Privacy Policy
Last updated: 03/11/2026
This policy explains how Websedia handles personal data when you use this website, contact us or work with us. We follow the General Data Protection Regulation (EU) 2016/679 (GDPR) and the Data Protection Act (Cap. 586 of the Laws of Malta).
1. Who we are
Paul Abdilla, trading as Websedia, is the data controller for this website.
- Registered address: Websedia Ltd
Block I, Apt. 5,
Triq is-Sogħda,
Naxxar - Company registration: C 100240
- Email: info@websedia.com
- Phone: +356 9914 1279
2. What we collect
Enquiry data. Through our forms we collect your name and surname, company name, phone number, email address, industry, service required, urgency and project details. Phone and email are required so that we can reply.
Communications. We keep the content of calls, emails, WhatsApp messages and social media messages that you send us.
Client data. When we work with you, we collect business contact details, billing details, VAT number, site details and project documents.
Technical data. Visiting the website can generate your IP address, browser and device details, pages visited, and the date and time of your visit.
Data about workers and other people. Clients may share data about employees, contractors, trainees and others so that we can deliver our services. Depending on the work, this can include names, job roles, training attendance, witness statements, incident details and site photographs.
Sensitive data. Some services can involve health data or data about young workers. Examples are maternity risk assessments, young worker risk assessments and incident investigations. We ask clients to share only what the work requires. Please do not put medical details or the names of injured people in our website forms.
3. Why we use data and our legal basis
Purpose | Legal basis |
|---|---|
Responding to enquiries and preparing quotes | Steps before a contract, or our legitimate interest in answering business enquiries |
Delivering services and managing client relationships | Performance of a contract, or our legitimate interest in delivering a service to our client |
Invoicing, accounting and tax records | Legal obligation |
Meeting health and safety duties and responding to authorities | Legal obligation, or legitimate interest |
Securing and improving the website | Legitimate interest |
Optional cookies and direct marketing | Consent, or the rules that apply to existing customers where permitted by law |
Handling complaints and legal claims | Legitimate interest |
Where we process health data, we rely on an additional GDPR Article 9 condition. This will usually be obligations under employment and occupational safety law, the establishment or defence of legal claims, or your explicit consent.
4. Data about you that we receive from others
Your employer, a client, a contractor or a colleague may give us your data for a health and safety service. Where a client decides why and how that data is used, the client is the controller and we act on its instructions. In that case, direct requests about your data to the client first. We will pass on requests that reach us.
5. Who receives your data
We share data only where needed, with:
- our website host, Hostinger
- our website developer and maintenance provider, Gemini Ltd
- Private Email, which hosts our email
- Meta, if you contact us through WhatsApp, Facebook or Instagram
- professional advisers such as accountants, lawyers and insurers
- training partners and subcontractors involved in your project
- public authorities, including the Occupational Health and Safety Authority, the Building and Construction Authority and the Civil Protection Department, where the law requires it or a client instructs us
We do not sell personal data.
6. International transfers
Some providers may process data outside the European Economic Area. Where that happens, we rely on an adequacy decision, the European Commission’s standard contractual clauses or another safeguard allowed by the GDPR. Contact us for details.
7. How long we keep data
Data | Retention period |
|---|---|
Enquiries that do not become work | 12 months after the last contact |
Client files, reports and project records | 10 years after the engagement ends, unless a longer period is required |
Accounting and tax records | As long as tax and accounting law requires |
Website security logs | 90 days |
Marketing records | Until you opt out, keeping only a record of the opt-out |
We may keep data longer where it is needed for a legal claim or an authority’s investigation.
8. Your rights
You can ask us to give you access to your data, correct it, erase it, restrict its use or transfer it. You can also object to processing based on legitimate interests and opt out of direct marketing at any time. Where we rely on consent, you can withdraw it at any time. This does not affect earlier processing.
These rights have legal limits. For example, we may need to keep records required by law. We aim to respond within one month. To make a request, email info@websedia.com.
9. Complaints
Please contact us first so that we can try to fix the problem. You can also complain to the Office of the Information and Data Protection Commissioner:
- Address: Floor 2, Airways House, Triq Il-Kbira, Tas-Sliema SLM 1549, Malta
- Phone: +356 2328 7100
- Email: idpc.info@idpc.org.mt
- Website: idpc.org.mt
10. Security
We use technical and organisational measures to protect personal data, including restricted access and secure hosting. No website or email system is completely secure, so please avoid sending sensitive information through our forms.
11. Automated decisions
We do not make decisions with legal or similarly significant effects about you using automated processing alone.
12. Children
This website is intended for businesses and adults. We do not knowingly collect enquiries from anyone under 18. Data about young workers reaches us only through a client engagement.
13. Cookies
Cookies are small files stored on your device. In line with the Processing of Personal Data (Electronic Communications Sector) Regulations (S.L. 586.01), we use cookies that are strictly necessary without consent. We ask for your consent before using any other cookies.
Cookie type | Purpose | Consent needed |
|---|---|---|
Strictly necessary | Website security, form submission and core functions | No |
Analytics | Understanding how the website is used. Not currently used. | Yes |
Marketing | Measuring or targeting advertising. Not currently used. | Yes |
This website may load fonts from Google, which involves sending your IP address to Google. Links to WhatsApp, Facebook and Instagram take you to services with their own privacy and cookie policies.
You can block or delete cookies through your browser settings. Some parts of the website may stop working if you block strictly necessary cookies.
14. Changes to this policy
We may update this policy. The latest version will always appear on this page with its update date.