Our approach to data

Last updated October 9, 2026.

Our commitments

• We build profiles exclusively from professionally published information, and we never bypass restricted or authentication-protected access.
• We look up a professional's work email or mobile number only when a client asks for it, and then only that client sees the result. We also look up the work email address, never a phone number, of the professionals we contact ourselves about Bluelake. Both go through a provider specialized in professional contact data.
• Our scope stays strictly professional: careers, positions, skills, and professional contact details. Nothing more.
• We do not collect or process sensitive data (such as health or opinions).
• We respect individual rights, with a one-month response window for any request.

What we process, and what we exclude

We process: professional names, job titles, employment history, skills, industry sectors, professional location, and public profile URLs; when a client asks for them, work email addresses and mobile numbers; when we contact someone ourselves, their work email address. The IT leaders and buyers of the accounts we follow (CIOs, CTOs, IT and data directors, buyers of IT and professional services, vendor management) appear in the reading of those accounts, as their decision-makers and buyers: the people our clients deal with.

We exclude: private data (such as personal email addresses), sensitive information (health, opinions), and any content protected by authentication.

Rights and compliance

We operate under the GDPR, on the basis of our legitimate interest in mapping the Data & AI ecosystem, balanced against individual rights, with defined retention periods and no sale of data. If you are concerned, our Your professional data page explains precisely what we process and how to exercise your rights, including requesting your removal.

Contact

Questions about our data practices? Write to our privacy team.