LEGAL · PRIVACY POLICY

Privacy policy

How BLIQ collects, uses and protects the personal data of people who visit the site, contact us or use our services.

Last updated: 26.09.2026
In short
✓
We only process the data needed to answer requests and provide the service.
✓
We do not sell personal data or use it for advertising.
✓
Sector benchmarks only use aggregated, anonymised data.
01

Data controller

BLIQ is the controller of personal data collected through bliq.pt and in providing its services. Contact: geral@bliq.pt · Porto, Portugal.

02

Who this applies to

This policy applies to site visitors, people who contact us and representatives of client or prospective client companies. BLIQ services are intended exclusively for businesses and professionals; we do not knowingly collect data from anyone under 18.

03

Data we process

→
Identification and contact — name, work email, company, role and number of employees.
→
Company data — public financial information and management data. This is mostly data about legal entities, but may include personal data (e.g. of partners, directors or sole traders).
→
Files shared by the client — SAF-T, ERP exports or other documents, which may contain third-party data (customers, suppliers, employees).
→
Communications — messages and requests you send us.
→
Technical data — the minimum needed for the site to work, such as the IP address processed by hosting and font providers.
04

Purposes and legal basis

→
Answering requests and preparing proposals — pre-contractual steps (Art. 6(1)(b) GDPR).
→
Providing the contracted service — performance of a contract (Art. 6(1)(b)).
→
Meeting legal obligations — tax, accounting or requests from authorities (Art. 6(1)(c)).
→
Improving the service and producing sector benchmarks from aggregated, anonymised data — legitimate interest (Art. 6(1)(f)).
→
Defending legal claims — legitimate interest (Art. 6(1)(f)).
05

Third-party data in client files

When a client shares files containing third parties’ personal data, BLIQ acts as a processor (Art. 28 GDPR): it processes that data only to provide the service and on the client’s instructions. The client is responsible for having a lawful basis to share it and for informing the individuals concerned.

06

Artificial intelligence

Some features use artificial intelligence models to analyse data and generate answers. The outputs are decision-support recommendations. BLIQ does not make solely automated decisions that produce legal effects on individuals.

07

Who we share data with

We use providers that process data on our behalf, under contract and only on our instructions:

→
Hosting and cloud infrastructure.
→
Contact form delivery (Formspree).
→
Artificial intelligence model providers.
→
Site typography (Google Fonts).

We may also disclose data to authorities where required by law. We do not sell personal data.

08

International transfers

Some providers may process data outside the European Economic Area. In those cases, transfers rely on European Commission adequacy decisions or standard contractual clauses.

09

Retention

→
Contact requests with no business relationship: up to 24 months after last contact.
→
Client data: for the duration of the contract and then for the applicable legal periods or as needed to defend legal claims.
→
Shared files: deleted or returned at the end of the contract, unless the law requires retention.
10

Security

We apply appropriate technical and organisational measures — encryption in transit, access control and data minimisation. No system is completely secure; in the event of a data breach, we will act and notify as required by law.

11

Your rights

You can access, rectify, erase, restrict or object to the processing of your data, and request its portability. See how in GDPR — data subject rights.

12

Changes

We may update this policy. The version in force is always the one published on this page, with its last-updated date.

Questions about this document?

Write to us. We will reply as soon as possible.

Write to BLIQ →