Privacy Policy

This Privacy Policy explains how rfinub Ltd ("we", "us", or "our") collects, uses, and protects your personal information when you use our website and services. We are committed to protecting your privacy and ensuring transparency about our data practices.

Last updated: 15th January 2026

Data Controller Information

rfinub Ltd is the data controller for the personal data we collect. Our company is registered in Malta with registration number C25368. You can contact us regarding any privacy-related matters at privacy@rfinub.top or by calling +356 23647724.

Data Collection

We collect various types of personal data when you interact with our website and services. The data we collect includes information you provide directly to us, such as when you fill out contact forms, subscribe to our newsletter, or request our services. This may include your name, email address, phone number, business information, and any messages you send to us.

We also automatically collect certain information when you visit our website, including your IP address, browser type, device information, pages visited, and interaction patterns. This data collection helps us understand how our website is used and allows us to improve our services.

How We Use Your Information

We use the personal data we collect for several legitimate business purposes. How we use your information depends on the services you use and your relationship with us. We use your data to provide and maintain our analytics services, respond to your enquiries and support requests, and communicate with you about our services.

We also use your information to improve our website and services, conduct analytics to understand user behaviour, send you marketing communications (with your consent), and comply with legal obligations. We may use your data to detect and prevent fraud, protect our legal rights, and ensure the security of our systems.

Cookies and Tracking Technologies

We may use cookies and tracking technologies for analytics, advertising, and remarketing purposes, including Google Ads. These technologies help us measure campaign effectiveness, deliver relevant advertisements, and improve our services. You can manage your cookie preferences at any time through our cookie consent banner.

For detailed information about the cookies we use and how to control them, please refer to our Cookie Policy. We respect your cookie preferences and use Google Consent Mode v2 to ensure compliance with your choices.

Legal Basis for Processing

Under the General Data Protection Regulation (GDPR), we process your personal data based on several legal grounds. For contractual purposes, we process data to provide our services and fulfil our contractual obligations. For legitimate interests, we process data to improve our services, conduct marketing activities, and protect our business interests.

When required, we obtain your consent for specific processing activities, such as sending marketing emails or using certain cookies. We also process data to comply with legal obligations and protect vital interests when necessary.

Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your data with trusted service providers who help us operate our business, such as hosting providers, email service providers, and analytics platforms. These partners are bound by strict confidentiality agreements and may only use your data for the specific purposes we authorise.

We may also disclose your information when required by law, to protect our rights or property, or in connection with a business transfer or merger. In all cases, we ensure appropriate safeguards are in place to protect your data.

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected and to comply with our legal obligations. Contact form submissions and enquiries are typically retained for three years unless you request earlier deletion. Website analytics data is retained according to our analytics platform's retention settings, usually 26 months.

Marketing communications data is retained until you unsubscribe or request deletion. Business relationship data may be retained for the duration of our business relationship plus a reasonable period afterwards to handle any follow-up matters. We regularly review our data retention practices and delete data that is no longer necessary.

Your Rights

Under GDPR, you have several rights regarding your personal data. You have the right to access your personal data and receive information about how we process it. You can request that we correct any inaccurate or incomplete data we hold about you.

You have the right to request deletion of your personal data in certain circumstances, restrict processing, object to processing based on legitimate interests, and receive your data in a portable format. You also have the right to withdraw consent where processing is based on consent, and to lodge a complaint with a supervisory authority if you believe we have violated your privacy rights.

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Our security measures include encryption of data in transit and at rest, regular security assessments, access controls, and staff training on data protection.

While we strive to protect your personal data, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security but are committed to maintaining the highest standards of data protection.

International Data Transfers

As we operate within the European Union, your data is primarily processed within the EU. If we transfer data outside the EU, we ensure appropriate safeguards are in place, such as adequacy decisions, Standard Contractual Clauses, or other approved mechanisms to protect your data.

Children's Privacy

Our services are not intended for children under 16 years of age. We do not knowingly collect personal data from children under 16. If we become aware that we have collected personal data from a child under 16 without parental consent, we will take steps to delete such information promptly.

Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal requirements. We will notify you of any material changes by posting the updated policy on our website and updating the "Last updated" date. We encourage you to review this policy periodically.

Contact Information

If you have any questions about this Privacy Policy or our data practices, please contact us at privacy@rfinub.top or call us at +356 23647724. You can also write to us at rfinub Ltd, Triq in-Naxxar 89, Valletta VLT 3460, Malta.

For data protection matters, you can also contact our privacy team directly. We are committed to addressing your privacy concerns and will respond to your enquiries within a reasonable timeframe.