Privacy Policy
We collect as little personal data as possible and use it only to run this website and respond to you. This policy explains what we process, why, for how long, and your rights.
Last updated: 29 October 2026
Who Is Responsible for Your Data?
The controller under the EU General Data Protection Regulation (GDPR) and Malta’s Data Protection Act (Cap. 586) is:
SEO-Malta – C. Badde
50 Triq il-Marfa, Bay Blue 2, MLH 9065, Mellieħa, Malta
Telephone: +356 9909 9989
VAT: MT24104415
For any privacy question or request, contact us using the details above or via the contact page.
What Data Is Processed When You Visit the Website?
When you open a page, your browser automatically sends technical information to the server hosting this site: your IP address, the date and time of the request, the page requested, the referring page, and your browser and operating system. This is needed to deliver the website securely and to detect and prevent abuse.
- Legal basis: our legitimate interest in operating a secure, functioning website (Article 6(1)(f) GDPR).
- Retention: server log files are kept only for a short period by our host for security purposes and then deleted, unless needed to investigate a specific incident.
We do not currently use analytics, advertising or tracking tools such as Google Analytics or Meta Pixel on this website. If that changes, we will update this policy and ask for your consent where required.
Hosting
This website is hosted by Hostinger International Ltd (Cyprus) and its group companies, including Hostinger UAB (Lithuania), which process data on our behalf as a processor. Details are in Hostinger’s privacy policy.
Booking a Call (TidyCal)
When you book a call, the booking form is provided by TidyCal, operated by Sumo Group Inc., Austin, Texas, USA. You enter your name, email address and any information you choose to share, and TidyCal processes it to schedule the meeting and send confirmations. We use this information only to prepare for and hold the call and to follow up on your enquiry.
- Legal basis: steps taken at your request before entering into a contract (Article 6(1)(b) GDPR) and our legitimate interest in responding to enquiries (Article 6(1)(f)).
- International transfer: TidyCal is based in the United States. TidyCal states that it complies with the GDPR and offers a Data Processing Addendum for transfers of EU personal data. See the TidyCal privacy policy.
- Retention: we keep enquiry and booking details for as long as needed to handle your enquiry and, if no business relationship follows, delete them within 24 months.
The booking form opens only when you click a booking button. Before that, no data is sent to TidyCal.
Contacting Us by Phone or Email
If you call or write to us, we process the details you provide to answer you (Article 6(1)(b) or (f) GDPR) and keep them as long as necessary for that purpose.
Clients
If you become a client, we process contact, billing and project data to deliver our services and meet our legal obligations (Article 6(1)(b) and (c) GDPR). Accounting and tax records are kept for the periods required by Maltese law.
Email Sign-Up Forms
The website uses Hostinger Reach, Hostinger’s email-marketing service. If we offer a newsletter or sign-up form and you subscribe, we process your email address to send the messages you asked for, based on your consent (Article 6(1)(a) GDPR). You can unsubscribe at any time using the link in every email.
Other Third-Party Content
- Emoji images: WordPress may load emoji images from s.w.org (WordPress.org), which receives your IP address when this happens.
- Social media links: links to our LinkedIn, Facebook, Pinterest and YouTube profiles are ordinary links. No data is sent to those networks unless you click them.
Cookies
This website uses only a small number of cookies that are necessary for it to work or that remember a choice you made. Details are in our Cookie Policy.
Your Rights
Under the GDPR you have the right to:
- access the personal data we hold about you (Article 15);
- have inaccurate data corrected (Article 16);
- have your data erased (Article 17);
- restrict processing (Article 18);
- receive your data in a portable format (Article 20);
- object to processing based on legitimate interests (Article 21);
- withdraw consent at any time, without affecting processing carried out before withdrawal.
To exercise any of these rights, contact us using the details above. We will respond within one month.
Right to Complain
You have the right to lodge a complaint with the supervisory authority in Malta:
Office of the Information and Data Protection Commissioner (IDPC)
Floor 2, Airways House, Triq Il-Kbira, Tas-Sliema SLM 1549, Malta
Telephone: +356 2328 7100
Email: idpc.info@idpc.org.mt
Website: idpc.org.mt
We would appreciate the chance to resolve your concern first, so please feel free to contact us directly.
Security
This website is served exclusively over an encrypted HTTPS connection. We apply security headers and keep our software up to date. No method of transmission over the internet is completely secure, but we take appropriate technical and organisational measures to protect your data.
Changes to This Policy
We will update this policy when our processing changes or the law requires it. The date at the top shows the latest version. See also our Imprint and Terms & Conditions.
On this page
Start with SEO
Not sure where to begin? We’ll assess your situation in a free discovery call — honest, no pitch.
Book a discovery call →