Privacy Policy

Trident Marketing & Technologies Inc., Orange Cottage, Horse Hill, St. Joseph, Barbados, is the controller of personal data used to operate BlueGate. Contact us through the BlueGate contact form for privacy requests.

When a merchant uses BlueGate to process its own customers’ orders, that merchant generally decides why customer data is processed and remains responsible for its notices and lawful basis. BlueGate may act as a service provider or processor for limited integration data.

• Account data: email address, display name, company, authentication records and roles.
• Order and billing data: product, amount, currency, billing name, address, email, payment status and processor transaction references.
• Licence and store data: licence key, plan, activation domains, software version, site identifiers and renewal preferences.
• Integration data: Shopify store identifiers, OAuth tokens, merchant configuration and order references needed to provide the connection.
• Support and communication data: messages, company, attachments and correspondence.
• Technical data: IP address, device/browser details, request logs, security events and essential storage described in our Cookie Policy.

BlueGate does not intentionally store full card numbers or CVV values. Card details entered during a BlueGate purchase are transmitted for authorization to the applicable payment gateway and are not written to the BlueGate database.

• Provide accounts, purchases, licences, activations, downloads, integrations and support.
• Authenticate users, prevent fraud, secure services and investigate misuse.
• Process purchases, renewals, refunds, accounting and transactional communications.
• Maintain, troubleshoot and improve service reliability.
• Meet legal, tax, regulatory and dispute obligations.
• Send marketing only where permitted and provide a way to opt out.

Depending on the context, we process data because it is necessary to perform a contract, take requested pre-contract steps, comply with law, pursue legitimate interests such as security and service improvement, or because you gave informed consent. Where processing relies on consent, you may withdraw it without affecting earlier lawful processing.

Payments made to purchase BlueGate products and services are temporarily processed by RYDR Global. RYDR Global receives the payment and transaction information required to authorize, settle, prevent fraud and handle refunds. RYDR Global does not own or operate BlueGate.

The merchant-payment integrations offered by BlueGate are separate. A merchant’s own customers may have data sent to the merchant’s chosen gateway, such as Powertranz, and acquiring bank under the merchant’s agreement and privacy notice.

We disclose only what is reasonably necessary to providers supporting BlueGate, including:

• RYDR Global and applicable payment gateways, acquiring banks and card networks for purchases.
• Our managed cloud database and authentication provider for accounts, records and access control.
• Resend and its delivery infrastructure for confirmation, password, receipt, licence, support and service emails.
• Shopify, WooCommerce, WordPress and related platforms when you enable those integrations.
• Professional advisers, regulators, courts or law enforcement where lawfully required.
• A successor in a merger, financing, reorganization or sale, subject to appropriate confidentiality and notice.

We do not sell personal data or share it for cross-context behavioural advertising. BlueGate currently uses no advertising or analytics cookies.

BlueGate serves regional and international users and uses providers that may process data outside Barbados. Where required, we use contractual, organizational and technical safeguards and assess whether recipients offer appropriate protection. No transfer method eliminates all risk.

We retain account and licence data while the account or licence is active and for a reasonable period afterward. Order, tax and accounting records are generally retained for at least the period required by Barbados law. Security logs are kept only as long as reasonably needed for investigation and protection. Support correspondence is retained while useful for service, disputes and legal obligations.

We delete or anonymize data when it is no longer needed, unless retention is required for law, fraud prevention, disputes, backups or enforcement. Backup deletion may follow a delayed rotation cycle.

We use access controls, authentication, encryption in transit, restricted administrative roles, masked credentials, audit practices and service monitoring appropriate to the data and risk. No online service is completely secure. You are responsible for strong passwords, secure devices and protecting merchant credentials.

If a personal-data incident creates legally reportable risk, we will notify the relevant authority and affected individuals as required by applicable law.

Subject to the Barbados Data Protection Act, 2019-29 and applicable exceptions, you may request access, correction, deletion, restriction, portability, or objection to certain processing and direct marketing. You may withdraw consent and ask about automated decisions.

Submit a request through our contact form. We may verify your identity and authority before acting. You may complain to the Barbados Data Protection Commissioner if you believe your rights have not been respected.

• Update profile information in account Settings.
• Disable licence auto-renewal through licence controls where available.
• Use the unsubscribe option in non-essential email or contact us.
• Change optional storage choices through Cookie Settings in the footer.
• Request account closure, subject to records we must retain.

BlueGate is a business service and is not directed to children. We do not knowingly create accounts for or collect personal data from anyone under 18. Contact us if you believe a child supplied data so we can investigate and delete it where appropriate.

Links or integrations may take you to third-party services. Their privacy practices are governed by their own notices. BlueGate is not responsible for third-party privacy practices, but we select and manage our service providers with reasonable care.

We may update this Policy as services, providers or laws change. We will update the effective date and provide additional notice for material changes where appropriate.

Privacy requests may be sent through our contact form or by post to: Trident Marketing & Technologies Inc., Orange Cottage, Horse Hill, St. Joseph, Barbados.