‍

Privacy Policy

Last Updated: 12/02/2026

1. Introduction

3Pandas Marketing Solutions (“3Pandas”, “we”, “us”, “our”) is committed to protecting and respecting your privacy.

This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you:

  • Visit our website: www.3pandas.mt
  • Contact us via forms, email, phone, or social media
  • Request a quotation or consultation
  • Engage our marketing and digital services
  • Interact with our advertising campaigns

We process personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and applicable Maltese data protection laws.

2. Who we are (Data Controller)

‍

For the purposes of data protection law, 3Pandas Marketing Solutions is the Data Controller of personal data collected through our website and business communications, unless stated otherwise.

Company Name: 3Pandas Marketing Solutions
Website: www.3pandas.mt
Email: info@3pandas.com.mt
Location: 266, St Thomas Street, Tarxien, TXN 1600, Malta
Company registration/VAT number: MT 19413236

For any data protection enquiries, please contact us at:
📧 info@3pandas.com.mt

‍

3. What Personal Data We Collect

We collect personal data in three main ways: (a) data you provide, (b) data collected automatically when you use our website, and (c) data received from third parties (e.g., ad platforms), where permitted.

3.1 Data you provide to us

Depending on how you interact with us, we may collect:

  • Identity data: name, surname
  • Contact data: email address, phone number, address (if relevant)
  • Business data: company name, role/title, industry, website/social links
  • Enquiry data: details you submit in forms, emails, messages, calls (including goals, budget ranges, timelines)
  • Client/project data: materials you share for a project (logos, brand assets, images, copy, access credentials, campaigns, analytics)
  • Billing data: billing contact details, invoice details (we generally do not store full card data; payment providers handle that)

3.2 Data we collect automatically (Website & device data)

When you visit our site, we may automatically collect:

  • Technical data: IP address, browser type/version, device identifiers, operating system
  • Usage data: pages visited, time spent, clicks, referring URLs, interactions
  • Approximate location data: derived from IP address (city/region-level)
    Cookie and tracking data: identifiers and events recorded via cookies/pixels/tags (see Cookies section)

3.3 Data from third parties

We may receive personal data from:

  • Advertising platforms (e.g., Meta, Google) such as aggregated campaign performance, lead submissions (where you used platform lead forms), and ad interaction signals
  • Analytics providers (e.g., website analytics tools) to understand how visitors use our website
  • Business partners/referrals if someone recommends you and you consent or it is otherwise lawful

4. Why we collect your data (How we use it)

We use your information for the following purposes:

4.1 To respond to enquiries and provide requested information

  • Respond to contact requests
  • Schedule calls/meetings
  • Provide quotes, proposals, and recommendations

4.2 To deliver and manage our services

Depending on what you engage us for, we may use data to:

  • plan, execute, and manage marketing campaigns (social media, Google Ads, content, email marketing, etc.)
  • provide marketing management and reporting
  • perform web development, maintenance, hosting coordination, and troubleshooting
  • provide SEO services (audits, on-page, technical fixes, content recommendations)
  • create design assets and brand materials
  • coordinate printing jobs (e.g., sending print-ready files and delivery contact details where relevant)
  • manage access to tools (e.g., analytics, ad accounts, business manager, website CMS) where you grant access

4.3 To communicate with you during a business relationship

  • Send service updates, project communications, and operational notices
  • Send invoices, receipts, and important account/service messages

4.4 To improve our website and services

  • Analyse website performance and visitor behaviour
  • Fix bugs, improve usability, and secure the site
  • Understand which services are most relevant to visitors

4.5 For marketing our services (our own marketing)

Where permitted by law, we may:

  • send marketing emails (only if you opted in, or where a lawful “soft opt-in” applies)
  • show you relevant ads (retargeting) based on your website interactions (subject to cookie consent and platform settings)
  • measure ad effectiveness (conversion tracking)

You can opt out of marketing at any time (see “Your rights” and “Marketing preferences”).

4.6 To comply with legal obligations and protect our business

  • comply with accounting, tax, and regulatory requirements
  • prevent fraud and misuse
  • enforce our terms, defend legal claims, or establish legal rights

5. Marketing communications & preferences

5.1 Email / direct marketing

If you subscribe or otherwise consent, we may send you marketing communications about our services, offers, or insights.

