Legal

Privacy Policy

Last Updated: June 2026

BLION GROUP LLC (“Company,” “we,” “us,” or “our”) is committed to protecting the privacy and security of the personal information of our clients, prospects, and website users. This Privacy Policy explains what information we collect, how we use it, with whom we share it, and what rights you have regarding your information.

This policy applies to personal information collected through our website blionsoft.com (the “Site”), our services, and all related communications. This policy is provided in compliance with the Florida Digital Bill of Rights (FDBR — Fla. Stat. § 501.178), the California Consumer Privacy Act (CCPA, as amended by the CPRA), the FTC Act (15 U.S.C. § 45), and other applicable federal and state privacy laws.

1. Data Controller / Business Information

In accordance with applicable U.S. privacy laws, the entity responsible for the collection, use, and disclosure of personal information is:

Field	Information
Legal Name	BLION GROUP LLC
Entity Type	Florida Limited Liability Company
Principal Office	2656 NW 97th Ave, Doral, FL 33172, United States
Affiliated Entity (Peru)	BLION S.A.C. — Av. Circunvalación Golf los Incas Nro. 206, Int. 602B, La Molina, Lima 15024, Peru
Email	[email protected]
Phone (Miami)	+1 (786) 755-8237
Phone (Lima)	+51 (739) 7950
Website	https://blionsoft.com

2. Personal Information We Collect

We collect the following categories of personal information, with your prior consent where required by applicable law:

2.1 Through Contact Forms and Commercial Inquiries

Full name and professional title
Corporate email address
Contact phone number
Company name and size
Description of the need or project

2.2 In the Context of Contracted Services

Billing data (company name, tax ID, billing address)
Contact information for technical and administrative personnel
Operational information necessary for the provision of services
Payment information (processed securely through third-party payment processors)

2.3 Through Website Navigation

Navigation data collected through technical and analytics cookies (see our Cookie Policy)
IP address and device data for security purposes
Browser type, operating system, and language preferences
Referring website and pages visited
Geographic location (at the city or metropolitan level)

2.4 Categories of Personal Information (CCPA/FDBR Disclosure)

In the preceding 12 months, we have collected the following categories of personal information as defined under the CCPA and FDBR:

Category	Examples	Collected
Identifiers	Name, email, phone number, IP address	Yes
Commercial Information	Records of services purchased, obtained, or considered	Yes
Internet Activity	Browsing history, search history, interactions with our Site	Yes
Geolocation Data	General location (city/metro level)	Yes
Professional Information	Job title, company name, business contact details	Yes
Inferences	Preferences, characteristics derived from collected data	Yes

3. Purposes of Processing

Your personal information is processed for the following purposes, in accordance with applicable law:

Responding to commercial inquiries: Responding to questions, quotes, and discovery call requests submitted through the Site’s forms.
Provision of contracted services: Executing projects, maintaining operational communication, and managing the contractual relationship.
Administrative and tax management: Issuing invoices, processing payments, and complying with accounting and tax obligations under U.S. federal and Florida state law.
Commercial communications: Sending relevant content, service updates, and technology sector information, only with your prior express consent (in compliance with the CAN-SPAM Act).
Service improvement: Statistical analysis to improve the quality of services and user experience on the Site.
Legal compliance: Responding to requests from competent authorities in accordance with applicable law.
Security and fraud prevention: Protecting our systems, users, and services from unauthorized access, fraud, and cyberattacks.

4. Legal Basis for Processing

The processing of your personal information is based on one or more of the following legal grounds:

Consent of the data subject: For sending commercial communications and using non-essential cookies. Consent is freely revocable at any time.
Performance of a contractual relationship: For the provision of contracted professional services.
Legal obligation: For compliance with tax, accounting, and legal obligations under U.S. federal and Florida state law.
Legitimate interest: For information security management, fraud prevention, and service improvement, provided that the rights of the data subject do not prevail.

5. Recipients and International Data Transfers

As a general rule, BLION GROUP LLC does not sell, trade, or otherwise transfer personal information to third parties, except in the following circumstances:

5.1 Service Providers (Processors)

We share personal information with trusted third-party service providers who assist us in operating our business, including:

Cloud hosting providers (e.g., AWS, Google Cloud, Microsoft Azure)
Email service providers (e.g., Brevo/Sendinblue, Google Workspace)
Analytics providers (e.g., Google Analytics)
Marketing platforms (e.g., Meta/Facebook, LinkedIn)
Payment processors
CRM and project management tools

All service providers are contractually obligated to protect your personal information and process it only for the purposes specified by us, in compliance with applicable data protection laws.

5.2 Legal Obligations

We may disclose personal information when required by a competent U.S. authority (e.g., IRS, FTC, state attorneys general, federal or state courts, law enforcement agencies) or as necessary to comply with legal process.

5.3 Business Transfers

In the event of a merger, acquisition, reorganization, or sale of all or substantially all of our assets, personal information may be transferred to the acquiring entity, subject to appropriate safeguards and notice to affected individuals.

5.4 International Data Transfers

BLION GROUP LLC has operational presence in both the United States (Miami, Florida) and Peru (Lima). Consequently, your personal information may be transferred to and processed in both jurisdictions. We ensure that any international transfer of personal information is accompanied by appropriate safeguards, including:

Standard Contractual Clauses (SCCs) where applicable
Data Processing Agreements (DPAs) with all processors
Compliance with the EU-U.S. Data Privacy Framework where applicable
Adherence to the principles of the APEC Cross-Border Privacy Rules (CBPR) system

6. Data Retention Periods

In accordance with the principle of data minimization, personal information is retained only for as long as necessary to fulfill the purposes for which it was collected:

Data Category	Retention Period
Contact and prospecting data	Up to 5 years from the last contact, unless consent is revoked earlier
Contractual and billing data	7 years from the end of the contractual relationship, in accordance with U.S. federal tax law (IRC § 6001) and Florida state requirements
Commercial communications data	Until the data subject revokes consent or requests deletion
Navigation data (cookies)	As established in our Cookie Policy
Security and audit logs	Up to 3 years for compliance and security purposes

Once the retention period expires, personal information is securely deleted or anonymized.

