Last updated: 20 October 2026
This Privacy Policy explains what personal data Quick Deal Malta collects on quickdealmalta.com, why, and what your rights are.
1. Who is responsible for your data
Quick Deal Malta, Sliema, Malta
Email for all privacy requests: [email protected]
2. What data we collect
- Account data: name, email address, password (stored encrypted), and phone number if you add it.
- Google login: if you sign in with Google, we receive your name, email address and profile picture from Google.
- Ads: photos, descriptions, price, category and city you put in your ads.
- Messages: the messages you send to other users through the website.
- Contact form: name, email, phone and the message you send us.
- Technical data: IP address, browser type, pages visited and date/time, collected in server logs for security and to prevent abuse.
- Cookies: see section 8.
We do not ask for and do not want sensitive data (health, religion, etc.). Please do not put it in ads or messages.
3. Why we use your data, and on what legal basis
| Purpose | Legal basis (GDPR) |
|---|---|
| Create and manage your account, publish your ads, let users chat | Contract (art. 6.1.b) |
| Show your phone number to users who click "Show phone number" | Contract (art. 6.1.b) |
| Send service emails (email confirmation, password reset, messages) | Contract (art. 6.1.b) |
| Security, preventing fraud, spam and abuse, keeping logs | Legitimate interest (art. 6.1.f) |
| Answering your requests through the contact form or email | Legitimate interest (art. 6.1.f) |
| Respecting the law and answering lawful requests from authorities | Legal obligation (art. 6.1.c) |
We do not sell your personal data and we do not use it for advertising profiles.
4. Who can see your data
- Other users: your name, your ads and your city are public. Your phone number is shown only when someone clicks "Show phone number" on your ad.
- Our service providers, only to run the website:
- DigitalOcean – hosting of the website and database (servers in Frankfurt, Germany);
- Cloudflare – security and fast delivery of the website;
- Resend – sending the website's emails (EU region);
- Google – only if you choose "Continue with Google".
- Authorities, such as the police, when the law requires it.
Some providers are based in the United States. When data is transferred outside the EU, it is protected by the EU-US Data Privacy Framework or by the European Commission's Standard Contractual Clauses.
5. How long we keep your data
- Account and ads: as long as your account is active. When you delete your account, we delete your data within 30 days, except what we must keep by law.
- Messages: as long as the accounts of the people in the conversation exist.
- Contact form messages: up to 12 months.
- Server logs: up to 30 days.
6. Your rights
You have the right to:
- access your data and get a copy;
- correct wrong data;
- delete your data ("right to be forgotten");
- limit or object to some uses of your data;
- receive your data in a common format (portability);
- withdraw your consent at any time, where we rely on consent.
To use your rights, write to [email protected]. We will answer within one month. You can also complain to the Maltese data protection authority: Information and Data Protection Commissioner (IDPC), idpc.org.mt.
7. Security
We protect your data with encrypted connections (HTTPS), encrypted passwords, limited access to the servers and regular updates. No system is 100% secure: if a data breach puts your rights at risk, we will inform you and the authority as the law requires.
8. Cookies
We use only the cookies necessary for the website to work:
- session cookie – keeps you logged in;
- XSRF-TOKEN – protects forms against attacks;
- Cloudflare cookies – protect the website against bots and attacks.
These cookies do not need consent because the website cannot work without them. We do not use advertising or tracking cookies. If we add any in the future (for example statistics), we will update this policy and ask for your consent first. You can delete cookies from your browser settings.
9. Minors
The website is not meant for people under 18. We do not knowingly collect data of minors. If you think a minor has created an account, please write to us.
10. Changes
We may update this Privacy Policy. The new version will be published on this page with a new date.