PRIVACY POLICY

Last updated: [16/08/2026]

1. Controller

This Privacy Policy explains how ALEKSEI KRAVTSOV, doing business as 1Choice (“we”, “us”, or “our”), processes personal data through our website, customer relationship management system, and communication services.

Controller:

Legal name: ALEKSEI KRAVTSOV
Registered address: RUA TOMAS DA FONSECA 36-17 B
Country: Portugal
Email: alexkrusvl@gmail.com
Website: https://1choice.pro

2. Scope

This Privacy Policy applies to personal data processed through:

- our website;
- our CRM and customer communication system;
- Facebook Messenger;
- Instagram Direct;
- Facebook and Instagram comments;
- Facebook Lead Ads forms;
- email communications;
- other communication channels connected to our CRM.

3. Personal data we process

Depending on how you interact with us, we may process:

- name and username;
- email address;
- telephone number;
- Facebook user or page identifiers;
- Instagram username or account identifier;
- message and conversation content;
- comments and replies;
- attachments, photographs, and documents sent to us;
- information submitted through lead forms;
- appointment, quotation, project, and service details;
- timestamps, delivery statuses, and communication history;
- technical information required to protect and operate our services.

We do not intentionally request or process special categories of personal data through our communication channels.

Please do not send us health information, financial account credentials, passwords, or other sensitive information through Messenger, Instagram, email, or our website.

4. How we collect personal data

We may receive personal data:

- directly from you;
- when you send us a message;
- when you comment on our Facebook or Instagram content;
- when you submit a Facebook Lead Ad form;
- when you contact us by email or telephone;
- from Meta Platforms when you interact with our Facebook Page or Instagram account;
- from service providers operating our communication infrastructure.

5. Purposes of processing

We process personal data for the following purposes:

- responding to enquiries and messages;
- providing quotations and services;
- arranging appointments and visits;
- communicating with customers;
- managing customer relationships and projects;
- processing requests submitted through lead forms;
- keeping a history of customer communications;
- handling complaints and support requests;
- preventing fraud, abuse, spam, and unauthorised access;
- maintaining the security and availability of our systems;
- complying with legal and accounting obligations;
- defending or exercising legal claims.

We do not sell personal data.

6. Legal bases

Depending on the circumstances, we process personal data on the following legal bases:

- performance of a contract or steps requested before entering into a contract;
- our legitimate interests in responding to enquiries, operating our business, protecting our systems, and managing customer relationships;
- compliance with legal obligations;
- consent, where consent is required by applicable law.

Where processing is based on consent, you may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

7. Meta Platforms

We use Meta services, including Facebook Messenger, Instagram, Facebook Pages, Instagram professional accounts, comments, and Lead Ads.

When you interact with us through Meta Platforms, Meta may provide us with information necessary to deliver your message, comment, lead request, or other interaction to our CRM.

We use this information only to:

- respond to your enquiry;
- provide requested services;
- manage customer communication;
- process your request;
- maintain communication records;
- protect our systems.

Meta processes personal data under its own privacy policy and terms. You can read Meta’s privacy policy at:

https://www.facebook.com/privacy/policy/

Our use of Meta data is limited to the purposes described in this Privacy Policy.

8. Service providers

We may use carefully selected service providers for:

- hosting and infrastructure;
- database and backup services;
- email delivery;
- security and monitoring;
- CRM operation;
- technical support.

Service providers may process personal data only as necessary to provide services to us and under appropriate contractual and security requirements.

9. International transfers

Some service providers may process personal data outside Portugal or the European Economic Area.

Where personal data are transferred outside the European Economic Area, we use appropriate safeguards required by applicable data protection law, such as an adequacy decision, standard contractual clauses, or another lawful transfer mechanism.

10. Retention

We keep personal data only for as long as necessary for the purposes described in this Policy.

Communication records may be retained while an enquiry, quotation, project, customer relationship, complaint, or legal obligation remains active.

After that period, data are deleted, anonymised, or securely archived where retention is required by law.

The exact retention period depends on:

- the type of data;
- the purpose of processing;
- legal and accounting requirements;
- the need to establish or defend legal claims.

11. Security

We use reasonable technical and organisational safeguards, including:

- encrypted storage of access credentials;
- role-based access controls;
- authentication and authorisation;
- audit logging;
- webhook signature verification;
- duplicate-event protection;
- backups and recovery procedures;
- monitoring of failed or suspicious events;
- restricted access to customer data.

No internet transmission or storage system can be guaranteed to be completely secure.

12. Your rights

Subject to applicable law, you may have the right to:

- request access to your personal data;
- request correction of inaccurate data;
- request deletion of your personal data;
- request restriction of processing;
- object to processing based on legitimate interests;
- withdraw consent;
- request portability of data where applicable;
- lodge a complaint with a competent supervisory authority.

To exercise your rights, contact:

alexkrusvl@gmail.com

We may request information necessary to verify your identity before processing a request.

You also have the right to lodge a complaint with the Portuguese data protection authority:

Comissão Nacional de Proteção de Dados (CNPD)
Website: https://www.cnpd.pt

13. Children

Our services are not directed to children. We do not knowingly collect personal data from children through our CRM or communication channels.

14. Cookies

Our website may use cookies and similar technologies necessary for website operation, security, analytics, or user preferences.

Where required by law, we will request consent before using non-essential cookies.

15. Changes

We may update this Privacy Policy from time to time. The updated version will be published on this page with a new “Last updated” date.

16. Contact

For privacy questions or requests, contact:

ALEKSEI KRAVTSOV
RUA TOMAS DA FONSECA 36-17 B
alexkrusvl@gmail.com