Privacy Policy

This policy applies to blac-m.com and to any personal information you give us through it. “We” and “us” mean BLAC-M, the business that operates this website.

We are the data controller for the information described below, which means we decide what is collected and what happens to it.

BLAC-M
Dubai, United Arab Emirates

You can reach us about anything on this page through our contact form, or by email at privacy@blac-m.com.

We only receive what you actively send us. There are two forms on this site.

Contact form

When you make an enquiry through the contact page we collect your first and last name, email address, phone number, company name, website address, the type of enquiry you select, and your message.

Spam protection on both forms

Both forms are protected by Google reCAPTCHA v3, which scores how likely a submission is to be automated. It runs only on the contact and careers pages, not across the site, and it means Google receives your IP address and some information about how you interacted with that page. Google’s own privacy terms apply to that. Both forms also use a hidden field that only automated systems fill in, which needs no third party at all.

Careers form

When you apply through the careers page we collect your first and last name, email address, phone number, the discipline you select, a portfolio or profile link if you provide one, your message, and any CV or document you choose to upload (PDF or Word, up to 5 MB).

Please do not include information in an application that you would not want us to hold – for example date of birth, identity documents, or health information. We do not need any of it to consider you.

The website check field on our home page

When you enter an address into “Run Free Check”, that address is sent to our server and passed to Google PageSpeed Insights, which loads the page and measures it. We do that so the result is a real Lighthouse measurement rather than a guess.

We do not store the address, and we do not record who checked what. The result is held in a short-lived cache for a few hours so the same address is not re-measured repeatedly, and the address is kept in your own browser only long enough to fill in our contact form if you choose to continue. If you would rather nothing was sent to Google, do not use the field — just contact us instead.

Analytics

If you agree to it, this site uses Google Analytics 4 to understand how visitors use it – which pages are opened, roughly where visitors are located, what device and browser they use, and how they arrived. It is set to store nothing until you accept on the banner shown on your first visit, and declining keeps storage switched off permanently. Full detail is in our Cookies Policy.

Google Analytics is provided by Google, which processes that information as well as us and may transfer it outside your country. We do not use it to identify individuals, and IP addresses are anonymised.

Web fonts

The typefaces used on this site are requested from Google Fonts when a page loads. To deliver a font file, Google receives your IP address and basic browser information. Google states that it does not use these requests to build advertising profiles, but the request itself is a transfer of data to Google and we would rather tell you than leave it unsaid.

Server logs

Like nearly all websites, our hosting provider records technical information when a page is requested – IP address, timestamp, the page requested, and browser identification. These logs exist for security and for diagnosing faults.

What we do not do

Beyond the analytics described above we run no advertising pixels, social media trackers, session recording, or profiling of visitors. We do not sell personal information, and we do not use it for automated decision-making.

Form submissions are not stored in this website’s database. They are sent straight to us by email, which means fewer copies exist than on most sites. The copies that do exist are:

• Our email, where enquiries and applications arrive and are read.
• Our outgoing mail log, kept by the site’s mail delivery plugin, which retains a record of messages sent by the site including their content.
• Uploaded files such as CVs, stored on the same hosting.
• Backups of the website, which include the database and uploads.

Access is limited to people who need it to run the business and the website. We use the following categories of third-party service, each of which processes data on our instructions:

• Our web hosting provider, which stores the site, its database and its backups.
• Our email provider, which delivers and holds the messages the site sends.
• Google, for Google Analytics where you have accepted it, for the web fonts used on this site, for PageSpeed Insights when you use the website check field, and for reCAPTCHA on our two forms.

Some of the services above may store or process information outside the country you are in, including outside the UK and European Economic Area. The Google Fonts request described earlier involves Google receiving your IP address, and Google operates globally.

Where information is transferred internationally, it must be protected by a lawful transfer mechanism such as the provider’s standard contractual clauses or an adequacy decision. If you would like detail on a specific transfer, ask us.

In practice, this website and its database are hosted in Singapore, so information you send us through this site is stored there.

We keep personal information only for as long as there is a reason to have it.

• Enquiries are kept for up to 12 months from our last contact, then deleted.
• Job applications are kept for up to 12 months, and beyond that only if you have asked us to keep you in mind.
• Analytics data is kept for the retention period configured in Google Analytics.
• Backups are overwritten on a rolling basis, so deleted data can persist in a backup for a short period before it is cycled out.

You can ask us to delete what we hold at any time.

As a general rule we keep enquiry and application records for 12 months, after which they are deleted unless we are still working together or you have asked us to keep them on file.

You have rights over the personal information we hold about you, including the right to see it, correct it, have it deleted, restrict or object to how we use it, and receive a copy in a portable format.

These rights, and how to use them, are set out in full on our GDPR page. There is no charge, and we will respond within one month.

The site is served over an encrypted HTTPS connection, kept up to date, and backed up. Access to the website’s administration and to the mailbox where enquiries arrive is restricted.

No website can promise perfect security, and we would rather say so than imply otherwise. If a breach affected your information and created a real risk to you, we would tell you and the relevant authority as required by law.

This site offers business services and is not directed at children. We do not knowingly collect information about anyone under 16. If you believe a child has sent us personal information, contact us and we will delete it.

If we change how we handle personal information we will update this page and change the “last updated” date at the top. Significant changes will be made obvious rather than slipped in quietly.

For anything about this policy, or to exercise any of your rights, email privacy@blac-m.com. General enquiries are better sent through our contact form.

For data protection matters specifically, email privacy@blac-m.com – that address goes straight to the person who handles these requests.