Privacy Policy

Last updated: 1st January 2026

Introduction

magnalumora.top Ltd ("we", "our", or "us") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, and protect your personal data when you visit our website magnalumora.top or use our construction project cost control framework services.

Data Controller Information

The data controller for your personal data is magnalumora.top Ltd, a company registered in Malta with registration number C58237. Our registered office is located at Triq in-Naxxar 4, Valletta VLT 8698, Malta.

Data We Collect

The data we collect from you includes both information you provide directly to us and information we collect automatically when you use our website. We collect the following types of personal data:

  • Contact Information: Name, email address, phone number, company name, and postal address when you contact us or request our services.
  • Communication Data: Records of correspondence when you contact us via email, phone, or our contact form.
  • Technical Data: IP address, browser type and version, operating system, and website usage information collected through cookies and similar technologies.
  • Project Information: Details about your construction projects that you share with us for cost control services.

How We Use Your Information

We use the personal data we collect for the following purposes, based on legitimate business interests and with your consent where required:

  • Service Delivery: To provide our construction project cost control framework services and respond to your enquiries.
  • Communication: To contact you regarding our services, respond to your questions, and provide customer support.
  • Business Operations: To manage our business relationships, process payments, and maintain records.
  • Legal Compliance: To comply with legal obligations and protect our legal rights.
  • Website Improvement: To analyse website usage and improve our online services.
  • Marketing: With your consent, to send you information about our services and industry updates.

Cookies and Tracking Technologies

We may use cookies and tracking technologies for analytics, advertising, and remarketing purposes, including Google Ads. These technologies help us measure campaign effectiveness, deliver relevant advertisements, and improve our services. You can manage your cookie preferences at any time through our cookie consent banner. For detailed information about our use of cookies, please refer to our Cookie Policy.

Data Sharing and Disclosure

We do not sell your personal data to third parties. We may share your information in the following circumstances:

  • Service Providers: With trusted third-party service providers who assist us in delivering our services, such as IT support, payment processing, and professional advisors.
  • Legal Requirements: When required by law, regulation, legal process, or government request.
  • Business Transfers: In connection with any merger, acquisition, or sale of business assets.
  • Protection of Rights: To protect our rights, property, or safety, or that of our clients or others.

Data Retention

We retain your personal data for as long as necessary to fulfil the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements. Generally, we retain client data for seven years after the completion of services for business and legal compliance purposes. Website usage data is typically retained for up to two years.

Your Rights

Under the General Data Protection Regulation (GDPR) and Malta Data Protection Act, you have the following rights regarding your personal data:

  • Right of Access: Request access to your personal data and information about how we process it.
  • Right to Rectification: Request correction of inaccurate or incomplete personal data.
  • Right to Erasure: Request deletion of your personal data in certain circumstances.
  • Right to Restrict Processing: Request limitation of processing in certain circumstances.
  • Right to Data Portability: Request transfer of your data to another service provider.
  • Right to Object: Object to processing based on legitimate interests or for direct marketing.
  • Right to Withdraw Consent: Withdraw consent where processing is based on consent.

Data Security

We implement appropriate technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include encryption, access controls, regular security assessments, and staff training on data protection principles.

International Data Transfers

As we operate primarily within Malta and the European Union, your personal data is generally processed within the EU. If we need to transfer data outside the EU, we ensure appropriate safeguards are in place, such as adequacy decisions or standard contractual clauses approved by the European Commission.

Contact Information

If you have any questions about this Privacy Policy, wish to exercise your rights, or have concerns about how we handle your personal data, please contact us:

Complaints

If you are not satisfied with how we handle your personal data, you have the right to lodge a complaint with the Malta Information and Data Protection Commissioner (IDPC) or your local data protection authority if you are based in another EU member state.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or business operations. We will notify you of any material changes by posting the updated policy on our website magnalumora.top with a new "last updated" date. We encourage you to review this policy periodically to stay informed about how we protect your personal data.

Legal Basis for Processing

We process your personal data based on the following legal grounds under GDPR: (a) your consent for marketing communications and certain cookies; (b) performance of a contract when providing our services; (c) legitimate business interests for business operations, security, and website analytics; and (d) legal obligations for compliance with applicable laws and regulations.