How Cordina handles personal data on this website

This policy explains how Cordina collects, uses, stores, and protects personal data when someone visits this website, submits an enquiry, or chooses to receive marketing communications. This draft is prepared for client review and should be confirmed with Cordina’s legal or compliance advisers before publication.

1. Who controls the data

For the purposes of this website, the data controller is Cordina. Before this policy is published, confirm the correct legal entity name, registered address, contact email, and any dedicated privacy or data protection contact details.

Current showroom address reference: 101, Labour Avenue, Naxxar, Malta.

Placeholder privacy contact for review only: privacy@[confirm-domain].com.

2. What data is collected

When someone submits an enquiry through this website, Cordina may collect:

First name and last name
Email address
Phone number
Project type
Project details entered in the enquiry form
Optional marketing consent preference
Basic technical and campaign metadata such as landing page URL, submission time, and UTM parameters

3. How Cordina uses personal data

Cordina may use personal data to:

Respond to consultation or project enquiries
Review project requirements and prepare the most relevant follow-up
Improve the website, enquiry flow, and marketing performance
Send marketing updates, inspiration, or relevant brand communications only where the visitor has opted in

4. Legal bases for processing

Cordina is expected to rely on one or more of the following legal bases under GDPR, subject to final legal review:

Legitimate interest for handling and responding to genuine business enquiries
Consent for optional marketing communications and certain analytics/advertising cookies where required
Pre-contractual steps where a user is requesting information in connection with a potential project or service

5. Marketing communications

The enquiry form includes an optional marketing checkbox. If a visitor ticks that box, Cordina may use their details to send showroom updates, inspiration, campaigns, or other relevant marketing communications. If the box is not ticked, the form should still be used only to respond to the enquiry itself.

Users should be able to withdraw marketing consent at any time using the unsubscribe method included in the communication or by contacting Cordina directly.

6. Analytics, advertising, and measurement

This website is configured to use Google Tag Manager and is intended to support Google Analytics 4 and Meta tracking. These tools may be used to understand how people use the website, which campaigns generate enquiries, and how the landing page performs.

Where consent is required, analytics and advertising technologies should only be activated in line with the user’s cookie choices and Google Consent Mode v2 settings.

7. Service providers and processors

Depending on the final production setup, Cordina may use service providers to host the website, process form submissions, and manage analytics or advertising measurement. Based on the current site setup, these may include:

Cloudflare Pages for website hosting and delivery
Web3Forms for enquiry form submission handling
Google Tag Manager and planned Google Analytics 4 configuration
Meta Pixel or related Meta advertising measurement tools, if enabled

Final subprocessor wording and any international transfer details should be reviewed before launch.

8. Retention

Personal data should only be kept for as long as reasonably necessary to manage enquiries, continue project-related discussions, comply with legal obligations, and maintain any consented marketing records. Exact retention periods should be confirmed internally before publication.

9. GDPR rights

Subject to applicable law, individuals may have the right to:

Access the personal data held about them
Request correction of inaccurate or incomplete data
Request deletion of personal data in certain circumstances
Restrict or object to certain processing
Withdraw consent where processing is based on consent
Request portability where applicable
Lodge a complaint with a relevant supervisory authority

10. Contact and updates

Before publication, confirm the final privacy contact email and internal handling process for data requests. Cordina should also add an effective date and review this policy periodically to reflect any changes to website tools, cookies, or data handling practices.