PRIVACY POLICY

(GDPR compliant – Regulation (EU) 2016/679)

Last updated: 11th February 2026

1. Data Controller

BEAT Limited

Registered in Malta 17 Pietru Caxaro Street Naxxar, NXR 2240 Company

Registration No: C73064

Email: dgalea@beatconsult.com

BEAT Limited (“Company”, “we”, “us”) is the data controller under Article 4(7) GDPR.

2. Categories of Personal Data Collected

We may collect:

• Identity Data (name, surname)
• Contact Data (email address, telephone number)
• Professional Data (company name, job title)
• Transaction Data (purchase history)Technical Data (IP address, browser type, device identifiers)
• Usage Data (website interaction data)
• Marketing Preferences

3. How Data Is Collected

• Website contact forms
• Newsletter subscription forms
• Account registration
• Purchase of digital products or consultancy services
• Cookies and tracking technologies
• Direct email communications

4. Legal Basis for Processing (Article 6 GDPR)

We process personal data on the following bases:

• Performance of a contract (Art. 6(1)(b)) – to deliver consultancy or digital training services
• Consent (Art. 6(1)(a)) – for newsletter and marketing communications
• Legal obligation (Art. 6(1)(c)) – accounting and tax compliance
• Legitimate interest (Art. 6(1)(f)) – website security, service improvement

5. Purpose of Processing

• Responding to enquiries
• Delivering purchased services and digital products
• Processing payments
• Providing newsletters and marketing communications
• Improving website functionality and performance
• Legal and regulatory compliance

6. Payment Processing

Payments are processed securely via:

• Stripe
• PayPal

We do not store full payment card details. Processing is subject to the privacy policies of those providers.

7. Analytics and Tracking

We use Google Analytics (usage analytics).

If marketing tracking tools (e.g., LinkedIn Insight Tag, Meta Pixel) are implemented, users will be informed via the cookie banner and consent mechanism.

8. Data Sharing

We may share personal data with:

• IT hosting providers
• Email marketing automation providers
• Payment processors
• Professional advisers (legal/accounting)
• Regulatory authorities (where legally required)

International transfers outside the EEA are safeguarded via Standard Contractual Clauses where applicable (GDPR Chapter V).

9. Data Retention

We retain data only as long as necessary:

• Contract data: 6–10 years (accounting compliance under Maltese law)
• Marketing data: until consent is withdrawn
• Analytics data: according to Google Analytics retention settings

10. Your Rights (GDPR Articles 15–22)

You have the right to:

• Access your data
• Rectify inaccurate data
• Request erasure
• Restrict processing
• Object to processing
• Data portability
• Withdraw consent at any time
• Lodge a complaint with the Maltese Information and Data Protection Commissioner (IDPC)

11. Security

We implement appropriate technical and organisational measures to protect personal data (Article 32 GDPR).

12. Cookies

We use cookies to:

• Ensure website functionality
• Analyse usage
• Improve user experience

Non-essential cookies are activated only upon consent in compliance with the ePrivacy Directive (2002/58/EC).

13. Changes

We may update this Privacy Policy periodically. The latest version will always be published on this website.