Privacy Policy

This Privacy Policy explains how sormavdeli.top Ltd ("we", "us", or "our") collects, uses, and protects your personal information when you use our website and services. This policy is effective as of 1st January 2026.

Data Controller Information

The data controller responsible for your personal data is:

• Company: sormavdeli.top Ltd
• Registration Number: C25896
• Address: Triq ir-Repubblika 23, Sliema SLM 1088, Malta
• Email: [email protected]
• Phone: +356 23191860

Data We Collect

We collect various types of personal data when you use our website and services. The data we collect includes information you provide directly to us, information collected automatically through your use of our services, and information from third-party sources where permitted by law.

Information You Provide

• Contact information (name, email address, phone number)
• Company or gym information
• Communication preferences
• Messages and enquiries sent through our contact forms
• Account information if you register for our services
• Payment information (processed securely by third-party payment processors)

Information Collected Automatically

• IP address and location data
• Browser type and version
• Device information
• Pages visited and time spent on our website
• Referring website information
• Cookies and similar tracking technologies

How We Use Your Information

We use the personal data we collect for various legitimate business purposes. How we use your information depends on how you interact with our services and the preferences you have expressed.

Primary Uses

• Providing and improving our fitness analytics services
• Responding to your enquiries and providing customer support
• Processing transactions and managing accounts
• Sending service-related communications
• Analysing website usage to improve user experience
• Ensuring website security and preventing fraud

Marketing Communications

With your consent, we may use your information to send you marketing communications about our services, industry insights, and company updates. You can opt out of marketing communications at any time.

Legal Basis for Processing

Under the General Data Protection Regulation (GDPR), we process your personal data based on the following legal grounds:

• Consent: When you have given clear consent for specific processing activities
• Contract: When processing is necessary for the performance of a contract with you
• Legal Obligation: When we need to comply with legal requirements
• Legitimate Interests: When processing is necessary for our legitimate business interests, provided your rights are protected

Cookies and Tracking Technologies

We may use cookies and tracking technologies for analytics, advertising, and remarketing purposes, including Google Ads. These technologies help us measure campaign effectiveness, deliver relevant advertisements, and improve our services. You can manage your cookie preferences at any time through our cookie consent banner.

For detailed information about the cookies we use, please refer to our Cookie Policy.

Data Sharing and Disclosure

We do not sell, trade, or otherwise transfer your personal data to third parties without your consent, except in the following circumstances:

• Service providers who assist us in operating our website and conducting business
• Legal requirements or to protect our rights and the rights of others
• Business transfers in the event of a merger, acquisition, or sale of assets
• With your explicit consent for specific purposes

International Data Transfers

Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA). When we transfer data internationally, we ensure appropriate safeguards are in place to protect your personal data in accordance with GDPR requirements.

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including any legal, accounting, or reporting requirements. The specific retention period depends on the type of data and the purpose for which it was collected.

Retention Periods

• Contact form enquiries: 3 years from last contact
• Customer account data: Duration of relationship plus 7 years
• Website analytics data: 26 months
• Marketing communications data: Until you unsubscribe
• Legal and compliance records: As required by applicable law

Your Rights

Under the GDPR, you have several rights regarding your personal data. These rights include the ability to access, correct, delete, or restrict the processing of your personal information.

Your Data Protection Rights

• Right of Access: Request copies of your personal data
• Right to Rectification: Request correction of inaccurate personal data
• Right to Erasure: Request deletion of your personal data
• Right to Restrict Processing: Request limitation of how we use your data
• Right to Data Portability: Request transfer of your data to another service
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent for consent-based processing

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include encryption, access controls, and regular security assessments.

Contact Information

If you have any questions about this Privacy Policy, wish to exercise your data protection rights, or have concerns about how we handle your personal data, please contact us:

• Email: [email protected]
• Phone: +356 23191860
• Address: Triq ir-Repubblika 23, Sliema SLM 1088, Malta

Supervisory Authority

You have the right to lodge a complaint with the relevant data protection supervisory authority if you believe we have not complied with applicable data protection laws. In Malta, this is the Office of the Information and Data Protection Commissioner.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will notify you of any material changes by posting the updated policy on our website and updating the "last updated" date.

Children's Privacy

Our services are not directed to individuals under the age of 16. We do not knowingly collect personal data from children under 16. If we become aware that we have collected personal data from a child under 16, we will take steps to delete such information.

Last updated: 1st January 2026