Privacy & Legal

Overview

Bluarc, LLC ("Bluarc," "we," "our," or "us") is committed to protecting the privacy and security of information entrusted to us by our clients, partners, and website visitors. This Privacy & Legal Policy describes how we collect, use, disclose, and safeguard your information when you visit our website at bluarc-llc.com or engage with our professional services.

As a Woman-Owned Small Business (WOSB) providing systems engineering, Business Process Management (BPM), and Appian platform solutions to Federal and commercial customers, we operate under heightened obligations regarding data handling, security compliance, and ethical business conduct.

Information We Collect

Information You Provide Directly

We collect information you voluntarily submit to us through our website contact form, during the course of a business engagement, or when applying for employment. This may include:

• Full name, job title, and organizational affiliation
• Business email address and telephone number
• Mailing address and physical location data
• Messages, inquiries, and project-related communications
• Employment application materials including résumés and cover letters
• Contractual and procurement documentation

Information Collected Automatically

When you visit our website, our servers and third-party analytics tools may automatically collect certain technical data, including:

• IP address and approximate geolocation derived therefrom
• Browser type, version, and operating system
• Pages visited, time spent on each page, and navigation paths
• Referring URLs and exit pages
• Device identifiers and screen resolution
• Date and time of access

Information from Third Parties

In the context of Federal contracting and procurement, we may receive information about your organization from government databases, SAM.gov, or authorized procurement systems. We handle all such data in accordance with applicable Federal regulations.

How We Use Information

Bluarc uses the information collected for the following lawful purposes:

• Service delivery — to fulfill contractual obligations, deliver systems engineering and BPM services, and provide Appian platform support
• Communications — to respond to inquiries, send project updates, and maintain ongoing client relationships
• Business operations — for invoicing, compliance reporting, and internal administrative functions
• Recruitment — to evaluate candidates and manage the hiring process
• Website improvement — to analyze usage patterns and enhance the performance and security of our digital properties
• Legal compliance — to meet obligations under Federal Acquisition Regulations (FAR), DFARS, and applicable state and federal law
• Security monitoring — to detect, investigate, and prevent unauthorized access or fraudulent activity

We do not sell, rent, or trade your personal information to third parties for marketing purposes. We do not use personal data for automated profiling or algorithmic decision-making that would produce legal effects concerning you.

Information Sharing & Disclosure

Bluarc does not sell or share personal information for commercial gain. Disclosure occurs only in the following limited circumstances:

Authorized Service Providers

We may share information with vetted subcontractors, cloud infrastructure providers, and professional service firms who assist in the delivery of our services. All such third parties are contractually bound to handle data in accordance with standards no less protective than those described herein.

Government and Contracting Entities

As a Federal contractor, we may be required to share certain information with contracting agencies, Contracting Officer Representatives (CORs), or oversight bodies in the performance of government contracts. Such disclosures are governed by applicable contract terms and Federal law.

Legal Obligations

We may disclose information when required to do so by law, court order, regulatory authority, or to protect the safety, rights, or property of Bluarc, our clients, or the public.

Data Security

Bluarc implements administrative, technical, and physical safeguards commensurate with the sensitivity of the information we handle. Our security program is informed by NIST SP 800-53, NIST SP 800-171, and industry best practices for protecting Federal contract information.

• Encryption of data in transit using TLS 1.2 or higher
• Access controls based on the principle of least privilege
• Multi-factor authentication for all systems handling sensitive data
• Regular security assessments and vulnerability scanning
• Incident response procedures aligned with DFARS 252.204-7012
• Personnel security awareness training

While we employ rigorous security practices, no system is entirely immune from breach. In the event of a security incident affecting your data, we will notify affected parties and relevant authorities in accordance with applicable legal requirements and without undue delay.

Cookies & Tracking Technologies

Our website may use cookies and similar tracking technologies to enhance user experience and gather aggregate usage analytics. Cookies are small text files stored on your device. We use the following categories:

• Strictly necessary cookies — required for basic website functionality; cannot be disabled
• Analytics cookies — collect anonymized data on page views and user behavior to improve our site (e.g., Google Analytics)
• Preference cookies — remember your settings and preferences across sessions

You may configure your browser to refuse all cookies or to alert you when cookies are being sent. Note that disabling cookies may impair certain features of our website. We do not use advertising or retargeting cookies.

