Legal

Privacy Policy

Last updated: 25 June 2026

This policy explains what personal information LuxuryLifts (“we”, “us”) collects when you book a visit, request a quotation, or use our client portal, how we use it, and the rights you have. We are based in Malta and handle your data in line with the EU General Data Protection Regulation (GDPR).

Who we are

LuxuryLifts — lift maintenance & installation, Malta.
Email: [email protected]
Phone / WhatsApp: +356 7923 4737
Registered business: [your registered business name & number] · Address: [your postal address]

What we collect

Your name and the contact details you give us (phone number, email, address).
Details of your lift(s) and the site — make, model, location, service history.
Booking, quotation and invoice records (what work was requested, dates, amounts).
If you pay online, the payment is processed by Stripe — we never see or store your full card number.
If you turn on service reminders, a browser push subscription token (no message content).

Why we use it (and our legal basis)

To provide our services — schedule visits, carry out maintenance, prepare quotes and invoices (performance of a contract).
To contact you about your bookings, service due dates and quotations (contract / legitimate interest).
To take payment and issue receipts (contract / legal obligation for tax records).
To send reminders you have asked for (your consent — you can turn them off at any time).

Who we share it with

We do not sell your data. We share the minimum necessary with service providers who help us operate:

Stripe — to process online payments and send receipts.
Google — to store our client and job records.
Cloudflare — for our website’s DNS and secure delivery.

We may also disclose information where required by law.

How long we keep it

We keep client and service records for as long as you are a customer and for as long afterwards as we need to for warranty, safety and legal/tax reasons. Invoices and financial records are kept as required by Maltese law.

Your rights

You can ask us to access, correct or delete your personal data, or to stop using it for reminders. To do any of these, contact us at [email protected]. You also have the right to complain to the Maltese data protection authority (IDPC).

Security

Access to your records and the client portal is protected by individual logins and, where enabled, a one-time code sent to your phone. Payment pages are handled securely by Stripe.

This policy is provided in good faith as a plain-language summary. Please have it reviewed by a qualified adviser before relying on it, and fill in the bracketed business details above.