Skip to content
joltwebs.com

Privacy Policy

Last updated: 19 October 2026

This policy explains what personal data joltwebs.com collects through joltwebs.com, why, how long it is kept and what your rights are. It is written to meet the EU General Data Protection Regulation (GDPR) and Malta’s Data Protection Act (Cap. 586).

Who is responsible for your data

Joltwebs (“joltwebs.com”, “I”, “me”) is the data controller. joltwebs.com is run by Darryl in Malta. VAT number: MT3214-7004.

You can contact me about anything in this policy at hello@joltwebs.com or on 7936 2462.

What I collect and why

When you send an enquiry

The contact form, the deadline estimator and the form on a personalised pitch page ask for your name, your business name, a phone or WhatsApp number and/or an email address, and anything you choose to write. The estimator also records the features you ticked.

I use this to reply to you, prepare a quote and, if you go ahead, deliver the work. The legal basis is taking steps at your request before entering into a contract (GDPR Article 6(1)(b)).

To stop spam, the site briefly stores a scrambled (hashed) version of your IP address for about ten minutes to limit how many messages can be sent in a short time. It is not linked to your enquiry. Legal basis: legitimate interests in keeping the site secure (Article 6(1)(f)).

When you contact me directly

If you message me on WhatsApp, call or email, I receive your number or address and what you send. WhatsApp is provided by WhatsApp Ireland Ltd (Meta) under its own privacy policy.

Personalised pitch pages

I sometimes prepare a private page for a business I think I could help, with a short review of its current website and an idea for a new one. These pages use only publicly available business information, such as the business name, website and public contact details. They are not listed on Google or anywhere public.

When such a page is opened, the site records that it was opened and when, so I know whether to follow up. To avoid counting the same visit twice, it keeps a scrambled (hashed) version of the visitor’s IP address and browser type for about 30 minutes. Legal basis: legitimate interests in offering my services to businesses (Article 6(1)(f)).

If you received a pitch page and do not want to hear from me again, tell me and I will delete the page and your details.

Analytics (only if you agree)

If you click “Accept” on the cookie banner, the site loads Google Analytics 4 to count visits and see which pages are useful. Google Analytics uses cookies (named _ga and _ga_*) and receives your IP address, which Google truncates. I do not use it for advertising. Legal basis: your consent (Article 6(1)(a)), which you can withdraw at any time with the “Cookie settings” link at the bottom of every page.

If you click “No thanks”, no analytics cookies are set. The site only remembers your choice in your browser’s local storage.

Anonymous visit statistics

The site counts, without cookies, which pages are viewed, which buttons and links are clicked, how far down a page people scroll and which questions are opened. It records the page, the button text, the type of device (phone, tablet or computer) and which website or search engine referred the visit. It does not store IP addresses, does not set cookies or use your browser’s storage, and does not create any profile or identifier, so visits cannot be linked to a person. Only daily totals are kept, for up to 13 months. Legal basis: legitimate interests in understanding which parts of the site are useful (Article 6(1)(f)).

Heatmaps and session recordings (only if you agree)

If you click “Accept” on the cookie banner and Microsoft Clarity is switched on, Clarity records how you scroll, move and click on the site so I can see where the pages are confusing. Text you type into forms is masked and not recorded. Clarity is provided by Microsoft Corporation and uses cookies (such as _clck and _clsk). Legal basis: your consent (Article 6(1)(a)), which you can withdraw with the “Cookie settings” link.

Spam protection

The forms include hidden checks that stop automated spam: a trap field that only bots fill in, a minimum time to fill the form, a short browser check and limits on links and repeated messages. If Cloudflare Turnstile is switched on, Cloudflare Inc. briefly checks your browser to confirm you are a person; this does not set advertising cookies. Messages that fail these checks are dropped and not stored. Legal basis: legitimate interests in keeping the site and my inbox free of abuse (Article 6(1)(f)).

Clients

If you become a client, I keep the contact details, project communication, invoices and records needed to deliver the work and meet my legal and tax obligations. Legal bases: performance of a contract (Article 6(1)(b)) and legal obligation (Article 6(1)(c)).

Who I share data with

I do not sell your data or share it with anyone for their own marketing. Data is only handled by providers that help me run the business:

Some of these providers may process data outside the European Economic Area. Where they do, the transfer is covered by safeguards such as the European Commission’s standard contractual clauses or the EU-US Data Privacy Framework.

How long I keep it

Your rights

You have the right to:

Email hello@joltwebs.com and I will reply within one month.

If you are not happy with how I handle your data, you can complain to Malta’s Information and Data Protection Commissioner (IDPC) at idpc.org.mt.

Security

The site runs over an encrypted connection (HTTPS), access to the dashboard is protected, and enquiry data is only visible to me.

Changes to this policy

If this policy changes, the new version will be published on this page with a new date.