Last updated: June 2026
Malta Company Formation is operated by EcoClick Ltd. This policy explains what personal data we collect, why we collect it, how it is used, and what rights you hold over it. EcoClick Ltd is subject to EU data protection law as a Malta-registered entity. This policy is written to be read, not archived.
1. Who Is Responsible for Your Data
EcoClick Ltd is the data controller for malta-company-formation.com. We determine what data is collected and why. Where your data is transferred to Equitrust Group for service delivery purposes, that transfer is governed by section 4 below. Equitrust Group (MBR Registration Code: C 56911, Balzan, Malta) acts as a separate data controller for the data it processes in connection with its own MFSA-regulated obligations, including KYC and AML compliance.
2. Data We Collect
We collect two categories of data.
Data you submit voluntarily through our qualification forms and contact page: your name, email address, phone number, country of residence, business objective, company structure of interest, and the details of your enquiry. This is the minimum required to assess whether your situation is a fit for a Malta structure.
Technical data collected automatically when you use this site: IP address, browser type, pages visited, referral source, and session duration, collected through Google Analytics and Google Tag Manager. This data is anonymised and aggregated for site performance analysis only.
3. How We Use Your Data
Your personal data is used for three purposes only: to review and respond to your dossier submission, to assess whether your situation is a fit for our company formation services in Malta, and to maintain an accurate record of our correspondence with you.
We do not use your data for direct marketing without your explicit prior consent. We do not sell your data. We do not profile you for advertising purposes. We do not share your data with any third party outside the service delivery scope described in section 4.
4. Data Sharing
Your enquiry and dossier data is shared with Equitrust Group solely for the purpose of assessing and delivering the Malta company formation and administration services you have requested. This transfer is necessary to perform the services you are enquiring about. No data is shared with Equitrust before you have explicitly submitted a dossier through this platform.
Equitrust Group processes your data independently in its capacity as an MFSA-licensed entity. Its processing obligations include KYC verification, AML compliance, and regulatory reporting to the MFSA and the Financial Intelligence Analysis Unit (FIAU) where legally required. These obligations exist independently of EcoClick Ltd’s role as data controller.
Both EcoClick Ltd and Equitrust Group are Malta-registered entities subject to EU GDPR. No personal data is transferred outside the European Economic Area in the course of standard service delivery.
5. Data Retention
Enquiry and correspondence data is retained for 5 years from the date of last contact. This reflects our operational record-keeping requirements and the applicable retention periods under Maltese data protection law. Where a service engagement has commenced, data related to that engagement is retained for a minimum of 5 years following termination of the relationship, in line with Maltese AML legislation (Prevention of Money Laundering Act, Cap. 373). After the applicable retention period, your data is securely and permanently deleted.
6. Your Rights Under GDPR
As a Malta-registered entity subject to EU GDPR, EcoClick Ltd recognises the following rights in relation to your personal data:
- Right of access: you may request a copy of the personal data we hold about you
- Right to rectification: you may request correction of inaccurate or incomplete data
- Right to erasure: you may request deletion of your data where no legal obligation requires us to retain it
- Right to restriction: you may request that we limit processing of your data in defined circumstances
- Right to object: you may object to processing based on legitimate interests
- Right to portability: you may request your data in a structured, machine-readable format
To exercise any of these rights, contact us through the form on our contact page. We respond within 30 days. Note that certain rights may be limited where data processing is required by Maltese AML or MFSA regulatory obligations. In such cases, we will explain the limitation clearly.
If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Information and Data Protection Commissioner (IDPC), the Maltese supervisory authority for data protection.
7. Cookies
We use cookies for site analytics only. No advertising cookies are placed on this site. No cross-site tracking. No third-party marketing networks have access to your browsing data through this site.
Analytics data collected via Google Analytics is anonymised before processing and is used solely to understand how visitors interact with the site, which pages are most consulted, and where visitors arrive from. This data does not identify you personally.
You can manage your cookie preferences through the consent banner displayed on your first visit, or through your browser settings at any time. Full details are available in our Cookie Policy.