Section 01
Who we are
This website, steezza.com, is operated by Mohamed Ali Ouichni (“Steezza”, “we”, “us”), an individual (a natural person) based in Malta, trading under the name Steezza.
For the purposes of the EU General Data Protection Regulation (Regulation (EU) 2016/679, “GDPR”) and Malta’s Data Protection Act (Chapter 586 of the Laws of Malta), we are the data controller for the personal data described in this policy. We have not appointed a Data Protection Officer, as we are not required to. If you have any question about your data, contact us at contact@steezza.com.
Section 02
What we collect
We keep this to the minimum needed to run the site. We collect:
- Information you send us. If you email us at contact@steezza.com, we receive your email address and whatever you put in your message.
- Usage & device data (privacy-friendly analytics). When you visit, our analytics tools record aggregated, non-identifying information such as the pages you view, the site or link you arrived from, your approximate location at country level, and general device and browser type. These tools are cookieless and are not used to build a profile of you or track you across other websites.
- Technical log data. Like every website, our hosting provider automatically processes technical data needed to deliver and secure the site, which can include your IP address and the time of your request. Under GDPR an IP address can be personal data, which is why we mention it here.
We do not collect payment details, run user accounts, take bookings, or knowingly collect any special (“sensitive”) categories of data through this site.
Section 04
Why we use it, and our legal basis
We only process personal data where the law lets us. The bases we rely on (Article 6 GDPR) are:
Delivering & securing the website
- Data
- Technical log data, IP address
- Legal basis
- Legitimate interests — Art. 6(1)(f): running a safe, working website
Understanding & improving the site
- Data
- Aggregated, cookieless usage & device data
- Legal basis
- Legitimate interests — Art. 6(1)(f): low-impact, privacy-friendly analytics
Replying to your enquiries
- Data
- Your email address and message content
- Legal basis
- Legitimate interests — Art. 6(1)(f): responding to people who contact us
Meeting our legal obligations
- Data
- Any of the above, where the law requires
- Legal basis
- Legal obligation — Art. 6(1)(c)
Where we rely on legitimate interests, we’ve balanced them against your rights and freedoms. You can object to this processing at any time (see your rights).
Section 06
Transfers outside the EU/EEA
Some of our providers (such as Vercel) may process data on servers outside the European Economic Area, including in the United States. Where that happens, the transfer is protected by appropriate safeguards recognised under GDPR — such as the European Commission’s Standard Contractual Clauses and/or an adequacy decision (e.g. the EU–US Data Privacy Framework). You can ask us for more detail using the contact below.
Section 07
How long we keep it
- Emails you send us — kept only as long as needed to deal with your enquiry and our records, then deleted (normally within 24 months).
- Analytics data — held in aggregated form by our analytics provider for a limited period in line with their retention terms; it does not identify you.
- Technical logs — retained by our hosting provider only for a short period for security and diagnostics.
Section 08
Your rights
Under GDPR you have the right to: access your data; have it corrected; have it erased; restrict or object to how we use it; data portability; and, where we rely on consent, to withdraw it at any time. These rights have some legal limits, but we’ll always tell you how we’ve handled your request.
To exercise any of these, just email contact@steezza.com. We’ll respond within one month. It costs you nothing.
Right to complain
If you’re unhappy with how we’ve handled your data, you can lodge a complaint with Malta’s supervisory authority:
Information and Data Protection Commissioner (IDPC)
Level 2, Airways House, High Street, Sliema SLM 1549, Malta
idpc.info@idpc.org.mt · idpc.org.mt
Section 09
Children
This site is aimed at a general audience and is not directed at children. We do not knowingly collect personal data from children under the age of 13 (the age set under Malta’s Data Protection Act for information society services). If you believe a child has provided us with data, contact us and we’ll delete it.
Section 10
Security
We take reasonable technical and organisational measures to protect the limited data we handle, including serving the site over HTTPS and relying on reputable providers. No method of transmission over the internet is 100% secure, but we work to keep your data safe.
Section 11
Changes to this policy
We may update this policy from time to time — for example if we add a new feature or provider. When we do, we’ll change the “last updated” date at the top. Material changes will be made clear on this page.
Section 12
Contact us
Questions about this policy or your data? We’re happy to help.
Mohamed Ali Ouichni, trading as Steezza
contact@steezza.com