Privacy Policy
At Nebula Digital, your privacy is important to us. This Privacy Policy explains how we collect, use, and protect your information when you use our website. It is written to meet our obligations under the EU General Data Protection Regulation (GDPR) and Maltese data protection law.
1. Who We Are
Nebula Digital (VAT No. MT21755422), based in Malta, is the data controller responsible for the information described in this policy. You can reach us at any time through the contact form on our website.
2. Information We Collect
We may collect personal information such as your name, email address, and other relevant details through our contact form. We only ask for what we need to reply to you — your name, your email address, optionally your business or brand name, and whatever you choose to tell us in your message.
If you consent to analytics cookies, we also receive general usage data such as the pages you visit, roughly how long you stay, your approximate region, and the type of device and browser you use. This data is not used to identify you personally.
3. How We Use Your Information
The information we collect is used solely for communication, project planning, and providing our services. We do not sell your information, and we do not share it for advertising or marketing purposes.
Our legal basis for handling your enquiry is our legitimate interest in responding to people who contact us, and — where you go on to become a client — the performance of our contract with you. Analytics data is handled only on the basis of your consent, which you may withdraw at any time.
4. Service Providers We Share Data With
To run this website we rely on a small number of third-party providers, who process data on our behalf:
- Formspree — delivers our contact form submissions to us by email. Anything you type into the form passes through their service.
- Google Analytics — provides anonymised website usage statistics. This runs only if you accept analytics cookies, and IP addresses are anonymised.
- Netlify — hosts this website and keeps standard server logs, which may include your IP address, for security and reliability.
Some of these providers are based outside the European Economic Area. Where that is the case, transfers are covered by the European Commission’s Standard Contractual Clauses or an equivalent safeguard.
5. Cookies & Analytics
We use cookies and third-party analytics tools to improve your browsing experience. Analytics cookies are not set unless you accept them — you will be asked when you first visit, and rejecting is as easy as accepting. You can change your decision at any time using the Cookie Settings link in the footer, or disable cookies in your browser settings.
6. How Long We Keep It
Enquiries that do not become projects are kept for up to 24 months, so we can pick up the conversation if you come back. Records relating to client work are kept for as long as the law requires us to retain business and tax records. Analytics data expires automatically after 14 months.
7. Your Rights
Under the GDPR you have the right to access the personal data we hold about you, to have it corrected or erased, to restrict or object to how we use it, to receive a copy in a portable format, and to withdraw consent at any time. To exercise any of these, just get in touch — we will respond within one month.
If you believe we have handled your data improperly, you also have the right to complain to the Office of the Information and Data Protection Commissioner (IDPC) in Malta.
8. Contact
If you have questions about this policy, please reach out to us via our contact form.
Last updated: September 2026