Privacy Policy

1. Changes to This Privacy Policy

We keep this Privacy Policy under regular review and may update it from time to time. When we make changes, we will update the “Last updated” date and, where required by law, provide additional notice.

Please ensure that any Personal Data you provide to us remains accurate and current.

2. Personal Data We Collect

“Personal Data” means information relating to an identified or identifiable individual.

Depending on how you interact with SLACODE, we may collect:

• Name, email address, telephone number, company name, and professional details;
• Information submitted through contact forms, project enquiries, consultations, and communications;
• Project requirements, business information, technical requirements, and information you provide during an engagement;
• Billing and transaction information where applicable;
• Technical information such as IP address, browser, device, operating system, timestamps, referring pages, and Website usage;
• Information contained in support requests, feedback, or other communications; and
• Other information you voluntarily provide.

We may also receive information from service providers, business partners, referrals, or publicly available sources where lawful.

We do not intentionally request sensitive Personal Data unless reasonably necessary for a specific and lawful purpose.

3. How We Use Personal Data

We process Personal Data only where we have an applicable legal basis, including contractual necessity, legitimate interests, legal obligations, or consent where required.

We may use Personal Data to:

• Respond to enquiries and provide consultations and Services;
• Prepare proposals, agreements, and project documentation;
• Communicate with prospective and existing clients;
• Provide and manage websites, software, AI automation, ERP, and related Services;
• Process payments and maintain business records;
• Provide support and troubleshoot issues;
• Maintain, secure, and improve our Website and Services;
• Detect fraud, abuse, security incidents, or unlawful activity;
• Send service-related communications and, where permitted, marketing communications;
• Comply with legal obligations and respond to lawful requests; and
• Establish, exercise, or defend legal claims.

Where we rely on your consent, you may withdraw that consent at any time. Withdrawal does not affect processing that occurred before withdrawal.

4. Cookies, Analytics & Automatic Collection

As you use our Website, we may automatically collect technical and usage information through server logs, cookies, pixels, analytics, security tools, and similar technologies.

We may use these technologies to:

• Operate essential Website functionality;
• Maintain security;
• Remember preferences;
• Understand Website usage;
• Measure performance; and
• Improve our Website and Services.

Where consent is legally required for non-essential cookies or similar technologies, we will request that consent through an appropriate mechanism. You may also manage cookies through your browser or available Website controls. Malta's data-protection framework requires appropriate consent where applicable for non-essential tracking technologies.

Third-party analytics and other service providers may process technical information in accordance with their own terms and privacy policies.

5. How We Share Personal Data

We may share Personal Data where reasonably necessary for the purposes described in this Privacy Policy.

This may include sharing with:

• Hosting, cloud, infrastructure, and security providers;
• Email, communications, scheduling, project-management, and support providers;
• Analytics and monitoring providers;
• Payment processors;
• Professional advisers such as lawyers, accountants, and insurers; and
• Authorities or other parties where required by law or reasonably necessary to protect our rights, property, safety, or Services.

If SLACODE is involved in a merger, acquisition, restructuring, financing, sale, or similar corporate transaction, Personal Data may be transferred as part of that transaction subject to applicable law.

Where a third party processes Personal Data on our behalf, we seek to maintain appropriate contractual and data-protection safeguards.

6. International Transfers

Some service providers or infrastructure used by SLACODE may be located outside Malta or the European Economic Area.

Where Personal Data is transferred outside the EEA, we will use a lawful transfer mechanism required under applicable data-protection law, such as an adequacy decision, appropriate contractual safeguards, or another recognised legal mechanism.

Malta's Data Protection Act operates together with the GDPR framework governing such transfers.

7. Your Rights, Retention & Security

Subject to applicable law, you may have the right to:

• Access your Personal Data;
• Request correction of inaccurate or incomplete data;
• Request erasure;
• Request restriction of processing;
• Object to certain processing;
• Request data portability;
• Withdraw consent where processing relies on consent; and
• Object to direct marketing.

You may exercise these rights by contacting us at hello@slacode.com. We may verify your identity before responding.

We retain Personal Data only for as long as reasonably necessary for the purposes described in this Privacy Policy, including providing Services, maintaining records, complying with legal obligations, resolving disputes, preventing fraud, and enforcing agreements.

We use reasonable technical and organisational measures to protect Personal Data against unauthorised access, loss, misuse, alteration, or disclosure. However, no security system can be guaranteed to be completely secure.

8. Client Projects, Third Parties & Children's Data

When SLACODE develops websites, software, AI automations, ERP systems, or other systems for clients, those systems may process Personal Data belonging to the client's customers, employees, users, suppliers, or other individuals.

In such circumstances, SLACODE may act as a data processor on the client's behalf. The client may remain responsible for determining the purposes and lawful basis of processing and for providing appropriate notices and obtaining required consents.

Where required, the parties may enter into additional data-processing terms.

Our Website may also contain links to third-party websites. We are not responsible for their privacy practices, content, or security and encourage you to review their privacy policies.

Our Services are intended primarily for businesses and adults. We do not knowingly seek to collect Personal Data from children who are not permitted to use our Services.

9. Complaints & Contact Us

If you have a concern about our handling of your Personal Data, please contact us first so we can try to resolve it.

Where applicable, you also have the right to lodge a complaint with Malta's Information and Data Protection Commissioner (IDPC) or another competent EU supervisory authority.