Legal
Privacy Policy
What personal information this website collects, why we collect it, who it is shared with, and the choices you have over it.
Last updated: 5 September 2026
Who this policy covers
This policy applies to blac-m.com and to any personal information you give us through it. "We" and "us" mean BLAC-M, the business that operates this website.
We are the data controller for the information described below, which means we decide what is collected and what happens to it.
BLAC-M LTD.
Dubai, United Arab Emirates
You can reach us about anything on this page through our contact form, or by email at privacy@blac-m.com.
Information you give us
We only receive what you actively send us. There are two forms on this site.
Contact form
When you make an enquiry through the contact page we collect your first and last name, email address, phone number, company name, website address, the type of enquiry you select, and your message.
Careers form
When you apply through the careers page we collect your first and last name, email address, phone number, the discipline you select, a portfolio or profile link if you provide one, your message, and any CV or document you choose to upload (PDF or Word, up to 5 MB).
Please do not include information in an application that you would not want us to hold - for example date of birth, identity documents, or health information. We do not need any of it to consider you.
The website check field on our home page
The "Run Free Check" field on our home page currently does not send anything to us. The address you type is stored temporarily in your own browser and you are taken to our contact form. Nothing reaches us unless you then submit that form.
Information collected automatically
Analytics
If you agree to it, this site uses Google Analytics 4 to understand how visitors use it - which pages are opened, roughly where visitors are located, what device and browser they use, and how they arrived. It is set to store nothing until you accept on the banner shown on your first visit, and declining keeps storage switched off permanently. Full detail is in our Cookies Policy.
Google Analytics is provided by Google, which processes that information as well as us and may transfer it outside your country. We do not use it to identify individuals, and IP addresses are anonymised.
Web fonts
The typefaces used on this site are requested from Google Fonts when a page loads. To deliver a font file, Google receives your IP address and basic browser information. Google states that it does not use these requests to build advertising profiles, but the request itself is a transfer of data to Google and we would rather tell you than leave it unsaid.
Server logs
Like nearly all websites, our hosting provider records technical information when a page is requested - IP address, timestamp, the page requested, and browser identification. These logs exist for security and for diagnosing faults.
What we do not do
Beyond the analytics described above we run no advertising pixels, social media trackers, session recording, or profiling of visitors. We do not sell personal information, and we do not use it for automated decision-making.
Why we use your information, and our legal basis
| Purpose | Information used | Legal basis |
|---|---|---|
| Answering your enquiry and discussing possible work | Contact form fields | Steps taken at your request before entering a contract, and our legitimate interest in responding to enquiries |
| Considering a job application | Careers form fields and your CV | Steps taken at your request before a possible employment contract |
| Keeping a record of enquiries and correspondence | Form submissions and email | Our legitimate interest in maintaining accurate business records |
| Understanding how the site is used, if you agree | Analytics data | Your consent, which you can withdraw at any time |
| Keeping the site secure and available | Server logs, backups | Our legitimate interest in protecting our systems |
Where we rely on legitimate interests, we have considered whether our reasons are outweighed by your rights, and you can object at any time - see your rights.
Where your information is stored and who can see it
Form submissions are stored in this website's database and are also sent to us by email. Copies therefore exist in more than one place:
- This website's database, on our hosting provider's servers, where submissions are retained by the website software.
- Our email, where enquiries and applications arrive and are read.
- Our outgoing mail log, kept by the site's mail delivery plugin, which retains a record of messages sent by the site including their content.
- Uploaded files such as CVs, stored on the same hosting.
- Backups of the website, which include the database and uploads.
Access is limited to people who need it to run the business and the website. We use the following categories of third-party service, each of which processes data on our instructions:
- Our web hosting provider, which stores the site, its database and its backups.
- Our email provider, which delivers and holds the messages the site sends.
- Google, for Google Analytics where you have accepted it, and for the web fonts used on this site.
International transfers
Some of the services above may store or process information outside the country you are in, including outside the UK and European Economic Area. The Google Fonts request described earlier involves Google receiving your IP address, and Google operates globally.
Where information is transferred internationally, it must be protected by a lawful transfer mechanism such as the provider's standard contractual clauses or an adequacy decision. If you would like detail on a specific transfer, ask us.
In practice, this website and its database are hosted in Singapore, so information you send us through this site is stored there.
How long we keep it
We keep personal information only for as long as there is a reason to have it.
- Enquiries are kept for up to 12 months from our last contact, then deleted.
- Job applications are kept for up to 12 months, and beyond that only if you have asked us to keep you in mind.
- Analytics data is kept for the retention period configured in Google Analytics.
- Backups are overwritten on a rolling basis, so deleted data can persist in a backup for a short period before it is cycled out.
You can ask us to delete what we hold at any time.
As a general rule we keep enquiry and application records for 12 months, after which they are deleted unless we are still working together or you have asked us to keep them on file.
Your rights
You have rights over the personal information we hold about you, including the right to see it, correct it, have it deleted, restrict or object to how we use it, and receive a copy in a portable format.
These rights, and how to use them, are set out in full on our GDPR page. There is no charge, and we will respond within one month.
Security
The site is served over an encrypted HTTPS connection, kept up to date, and backed up. Access to the website's administration and to the mailbox where enquiries arrive is restricted.
No website can promise perfect security, and we would rather say so than imply otherwise. If a breach affected your information and created a real risk to you, we would tell you and the relevant authority as required by law.
Children
This site offers business services and is not directed at children. We do not knowingly collect information about anyone under 16. If you believe a child has sent us personal information, contact us and we will delete it.
Changes to this policy
If we change how we handle personal information we will update this page and change the "last updated" date at the top. Significant changes will be made obvious rather than slipped in quietly.
How to contact us
For anything about this policy, or to exercise any of your rights, email privacy@blac-m.com. General enquiries are better sent through our contact form.
For data protection matters specifically, email privacy@blac-m.com - that address goes straight to the person who handles these requests.