Privacy

Who is responsible

Aftermath Ltd., a private limited company registered in Malta under company number C110654, VAT MT31570511, of 122 Shop 2, Triq St Pawl, St Paul's Bay, Malta, is the controller of the personal data described on this page.

What this site does not do

It carries no analytics, no tracking pixel, no advertising tag and no social embed. It makes no requests to any other origin: the typefaces, the icons, the images and the stylesheet are all served from this domain, so visiting a page here does not disclose your address to anyone but us and our hosting provider. It sets no cookies. It does not profile you, and it makes no automated decisions about you.

What we collect, and why

If you send an enquiry. The contact form records the category you chose, your name, your email address, your message, the IP address the request came from and the time it arrived. We use it for one purpose: to read your message and reply to it. The lawful basis is our legitimate interest in answering people who contact us, and — where your message is about work — taking steps at your request before entering into a contract.

Server logs. Like any web server, ours records requests: the address that made them, the page asked for, the time, and the browser’s own description of itself. These exist to keep the site running and secure.

Nothing else. There is no newsletter, no account, no mailing list and no tracking. The email field in the footer does not subscribe you to anything: it carries the address into the contact form so you do not have to type it twice.

What is kept in your browser

One entry, in local storage, named am-theme, holding the word light or dark. It exists so the site remembers which theme you chose. It is not a cookie, it is never sent to the server, and it identifies nothing. Clearing your site data removes it.

The private management system at /os is a separate application behind a sign-in, and it does set a strictly necessary session cookie for the people who work here. Nothing on the public site does.

Who else sees it

We do not sell personal data and we do not share it for anyone else’s marketing. Our hosting provider processes what passes through the server on our instructions and under contract. We disclose data otherwise only where the law requires it.

How long we keep it

Enquiries are kept for as long as we need them to deal with the matter and to keep an ordinary business record of it, then deleted. Server logs are kept for a short period for security and diagnosis.

Your rights

You have the right to ask us for a copy of the personal data we hold about you, to have it corrected, to have it erased, to restrict or object to how we use it, and to receive it in a portable form. Write to us using the contact form or by post to the registered office above, and we will answer.

If you think we have handled your data badly, you are entitled to complain to the Information and Data Protection Commissioner in Malta.

Changes

This page describes the site as it is built today. If we change what the site collects, we change this page in the same commit — it is not a document that drifts away from the code it describes.