Privacy policy
Who we are
Interface Agency Limited, a company registered in Malta under number C-74082, with its registered office at 19-25 Strait Street, Valletta, Malta VLT 1432, is the controller of the personal data described here. For any question about this policy, or to exercise the rights set out below, write to privacy@interfaceagency.com.
What we collect
This site has no registration and no user accounts, so we hold no profile, no credentials and no sign-in history for you.
This site has no user accounts; the personal data we hold comes from the contact forms you choose to submit. Sending a business enquiry, a consultation request, a feedback contribution, a general information request or a media enquiry stores your first and last name, your e-mail address, the name and website address of the organisation you represent, and the message you write. It also stores your telephone number with its country and area dialling code if you choose to give one — the phone field is optional. We store a confirmation reference for your submission and a record of whether the confirmation e-mail and text message we send you were delivered. Our servers keep short-lived technical logs, and once you grant analytics storage, Google Analytics records how the site is used.
How we use it
We use the details you submit to answer your enquiry and to carry out the work you ask us about. We use your e-mail address, and your telephone number where you gave one, to send you a confirmation that we received your submission and to reply to you. We use technical logs to keep the service secure and available, and analytics data to understand how the site is used so we can improve it. We do not sell your personal data, and we do not use it to make decisions about you by automated means alone.
Why we are allowed to
Where your enquiry is about engaging us, we handle your details to take steps at your request before entering into a contract. Otherwise we rely on our legitimate interest in receiving and answering the enquiries people send us, and in confirming to you that a submission arrived. We rely on your consent for analytics and marketing storage, on our legitimate interest in keeping the service secure and functioning, and on our legal obligations where tax, accounting or law-enforcement duties apply. Where we rely on consent, you may withdraw it at any time, and withdrawing is as easy as granting was.
Who else sees it
We share personal data only with the providers who run this service for us, and only as far as each needs: Google Cloud hosts the site and the service behind it, MongoDB Atlas stores the enquiries you submit, Twilio sends both our confirmation e-mail and our confirmation text messages and reports back whether they were delivered, and Google Analytics measures use once you consent. Some of these providers operate outside the European Economic Area; where they do, the transfer is covered by the European Commission's standard contractual clauses. We disclose data to public authorities only where the law requires it.
How long we keep it
We keep the enquiry you submit, and the record of the confirmation messages sent about it, for 24 months from our last contact with you about it, so that we can follow up and keep a record of what was asked and answered. After that we erase or anonymise it, except where the law requires us to keep records longer, such as for tax and accounting purposes. Technical security logs are kept for up to 12 months. Analytics data is retained for 14 months.
Your rights
You have the right to ask for a copy of the data we hold about you, to have it corrected, to have it erased, to restrict or object to how we use it, and to receive it in a portable form. You can withdraw your consent to analytics and marketing storage at any time with the manage button below, and withdrawing is as easy as granting was. Write to privacy@interfaceagency.com from the e-mail address you used on the form to exercise any of these rights; we answer within one month. If you believe we have handled your data wrongly, you may complain to the Information and Data Protection Commissioner in Malta, or to the supervisory authority where you live.
Deleting your data
You can ask us to delete the personal data we hold about you at any time. Write to privacy@interfaceagency.com from the e-mail address you used on the form, telling us which enquiry you mean, or giving us the confirmation reference if you still have it. We erase the enquiry, the contact details submitted with it and the record of the confirmation messages sent about it within 30 days, and we write back to confirm once it is done. Records we must keep by law, such as those needed for tax and accounting, are retained for the statutory period and then erased.
Changes
We update this policy when the service or the law changes. The date at the top tells you when it last changed, and material changes are announced on the site before they take effect.