Privacy Policy
Last updated: April 2026
1. Who We Are
Malta SEO Pro is a digital marketing and search engine optimisation agency based in Malta. We are committed to protecting your privacy and handling your personal data transparently in accordance with the General Data Protection Regulation (GDPR) and the Data Protection Act (Cap. 586 of the Laws of Malta).
Registered Address: 14 East Street, Valletta VLT 1211, Malta
Email: hello@maltaseo.pro
2. What Data We Collect
We collect the following types of personal data when you interact with our website:
a) Information you provide directly:
- Contact form submissions: name, email address, phone number, and message content
b) Information collected automatically:
- Analytics data: anonymised IP address, browser type, operating system, device type, pages visited, time spent on pages, referral source, and general geographic location (country/city level)
- Cookies: small text files stored on your device (see our Cookie Policy for details)
3. How We Use Your Data
We use the data we collect for the following purposes:
- Respond to inquiries: When you submit a contact form, we use your details to reply to your message and discuss potential services.
- Improve our website: Analytics data helps us understand how visitors use our site so we can improve the user experience.
- Analyse site traffic: We use Google Analytics to track visitor trends, popular pages, and traffic sources.
- Understand user behaviour: We use Microsoft Clarity to record anonymised session replays, generate heatmaps, and identify usability issues so we can improve our pages.
- Prevent spam and abuse: We use Cloudflare Turnstile on our contact form to verify that submissions come from real humans rather than bots.
We process your data based on the following legal bases under GDPR:
- Consent: For analytics cookies (you can accept or reject via our cookie consent banner).
- Legitimate interest: For responding to contact form inquiries and improving our services.
4. Google Analytics
We use Google Analytics 4 (GA4), a web analytics service provided by Google LLC, to understand how visitors interact with our website. Google Analytics collects the following data:
- Pages viewed and time spent on each page
- Referral source (how you arrived at our site)
- Browser type and version
- Operating system and device type
- Approximate geographic location (based on anonymised IP address)
- User interactions (clicks, scrolls)
We have configured Google Analytics with IP anonymisation enabled, which means your full IP address is never stored. Analytics data is only collected if you accept cookies via our consent banner.
How to opt out of Google Analytics:
- Click “Reject” on our cookie consent banner
- Install the Google Analytics Opt-out Browser Add-on
- Disable cookies in your browser settings (see Section 7)
For more information, see Google's Privacy Policy.
5. Microsoft Clarity
We use Microsoft Clarity, a behavioural analytics service provided by Microsoft Corporation, to understand how visitors interact with our website. Clarity captures information about how you use and interact with our website through behavioural metrics, heatmaps, and anonymised session replays.
Clarity collects the following types of data:
- Pages visited and time spent on each page
- Mouse movements, clicks, scrolls, and taps
- Browser type, device type, and operating system
- Approximate geographic location (country level)
- Referral source
Session recordings are anonymised by default. Form fields, input values, and any text marked as sensitive are automatically masked. Clarity does not collect personal identifiers such as names, email addresses, or payment information from form fields.
Clarity is only loaded if you accept cookies via our consent banner. For more information, see the Microsoft Privacy Statement.
6. Cloudflare Turnstile
Our contact form is protected by Cloudflare Turnstile, a privacy-friendly CAPTCHA alternative provided by Cloudflare, Inc. Turnstile helps us prevent spam, abuse, and automated submissions without requiring you to solve image puzzles.
When you submit the contact form, Turnstile may collect a limited amount of technical data (such as your IP address, browser information, and basic interaction signals) to verify that you are a real human. This data is processed by Cloudflare and is not used for advertising or shared with third parties.
For more information, see the Cloudflare Privacy Policy.
7. Google Search Console
We use Google Search Console to monitor and maintain our website's presence in Google Search results. Google Search Console is a webmaster-facing tool that provides us with data about:
- Which search queries lead users to our website
- How our pages are indexed by Google
- Technical issues affecting our site's visibility
Important: Google Search Console does not collect personal data from website visitors. All data provided by Search Console is aggregated and anonymised. It does not identify individual users or track personal browsing behaviour.
8. Cookies
Our website uses three categories of cookies:
- Strictly necessary: Our cookie consent preference, stored in your browser's localStorage. This is essential for the website to remember your cookie choice.
- Analytics & behaviour cookies: Google Analytics cookies (
_ga,_ga_*,_gid) and Microsoft Clarity cookies (_clck,_clsk) that help us understand site usage patterns and user behaviour. These are only set if you accept cookies. - Security cookies: Cloudflare Turnstile cookies set when you submit the contact form, used to verify you are not a bot.
For a detailed breakdown of each cookie, please see our Cookie Policy.
9. Your Rights Under GDPR
Under the General Data Protection Regulation, you have the following rights regarding your personal data:
- Right of access: You can request a copy of the personal data we hold about you.
- Right to rectification: You can ask us to correct any inaccurate or incomplete personal data.
- Right to erasure (“right to be forgotten”): You can request that we delete your personal data, subject to any legal obligations we may have to retain it.
- Right to restrict processing: You can ask us to limit how we use your data in certain circumstances.
- Right to data portability: You can request your personal data in a structured, commonly-used, machine-readable format.
- Right to object: You can object to the processing of your personal data where we rely on legitimate interest as our legal basis.
To exercise any of these rights, please contact us at hello@maltaseo.pro. We will respond to your request within 30 days.
You also have the right to lodge a complaint with the Office of the Information and Data Protection Commissioner (IDPC), Malta's supervisory authority for data protection.
10. Data Retention
We retain personal data for the following periods:
- Contact form submissions: Up to 24 months from the date of submission, or until you request deletion.
- Analytics data: Google Analytics data is retained for 14 months, after which it is automatically deleted. We do not export or store analytics data separately.
- Cookie consent: Your consent preference is stored in your browser's localStorage until you clear your browser data.
11. Third-Party Services
We use the following third-party services that may process your data:
- Google Analytics 4 (Google LLC). Website traffic analysis. Data may be transferred to the United States. Google participates in the EU-U.S. Data Privacy Framework. Google Privacy Policy
- Microsoft Clarity (Microsoft Corporation). User behaviour analytics, heatmaps, and anonymised session recordings. Data may be transferred to the United States. Microsoft participates in the EU-U.S. Data Privacy Framework. Microsoft Privacy Statement
- Cloudflare Turnstile (Cloudflare, Inc.). Spam and bot prevention on the contact form. Data may be transferred to the United States. Cloudflare participates in the EU-U.S. Data Privacy Framework. Cloudflare Privacy Policy
- SMTP2Go (SMTP2Go Pty Ltd). Email delivery service used to send contact form submissions to our inbox. Personal data submitted via the form (name, email, message) is transmitted through SMTP2Go. SMTP2Go Privacy Policy
- Google Search Console (Google LLC). Website performance monitoring. This tool does not collect or process personal data from website visitors.
We do not sell, rent, or share your personal data with any other third parties.
12. Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Our website uses HTTPS encryption to secure data transmitted between your browser and our server.
13. Updates to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, regulatory, or operational reasons. Any changes will be posted on this page with an updated “Last updated” date. We encourage you to review this policy periodically.
14. Contact Us
If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please contact us:
Malta SEO Pro
14 East Street, Valletta VLT 1211, Malta
Email: hello@maltaseo.pro