Privacy & Cookie Policy

Who is responsible for your data

This website is run by Gozo Bookkeeping, a freelance bookkeeping service based in Gozo, Malta, operated by Giovanna (“I”, “me”). I am the data controller for the personal data described in this policy.

For any privacy question or request, email giovanna@gozobookkeeping.com or WhatsApp/call +356 7907 8234.

What personal data I collect

This website has no contact forms, accounts or online payments. Personal data is collected in these ways only:

• When you contact me by WhatsApp, phone or email: your name, contact details and anything you choose to include in your message.
• When you become a client: the business records and documents you share so that I can provide bookkeeping support. This is covered by our working arrangement as well as this policy.
• Website statistics: only if you allow analytics cookies, Google Analytics collects information such as the pages you visit, approximate location (country/city), device and browser type, and how you arrived at the site.
• Server logs: the website host may automatically record technical data such as IP address, date and time, and the page requested, for security and to keep the site running.

How I use your data and the legal basis

• To reply to your enquiry and discuss how I can help — steps taken at your request before entering into a contract (GDPR Art. 6(1)(b)).
• To provide bookkeeping and accounts admin support to clients — performance of a contract (Art. 6(1)(b)).
• To keep records required by Maltese law, for example accounting and tax records — legal obligation (Art. 6(1)(c)).
• To understand how the website is used and improve it with Google Analytics — your consent (Art. 6(1)(a)), which you can withdraw at any time.
• To keep the website secure — legitimate interests (Art. 6(1)(f)).

I do not sell your personal data, and I do not use it for advertising or automated decision-making.

Cookies and similar technologies

Cookies are small files stored in your browser. This website uses as few as possible, and nothing optional runs until you choose.

When you first visit, a banner lets you accept or reject optional cookies, or manage each category. You can change your mind at any time using Cookie settings, also found in the footer of every page.

Google Analytics is set up with Google Consent Mode, so if you reject analytics cookies no Google Analytics script is loaded and no analytics cookies are set. If you later withdraw consent, existing analytics cookies are removed from your browser. You can also block or delete cookies in your browser settings.

Who your data is shared with

Personal data is only shared where necessary:

• Your accountant, where you ask me to prepare or pass records on to them.
• Service providers that make communication and this website possible, such as email and hosting providers, and Meta (WhatsApp) if you choose to message me there.
• Google Ireland Limited, for Google Analytics, only if you consent. Google may process data outside the EU/EEA under the EU–US Data Privacy Framework and standard contractual clauses.
• Public authorities, where the law requires it.

How long data is kept

Enquiries that do not lead to working together are deleted within 12 months. Client records are kept for as long as the working relationship lasts and afterwards for the period required by Maltese accounting and tax law. Google Analytics data is kept for a maximum of 14 months.

Your rights

Under the General Data Protection Regulation (GDPR) you have the right to:

• access the personal data I hold about you;
• have inaccurate data corrected;
• have your data erased, where there is no legal reason to keep it;
• restrict or object to certain processing;
• receive your data in a portable format;
• withdraw consent at any time, without affecting processing that took place before.

To use any of these rights, email giovanna@gozobookkeeping.com. I will reply within one month.

If you are unhappy with how your data is handled, you can complain to Malta’s supervisory authority, the Office of the Information and Data Protection Commissioner (IDPC), at idpc.org.mt (opens in a new tab).

Security

Reasonable technical and organisational measures are used to protect personal data, including an encrypted (HTTPS) connection to this website. No method of transmission over the internet is completely secure, so please avoid sending sensitive documents by unencrypted email where another option is available.

Changes to this policy

This policy may be updated from time to time. The date at the top of the page shows when it was last changed.