Data Privacy Policy

Last updated: 15th January 2026

Introduction

aerotriproae Ltd ("we", "our", or "us") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website aerotriproae.pro and use our beauty salon analytics platform services.

Data Controller Information

aerotriproae Ltd is the data controller responsible for your personal data. We are a limited company registered in Malta with registration number C36251, and our registered address is Triq Santa Lucija 21, Valletta VLT 1876, Malta.

Data Collection

The data we collect includes personal information that you voluntarily provide to us when you register for our services, contact us, or interact with our platform. This may include:

  • Personal identification information (name, email address, phone number)
  • Business information (company name, salon details, role)
  • Technical information (IP address, browser type, device information)
  • Usage data (how you interact with our platform and services)
  • Communication data (correspondence and feedback)

How We Use Your Information

We use of your data for the following purposes:

  • To provide and maintain our analytics platform services
  • To process your requests and respond to your enquiries
  • To improve our services and develop new features
  • To communicate with you about service updates and support
  • To ensure the security and integrity of our platform
  • To comply with legal obligations and protect our rights

Legal Basis for Processing

Under the General Data Protection Regulation (GDPR), we process your personal data based on the following legal grounds:

  • Contractual necessity: To perform our services as agreed in our terms
  • Legitimate interests: To improve our services and maintain security
  • Consent: For marketing communications and non-essential cookies
  • Legal obligations: To comply with applicable laws and regulations

Cookies and Tracking Technologies

We may use cookies and tracking technologies for analytics, advertising, and remarketing purposes, including Google Ads. These technologies help us measure campaign effectiveness, deliver relevant advertisements, and improve our services. You can manage your cookie preferences at any time through our cookie consent banner. For detailed information about our use of cookies, please see our Cookie Policy.

Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your data in the following circumstances:

  • With service providers who assist us in operating our platform
  • When required by law or to protect our legal rights
  • In connection with a business transfer or merger
  • With your explicit consent for specific purposes

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes outlined in this policy, unless a longer retention period is required by law. Generally, we retain:

  • Account information for the duration of your service agreement plus 7 years
  • Communication records for 3 years after the last contact
  • Technical logs and analytics data for up to 2 years
  • Marketing consent records until withdrawn or 3 years of inactivity

International Data Transfers

Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA). When we make such transfers, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions by the European Commission.

Your Rights

Under GDPR, you have the following rights regarding your personal data:

  • Right of access: Request copies of your personal data
  • Right to rectification: Request correction of inaccurate data
  • Right to erasure: Request deletion of your personal data
  • Right to restrict processing: Request limitation of data processing
  • Right to data portability: Request transfer of your data
  • Right to object: Object to processing based on legitimate interests
  • Right to withdraw consent: Withdraw consent for consent-based processing

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include encryption, access controls, regular security assessments, and staff training on data protection.

Children's Privacy

Our services are not intended for individuals under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal data from a child under 16 without parental consent, we will take steps to delete such information.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. We will notify you of any material changes by posting the updated policy on our website and updating the "Last updated" date at the top of this page.

Contact Information

If you have any questions about this Privacy Policy, wish to exercise your rights, or have concerns about how we handle your personal data, please contact us:

Supervisory Authority

You have the right to lodge a complaint with the Malta Information and Data Protection Commissioner if you believe we have not complied with data protection laws. Contact details are available at idpc.org.mt.