Last updated: 3 August 2026
We collect only the information needed to answer enquiries, deliver our services, protect this website and—when you consent—understand site usage. We do not sell personal data.
1. Who controls your personal data
Kollox Limited is the data controller for personal data processed through this website.
Kollox Limited
Company number: C51783
VAT number: MT20250112
Greystone, Flat 2, Sqaq San Isidoru
Mġarr, MGR 1271, Malta
Email: privacy@kollox.mt
2. Personal data we process
Enquiries and business communications
If you use our contact form, email us or contact us through WhatsApp, we may process your name, email address, telephone number, business name, selected service, message and subsequent correspondence.
Purpose and legal basis: responding to your request and preparing or performing a contract (Article 6(1)(b) GDPR), and our legitimate interest in managing genuine business enquiries (Article 6(1)(f) GDPR).
Website security and technical records
Our hosting systems may record IP address, requested URL, date and time, browser information, referrer and security events. The contact form also uses a temporary session cookie, anti-spam timing and rate-limiting records.
Purpose and legal basis: operating, securing and troubleshooting the website and preventing abuse, based on our legitimate interests (Article 6(1)(f) GDPR).
Consent preference
We store your Accept or Reject choice in your browser’s local storage for up to six months. This preference is necessary to remember your request and prevent the consent banner appearing on every page.
Optional analytics
These services are not loaded unless you click Accept optional:
| Service | Purpose | Possible data |
|---|---|---|
| Matomo Analytics | Audience measurement and site improvement | Page visits, referrer, device/browser details, approximate location and first-party analytics identifiers |
| Microsoft Clarity | Interaction analytics and session-replay insights | Clicks, scrolling, page interactions, device/browser details and analytics identifiers; sensitive form fields should be masked |
Legal basis: your consent (Article 6(1)(a) GDPR). You can reject these services and still use the website. You can also withdraw consent through .
3. External links
WhatsApp and other external links open services operated by third parties. If you follow a link, that provider processes information under its own privacy terms. Merely displaying our WhatsApp link does not load WhatsApp tracking on this website.
4. Who receives personal data
Access is limited to Kollox Limited and service providers needed to operate the website and answer enquiries, such as hosting, email delivery, IT support and—only after consent—the optional providers listed above. Providers acting for us must process data under appropriate contractual and confidentiality obligations. We may disclose information where required by law or to establish, exercise or defend legal claims.
We do not sell or rent personal data.
5. International transfers
Some service providers may process data outside Malta or the European Economic Area. Where GDPR requires it, transfers must rely on an adequacy decision, Standard Contractual Clauses or another lawful safeguard. Provider locations and safeguards can change, so their current privacy notices should also be consulted.
6. How long we keep information
- Enquiries are retained while we respond and for a limited follow-up period, unless they become part of a client relationship or must be retained for a legal claim.
- Client and transaction records are retained for the contract and any period required by Maltese tax, accounting or other applicable law.
- Security and server records are retained only as long as reasonably needed for security, investigation and operational continuity.
- Optional analytics data follows the retention settings configured in those services and their applicable policies.
- Your browser consent preference expires after six months unless you change it sooner.
7. Your GDPR rights
Depending on the circumstances, you may request access, correction, erasure, restriction, portability, or object to processing based on legitimate interests. You may withdraw consent at any time without affecting processing already carried out lawfully.
Email privacy@kollox.mt to make a request. We may ask for proportionate information to confirm your identity. We normally respond within one month, subject to the extensions permitted by GDPR.
For a practical explanation and cookie controls, visit our GDPR & Cookie Choices page.
8. Complaints
You may complain to Malta’s Information and Data Protection Commissioner (IDPC) if you believe your personal data has been processed unlawfully. Visit the IDPC complaint page. We would appreciate the opportunity to address your concern first, but you do not have to contact us before approaching the IDPC.
9. Security, children and automated decisions
We use proportionate technical and organisational safeguards, including HTTPS, access controls, input validation and anti-abuse controls. No internet service can guarantee absolute security.
This website is directed at businesses and is not intended for children. We do not use website data for automated decisions that produce legal or similarly significant effects.
10. Changes and contact
We may update this policy when our services or legal obligations change. The date at the top identifies the current version.
Questions about this policy or our data practices can be sent to privacy@kollox.mt.