Privacy Policy

Privacy Policy

Last updated: 18 August 2026. This Privacy Policy explains how b1onda (“b1onda”, “we”, “us”, “our”), a strategy, branding and creative consultancy, book and newsletter publisher based in Malta, collects, uses and protects your personal data when you visit b1onda.com or use our services, in accordance with the EU General Data Protection Regulation (GDPR) and Maltese data protection law.

1. Who we are

b1onda is the data controller responsible for your personal data collected through this website. We are based in Malta and provide primary market research, marketing strategy consulting and creative consulting services.

If you have any questions about this Privacy Policy or how we handle your data, you can contact us at contact@b1onda.com.

2. What personal data we collect

We collect personal data that you voluntarily provide to us, and limited data collected automatically when you browse our website:

Contact form: when you use our contact form, we collect your name, email address and the content of your message.

Booking / consultation requests: when you book a consultation through our scheduling tools, we collect your name, email address, and the appointment details you provide (and phone number, if requested).

Automatically collected data: when you browse our website, our analytics tools (see Cookie Policy) may collect your IP address, browser type, device information, pages visited and time spent on the site, in an aggregated or pseudonymised form once you consent to analytics cookies.

We do not knowingly collect financial information, government identification numbers, or other special categories of personal data through this website.

3. Why we process your data (legal basis)

We process your personal data on the following legal bases under Article 6 GDPR:

Consent – for optional analytics cookies and any marketing communications you opt into.

Contract / pre-contractual steps – to respond to your enquiries and to schedule and deliver consulting services you request.

Legitimate interests – to maintain the security and proper functioning of our website, and to understand how our website is used so we can improve it.

4. Cookies

Our website uses cookies and similar technologies. Non-essential cookies (such as analytics cookies) are only set once you give consent through our cookie banner. For full details on the cookies we use and how to manage your preferences, please see our Cookie Policy.

5. Who we share your data with

We do not sell your personal data. We may share limited personal data with trusted service providers who process it on our behalf, strictly to help us run this website and deliver our services, including:

– Our website hosting provider (Hostinger), which processes server logs and data necessary to operate the site.

– Google (Google Analytics / Site Kit), for website analytics, where you have given consent to analytics cookies.

– Our booking/scheduling software providers, to manage consultation bookings.

Each of these providers is contractually required to protect your data and only process it for the purposes we specify.

6. International data transfers

Some of our service providers (such as Google) may process data outside the European Economic Area (EEA), including in the United States. Where this occurs, we rely on appropriate safeguards recognised under GDPR, such as the European Commission’s Standard Contractual Clauses, to ensure your data remains protected to EU standards.

7. How long we keep your data

We retain personal data only for as long as necessary for the purposes described in this policy: contact form and booking enquiries are generally retained for as long as needed to respond to you and, where a client relationship is formed, for the duration of that relationship plus a reasonable period afterwards for legal and accounting purposes. Analytics data is retained according to the retention settings of our analytics provider.

8. Your rights under GDPR

If you are located in the EU/EEA (or otherwise protected by GDPR), you have the right to:

– Access the personal data we hold about you;

– Request correction of inaccurate data;

– Request erasure of your data (“right to be forgotten”);

– Request restriction of, or object to, our processing of your data;

– Request a copy of your data in a portable format;

– Withdraw consent at any time, where processing is based on consent;

– Lodge a complaint with a supervisory authority – in Malta, this is the Information and Data Protection Commissioner (IDPC).

To exercise any of these rights, please contact us at contact@b1onda.com.

9. Data security

We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, misuse or alteration. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

10. Children’s privacy

Our website and services are directed at businesses and professionals. We do not knowingly collect personal data from individuals under the age of 16.

11. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal reasons. The “last updated” date at the top of this page indicates when it was last revised.

12. Contact us

If you have questions about this Privacy Policy or wish to exercise your data protection rights, please contact us at contact@b1onda.com.