Skip to content

Privacy Policy

Last updated: 8 October 2026

1. Who we are

Virtual Vista is a business based in Malta operated by Jaime Gutiérrez, who is the controller of the personal data described in this policy. For any question about your data, write to [email protected].

2. Data you give us

Contact form. When you fill in our contact form, we collect your name, email address, business name (optional), type of space and your message, together with the context of your enquiry: the page, plan or service you came from and, if you arrived from a link or an ad, its campaign parameters. We use this to reply to you and prepare a proposal.

WhatsApp and email. When you write to us on WhatsApp, we receive your phone number, your WhatsApp profile name and your messages. When you email us, we receive your email address, name and message. We use them for the same purpose.

Legal basis: taking steps at your request before entering into a contract (Article 6(1)(b) GDPR).

Clients. If you become a client, we also process the details needed to deliver the service and invoice you. Legal basis: performance of the contract and our legal obligations (Article 6(1)(b) and (c) GDPR).

We never ask for sensitive data. Please don't include it in your messages.

3. Data collected when you visit the site

Security. To protect our forms from spam and abuse, we use Cloudflare Turnstile, which processes technical data such as your IP address and browser characteristics. Legal basis: our legitimate interest in keeping the site secure (Article 6(1)(f) GDPR).

4. How long we keep it

Enquiries that don't turn into a project are kept for up to 24 months from our last contact and then deleted. Client data is kept for the duration of our relationship and afterwards for as long as Maltese tax and accounting law requires.

5. Who we share it with

We don't sell your data. We only share it with providers that help us run our service, under agreements that protect it:

  • Cloudflare: website hosting, security and spam protection.
  • Resend: delivery of form messages to our inbox.
  • Google Workspace: our email inbox.
  • Google: storage of enquiries in a spreadsheet only our team can access.
  • WhatsApp (Meta): if you choose to contact us on WhatsApp, under WhatsApp's own terms and privacy policy.

We don't make decisions about you by automated means.

6. International transfers

Some of these providers are based in, or may process data in, the United States. Where that happens, transfers rely on the EU–US Data Privacy Framework or on Standard Contractual Clauses approved by the European Commission.

7. Your rights

You can ask us to access, correct or delete your data, to restrict or object to its use, or to receive it in a portable format. Where we rely on your consent, you can withdraw it at any time, without affecting anything done before. Write to [email protected] and we will reply within one month. You also have the right to complain to the Information and Data Protection Commissioner (IDPC) in Malta: idpc.org.mt.

8. Security

Access to your data is limited to our team and protected with strong passwords and two-step verification.

9. Children

Our services are aimed at businesses and are not directed at anyone under 16.

10. Changes

If we change this policy, we will update the date at the top of this page.