BLACTRIUM Privacy Policy
Last Updated: 14th August 2026
Blactrium Ltd (“Blactrium”, “we”, “us”, or “our”) is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, store, and share your personal data when you use the Blactrium platform, including our website and mobile application (collectively, the “Platform”).
Blactrium Ltd is the data controller for the purposes of UK GDPR and the Data Protection Act 2018.
Company Registration Number: 16899748
Registered Office: 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom
ICO Registration Number: ZC145538
By using the Platform, you acknowledge that you have read and understood this Privacy Policy.
1. Information We Collect
1.1 Information You Provide Directly
When you create an account or register a business listing on the Platform, we may collect:
• Full name
• Email address
• Username
• Profile photo
• Business name and description
• Business address and contact details
• VAT number (if applicable)
• Bank or payout details (via payment processor)
• Customer service contact details
• Identity verification information (if required)
1.2 Transaction Information
When purchases or bookings are made through the Platform, we collect:
• Order details
• Product or service purchased
• Transaction amount
• Date and time
• Buyer and seller identifiers
• Shipping address (if applicable)
• Refund and dispute history
Blactrium does not store full payment card details. Payments are processed by third-party providers.
1.3 Payment Information
Payments are handled by Stripe. We may receive:
• Transaction confirmations
• Payout status
• Limited payment metadata
We do not store complete card numbers or full payment credentials.
1.4 User-Generated Content
We collect content you choose to submit, including:
• Reviews, ratings, and comments
• Photos and media uploads
• Business listings and directory entries
• Messages sent via the Platform
1.5 Automatically Collected Information
When you use the Platform, we may automatically collect:
• Device type and operating system
• IP address
• Log data and timestamps
• App usage analytics
• Crash and error reports
• Approximate location (if enabled — see Section 1.6)
This data is collected via our hosting infrastructure (DigitalOcean), Firebase services, and analytics tools, and is used to operate, secure, and improve the Platform.
1.6 Location Information
If you grant location permissions:
• We may use approximate location data (e.g. city-level) to display relevant nearby businesses
• We do not track precise GPS location unless you explicitly enable it
• Location access can be disabled at any time via your device settings
2. Lawful Bases for Processing (UK GDPR)
We process your personal data on the following legal bases:
• Contract: Processing necessary to provide the Platform and fulfil our agreement with you (e.g. account creation, business listings, transaction processing).
• Legal Obligation: Processing required to comply with applicable laws, including tax obligations, fraud prevention, and regulatory requirements.
• Legitimate Interests: Processing for our legitimate business interests where these are not overridden by your rights (e.g. platform security, fraud prevention, usage analytics to improve our services).
• Consent: Where you have given us explicit consent (e.g. marketing emails, location access, push notifications). You may withdraw consent at any time without affecting the lawfulness of prior processing.
3. How We Use Your Information
We use your information to:
• Create and manage user accounts and business listings
• Operate directory, review, and marketplace functionality
• Process transactions and facilitate buyer–seller interactions
• Provide customer support
• Detect and prevent fraud and misuse
• Comply with tax and regulatory requirements
• Improve Platform performance and user experience
• Send transactional communications (e.g. account verification, password resets, booking confirmations)
• Send marketing communications where you have given consent (you may withdraw at any time)
• Enforce our Terms of Service and policies
We do not sell your personal data.
4. Third-Party Services
We use trusted third-party service providers to support the Platform, including:
• Hosting and infrastructure: DigitalOcean, Firebase (Google)
• Authentication: Firebase Authentication, Facebook Login (Meta)
• Analytics and performance: Firebase Analytics, Google Analytics
• Payment processing: Stripe
• Subscription management: RevenueCat
• Email and CRM: Brevo
• Location services: Google Places
These providers process data on our behalf and are subject to contractual and legal data protection obligations. Where providers are based outside the UK or EEA, we ensure appropriate safeguards are in place (see Section 6).