Your Rights

Depending on your jurisdiction, you may have certain rights with respect to your personal information. These may include:

• Right of access — to request a copy of the personal information we hold about you
• Right of rectification — to request correction of inaccurate or incomplete data
• Right of erasure — to request deletion of your data, subject to legal retention obligations
• Right to restrict processing — to limit how we use your information in certain circumstances
• Right to data portability — to receive your data in a structured, machine-readable format
• Right to object — to object to processing based on legitimate interests
• California residents (CCPA) — the right to know, delete, and opt out of sale; we do not sell personal information

To exercise any of these rights, please contact our Privacy Point of Contact at the address listed in Section 13. We will respond within 30 days of receipt of a verifiable request.

Federal Compliance

As a provider of technology services to U.S. Federal agencies, Bluarc operates in compliance with the following regulatory frameworks:

• Federal Acquisition Regulation (FAR) — Parts 4, 24, and 52
• Defense Federal Acquisition Regulation Supplement (DFARS) — Clause 252.204-7012 (Safeguarding Covered Defense Information)
• NIST Special Publication 800-171 (Protecting Controlled Unclassified Information)
• Privacy Act of 1974 (5 U.S.C. § 552a), where applicable
• Federal Information Security Modernization Act (FISMA)
• OMB Memorandum M-17-12 (Preparing for and Responding to a Breach)
• Section 889 of the FY2019 National Defense Authorization Act (Supply chain restrictions)

Terms of Use

Access to and use of the Bluarc website is subject to the following conditions. By using this site, you agree to comply with all applicable laws and these terms.

Permitted Use

This website is provided solely for informational purposes related to Bluarc's services, capabilities, and corporate information. Authorized uses include reviewing our service offerings, submitting contact inquiries, and accessing publicly available resources.

Prohibited Conduct

• Unauthorized access to, or interference with, any system, server, or network connected to this website
• Scraping, harvesting, or automated collection of content or data from this site
• Uploading, transmitting, or distributing malicious code, viruses, or harmful content
• Impersonating Bluarc personnel, contractors, or government officials
• Using the site in any manner that could damage, disable, or impair its functionality
• Circumventing any security or authentication measures

Disclaimer of Warranties

This website is provided on an "as is" and "as available" basis. Bluarc makes no warranties, express or implied, regarding the accuracy, completeness, reliability, or fitness for a particular purpose of any content on this site.

Intellectual Property

All content appearing on the Bluarc website — including but not limited to text, graphics, logos, icons, images, data compilations, and software — is the exclusive property of Bluarc, LLC or its licensors and is protected by United States and international copyright, trademark, and trade secret laws.

The "Bluarc" name, logo, and all associated marks are trademarks of Bluarc, LLC. Unauthorized use of any Bluarc trademark, service mark, or logo is strictly prohibited.

No content from this website may be reproduced, distributed, transmitted, displayed, published, or broadcast without the prior written consent of Bluarc, LLC, except as permitted by applicable law or expressly authorized in writing.

Limitation of Liability

To the maximum extent permitted by applicable law, Bluarc, LLC, its officers, directors, employees, contractors, and agents shall not be liable for any indirect, incidental, special, consequential, punitive, or exemplary damages arising out of or relating to your use of, or inability to use, this website or any content thereon.

Bluarc's total cumulative liability to any party for any claims arising from or related to this website shall not exceed one hundred U.S. dollars ($100.00). This limitation applies regardless of the legal theory under which such damages are sought and whether or not Bluarc has been advised of the possibility of such damages.

This limitation does not apply to liability that cannot be excluded by law, including liability for fraud, willful misconduct, or gross negligence.

Governing Law & Jurisdiction

This Policy and any disputes arising hereunder shall be governed by and construed in accordance with the laws of the State of Maryland, without regard to its conflict of laws provisions. For matters related to Federal contracts, disputes shall be governed by the Contract Disputes Act (41 U.S.C. §§ 7101–7109) and applicable FAR Part 33 clauses. Any civil action not subject to Federal jurisdiction shall be brought exclusively in the state or federal courts located in Aberdeen, Harford County, Maryland.

Policy Changes

Bluarc reserves the right to update or modify this Privacy & Legal Policy at any time. Changes will be effective immediately upon posting to our website. The "Last Updated" date at the top of this page reflects the most recent revision.

For material changes that affect how we handle personal information you have previously provided, we will make reasonable efforts to notify affected individuals via email or a prominent notice on our website prior to the change becoming effective.

Your continued use of our website or services following any posted changes constitutes your acceptance of the revised Policy. We encourage you to review this page periodically to remain informed of our current practices.

Contact Us

For questions, concerns, or requests related to this Privacy & Legal Policy — including requests to exercise your data rights — please contact us through any of the following channels: