Privacy policy
What we collect, and why
- Analytics: first-party, cookieless and aggregate. We measure pages, referrers, device class and tool usage server-side; no cookies are set for measurement, no identifiers are stored, and nothing is shared with third parties. This is why this site shows no cookie banner: there is nothing to consent to.
- Enquiry forms: if you send an enquiry, we store the details you enter (with a timestamp and the page you sent it from) to answer it and, where you ask us to, to pass it to a relevant provider. The lawful basis is your consent, recorded with the form; the privacy-notice version you saw is stored with it.
- Email: replies to enquiries are stored with the enquiry.
- Email updates: If you sign up for updates from this site (the box at the foot of a page, or the tick on an enquiry form), we store your email address, the exact sentence you agreed to and its version, where you signed up and when. We email you only about what that sentence names. A sign-up from the box starts only once you confirm it from the email we send you; ticking the box on an enquiry you send is your consent and needs no second step. The lawful basis is your consent, and every email carries a one-click unsubscribe.
- Emailing you a result: If you ask us to email you a result from a calculator or a checker, we send it to you once. Your address is not added to any list unless you also tick the separate box to get updates.
Where it lives, and for how long
- All personal data is stored in the EU (Cloudflare EU jurisdiction storage).
- Enquiries: 24 months from when you send them, then deleted. Any copy held to pass your enquiry to a firm has your name, email, phone and message removed at the same point.
- Raw inbound email: 12 months, then deleted.
- Email updates: kept while you are subscribed. A sign-up never confirmed is deleted after 30 days. After you unsubscribe, the record of your consent and of the emails sent to you is kept for 24 months as evidence, then deleted. We keep a one-way hash of an address that unsubscribed, bounced or complained, so it is never emailed again.
- Consent records (which form, the wording you agreed to, and when): kept for 6 years after the enquiry is deleted, as evidence of the lawful basis, then deleted.
- Aggregate, anonymous analytics: kept indefinitely (they identify no one).
Your rights
You can ask for a copy of your data, ask us to correct it, or ask us to delete it, at any time: email hello@virtualdataroomcompare.com with the address you used. We respond within one month. You can complain to the Office of the Information and Data Protection Commissioner (idpc.org.mt), or to the data protection authority in the EU country where you live or work.
Sharing
This site does not take enquiries that are passed to third parties. If you email us, Joseph Ellul reads and answers it and passes it to no one else. We use service providers to host and store this site and its data, to route email, and to help us read and answer enquiries, including AI tools. We never sell data, run third-party advertising, or load third-party scripts on this site.