Last updated: September 2026
This policy explains how Bhava Tech collects and uses personal data when you visit this website or contact us, and the rights you have under the EU General Data Protection Regulation (GDPR) and the Maltese Data Protection Act.
Who we are
The controller of your personal data is Bhava Tech Ltd, a company registered in Malta with company number C117571, 3, Sernoe, Triq il-Kappillan, Valletta, Malta.
For any question about this policy or your data, email letstalk@bhavatech.com.
What we collect
- When you contact us, by form or email: your name, email address, company, phone number if you give it, and the content of your message.
- When you visit the website: technical data such as your IP address, browser type and the pages you request. Our hosting provider records this in server logs for security and reliability.
We do not use analytics, advertising or social media tracking on this website, and we do not ask for sensitive personal data.
How we use it and why
- To reply to your enquiry and discuss working together. Legal basis: taking steps at your request before entering into a contract, and our legitimate interest in responding to business enquiries.
- To run and protect this website. Legal basis: our legitimate interest in keeping the site secure and working properly.
- To meet legal obligations, such as keeping accounting and tax records if you become a client. Legal basis: legal obligation.
We do not sell your personal data, and we do not use it for automated decision-making.
Who we share it with
We only share personal data with service providers that help us run the business, under contracts that require them to protect it. These are our website hosting provider, our email provider and, where needed, professional advisers such as our accountants. We may also disclose data where the law requires it.
International transfers
This website is hosted in a data centre in the European Union. Where a service provider processes data outside the European Economic Area, we make sure appropriate safeguards are in place, such as an adequacy decision or the European Commission’s standard contractual clauses.
How long we keep it
- Enquiries that do not lead to an engagement: up to 24 months, then deleted.
- Client records: for the length of the engagement, and afterwards for as long as Maltese tax and accounting law requires.
- Server logs: for the short period set by our hosting provider.
Your rights
You have the right to access your personal data, to have it corrected or deleted, to restrict or object to how we use it, and to receive a copy in a portable format. To use any of these rights, email us. We will reply within one month.
Complaints
If you are unhappy with how we handle your data, please contact us first so we can put it right. You also have the right to complain to the Information and Data Protection Commissioner in Malta: idpc.org.mt.
Security
We use appropriate technical and organisational measures to protect personal data, including encrypted connections to this website and restricted access to our systems.
Changes to this policy
We may update this policy from time to time. The date at the top shows when it last changed.