Privacy Policy

Introduction

ACIU — Automotive Compliance & Inspection Unit Ltd. ("we," "our," or "us") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or contact us.

We are the data controller for the personal data we process. If you have any questions about this Privacy Policy or our data practices, please contact us using the details provided in the Contact section below.

Data we collect

We collect the following types of personal data:

• Contact information: Name, email address, phone number, and organisation when you contact us through our website
• Communication data: Messages you send to us through our contact form
• Technical data: IP address, browser type, operating system, and other technical information automatically collected when you visit our website
• Usage data: Information about how you use our website, including pages visited and time spent on our site

We do not collect sensitive personal data unless you voluntarily provide it to us, and we do not use cookies for tracking or marketing purposes without your explicit consent.

Purpose and lawful basis

We process your personal data for the following purposes:

Data retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy:

• Contact form submissions: Up to 24 months from the date of submission, unless you request earlier deletion
• Marketing communications: Until you withdraw consent or request deletion
• Technical and usage data: Up to 12 months from collection
• Legal compliance: As required by applicable law, which may be longer than the periods stated above

Data sharing

We do not sell, trade, or rent your personal data to third parties. We may share your data only in the following circumstances:

• Service providers: With trusted third-party service providers who assist us in operating our website and conducting our business, subject to strict confidentiality obligations
• Legal requirements: When required by law or to protect our rights, property, or safety, or that of others
• Business transfers: In connection with a merger, acquisition, or sale of assets, with notice to affected individuals

Any international transfers of personal data are conducted with appropriate safeguards in place, including standard contractual clauses approved by the European Commission.

Your GDPR rights

Under the General Data Protection Regulation (GDPR), you have the following rights:

To exercise any of these rights, please contact us using the details provided below. We will respond to your request within one month.

Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit and at rest
• Regular security assessments and updates
• Access controls and authentication procedures
• Staff training on data protection principles
• Incident response procedures

Contact

If you have any questions about this Privacy Policy or our data practices, please contact us:

You also have the right to lodge a complaint with the Information and Data Protection Commissioner (IDPC) if you believe we have not handled your personal data in accordance with applicable law. The IDPC can be contacted at idpc.org.mt.