Legal

Privacy Policy

How E‑Yay Consulting collects, uses, and protects personal data when you visit e-yay.com, contact us, subscribe, or engage us for consulting services.

Last updated: 15 September 2026

01

Who we are

This Privacy Policy explains how E‑Yay Consulting (a trading name, referred to below as "E‑Yay", "we", "us", or "our") collects and uses personal data when you visit e-yay.com, contact us, subscribe to communications, enquire about or buy a course, or engage us for consulting services.

Data controller
E‑Yay Consulting (trading name)
Website
e-yay.com

We are the controller of personal data processed for our own website, marketing, course, prospect, and business-administration purposes. Where we process personal data solely on behalf of a consulting client, that client may be the controller and we may act as its processor. In those cases, the applicable client contract and data-processing terms apply.

02

Personal data we collect

Depending on how you interact with us, we may collect:

  • Contact and enquiry data: Name, email address, phone number, company name, job title, country, message content, and other information you choose to provide.
  • Professional and client relationship data: Business information, project details, meeting notes, proposals, contracts, invoices, communications, and feedback.
  • Course and marketing data: Name, email address, chosen course or topic, subscription preferences, event registrations, engagement with emails, and purchase-related records where applicable.
  • Website and technical data: IP address, browser/device information, approximate location, pages viewed, referring pages, and interaction or event data generated through cookies and similar technologies, where enabled and permitted.
  • Social-media data: Information you provide when contacting us through social networks or engaging with our content, subject to the relevant platform's own privacy terms.
  • Sensitive or high-risk business data: In limited cases, data supplied by a consulting client or accessed during a project, which may include employee, customer, financial, identity, or other sensitive information. We process this only where necessary for agreed services, subject to appropriate contractual, security, and data-protection arrangements.

Please do not send special-category personal data or other highly sensitive information through a general website contact form unless we have specifically asked you to do so and an appropriate secure method has been agreed.

03

How we use personal data and legal bases

We use personal data only where we have a lawful basis to do so.

PurposeExamplesLegal basis
Responding to enquiries and arranging callsReplying to contact-form submissions, emails, and discovery-call requestsTaking steps at your request before entering into a contract; legitimate interests in responding to business enquiries
Providing services and coursesManaging consulting projects, course access, delivery, support, administration, and client communicationsPerformance of a contract; taking steps before a contract; legal obligations where applicable
Managing the businessAccounting, invoicing, record keeping, fraud prevention, dispute management, and securityLegal obligations; legitimate interests in operating and protecting our business
Marketing to subscribersSending newsletters, insights, course updates, and relevant service informationConsent where required; otherwise legitimate interests where permitted by law, always with an opt-out option
Website operation and improvementMaintaining website security, diagnosing faults, understanding website performance, and improving usabilityLegitimate interests for essential operation; consent for non-essential cookies/technologies where required
Client project dataPerforming agreed consulting, marketing, project-management, or digital servicesAs instructed by the client under the applicable agreement; E‑Yay may act as processor

Where we rely on consent, you may withdraw it at any time. Withdrawal does not affect processing carried out before withdrawal.

04

Marketing communications

We may send marketing communications about E‑Yay's consulting services, courses, events, insights, and relevant updates.

  • B2C subscribers: We will use consent where required for marketing emails.
  • Business contacts: We may contact professional contacts about relevant B2B services where permitted by applicable law, always giving a clear opportunity to opt out.
  • Unsubscribe: Every marketing email includes an unsubscribe link. You can also ask us to stop marketing by emailing privacy@e-yay.com.

We do not sell personal data.

05

Cookies and similar technologies

We use cookies and similar technologies as described in this section and through our cookie banner and cookie settings.

Strictly necessary technologies may be used to operate, secure, and remember essential website functions. Analytics, session-recording, functional, and marketing technologies will be used only where enabled and, where required, after you have given valid consent through our cookie banner or preferences tool.

06

Who we share personal data with

We may share data with trusted providers where necessary to operate our business and deliver services, such as:

  • Website hosting, website-builder, and infrastructure providers, including Lovable where it provides or supports the website.
  • Email, newsletter, calendar, form, CRM, project-management, and communications providers.
  • Analytics, consent-management, advertising, social-media, and tracking providers, but only where enabled and permitted.
  • Professional advisers, accountants, insurers (if applicable), banks, payment providers, and legal advisers.
  • Approved subcontractors, freelancers, specialists, and delivery partners who need access to perform agreed services and are subject to appropriate confidentiality and data-protection obligations.
  • Public authorities, regulators, courts, or law-enforcement bodies where disclosure is legally required or necessary to protect rights, safety, or property.

We require service providers to handle personal data appropriately and only for permitted purposes.

07

International transfers

Some providers may process personal data outside Malta or the European Economic Area (EEA). Where this happens, we will use appropriate safeguards required by applicable data-protection law, such as an adequacy decision, Standard Contractual Clauses, or another lawful transfer mechanism.

08

Retention

We keep personal data only as long as needed for the purpose for which it was collected, including legal, accounting, tax, reporting, and dispute-resolution requirements.

Our current retention approach is:

Data typeTypical retention period
Unsuccessful business enquiries and discovery-call recordsUp to 12 months after last meaningful contact
Marketing subscription dataUntil you unsubscribe or we decide the data is no longer needed; suppression records may be kept to honour opt-outs
Client contracts, project records, and service communicationsFor the contract term plus a reasonable period for claims, administration, and legal obligations
Accounting and tax recordsAs required by applicable law
Website analytics and cookie dataAccording to the relevant cookie/tool settings and consent choices
Client-provided project dataAs instructed by the client, the project agreement, and applicable data-protection terms
09

Your rights

Subject to applicable law, you may have the right to:

  • Request access to personal data we hold about you.
  • Ask us to correct inaccurate or incomplete data.
  • Request deletion of data in certain circumstances.
  • Ask us to restrict processing in certain circumstances.
  • Object to processing based on legitimate interests, including direct marketing.
  • Withdraw consent at any time where consent is the basis for processing.
  • Request data portability where applicable.
  • Complain to a supervisory authority.

To exercise your rights, email privacy@e-yay.com. We may ask for information to verify your identity before responding.

If you are in Malta, you may complain to the Information and Data Protection Commissioner (IDPC). Details are available at idpc.org.mt.

10

Children

Our website, consulting services, and marketing are not directed to people under 18. We do not knowingly collect personal data from anyone under 18. If you believe that a child has provided us with personal data, contact privacy@e-yay.com so we can take appropriate steps.

11

Security

We use reasonable technical and organisational measures intended to protect personal data. No transmission or storage method is completely secure, so please avoid sending highly sensitive information through general public forms or unencrypted email unless a secure process has been agreed.

12

Third-party links and social platforms

Our website may link to third-party sites or services. Their privacy practices are governed by their own policies. We are not responsible for third-party content or privacy practices.

13

Changes to this policy

We may update this Privacy Policy from time to time. We will publish the revised version on e-yay.com and update the effective date when material changes are made.

14

Contact

For privacy questions, requests, or concerns, contact:

E‑Yay Consulting

privacy@e-yay.com

Prefer a general chat? Use the contact page and we'll point you to the right person.