Privacy Policy

1. Data Controller

Anomaly Arts, based at 60 Triq tas-Sliema, Gżira, Malta, operates the website web.anomaly-arts.com and is the data controller responsible for your personal data.

For any questions regarding this policy or your personal data, contact us at: contact@anomaly-arts.com

2. What Data We Collect

Data you provide directly

When you use our contact form, we collect:

• Name
• Email address
• Phone number (optional)
• Service interest (selected option)
• Message content

Data collected automatically

When you visit our website, the following data may be collected automatically through cookies and similar technologies:

• IP address (anonymised)
• Browser type and version
• Pages visited and time spent
• Referring website
• Device type and screen resolution

3. How We Use Your Data

We use your personal data for the following purposes:

• To respond to your enquiry: When you submit our contact form, we use your details to reply and discuss your project.
• To improve our website: Analytics data helps us understand how visitors use our site so we can improve the experience.
• To measure advertising effectiveness: We use Google Ads conversion tracking to understand which ads lead to enquiries.

4. Legal Basis for Processing (GDPR)

We process your personal data on the following legal bases:

• Legitimate interest: Processing contact form submissions to respond to your enquiry (Article 6(1)(f) GDPR).
• Consent: Use of analytics and advertising cookies (Article 6(1)(a) GDPR). You can withdraw consent at any time by clearing your cookies or using your browser settings.

5. Cookies and Third-Party Services

Our website uses the following third-party services that may set cookies:

Google Analytics

We use Google Analytics to analyse website traffic. Google Analytics uses cookies to collect anonymised data about your visit. Google processes this data on our behalf under its privacy policy.

Google Ads

We use Google Ads conversion tracking to measure the effectiveness of our advertising campaigns. This may set cookies on your device to track whether you visited our site through an ad.

Google Fonts

Our website loads fonts from Google Fonts. When you visit a page, your browser connects to Google servers to download the font files. Google may log your IP address. See Google Fonts privacy information.

Formspree

Contact form submissions are processed through Formspree, a third-party form handling service. Formspree stores your submission data securely. See Formspree's privacy policy.

6. Data Sharing

We do not sell, trade, or rent your personal data to third parties. Your data is only shared with the third-party service providers listed above, solely for the purposes described in this policy.

7. Data Storage and Security

Our website is hosted on AWS (Amazon Web Services) in Frankfurt, Germany, within the European Union. All data transmitted through our website is protected by SSL/TLS encryption.

Contact form submissions are stored by Formspree on servers within the United States, covered by appropriate data protection safeguards.

8. Data Retention

We retain personal data collected through the contact form for a maximum of 12 months from the date of submission, unless a business relationship is established, in which case data is retained for the duration of that relationship plus any legally required period.

Analytics data is retained according to Google Analytics default settings (14 months).

9. Your Rights Under GDPR

As a data subject, you have the following rights:

• Right of access: Request a copy of the personal data we hold about you.
• Right to rectification: Request correction of inaccurate personal data.
• Right to erasure: Request deletion of your personal data.
• Right to restriction: Request that we limit how we use your data.
• Right to data portability: Request your data in a structured, machine-readable format.
• Right to object: Object to processing based on legitimate interest.
• Right to withdraw consent: Withdraw consent for cookie-based processing at any time.

To exercise any of these rights, email us at contact@anomaly-arts.com. We will respond within 30 days.

10. Supervisory Authority

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Information and Data Protection Commissioner (IDPC) in Malta:

11. Changes to This Policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this page periodically.