Privacy Policy

Introduction

Plomaretix Ltd ("we", "our", or "us") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your personal information when you visit our website plomaretix.top or use our services.

We are the data controller for the purposes of the General Data Protection Regulation (GDPR) and other applicable data protection laws. Our registered office is located at Triq San Pawl 5, Sliema SLM 6820, Northern Harbour, Malta.

Data We Collect

We may collect and process various types of personal data about you, including information you provide directly to us and data we collect automatically when you use our website and services. The specific data we collect includes:

Information You Provide to Us

• Contact information such as your name, email address, phone number, and company details when you submit enquiry forms
• Account information when you register for our services, including login credentials and profile information
• Communication data when you contact us via email, phone, or our contact forms
• Marketing preferences and subscription choices
• Payment information when you purchase our services (processed securely by third-party payment providers)

Information We Collect Automatically

• Technical data including IP address, browser type, operating system, and device information
• Usage data about how you interact with our website, including pages visited, time spent, and navigation patterns
• Analytics data to help us understand website performance and user behaviour
• Cookie data as described in our Cookie Policy

How We Use Your Information

We use the personal data we collect for various legitimate business purposes. How we use your information depends on the specific data collected and the context in which we collect it. We use of your data for the following purposes:

• Service Provision: To provide, maintain, and improve our gym analytics platform and related services
• Customer Support: To respond to your enquiries, provide technical support, and resolve any issues
• Account Management: To create and manage your user account and provide personalised experiences
• Communication: To send you important updates about our services, policy changes, and account notifications
• Marketing: To send you promotional materials and newsletters (with your consent where required)
• Analytics: To analyse website usage patterns and improve our platform's functionality and user experience
• Legal Compliance: To comply with applicable laws, regulations, and legal processes
• Security: To protect our services, users, and business from fraud, abuse, and security threats

Cookies and Tracking Technologies

We may use cookies and tracking technologies for analytics, advertising, and remarketing purposes, including Google Ads. These technologies help us measure campaign effectiveness, deliver relevant advertisements, and improve our services. You can manage your cookie preferences at any time through our cookie consent banner.

For detailed information about the cookies we use and how to manage them, please refer to our Cookie Policy.

Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your data in the following limited circumstances:

• Service Providers: With trusted third-party vendors who assist us in operating our website and providing services (under strict confidentiality agreements)
• Legal Requirements: When required by law, regulation, or court order, or to protect our rights and safety
• Business Transfers: In connection with any merger, acquisition, or sale of company assets (with appropriate safeguards)
• Consent: With your explicit consent for specific purposes

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including any legal, accounting, or reporting requirements. Our retention periods are based on the following criteria:

• Customer account data: Retained while your account is active and for up to 7 years after account closure for legal and business purposes
• Marketing data: Retained until you unsubscribe or withdraw consent, then deleted within 30 days
• Website analytics data: Anonymised and retained for up to 26 months for statistical analysis
• Communication records: Retained for up to 3 years for customer service and legal purposes

When we no longer need your personal data, we will securely delete or anonymise it in accordance with our data retention policy.

Your Rights

Under the General Data Protection Regulation (GDPR) and other applicable data protection laws, you have several rights regarding your personal data:

• Right of Access: You can request a copy of the personal data we hold about you
• Right of Rectification: You can ask us to correct any inaccurate or incomplete personal data
• Right of Erasure: You can request deletion of your personal data in certain circumstances
• Right to Restrict Processing: You can ask us to limit how we use your personal data
• Right to Data Portability: You can request your data in a portable format to transfer to another service
• Right to Object: You can object to certain types of processing, including direct marketing
• Right to Withdraw Consent: Where processing is based on consent, you can withdraw it at any time

To exercise any of these rights, please contact us using the details provided below. We will respond to your request within one month of receipt.

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Our security measures include:

• Encryption of data in transit and at rest using industry-standard protocols
• Regular security assessments and vulnerability testing
• Access controls and authentication mechanisms
• Employee training on data protection and security practices
• Incident response procedures for potential security breaches

While we strive to protect your personal data, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security but will notify you and relevant authorities of any data breaches as required by law.

International Data Transfers

Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA) where our service providers are located. When we transfer your data internationally, we ensure appropriate safeguards are in place, such as:

• Standard Contractual Clauses approved by the European Commission
• Adequacy decisions by the European Commission
• Binding Corporate Rules for multinational organisations
• Your explicit consent for specific transfers

Children's Privacy

Our services are not intended for children under the age of 16, and we do not knowingly collect personal data from children under this age. If we become aware that we have collected personal data from a child under 16, we will take steps to delete such information promptly.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by posting the updated policy on our website and updating the "Last Updated" date. For significant changes, we may provide additional notice through email or prominent website notifications.

Contact Information

If you have any questions about this Privacy Policy or our data practices, or if you wish to exercise your rights regarding your personal data, please contact us using the following information:

You also have the right to lodge a complaint with the relevant data protection authority if you believe we have not handled your personal data in accordance with applicable laws.

Governing Law

This Privacy Policy is governed by and construed in accordance with the laws of Malta and the European Union. Any disputes arising from this policy shall be subject to the exclusive jurisdiction of the courts of Malta.