7. Your Privacy Rights

Depending on your state of residence, you may have the following rights regarding your personal information:

7.1 Rights Under the Florida Digital Bill of Rights (FDBR — Fla. Stat. § 501.178)

If you are a Florida resident and our company meets the applicable thresholds under the FDBR, you have the right to:

Right to Know: Confirm whether we are processing your personal information and access such data.
Right to Correct: Correct inaccuracies in your personal information.
Right to Delete: Delete personal information provided by you.
Right to Data Portability: Obtain a copy of your personal information in a portable and readily usable format.
Right to Opt-Out: Opt out of the sale of your personal information or its use for targeted advertising or profiling.

7.2 Rights Under the California Consumer Privacy Act (CCPA/CPRA)

If you are a California resident, you have the right to:

Right to Know: What personal information we collect and how it is used.
Right to Delete: Delete personal information collected from you (with certain exceptions).
Right to Correct: Correct inaccurate personal information.
Right to Opt-Out: Opt out of the “sale” or “sharing” of your personal information.
Right to Limit Use of Sensitive Personal Information: Limit the use and disclosure of sensitive personal information.
Right to Non-Discrimination: Not be discriminated against for exercising your rights.

7.3 Rights Under Other State Privacy Laws

We also recognize and comply with the privacy rights established under the laws of other states with comprehensive privacy legislation, including but not limited to:

Virginia Consumer Data Protection Act (VCDPA)
Colorado Privacy Act (CPA)
Connecticut Data Privacy Act (CTDPA)
Utah Consumer Privacy Act (UCPA)
Oregon Consumer Privacy Act (OCPA)
Texas Data Privacy and Security Act (TDPSA)
Montana Consumer Data Privacy Act

7.4 How to Exercise Your Rights

To exercise any of your privacy rights, please submit a verifiable request to:

Email: [email protected] Mail: BLION GROUP LLC — Privacy Department, 2656 NW 97th Ave, Doral, FL 33172, United States

Your request must include:

Your full name and contact information
A description of the right you wish to exercise
Sufficient information to allow us to verify your identity

We will respond to verifiable consumer requests within forty-five (45) days (CCPA) or forty-five (45) days (FDBR), with a possible extension of an additional forty-five (45) days upon notice to you.

7.5 “Do Not Sell or Share My Personal Information”

We do not sell personal information in the traditional sense. However, the sharing of data with certain advertising platforms may constitute a “sale” or “sharing” under the CCPA/CPRA or the FDBR. You have the right to opt out by:

Clicking the “Do Not Sell or Share My Personal Information” link in our website footer
Using the Global Privacy Control (GPC) browser signal
Adjusting your browser’s cookie settings
Contacting us at [email protected]

We honor global privacy controls and “Do Not Track” signals where required by law.

8. Security Measures

BLION GROUP LLC implements technical, organizational, and contractual measures necessary to ensure the security of personal information and prevent its alteration, loss, unauthorized processing, or access, in accordance with industry best practices and applicable law. These measures include:

Encryption of data in transit (TLS/SSL) and at rest (AES-256)
Role-based access control (RBAC) and the principle of least privilege
Periodic security audits of integration systems
Confidentiality agreements with all personnel and service providers
Documented incident response plans and disaster recovery procedures
Multi-factor authentication (MFA) for administrative access
Regular penetration testing and vulnerability assessments
Employee training on data protection and privacy best practices

Despite these measures, no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security.

9. Data Breach Notification

In the event of a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to personal information, BLION GROUP LLC will notify affected individuals and the relevant supervisory authorities in accordance with the Florida Information Protection Act (FIPA — Fla. Stat. § 501.171) and other applicable state breach notification laws. Notification will be provided without unreasonable delay and, where required, within thirty (30) days of discovery of the breach.

10. Children’s Privacy (COPPA Compliance)

This Site is not directed to children under the age of 16. In compliance with the Children’s Online Privacy Protection Act (COPPA — 15 U.S.C. §§ 6501–6506), we do not knowingly collect personal information from children under 16 years of age. If we become aware that we have collected personal data from a child without verification of parental consent, we will take steps to remove that information as quickly as possible.

11. Cookies and Tracking Technologies

The Site uses cookies and similar tracking technologies. For detailed information about the types of cookies used, their purposes, and how to manage them, please consult our Cookie Policy.

12. Third-Party Links

The Site may contain links to third-party websites. We are not responsible for the privacy practices or content of such websites. We encourage you to review the privacy policies of any third-party website you visit.

13. Modifications to This Privacy Policy

BLION GROUP LLC reserves the right to modify this Privacy Policy to adapt it to legislative, jurisprudential, or business developments. Any material modification will be communicated to affected data subjects at least thirty (30) days in advance, through the registered email address or through a prominent notice on the Site.

Your continued use of the Site following the posting of any changes constitutes your acceptance of the modified Privacy Policy.

14. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy, our data practices, or your privacy rights, please contact us:

BLION GROUP LLC 2656 NW 97th Ave Doral, FL 33172, United States Phone: +1 (786) 755-8237 Email: [email protected] Website: blionsoft.com

Data Protection / Privacy Inquiries: [email protected]

Current Version approved in Miami, Florida, United States — June 2026