Privacy Policy
Last updated: 11 May 2025
This Privacy Policy explains how Nafda Fik (“we,” “us,” “our”) operating at nafdafik.com (the “Site”) collects, uses, and safeguards your personal data. By accessing or using the Site, you consent to the practices described below.
1. Introduction
We value your privacy and comply with the General Data Protection Regulation (GDPR) and applicable Maltese law.
2. Data We Collect
2.1 Information You Provide
- Name (if you choose to give it)
- Email address and other contact details when booking an appointment
- Content of messages you send via our forms
2.2 Data Collected Automatically
- IP address and access times
- Browser type and operating system
- Pages visited, timestamps, and visit duration
- Cookies and similar technologies (see Section 5)
3. How We Use Your Data
- Service Delivery: to process appointment requests and communicate with you.
- Communications: to respond to questions or feedback.
- Service Improvement: to analyse Site usage and enhance functionality.
- Legal Compliance: to keep records required by law and address potential violations.
4. Legal Bases for Processing
- Consent when you voluntarily provide personal data.
- Contract Performance when you book an appointment.
- Legal Obligation where we must comply with statutory or regulatory requirements.
- Legitimate Interest to operate and improve our services.
5. Cookies and Similar Technologies
We use essential and analytics cookies to:
- Remember basic preferences.
- Understand how the Site is used so we can improve your experience.
You can manage or delete cookies via your browser settings.
6. Data Security
We implement technical and organisational measures—including encryption and access controls—to protect your data against unauthorised access, loss, or alteration.
7. Data Retention
We keep data only as long as necessary for the purpose for which it was collected, unless a longer period is required by law.
8. Sharing with Third Parties
We do not sell, rent, or trade your personal data. We may share it only:
- With service providers (e.g., hosting) bound by confidentiality and data‑protection obligations.
- When required by law or court order.
9. Transfers Outside the EEA
If we transfer data to countries outside the European Economic Area, we ensure an adequate level of protection under the GDPR (e.g., Standard Contractual Clauses).
10. Your Rights
Under the GDPR you have the right to:
- Confirm whether we process your data.
- Access a copy of your data.
- Rectify inaccurate or incomplete data.
- Erase data (“right to be forgotten”).
- Restrict or object to processing.
- Port your data to another provider.
To exercise these rights, please contact us (see Section 14).
11. Children’s Privacy
Our services are not intended for children under 16 years. We do not knowingly collect personal data from minors. If you believe we have done so, contact us and we will delete it.
12. External Links
The Site may contain links to third‑party websites. We have no control over—and are not responsible for—the content or practices of those sites.
13. Changes to This Policy
We may update this Policy from time to time. Any changes will be posted on this page with a revised “Last updated” date. Continued use of the Site after such changes constitutes acceptance of the updated Policy.
14. Contact
For questions about this Privacy Policy or to exercise your data rights, email us at nafdafik@gmail.com.