Privacy Notice

1. Controller and contact

Operator: Aleksandr Polishchuk, sole trader using the trading name BLCKROOM. NIF 318557134.

Legal and tax address: Rua Angola, no. 26, Apt. 1, 2690-344 Santa Iria de Azoia, Portugal.
Service location: Rua Rodrigues Sampaio 76, 1150-281 Lisboa, Portugal.
Contact: pr.alexander.p@gmail.com; +351 964 217 839; WhatsApp +351 964 217 839; Telegram @blckroomLisbon; Instagram @alex_blckroom.

2. Scope and sources

This notice applies when you visit blckroom.com, choose cookie preferences, contact or request a booking by phone, email, WhatsApp or Telegram, receive a service, pay, request a tax document or complain. The site has no form, user account or CRM. Data normally comes directly from you; technical data is generated by the browser and services used.

3. Data categories

Data may include name or profile name, phone, email, language, chosen channel, service, duration, preferred date/time and message content; booking confirmations and changes; payment and tax-document details; complaint and rights-request data; IP, time, resource, browser/device and necessary technical logs; cookie choice; and, after consent, limited identifiers and GA4 events.

4. Health data

BLCKROOM does not request diagnoses, test results, clinical photographs, detailed medical histories or other health data through the website, email, WhatsApp or Telegram. Do not send such data digitally. If sent without request, access will be restricted and the data deleted when no longer needed, unless law or legal-claims requirements apply.

5. Purposes and legal bases

• Replies and booking preparation: pre-contract steps, GDPR 6(1)(b).
• Booking, service, packs, vouchers and payment: contract performance, 6(1)(b).
• Tax records and authority requests: legal obligation, 6(1)(c).
• Site security: legitimate interest, 6(1)(f).
• Complaints and claims: legal obligation and/or legitimate interest.
• GA4: consent, 6(1)(a).

6. Recipients

Data may be handled by technical infrastructure and support providers; Google for email and, only after consent, GA4; telecom providers, Meta/WhatsApp and Telegram when chosen; banking/payment, billing, accounting, legal and other advisers; and tax authorities, ASAE, courts, CNPD and other authorities where required. BLCKROOM does not sell personal data.

7. International transfers

Some providers may process data outside the EEA. Where applicable, an adequacy decision, Standard Contractual Clauses or another GDPR Chapter V mechanism and supplementary measures are used.

8. Retention

• Enquiries without booking: up to 6 months after the last interaction.
• Bookings and contractual correspondence: up to 24 months after the last session.
• Invoices, receipts and accounting/tax records: 10 years or another mandatory period.
• Packs and vouchers: validity plus the period needed for contract, accounting and complaints.
• Complaints and rights requests: for handling and legal claims.
• Technical logs: operational target up to 90 days unless an incident or proportionate provider requirement applies.
• GA4 user/event data: 2 months with reset on new activity disabled.
• Cookie choice: until notice-version change, user change/withdrawal or browser clearing.

9. Rights and security

Where applicable, you may request access, correction, erasure, restriction, portability, object and withdraw consent. A response is normally provided within one month. You may complain to the CNPD. Safeguards include sole-operator access, MFA, unique passwords, updated and locked devices, backups, message minimisation and deletion routines. Send requests to pr.alexander.p@gmail.com.

10. Changes

This notice is reviewed when services, channels, providers, purposes or legal requirements change. Renewed consent is obtained before any processing that requires it. Last updated: 7 September 2026.