Business identity and the details marked below must be confirmed before this draft is published as a final policy.
1. Who is responsible
This draft concerns the ithelp.mt website for an IT services business based in Rabat, Malta. Privacy enquiries can be sent to support@ithelp.mt. Before publication, confirm the legal identity and full contact address of the data controller, the actual hosting and email providers, processing locations, retention arrangements and the effective date.
2. Information you provide
The contact and campaign forms collect your name, email address, optional phone number, selected service and message. We use this information to respond and discuss the services you request. Please do not send passwords, remote access codes or sensitive business records. If online sending is unavailable, the website says so and offers email and WhatsApp links. Clicking those links opens an external service; submitting details in the form does not send them to WhatsApp.
3. Purpose and proposed lawful bases
The proposed basis for responding to a requested quotation or service enquiry is taking steps at your request before entering a contract. For other correspondence and necessary website security, the proposed basis is legitimate interests in answering enquiries and protecting the service. The business must confirm the correct basis for its actual activities and document any necessary assessment. Enquiries do not enrol you in marketing, and this website does not make automated decisions about you.
4. How the website handles enquiries
After validation and security checks, a configured form sends the enquiry through the selected authenticated SMTP email provider to the business mailbox. The form handler does not create a customer database or retain message contents in local files. Your message may remain in business and provider mailboxes. A successful screen confirms acceptance by the email server, not guaranteed inbox delivery. There are no automatic marketing emails or auto-replies.
5. Security information, hosting and logs
The host receives technical request information such as IP addresses, time, requested URLs and browser information, and may keep access or security logs. The form uses short-lived signed submission tokens, a honeypot and rate limits. It stores keyed hashes of IP addresses, attempt timestamps and token identifiers in private server files for up to one hour; expired files are removed on subsequent form requests. Inactive sites may retain an expired file until the next request or scheduled cleanup. Form error logs contain generic error codes, not enquiry contents or passwords. Confirm hosting-log retention and restrict access to these files.
6. Cookies and optional tracking
This supplied website does not set cookies or use browser storage. It does not load analytics, advertising pixels, external fonts, embedded maps or social widgets. Submission tokens are held in the page while it is open. Hosting security services or later integrations must be reviewed separately. Before adding nonessential tracking, update this notice and implement any required consent controls that actually govern the tracking.
7. Providers, links and remote software
The hosting provider and configured email provider process data needed to run the website and deliver enquiries. Ticket and account portals are separately managed services. Links to WhatsApp, AnyDesk, AnyViewer and other external services take you to those providers, whose own notices and terms apply. The website itself does not initiate a remote session or record its contents. Any processing during an actual support session needs to be covered by the agreed service arrangements.
8. Retention, sharing and international processing
The business must set and confirm a documented retention period or clear retention criteria for enquiries, mailbox records and host logs before publication. Keep records only as long as needed for the stated purpose, any resulting service relationship and applicable obligations, then delete them securely. Confirm the actual providers, recipients, processing locations and any transfers outside the EEA, including the applicable safeguards. These arrangements have not been independently verified.
9. Your choices and rights
Depending on the circumstances and applicable law, you may request access, correction, deletion, restriction or portability of your personal data, and may object to certain processing. Where processing relies on consent, you may withdraw it. Contact support@ithelp.mt to make a privacy enquiry; identity verification may be needed. You can raise a complaint with Malta’s Information and Data Protection Commissioner at idpc.org.mt. This draft requires business and appropriate legal review before publication.
Questions about this draft? Contact sales@ithelp.mt.