Privacy Policy

Last updated: 15th January 2026

Data Controller Information

This privacy policy explains how infinitespark Ltd ("we", "us", or "our") collects, uses, and protects your personal information when you use our website and services. infinitespark Ltd is the data controller for the purposes of the General Data Protection Regulation (GDPR) and other applicable data protection laws.

Company Details:
infinitespark Ltd
Registration Number: C96857
VAT Number: MT96352741
Address: Triq Ħal Qormi 81, Valletta VLT 8584, Malta
Email: privacy@infinitespark.world
Phone: +356 22910302

Data Collection

We collect personal data that you voluntarily provide to us when you use our services, contact us, or interact with our website. The data we collect may include:

  • Contact Information: Your name, email address, phone number, and postal address
  • Business Information: Company name, salon details, number of locations, and business requirements
  • Communication Data: Messages, enquiries, and correspondence you send to us
  • Technical Data: IP address, browser type, device information, and website usage data
  • Marketing Preferences: Your consent preferences for marketing communications

Legal Basis for Processing

We process your personal data based on the following legal grounds under GDPR:

  • Consent: When you have given explicit consent for marketing communications or cookie usage
  • Contract: When processing is necessary for the performance of a contract with you
  • Legitimate Interest: When we have a legitimate business interest, such as improving our services
  • Legal Obligation: When we must process data to comply with legal requirements

How We Use Your Information

We use the personal data we collect for the following purposes, and how we use your information depends on your relationship with infinitespark:

  • To provide and maintain our beauty salon analytics services
  • To respond to your enquiries and provide customer support
  • To process and fulfil service requests and consultations
  • To send you important updates about our services and platform
  • To improve our website, services, and customer experience
  • To conduct analytics and research to enhance our offerings
  • To send marketing communications (only with your consent)
  • To comply with legal obligations and protect our rights

Cookies and Tracking Technologies

We may use cookies and tracking technologies for analytics, advertising, and remarketing purposes, including Google Ads. These technologies help us measure campaign effectiveness, deliver relevant advertisements, and improve our services. You can manage your cookie preferences at any time through our cookie consent banner. For detailed information about our use of cookies, please see our Cookie Policy.

Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your data in the following circumstances:

  • Service Providers: With trusted third-party service providers who assist in operating our business
  • Legal Requirements: When required by law, court order, or government request
  • Business Protection: To protect our rights, property, or safety, or that of our users
  • Business Transfers: In connection with a merger, acquisition, or sale of assets

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes outlined in this privacy policy. Specifically:

  • Contact form enquiries: 3 years from last contact
  • Customer account data: Duration of service relationship plus 7 years for legal compliance
  • Marketing consent: Until withdrawn or 3 years of inactivity
  • Website analytics data: 26 months as per Google Analytics retention settings

International Data Transfers

Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA). When we transfer data internationally, we ensure appropriate safeguards are in place, including adequacy decisions by the European Commission or standard contractual clauses approved by the European Commission.

Your Rights

Under GDPR and applicable data protection laws, you have the following rights regarding your personal data:

  • Right of Access: Request a copy of the personal data we hold about you
  • Right to Rectification: Request correction of inaccurate or incomplete data
  • Right to Erasure: Request deletion of your personal data in certain circumstances
  • Right to Restrict Processing: Request limitation of processing in certain situations
  • Right to Data Portability: Request transfer of your data to another service provider
  • Right to Object: Object to processing based on legitimate interests or for marketing purposes
  • Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include encryption, secure data transmission, access controls, and regular security assessments. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

Children's Privacy

Our services are not intended for children under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal data from a child under 16 without parental consent, we will take steps to delete that information.

Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of these external sites. We encourage you to read the privacy policies of any third-party websites you visit.

Contact Information

If you have any questions about this privacy policy, wish to exercise your rights, or have concerns about how we handle your personal data, please contact us:

Privacy Officer
infinitespark Ltd
Email: privacy@infinitespark.world
Phone: +356 22910302
Address: Triq Ħal Qormi 81, Valletta VLT 8584, Malta

Supervisory Authority

You have the right to lodge a complaint with the relevant data protection supervisory authority if you believe we have not handled your personal data in accordance with applicable laws. In Malta, this is the Office of the Information and Data Protection Commissioner.

Changes to This Privacy Policy

We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the updated policy on our website and updating the "Last updated" date. We encourage you to review this policy periodically.