Privacy Policy
Última actualización: 6 August 2026
This policy explains what personal data we collect when you use this website or contact us as an advertiser, why we collect it, and the rights you have over it.
1. Controller
The controller responsible for processing personal data on this website is EarnLab Limited, Elite Business Centre, Trejqa ta Box Box, Msida MSD1840, Malta. You can reach us at business@earnlab.com.
For data protection enquiries, including any of the rights set out below, contact business@earnlab.com.
2. What data we collect
We collect the following categories of personal data:
- Contact data you submit through our enquiry form: name, company, work email address and the content of your message.
- Consent records: whether you accepted this policy and whether you opted in to receive commercial offers, together with the time of that choice.
- Technical data automatically sent by your browser when you request a page: IP address, user agent, referring URL, and the date and time of the request.
- Cookie and similar-technology data, as described in our Cookie Policy.
We do not knowingly collect special categories of personal data through this website, and we ask that you do not include such data in your enquiry message.
3. Why we process it, and on what legal basis
| Purpose | Data used | Legal basis |
|---|---|---|
| Responding to your enquiry and discussing a possible campaign | Contact data, message content | Steps prior to entering a contract, and our legitimate interest in responding to business enquiries |
| Sending you commercial offers about our services | Contact data | Your consent, which you may withdraw at any time |
| Operating and securing the website, preventing abuse | Technical data | Our legitimate interest in a functioning, secure service |
| Analytics and measurement, where enabled | Cookie data | Your consent |
| Meeting legal and accounting obligations | Contract and correspondence data | Compliance with a legal obligation |
4. Who we share it with
We do not sell personal data. We share it only where necessary, with:
- Service providers acting on our instructions — for example hosting, email delivery and customer relationship management — each bound by a data processing agreement.
- Professional advisers, such as lawyers and accountants, where required.
- Public authorities, where we are legally obliged to disclose.
Where a recipient is located outside the EEA or the UK, we rely on an adequacy decision or on Standard Contractual Clauses together with any additional safeguards required.
5. How long we keep it
- Enquiries that do not lead to a business relationship: deleted within [12] months of our last exchange.
- Records relating to an active or past contract: retained for the statutory retention period applicable to business and tax records.
- Marketing consent records: retained until you withdraw consent, plus the period needed to evidence that consent.
- Server logs: [30] days, unless retained longer to investigate a security incident.
6. Your rights
Subject to the conditions in applicable law, you have the right to:
- Request access to the personal data we hold about you.
- Have inaccurate data corrected, and incomplete data completed.
- Request erasure of your data.
- Request restriction of processing.
- Receive your data in a portable, machine-readable format.
- Object to processing based on our legitimate interests, including profiling.
- Withdraw consent at any time, without affecting processing carried out before withdrawal.
To exercise any of these rights, contact business@earnlab.com. You also have the right to lodge a complaint with a supervisory authority — for us, the Office of the Information and Data Protection Commissioner (IDPC), Malta.
7. Security
We use appropriate technical and organisational measures to protect personal data, including encryption in transit, access controls, and regular review of our processes. No method of transmission over the internet is completely secure, so we cannot guarantee absolute security.
8. Changes to this policy
We may update this policy to reflect changes in our practices or legal obligations. The version in force is the one published on this page. This version is dated 6 August 2026.