Privacy Policy

Last updated: [date to be confirmed]

Cavetta Properties ("we", "us") is a real-estate agency based in Malta. This policy explains what personal data we collect through this website, why we collect it, how long we keep it, and the rights you have under the General Data Protection Regulation (EU) 2016/679 ("GDPR") and the Maltese Data Protection Act (Cap. 586).

1. Who we are

Cavetta Properties is the data controller for the personal data collected through this website. You can reach us using the contact details in section 9.

2. What data we collect

We collect only the details you give us through our forms:

Viewing booking form — your name and phone number (and email address, if you choose to provide it), together with the property, date and time of the viewing you request.
Contact form — your name, contact details and the message you send us about a property.
Waiting-list form — your name, phone number, optional email address and your property requirements (location, type, bedrooms, budget and notes).

We do not use advertising trackers, and we do not sell your data to anyone.

3. Why we collect it (legal basis)

Consent (Art. 6(1)(a) GDPR) — each form includes a consent checkbox; by submitting a form you agree that we may use your details to handle your request.
Steps towards a contract (Art. 6(1)(b) GDPR) — arranging a viewing or putting you in touch about a rental or purchase you asked about.
Legitimate interest (Art. 6(1)(f) GDPR) — keeping a minimal internal record of viewings and enquiries so we can run the agency (for example, avoiding double bookings).

4. How we use your data

To confirm, reschedule or cancel your property viewings.
To notify the landlord of a property that a viewing has been booked (your name only, never your phone or email).
To reply to your enquiries about a property.
To contact you when a property matching your waiting-list requirements becomes available.

5. Third-party processors

Two services process limited data on our behalf:

Telegram — when you book a viewing or send an enquiry, a notification is delivered to our team via Telegram. The notification may include your name and the property reference; your phone number and email are not published to any group.
ImageKit — property photos are served through the ImageKit content-delivery network. ImageKit processes no form data; like any CDN it may log your IP address when images load.

6. How long we keep it

Booking and enquiry records are kept while they are relevant to your request and for a reasonable period afterwards for our internal records. Waiting-list entries are kept until a matching property is found or you ask us to remove you. You can ask us to erase your personal data at any time (see section 7) — we will then anonymize your record while keeping the non-personal booking history.

7. Your rights

Under the GDPR you have the right to:

Access the personal data we hold about you.
Correct inaccurate data.
Erasure — ask us to delete your personal data. On request we permanently anonymize your record: your name, phone number and email are removed while the non-personal viewing history is retained.
Restrict or object to processing, and data portability.
Withdraw consent at any time, without affecting the lawfulness of processing before withdrawal.
Lodge a complaint with the Office of the Information and Data Protection Commissioner (IDPC), Malta — idpc.org.mt.

To exercise any of these rights — including requesting anonymization — simply contact us using the details below and we will action it without undue delay.

8. Security

Access to your data is restricted to the agency owner and authorised agents through password- and PIN-protected internal areas. Form submissions are transmitted over HTTPS.

9. Contact us

For any privacy question or request, contact Cavetta Properties at [client email address to be confirmed] or via the contact form on this website.

10. Changes to this policy

We may update this policy from time to time. The current version is always published on this page.