Privacy Policy.
Last updated: 16 October 2026
Who we are
Stephen Galea provides commercial photography and production services from Malta and is the data controller for information submitted through this website. For privacy enquiries or requests concerning your data, use the contact form.
What we collect and why
If you contact us, we may receive your name, email address, phone number, company, project details and any files you choose to send. We use this information to respond to your enquiry, prepare a quotation, arrange or carry out requested work and maintain necessary business records.
Enquiry information is processed where necessary to respond to your request and take steps before entering into a contract. Limited technical information may also be processed where necessary for website security and abuse prevention, and information may be retained where required by legal, tax or accounting obligations.
How long we keep it
Enquiry correspondence may normally be retained for up to 12 months after the last contact, unless it relates to an active project, invoice, legal obligation or necessary business record. Client files supplied through private delivery links are normally deleted after the selected delivery period.
Who receives your information
Information is shared only where necessary with services used to operate the website, email, website security and client-file delivery, or where disclosure is required by law. The contact form uses Cloudflare Turnstile to help protect against spam and automated abuse.
Your rights
Under the GDPR, where applicable, you may have rights to access, correct or delete your personal data, restrict or object to certain processing, and request data portability. To exercise these rights, use the contact form. You also have the right to lodge a complaint with Malta’s Information and Data Protection Commissioner (IDPC).
Cookies and external services
This website does not intentionally use advertising or marketing tracking cookies. Essential technical cookies may be used where required for website administration or security. The site may also connect to third-party services such as Cloudflare Turnstile and Google Fonts, which operate under their own privacy terms.