Privacy
Privacy Policy
Last updated: 12 October 2026
This policy explains how Malta Digital ("we", "us") handles personal data when you visit malta-digital.com, send us an enquiry, fill in a Facebook or Instagram lead form, or message us on WhatsApp. We are based in Malta and handle personal data under the EU General Data Protection Regulation (GDPR) and the Maltese Data Protection Act.
Who is responsible for your data
Malta Digital is the data controller. You can reach us at johnny@malta-digital.com for anything related to your personal data.
What we collect
- Enquiry and lead forms: your name, business name, phone number, email address (if given), and your answers about your goals, timing and advertising budget.
- WhatsApp, calls and email: your phone number or email address, your name if shared, and the content of the messages you send us.
- Website usage: technical data such as pages visited, device and browser type, approximate location and referral source, collected through cookies and the Meta Pixel.
Why we use it and our legal basis
- To reply to your enquiry, discuss your business and prepare a proposal (steps taken at your request before a contract, and our legitimate interest in running our business).
- To deliver and administer services you buy from us (performance of a contract).
- To measure and improve our website and our own advertising (your consent where cookies or pixels are used, and our legitimate interest).
- To meet legal, tax and accounting obligations.
We contact you only about the enquiry you made, and about our services where the law allows it. You can ask us to stop at any time.
Facebook and Instagram lead forms
When you submit a lead form on Facebook or Instagram, Meta Platforms Ireland Limited passes the answers to us. Meta processes data under its own privacy policy. We use your answers only to respond to you and to qualify your enquiry, for example to understand your budget and timing.
Cookies and the Meta Pixel
Our website uses the Meta Pixel. It records visits and actions on our site so we can measure how our adverts perform and show our adverts to relevant people on Facebook and Instagram. It may set cookies in your browser and send data to Meta. You can block cookies in your browser settings, and you can manage ad preferences in your Facebook and Instagram settings.
Who we share data with
We do not sell personal data. We share it only with providers that help us run the business, under appropriate safeguards: Meta (advertising, lead forms, WhatsApp), our website host Netlify, and email and business tools we use to manage enquiries. Where data is transferred outside the EU/EEA, we rely on safeguards such as the EU Standard Contractual Clauses or an adequacy decision.
How long we keep it
Enquiries that do not become a client are kept for up to 24 months and then deleted. Client records and invoices are kept for as long as the law requires, usually up to 10 years for accounting records. You can ask us to delete your data earlier, unless we must keep it by law.
Your rights
You can ask to access, correct or delete your personal data, restrict or object to its use, take a copy of it, or withdraw consent at any time. Email johnny@malta-digital.com and we will reply within one month. You also have the right to complain to the Office of the Information and Data Protection Commissioner (IDPC) in Malta at idpc.org.mt.
Security
We use access controls and reputable providers to protect your data, and we keep only what we need.
Changes
We may update this policy. The date at the top shows the latest version.