Privacy Policy

This Privacy Policy explains how Flat Malta, operated by BM Holdings & Investments Limited (company registration C 39616, Malta), collects, uses and protects information when you visit www.flatmalta.com or contact us regarding our rental properties.

We are committed to protecting your privacy and handling your personal data in a transparent and responsible manner, in accordance with the General Data Protection Regulation (GDPR) and applicable Maltese data protection law.

1. Who We Are

The data controller for this website is:

• Company: BM Holdings & Investments Limited
• Registration: C 39616, Malta
• Trading as: Flat Malta (flatmalta.com)
• Part of: The BMH Group — www.bmhgroup.com
• Contact: icurtis@bmhmalta.com

2. What Information We Collect

We collect personal information only when you voluntarily provide it to us — for example when you contact us to enquire about an apartment. The information we may collect includes:

• Your name
• Your email address
• Your phone number or WhatsApp number
• The content of messages you send us
• Any other information you choose to share in correspondence

We do not use tracking cookies, advertising networks, or any third-party analytics tools on this website. No personal data is collected passively from visitors.

3. How We Use Your Information

We use the information you provide solely for the purposes of:

• Responding to your enquiry about a property
• Arranging property viewings
• Communicating with you about rental agreements
• Notifying you of new properties if you have requested this

We will never sell, rent or share your personal data with third parties for marketing purposes.

4. Legal Basis for Processing

We process your personal data on the following legal bases under GDPR:

• Legitimate interest — to respond to your enquiry and provide the rental service you have requested
• Pre-contractual steps — where you are considering entering into a rental agreement with us
• Consent — where you have explicitly asked to be notified about future properties

5. How We Store and Protect Your Data

Your information is held securely in our email and messaging systems. We take reasonable technical and organisational measures to protect your data against unauthorised access, loss or disclosure.

Communications sent via WhatsApp are subject to WhatsApp's own privacy policy and end-to-end encryption. We recommend reviewing WhatsApp's Privacy Policy for details of how they handle data.

6. How Long We Keep Your Data

We retain your personal information only for as long as necessary:

• Enquiry correspondence is kept for up to 12 months from the date of last contact if no tenancy results
• Where a tenancy agreement is entered into, we retain relevant records for 7 years in line with Maltese legal and tax obligations
• If you ask to be notified of new properties, we keep your details until you ask us to remove them

7. Your Rights

Under GDPR, you have the following rights regarding your personal data:

• Right of access — you can request a copy of the personal data we hold about you
• Right to rectification — you can ask us to correct inaccurate data
• Right to erasure — you can ask us to delete your data, subject to any legal retention obligations
• Right to restriction — you can ask us to limit how we use your data
• Right to object — you can object to us processing your data where we rely on legitimate interest
• Right to withdraw consent — where processing is based on consent, you may withdraw it at any time

To exercise any of these rights, please contact us at icurtis@bmhmalta.com. We will respond within 30 days.

8. Third-Party Links

This website contains links to external websites including www.bmhgroup.com and WhatsApp. We are not responsible for the privacy practices of those sites and recommend you review their policies independently.

9. Cookies

This website does not use cookies. No tracking, analytics or advertising cookies are set when you visit flatmalta.com.

10. Complaints

If you have a concern about how we handle your personal data, you are entitled to lodge a complaint with the Maltese data protection authority:

• Office of the Information and Data Protection Commissioner (IDPC)
• Level 2, Airways House, High Street, Sliema SLM 1549, Malta
• www.idpc.org.mt

11. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated date at the top. We encourage you to review this page periodically.

12. Contact Us

For any privacy-related queries, please contact us:

• Email: icurtis@bmhmalta.com
• WhatsApp: +356 99428531 (messages only)