Privacy Policy

Last updated: 3 July 2026

This policy explains what personal information IV Studio ("we", "I") collects through iv-studio.net, why, and what your rights are. IV Studio is operated by Isaac Claude Camilleri, a VAT-registered sole trader in Malta. The short version: we only collect what's needed to respond to your quote requests and run the site — no advertising, no selling of data, no tracking across other websites.

1. What we collect and why

• Account details — if you sign in to request a quote (with Google or an email account), we receive your email address and, from Google, your name. Used only to identify your quote requests and reply to you.
• Quote requests — the items you select, totals, and anything you include in a request. Used to prepare your quote and keep a record of our correspondence.
• Emails — when we email each other, those messages are retained as normal business correspondence.
• Technical basics — the web server keeps standard access logs (IP address, browser type, pages requested) for security and troubleshooting. A session cookie is used to keep you signed in; a preference is stored in your browser for the light/dark theme.

The legal bases under the GDPR are: taking steps at your request before entering a contract (quotes), legitimate interest (site security, business records), and consent where applicable.

2. What we don't do

• No advertising or marketing trackers, and no third-party analytics that profile you.
• No selling, renting, or sharing of your data for marketing.
• No automated decision-making or profiling.

3. Where your data lives

• Supabase — account and quote data is stored in a Supabase-hosted database (Supabase privacy policy).
• Google — if you sign in with Google, authentication is handled by Google (Google privacy policy). We only receive your basic profile (name, email); we never see your password.
• Email — notification emails are sent via Gmail.

4. How long we keep it

Quote requests and related correspondence are kept for as long as reasonably needed for business and tax-record purposes, after which they are deleted. You can ask for earlier deletion at any time (see below) — unless a legal obligation requires us to retain something (e.g. invoices under Maltese tax law).

5. Your rights (GDPR)

You can ask at any time to: access the data we hold about you, correct it, delete it, receive a copy (portability), restrict or object to processing, or withdraw consent. Email [email protected] and we'll respond within one month. You also have the right to complain to Malta's Information and Data Protection Commissioner (IDPC).

6. Security

The site uses HTTPS everywhere, passwords are never stored in plain text, and access to quote data is restricted to the site owner. No system is perfectly secure, but reasonable technical measures are in place and reviewed.

7. Changes and contact

If this policy changes, the date at the top will be updated. Questions: [email protected].