Privacy policy.

Blockchain Marketing Boutique (“BMB”, “we”, “us”) is operated by BMBWeb3 Global FZCO, IFZA Business Park, Building A1, Dubai Silicon Oasis, Dubai, United Arab Emirates. We provide strategic advisory, market intelligence and adoption diagnostics for Web3, fintech, tokenisation, RWA and digital asset companies.

For any question about this policy or your personal data, contact us at silviam@bmbweb3.com.

We only collect data you choose to give us, or that is generated automatically while you browse:

• Contact form data. Name, email, company, website, and the details you write about your project, submitted when you request a diagnostic or strategy call.
• Correspondence. Information you share by email if you contact us directly.
• Usage data. Standard analytics data (pages viewed, approximate location, device and browser type, referral source) collected via Google Analytics and Vercel Analytics, described in our Cookie Policy.

We do not knowingly collect special category data (health, religion, biometric or similar) and ask that you do not include it in any message to us.

• To respond to enquiries submitted through the contact form and to prepare a proposal or diagnostic.
• To operate, maintain and improve the site, including understanding aggregate traffic and usage patterns.
• To comply with legal obligations, and to establish, exercise or defend legal claims.

We do not sell personal data, and we do not use it for automated decision-making or profiling that produces legal or similarly significant effects.

Where the GDPR applies, we rely on the following legal bases:

• Consent — for non-essential cookies and analytics, per your choice in the cookie banner.
• Legitimate interest — for responding to enquiries and operating the site securely.
• Contractual necessity — where processing is required to take steps towards an advisory engagement at your request.
• Legal obligation — where we must retain records to comply with the law.

We do not sell or rent personal data. We share it only with:

• Subirachs Ventures— our group’s central contact-handling service, which receives contact-form submissions on our behalf so enquiries can be actioned.
• Google Analytics and Vercel Analytics — website analytics providers, described further in our Cookie Policy.
• Hosting and infrastructure providers (Vercel, Supabase) who process data on our behalf under their own data processing terms, strictly to operate the site.

We do not knowingly transfer personal data to third parties for their own marketing purposes.

Our infrastructure providers may process data outside your country of residence, including in the United States and the European Union. Where this involves a transfer of personal data out of the EEA, we rely on providers who offer appropriate safeguards, such as Standard Contractual Clauses.

We keep contact-form submissions and related correspondence for as long as reasonably necessary to respond to your enquiry and pursue any resulting engagement, and thereafter only as required for legal, accounting or reporting purposes. Analytics data is retained per the providers’ standard retention windows (Google Analytics: 14 months by default).

Depending on your location, you may have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request erasure of your data (“right to be forgotten”).
• Object to or restrict certain processing.
• Request a portable copy of your data.
• Withdraw consent at any time, where processing is based on consent.
• Lodge a complaint with your local data protection authority.

To exercise any of these rights, email silviam@bmbweb3.com. We will respond within one month, as required by the GDPR.

We use industry-standard technical and organisational measures — including HTTPS/TLS encryption, access controls and secure hosting — to protect personal data against unauthorised access, loss or misuse. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Our services are directed at businesses and professionals. We do not knowingly collect personal data from anyone under the age of 16.

We may update this policy from time to time to reflect changes in our practices or for legal reasons. The “last updated” date at the top of this page indicates the most recent revision.