Privacy Policy

1. Data controller

Malta Brokering is the controller of the personal data described in this policy. That means we decide why and how it is processed. For any privacy matter, contact us at hello@maltabrokering.com.

2. What we collect

Account data

When you register as a broker or agent we collect your name, email address, phone number, locality, optionally your company, and (for agents) licence details. We store a securely hashed version of your password — never the password itself.

Lead data

When a broker submits a lead, we collect the client's name, contact details and property requirements in order to pass them to an assigned agent. Brokers confirm they have the client's knowledge and, where required, consent to share this information with us.

Activity & verification data

We process the one-time email codes used to verify your identity at sign-up and sign-in, the status updates and notes logged against a lead, and basic technical data — such as your IP address, device and session information — needed to operate and secure the platform.

3. How we use it

• To create and administer your account and verify your email address.
• To review and match leads to a suitable licensed agent and track their progress.
• To communicate with you about your account, leads and assignments.
• To keep the platform secure, prevent abuse, and resolve disputes.
• To comply with our legal, accounting and regulatory obligations.

4. Legal bases

We rely on the following legal bases under the GDPR: the performance of our contract with you (to provide the platform and process leads); your consent where we ask for it (which you may withdraw at any time); our legitimate interests in running a secure and effective service; and compliance with a legal obligation where the law requires it.

5. Sharing & privacy between parties

A lead's details are shared only with the single agent it is assigned to and with our administration team. By design, brokers are not shown the identity of the assigned agent, and agents are not shown the identity of the referring broker.

We do not sell your personal data. We may share data with trusted service providers who host or support the platform (for example, our hosting and email providers), acting under contract on our instructions, and where we are required to do so by law.

6. Retention

We keep account and lead data for as long as your account is active and for a reasonable period afterwards to meet legal, accounting and dispute-resolution needs, after which it is deleted or anonymised. One-time verification codes are short-lived and are deleted as soon as they are used or expire.

7. Your rights

Under the GDPR you may request access to, correction of, or deletion of your personal data; object to or restrict certain processing; withdraw consent; and request portability of data you provided to us. We will respond within the timeframes the law requires. To exercise any right, email hello@maltabrokering.com.

8. Security

We protect data with encryption in transit (HTTPS), hashed passwords, one-time email verification, and access controls that limit who can see what — including the deliberate separation of broker and agent identities. No system is perfectly secure, but we take measures appropriate to the sensitivity of the data.

9. International transfers

We aim to keep personal data within the European Economic Area (EEA). Where a service provider processes data outside the EEA, we ensure an appropriate safeguard — such as an adequacy decision or Standard Contractual Clauses — is in place.

10. Contact & complaints

Questions or requests about this policy can be sent to hello@maltabrokering.com. You also have the right to lodge a complaint with the Maltese Information and Data Protection Commissioner (IDPC) at idpc.org.mt.