5. How We Share Your Information
5.1 Publicly Visible Information
The following information may be visible to other users of the Platform:
• Username and profile photo
• Business name, description, and contact details
• Directory listings
• Reviews, ratings, and comments
5.2 With Service Providers
We share limited personal data with the trusted third-party providers listed in Section 4. All processors are contractually bound to use your data only for the purposes we specify and in compliance with applicable data protection law.
5.3 With Businesses (Directory and Marketplace Context)
When a user makes contact or completes a transaction with a listed business, that business may receive:
• Buyer name
• Contact email (if required for fulfilment)
• Shipping address (if applicable)
• Order details
Listed businesses act as independent data controllers for any customer data they receive and must comply with UK GDPR. Blactrium is not responsible for a business’s independent data practices. Users should contact businesses directly regarding how they process personal data.
5.4 Legal and Safety Requirements
We may disclose personal data where necessary to:
• Comply with applicable laws or regulations
• Respond to lawful requests from public authorities or court orders
• Protect the rights, safety, or property of users, the public, or Blactrium
• Enforce our Terms of Service and policies
5.5 Business Transfers
If Blactrium Ltd is acquired, merged, or sells assets, personal data may transfer to the new entity. We will notify users of any such change and any choices available to them, and the same privacy protections will apply.
6. International Data Transfers
Your data may be processed in countries outside the UK or EEA (for example, where our cloud or analytics providers operate).
Where such transfers occur, we implement appropriate safeguards including UK-approved Standard Contractual Clauses (SCCs), adequacy regulations, and contractual data protection commitments.
7. Data Retention
We retain personal data only for as long as:
• Your account remains active, or
• Is necessary for legal, regulatory, or operational purposes (e.g. tax records, dispute resolution, fraud monitoring)
Inactive accounts may be deleted after 24 months, subject to any legal retention requirements. When your data is no longer required, we will securely delete or anonymise it.
You may request deletion of your account and associated data at any time (see Section 9).
8. Security Measures
We implement reasonable technical and organisational safeguards to protect your personal data, including:
• Encrypted data transmission (HTTPS/TLS)
• Access controls and role-based internal access
• Secure cloud hosting
• Regular security monitoring
However, no platform or transmission over the internet can guarantee absolute security. You are responsible for keeping your account credentials secure.
9. Your Data Protection Rights
Under UK GDPR, you may have the following rights regarding your personal data:
• Access: Request a copy of the personal data we hold about you.
• Rectification: Request correction of inaccurate or incomplete data.
• Erasure: Request deletion of your personal data (“right to be forgotten”).
• Restriction: Request that we restrict processing of your data in certain circumstances.
• Objection: Object to processing based on legitimate interests or for direct marketing.
• Portability: Request your data in a structured, machine-readable format.
• Withdraw Consent: Where processing is based on consent, withdraw it at any time.
To exercise any of these rights, please contact us via the Contact Us section on our website (blactrium.com) or through the Blactrium app.
We will respond to verified requests within 30 days. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk if you are based in the UK.
10. Marketplace and Directory Role Clarification
Blactrium Ltd acts as:
• A data controller for all platform-level data collected through the Blactrium Platform
• A data processor where we handle data strictly on behalf of listed businesses
Blactrium is not responsible for data independently controlled by listed businesses once shared for order fulfilment, customer communications, or after-sales services. Customers should contact businesses directly regarding their data practices.
11. Children's Privacy
Blactrium is not intended for individuals under the age of 16. We do not knowingly collect personal data from children under 16.
If you believe a child has provided us with personal data without appropriate consent, please contact us and we will take steps to delete it promptly.
12. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. Material changes will be communicated via in-app notice, email, or the “Last Updated” date at the top of this document.
We encourage you to review this policy periodically. Continued use of the Platform after changes are published constitutes your acceptance of the updated policy.
13. Contact Us
If you have any questions, concerns, or requests relating to this Privacy Policy or how we handle your personal data, please contact us:
• Via the Contact Us section on our website: blactrium.com
• Via the Blactrium mobile app
Blactrium Ltd
71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom
Company Registration Number: 16899748
ICO Registration Number: ZC145538