Last updated: October 2026

Customer Personal Data and Guest Data

For personal data submitted to The Blue Feet by or on behalf of the Customer, including personal data relating to Guests, the parties acknowledge that, where applicable, the Customer acts as the party determining the purposes and means of processing and The Blue Feet acts as the processor/service provider processing such data on the Customer's behalf.

The Customer shall ensure that it has all necessary rights, permissions, notices and lawful bases required to provide such personal data to The Blue Feet and to instruct The Blue Feet to process it for the purposes contemplated by the Agreement.

The Blue Feet shall process such personal data only for the purposes of providing, securing, maintaining and improving the contracted services, complying with applicable law, and carrying out the Customer's documented instructions, except where otherwise required by applicable law.

The Blue Feet shall:

1. process personal data in accordance with applicable data-protection law;
2. implement appropriate technical and organisational security measures;
3. ensure that persons authorised to process personal data are subject to appropriate confidentiality obligations;
4. provide reasonable assistance to the Customer in responding to applicable data-subject requests and data-protection obligations;
5. notify the Customer of relevant personal-data breaches in accordance with the applicable agreement and law;
6. maintain appropriate records concerning processing activities where required by applicable law; and
7. delete or return personal data in accordance with the Agreement and applicable retention requirements, subject to any legal obligation requiring continued retention.

Where The Blue Feet engages a third-party service provider to process personal data on its behalf, such provider shall be subject to appropriate contractual data-protection and confidentiality obligations.

The current list of The Blue Feet's sub-processors is provided to each Customer on request.

See also the Terms, the Privacy Policy and the Reported Content policy.