1. Who we are
This policy explains how ST Projects Ltd (“ST Projects”, “we”, “us”) collects and uses personal data when you visit stprojectsmalta.com or contact us through it. ST Projects is part of the Stivala Group of companies in Malta.
ST Projects Ltd is the data controller for the personal data described here. We process it in line with the EU General Data Protection Regulation (GDPR) and Malta’s Data Protection Act (Cap. 586).
Contact details
- ST Projects Ltd, C 102919
- 40, Triq Sir Frederick C. Ponsonby, Il-Gżira GZR 1070, Malta
- Telephone: +356 2264 0195
- Email: admin@stprojectsmalta.com
For any privacy question or request, email us at admin@stprojectsmalta.com with “Privacy” in the subject line.
2. What we collect and why
We only collect what you give us through our forms, plus basic technical data needed to run the website securely.
| What you do | Data we collect | Why we use it | Legal basis |
|---|---|---|---|
| Send an enquiry through the contact form | Name, email address, phone number and country prefix, country, your message | To reply to your enquiry and, if you ask, discuss a project with you | Steps you ask us to take before a contract, and our legitimate interest in answering enquiries |
| Sign up for ST Projects updates | Email address and your consent | To send you news about our projects. You can unsubscribe at any time | Your consent |
| Apply for a job on a vacancy page | Name, email address, phone number, CV and certificates, your message | To assess your application and contact you about the role | Steps you ask us to take before an employment contract |
| Browse the website | IP address, browser and device type, pages visited, date and time | To keep the site secure, prevent spam and fix errors | Our legitimate interest in running a secure website |
| Accept analytics cookies | Pseudonymous usage data such as pages viewed and how you arrived | To understand how the site is used and improve it | Your consent, given through the cookie banner |
Please do not send us special category data (for example health information) through our forms. If you apply for a job, only include what is relevant to the role.
We do not use your data for automated decision-making or profiling that has legal or similar effects on you.
3. Cookies and analytics
Our website uses cookies that are needed for it to work, and, only if you agree, cookies that help us understand how visitors use it. When you first visit, a cookie banner lets you accept or refuse non-essential cookies. You can change your choice at any time through the cookie settings link at the bottom of every page.
Our Cookies Policy lists the cookies we use, what they do and how long they last.
4. Who we share your data with
We do not sell your personal data. We share it only with service providers who help us run the website, and only as far as they need it to provide their service. Each one acts on our instructions under a data processing agreement.
Within the Stivala Group, we may share an enquiry with a sister company (such as ST Properties or ST Hotels) when it relates to their business, so they can reply to you.
We may also disclose data where the law requires it, for example to a public authority or court, or to protect our legal rights.
5. Transfers outside the EU
Some of our providers, or their sub-processors, are based in or can access data from outside the European Economic Area, including the United States. Where this happens, we make sure the transfer is protected, either because the provider is certified under the EU-US Data Privacy Framework or because the transfer is covered by the European Commission’s Standard Contractual Clauses. You can ask us for more details using the contact details above.
6. How long we keep your data
We keep personal data only as long as we need it for the purpose it was collected for, or as long as the law requires.
| Data | How long we keep it |
|---|---|
| Enquiries through the contact form | 2 years after our last contact, longer if the enquiry leads to a contract |
| Newsletter sign-ups | Until you unsubscribe |
| Job applications | 6 months after the role is filled, unless you agree we can keep your CV for future roles |
| Website security logs | Up to 30 days |
| Analytics data | 14 months |
| Cookie consent records | 12 months |
7. Your rights
Under the GDPR you have the right to:
- Access the personal data we hold about you and get a copy of it
- Correct data that is inaccurate or incomplete
- Delete your data where there is no good reason for us to keep it
- Restrict how we use your data in certain circumstances
- Object to us using your data based on our legitimate interests
- Data portability: receive the data you gave us in a common format, or have it sent to another organisation
- Withdraw consent at any time, for example by unsubscribing from our updates or changing your cookie settings. This does not affect anything we did before you withdrew it
To use any of these rights, email admin@stprojectsmalta.com. We may ask you to confirm your identity, and we will reply within one month.
If you are unhappy with how we handle your data, please tell us first so we can try to put it right. You also have the right to complain to Malta’s supervisory authority:
Information and Data Protection Commissioner (IDPC), Floor 2, Airways House, Triq Il-Kbira, Tas-Sliema SLM 1549. Telephone +356 2328 7100, email idpc.info@idpc.org.mt.
8. Other information
Security. We use appropriate technical and organisational measures to protect your data, including encrypted connections (HTTPS), access controls and security monitoring on our website.
Children. Our website is not aimed at children, and we do not knowingly collect data from anyone under 16.
Other websites. Our site links to other websites, including ST Hotels, ST Properties, Stivala Group, ST Careers and our Facebook page. Those sites have their own privacy policies, and we are not responsible for how they handle your data.
Changes to this policy. We may update this policy from time to time. The date below shows when it was last changed.
Last updated: 08/10/2026