we rely on consent, you can withdraw it at any time; this doesn't affect what we did before. To use any of these rights, email info@blng.studio. We reply within one month.

You have the right to complain to the Information Commissioner's Office (ico.org.uk, 0303 123 1113).

7. Security

We use access controls on the tools we use. Client documents are seen by the blng studio team and, where the sprint needs it, by named sub-consultants stated in the proposal.

8. Changes to this notice

This is version 0.1 (draft), dated 21 October 2026. If we change this notice, we will publish the new version here with its date.

9. Contact

info@blng.studio