// Privacy Policy

Privacy Policy

This privacy policy should be read alongside, and in addition to, our Terms and Conditions, which can be found at: https://woya.co.uk/terms/

1. Introduction

This Privacy Policy explains how Woya Digital Limited (“we”, “our”, “us”), a company registered in Malta with company number C113096 and registered office at 34 Triq Wied Ghomor, San Ġiljan, STJ 2043, Malta, collects, uses, and protects your personal data when you use our website and services.

We are committed to processing your personal data in compliance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and the applicable Maltese legislation, including the Data Protection Act (Cap. 586 of the Laws of Malta).

By using our website, you acknowledge that you have read and understood this Privacy Policy.

2. Data We Collect

We may collect and process the following categories of personal data:

  • Identity and Contact Data: name, email address, telephone number, and company details.
  • Technical Data: IP address, browser type, device information, and website usage data (via cookies and analytics tools).
  • Communication Data: correspondence with us, including emails and forms submitted through our website.
  • Transaction Data: details relating to services you have purchased or enquired about.

3. How We Use Your Data

We use your personal data only where lawful under GDPR, including:

  • To provide and improve our services.
  • To respond to your enquiries and communications.
  • To manage client relationships and contractual obligations.
  • To comply with legal and regulatory obligations.
  • For internal business administration and record-keeping.
  • For marketing communications where you have provided consent or where otherwise permitted by law.

4. Legal Basis for Processing

We rely on the following lawful bases for processing personal data:

  • Consent – where you have agreed to receive communications.
  • Contract – where processing is necessary to perform a contract or to take steps prior to entering into a contract.
  • Legal Obligation – to comply with Maltese or EU law.
  • Legitimate Interests – to operate our business and improve our services, provided your rights are not overridden.

5. Sharing of Data

We do not sell or rent personal data to third parties. We may share your data with:

  • Professional advisers (legal, financial, or compliance).
  • IT and system service providers (e.g., hosting, email, analytics).
  • Regulatory or law enforcement authorities where required by law.
     All third parties are required to respect the security of your data and to process it in accordance with GDPR.

6. International Transfers

Where data is transferred outside the European Economic Area (EEA), we ensure adequate safeguards are in place in accordance with GDPR, such as standard contractual clauses approved by the European Commission.

7. Data Retention

We will retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including legal, accounting, and reporting requirements.

8. Your Rights

Under GDPR and Maltese law, you have the following rights:

  • Right of access to your personal data.
  • Right to rectification of inaccurate or incomplete data.
  • Right to erasure (“right to be forgotten”).
  • Right to restrict processing.
  • Right to data portability.
  • Right to object to certain types of processing, including direct marketing.
  • Right to withdraw consent at any time (where processing is based on consent).

To exercise these rights, please contact us at [insert company contact email].

9. Security

We implement appropriate technical and organisational measures to ensure the security of your personal data and protect it against unauthorised or unlawful processing, accidental loss, destruction, or damage.

10. Complaints

If you are concerned about our handling of your personal data, you have the right to lodge a complaint with the supervisory authority in Malta:

Office of the Information and Data Protection Commissioner (IDPC)
 Level 2, Airways House, High Street, Sliema, SLM 1549, Malta
 https://idpc.org.mt

11. Amendments

We may update this Privacy Policy from time to time. Any changes will be published on this website and will take effect immediately upon posting.