Legal

Privacy Policy

Last updated: February 2026

1. Who We Are

MaltaConnect (“we”, “us”, “our”) is a free estate agency matching service operating in Malta. We act as the data controller for the personal information you provide through our website.

Contact: contact@maltaconnect.com
Address: Malta

2. What Data We Collect

When you submit a request through our form, we collect:

  • Identity data: full name
  • Contact data: email address, phone number
  • Property data: location, type of property, intended use (sale or rental), bedrooms, bathrooms, condition, living area, and any notes you choose to add
  • Preference data: preferred contact method, budget range, timeline
  • Technical data: IP address (used solely for abuse prevention and not stored beyond the session)

Photographs you upload are optional and are not transmitted through our platform — they are used only to help you communicate your property details during the follow-up conversation with the matched agency.

3. Legal Basis for Processing

We process your personal data on the basis of your explicit consent (Article 6(1)(a) of the GDPR), given when you tick the consent checkbox and submit the form. You may withdraw your consent at any time by contacting us at contact@maltaconnect.com.

4. How We Use Your Data

Your data is used exclusively to:

  • Identify the most suitable estate agency for your property
  • Put you in direct contact with that agency
  • Follow up to ensure the match was satisfactory

We do not use your data for advertising, profiling, or any automated decision-making that produces significant effects on you.

5. Data Sharing

Your personal data is shared only with the single estate agency we match you with. This agency is a vetted partner operating in Malta and bound by their own GDPR obligations as an independent data controller once they receive your details.

We do not sell, rent, or share your data with any third parties beyond the matched agency, except where required by law.

6. Data Retention

We retain your personal data for a maximum of 12 months from the date of submission, after which it is securely deleted. If you request erasure before that period, we will act on your request within 30 days.

7. Your Rights Under GDPR

As a data subject, you have the following rights:

  • Right of access: request a copy of the data we hold about you
  • Right to rectification: request correction of inaccurate data
  • Right to erasure: request deletion of your data (“right to be forgotten”)
  • Right to data portability: receive your data in a structured, machine-readable format
  • Right to object: object to processing based on legitimate interests
  • Right to withdraw consent: withdraw your consent at any time without affecting the lawfulness of processing prior to withdrawal

To exercise any of these rights, contact us at contact@maltaconnect.com. We will respond within 30 days.

8. Security

We implement appropriate technical and organisational measures to protect your data against unauthorised access, loss, or disclosure. All data is transmitted over HTTPS with strict transport security enabled.

9. Supervisory Authority

You have the right to lodge a complaint with the Maltese data protection supervisory authority:

Information and Data Protection Commissioner (IDPC)
Level 2, Airways House, High Street, Sliema SLM 1549, Malta
Tel: +356 2328 7100
Email: idpc.info@idpc.org.mt
Website: idpc.org.mt

10. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be published on this page with an updated date. We encourage you to review this page periodically.

Questions about your data? Email us at contact@maltaconnect.com and we will respond within 2 business days.