  • You can unsubscribe at any time by using the link in the email (if applicable) or contacting info@3pandas.com.mt.
  • Unsubscribing from marketing does not stop essential service communications (e.g., project updates or invoices).

5.2 Advertising and remarketing

We may run advertising campaigns on platforms like Meta and Google. Depending on your cookie choices and platform settings, we may:

  • measure conversions (e.g., form submissions, calls, page views),
  • create audience groups (e.g., website visitors) for remarketing.

These activities may involve the use of cookies/pixels. You can manage this via our cookie consent controls (where available) and your browser/device settings.

‍

6. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to:

  • Ensure website functionality
  • Analyse traffic (Google Analytics)
  • Measure marketing effectiveness
  • Support advertising campaigns (Meta Pixel, Google Ads)

Non-essential cookies are only placed after you provide explicit consent via our cookie consent banner. You can manage or withdraw your consent at any time through the cookie settings available on our website.

7. Who we share your data with

We do not sell your personal data.

We may share personal data only where necessary for the purposes described above, including with:

7.1 Service providers (processors)

Trusted vendors who support our operations, such as:

  • website hosting and IT providers
  • email and communication tools
  • analytics providers
  • advertising platforms and related tools (e.g., conversion tracking)
  • invoicing/accounting tools
  • project management and file storage tools
  • printing suppliers (only where needed for print fulfilment)

These providers act as data processors (or independent controllers where applicable) and are expected to protect your data and use it only for agreed purposes.

7.2 Professional advisers

We may share data with advisers such as accountants, auditors, insurers, and legal counsel where necessary.

7.3 Legal and regulatory disclosures

We may disclose data if required to do so by law, court order, or to respond to lawful requests by public authorities.

7.4 Business transfers

If our business is merged, acquired, or reorganised, personal data may be transferred as part of that transaction, subject to appropriate safeguards.

8. International data transfers

Some third-party service providers may process personal data outside the European Economic Area (EEA). Where this occurs, we ensure appropriate safeguards are in place, such as:

  • Standard Contractual Clauses (SCCs)
  • Adequacy decisions by the European Commission

9. How long we keep your data (Retention)

We retain personal data only for as long as necessary for the purposes described in this policy, including legal, accounting, or reporting requirements.

Typical retention examples:

  • Enquiries/leads: kept for a reasonable period to follow up and for record-keeping, then deleted or anonymised if not needed.
  • Client/project data: kept for the duration of the relationship and afterwards as needed for support, legal claims, and records.
  • Invoices/accounting records: retained as required by applicable tax/accounting laws.
  • Marketing lists: kept until you unsubscribe/withdraw consent, or until the list is cleaned and records are removed.

We may also retain some data in anonymised/aggregated form (which no longer identifies you).

‍10. Data security

We use appropriate technical and organisational measures to protect personal data, which may include:

  • access controls (limiting who can access data)
  • secure passwords and authentication
  • secure storage and backups
  • minimising data access to what’s necessary
  • vendor due diligence where practical

No method of transmission or storage is 100% secure. If we become aware of a security incident that poses a high risk to your rights and freedoms, we will notify you and the relevant authority as required by law.

11. Your GDPR rights

You have rights regarding your personal data, including:

  • Right of access: request a copy of the personal data we hold about you
  • Right to rectification: correct inaccurate or incomplete data
  • Right to erasure (“right to be forgotten”): request deletion in certain circumstances
  • Right to restrict processing: request we limit how we use your data
  • Right to object: object to processing based on legitimate interests and object to direct marketing at any time
  • Right to data portability: receive your data in a structured format where applicable
  • Right to withdraw consent: where we rely on consent, you can withdraw it at any time

To exercise these rights, contact info@3pandas.com.mt. We may need to verify your identity before fulfilling a request.

Complaints

If you believe your data has been handled unlawfully, you can also lodge a complaint with Malta’s Office of the Information and Data Protection Commissioner (IDPC).

‍

12. Children’s privacy

Our services and website are not intended for children, and we do not knowingly collect personal data from children.

13. Third-party links

Our website may contain links to third-party sites (e.g., social media platforms). We are not responsible for the privacy practices of third-party sites. We encourage you to read their privacy policies.

14. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. The latest version will always be available on our website with the “Last updated” date shown at the top.

15. Contact us

If you have questions about this Privacy Policy or how we handle your data, contact us at: info@3pandas.com.mt

‍