Privacy Policy
Last Updated: 28 January 2026
Effective Date: 28 January 2026
Introduction
This Privacy Policy explains how personal data is collected, used, disclosed, retained and protected when you visit or interact with www.joeabyvassallo.com
(“the Website”), subscribe to communications, or contact us. This policy is intended to comply with the General Data Protection Regulation (GDPR) and applicable Maltese and EU data protection laws.
By accessing or using the Website, you agree to the terms of this Privacy Policy and consent to the processing of your personal data as described herein.
Data Controller
The data controller responsible for the processing of your personal data is:
Josie-Abraham Vassallo K/A Joeaby Vassallo
Website: www.joeabyvassallo.com
Email: [email protected]
If you have any questions about this policy or how your personal data is processed, you may contact us at the email address above.
Personal Data We Collect
We may collect the following types of personal data when you interact with the Website:
- Contact Information: name, email address, telephone number and similar information you provide when you email us or subscribe to communications
- Technical and Usage Data: IP address, browser type, device information and log data collected automatically as you use the Website
- Cookies and Tracking Technologies: information stored by cookies or similar technologies as described further below
Legal Basis for Processing
We only process your personal data where we have a lawful basis under GDPR, such as:
- Consent, when you agree to receive communications or accept certain cookies
- Contractual necessity, where processing is required to fulfil a request you make
- Legal obligation, to comply with applicable law
- Legitimate interests, such as maintaining and securing the Website, improving user experience, and responding to enquiries, provided your rights are protected
How We Use Your Personal Data
We use your personal data to:
- Respond to enquiries and provide the information or services you request
- Operate, maintain and improve the Website and communications
- Comply with legal and regulatory obligations
We will not process your personal data for purposes incompatible with those described here without your consent, unless required by law.
Cookies and Similar Technologies
The Website uses cookies and similar technologies to ensure basic functionality, improve performance, and manage consent preferences. Some cookies are essential for the Website to function and are stored automatically on your device.
We may also use optional cookies, including third-party cookies, to help analyse website usage and improve performance. Such cookies will only be placed on your browser where you have provided your consent through the cookie banner or preference settings.
You can manage or withdraw your cookie preferences at any time through your browser settings or via our cookie consent tool. For more information, please refer to our Cookie Policy.
Sharing and Disclosure of Personal Data
We do not sell, rent, or trade your personal data with third parties. We may share personal data with trusted service providers who assist with website operations (such as hosting, email delivery, or analytics), provided they process your data only for the purposes specified and in compliance with GDPR.
We may also disclose personal data where required by law, legal process, or to protect our legal rights.
International Data Transfers
Some service providers that process personal data on our behalf may be located outside the European Economic Area (EEA). Where personal data is transferred outside the EEA, we will ensure appropriate safeguards are in place, such as Standard Contractual Clauses, to protect your data in compliance with GDPR.
Data Retention
We retain personal data only as long as necessary to fulfil the purposes for which it was collected, to comply with legal obligations, resolve disputes, and enforce our agreements. When personal data is no longer required, it will be securely deleted or anonymised.
Your Rights Under GDPR
Under GDPR, you have the right to:
- Access the personal data we hold about you
- Correct or update inaccurate or incomplete data
- Request erasure of your personal data, subject to legal limitations
- Restrict or object to certain processing
- Request data portability where applicable
- Withdraw consent at any time, where processing is based on consent
To exercise any of these rights, you can contact us at [email protected]
You also have the right to lodge a complaint with the Maltese supervisory authority:
Office of the Information and Data Protection Commissioner (IDPC)
Website: https://idpc.org.mt/
Security
We implement reasonable technical and organisational measures to protect the personal data we process against unauthorised access, loss, alteration, or misuse. However, no method of transmission over the internet is completely secure and absolute security cannot be guaranteed.
Third-Party Websites
The Website may contain links to external sites that are not operated by us. This Privacy Policy applies only to data collected by us. We encourage you to review the privacy policies of any third-party websites you visit.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. Updates will be posted here with a revised effective date. Continued use of the Website after changes constitutes acceptance of the updated policy.
Governing Law and Jurisdiction
This Privacy Policy is governed by and construed in accordance with the laws of Malta and applicable EU data protection legislation, including GDPR. Any disputes arising in connection with this Privacy Policy shall be subject to the jurisdiction of the competent courts of Malta.
Contact Information
If you have any questions, concerns or requests regarding this Privacy Policy or the processing of your personal data, you may contact:
Josie-Abraham Vassallo K/A Joeaby Vassallo
Email: [email protected]
Website: www.joeabyvassallo.com