Privacy Notice

Who is responsible for your data?

For the purposes of this website and the professional services described on it, the data controller is:

Questions concerning this Privacy Notice or the processing of your personal data can be sent using the contact details above.

What information may be collected?

The categories of information processed depend on how you use the website and whether you choose to contact Denise.

Information you provide directly

When you submit an enquiry, request a consultation or otherwise contact Denise, the information may include:

• your name;
• email address;
• telephone or WhatsApp number;
• country;
• organisation or company;
• professional role or context where relevant;
• enquiry type;
• project, training, speaking, research or consultation information;
• preferred method of contact;
• meeting or delivery preferences;
• preferred dates or availability;
• information contained within your message; and
• subsequent correspondence relating to your enquiry.

Technical information

When the website is accessed, limited technical information may also be generated or processed by the website, hosting infrastructure or security systems. This can include information such as:

• IP address;
• browser and device information;
• date and time of access;
• requested pages or resources;
• referral information;
• server and security logs; and
• information used to identify technical errors, spam, abuse or security incidents.

Why is personal data processed?

Personal information may be processed for purposes including:

• receiving and reviewing professional enquiries;
• responding to questions or requests;
• discussing potential consulting, advisory or professional engagements;
• responding to requests concerning courses, corporate training or professional education;
• handling speaking, lecturing, event or media enquiries;
• considering research, innovation or collaboration proposals;
• considering entrepreneurship or venture enquiries;
• arranging meetings or follow-up communication;
• administering an existing professional relationship;
• maintaining appropriate business and correspondence records;
• protecting the website and enquiry systems from spam, misuse and security threats;
• diagnosing technical issues;
• complying with legal, regulatory, accounting or tax obligations where applicable; and
• analysing website use where you have provided the required analytics consent.

What are the legal bases for processing?

The applicable legal basis depends on the purpose and circumstances of the processing.

Where processing is based on legitimate interests, those interests are considered together with the rights and interests of the individual concerned.

Where processing is based on consent, you may withdraw that consent. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

What happens when you submit a form?

Information submitted through the website's professional enquiry and consultation forms is transmitted through the website's server-side enquiry system.

The information is used to evaluate and respond to the enquiry and may subsequently form part of professional correspondence.

Email communications generated through the website may be processed using Zoho Mail and associated email infrastructure.

Website forms also use limited anti-spam and security measures. These may include technical information and hidden fields intended to detect automated or abusive submissions.

What happens when you use Chat?

The website provides an optional chat function. The external chat service is not loaded merely because the page contains a Chat button; the website is designed to load the chat service when you choose to open it.

When you open and use Chat, information connected with that interaction may be processed by a third-party live chat service provider.

Depending on the chat service configuration, this information may include:

• the contents of your chat messages;
• information you voluntarily provide in the chat;
• technical device or browser information;
• session information;
• IP address; and
• cookies or similar local-storage technologies where permitted and applicable.

AI-assisted chat

The chat service may include an AI assistant when Denise is not personally available.

The AI assistant is intended to provide general information and help direct professional enquiries. It is not authorised to enter into contracts, agree fees, confirm bookings or make commitments on Denise's behalf.

No decision producing legal or similarly significant effects is intended to be made about you solely through the website's AI chat function.

Avoid entering information into Chat that is not reasonably necessary for your enquiry.

How is website analytics handled?

The website may use Google Analytics to understand general website usage and performance.

The redesigned website is intended to load optional Google Analytics measurement only after the visitor has provided analytics consent through the website's consent controls.

If analytics consent is not provided, optional analytics should remain disabled under the site's configured consent approach.

More information concerning cookies and similar technologies is provided in the Cookie Policy .

Who may receive personal data?

Personal data is not sold as part of the operation of this website.

Information may, where necessary, be processed by or disclosed to categories of recipients including:

• website hosting and technical infrastructure providers;
• email and communications service providers, including Zoho Mail;
• the third-party live chat service provider when Chat is used;
• Google in connection with optional analytics where analytics has been enabled with the required consent;
• technology providers necessary to operate, maintain or secure the website;
• professional advisers where reasonably necessary;
• contractors or service providers assisting with an agreed professional engagement where appropriate and lawful; and
• public authorities, regulators or other recipients where disclosure is required or permitted by law.

External social and messaging services

The website contains links to services such as LinkedIn, Facebook, Instagram, X / Twitter and WhatsApp.

When you choose to follow an external link, you leave this website. The external service will process information according to its own privacy practices and settings.

Can information be processed internationally?

Some technology, communications, analytics, infrastructure or chat providers may operate internationally or use infrastructure situated outside Malta or the European Economic Area.

Where personal data is transferred internationally, the transfer is intended to be handled in accordance with applicable data-protection requirements and the safeguards applicable to the relevant provider and processing activity.

Depending on the circumstances, relevant transfer safeguards may include an adequacy decision, contractual safeguards such as standard contractual clauses, or another legally recognised transfer mechanism.

You may contact Denise if you require further information concerning the safeguards relevant to the processing of your information.

How long is information retained?

Personal data is intended to be kept only for as long as reasonably necessary for the purpose for which it was collected, together with any period required to meet legal, accounting, tax, contractual or legitimate record-keeping requirements.

Relevant retention criteria include:

• whether an enquiry remains active;
• whether follow-up communication is reasonably expected;
• whether a professional engagement results from the enquiry;
• the nature of the professional relationship;
• contractual or accounting record requirements;
• legal limitation periods;
• the need to establish, exercise or defend legal claims;
• fraud, abuse or security considerations;
• applicable service-provider retention settings; and
• whether consent has been withdrawn for processing that depends on consent.

When information is no longer reasonably required, it should be deleted, anonymised or otherwise dealt with in accordance with the applicable retention requirement.

What rights may you have?

Subject to the conditions and limitations in applicable data-protection law, your rights may include:

• the right to be informed about the processing of your personal data;
• the right of access to personal data held about you;
• the right to rectification of inaccurate or incomplete personal data;
• the right to erasure in circumstances where that right applies;
• the right to restriction of processing where the applicable conditions are met;
• the right to object to certain processing, including processing based on legitimate interests where applicable;
• the right to data portability where the legal conditions for portability apply;
• the right to withdraw consent at any time where processing relies on consent; and
• rights relating to certain forms of solely automated decision-making where applicable.

Data-protection rights are not absolute and the particular right available depends on the processing and its legal basis.

Exercising your rights

To make a data-protection request, contact:

[email protected]

Sufficient information may be requested to identify the relevant records and, where reasonably necessary, to verify the identity of the person making the request.

Data-protection complaints

If you have a concern about the processing of your personal data, you are encouraged to contact Denise first so the matter can be reviewed.

You also have the right, where applicable, to lodge a complaint with Malta's supervisory authority:

How is information protected?

Reasonable technical and organisational measures are used to protect personal information against unauthorised access, accidental loss, misuse, alteration or inappropriate disclosure.

Measures may include access controls, server-side processing, restricted credentials, security logging and secure communications technologies where supported.

No website, email system or electronic transmission method can provide an absolute guarantee of security. You should therefore avoid sending information that is unnecessary for the purpose of your enquiry.

Children's personal data

This professional consultancy website is not designed primarily as an online service for children.

Personal data relating to a child should not be submitted through a professional enquiry form unless it is appropriate and lawful to do so.

Are enquiries automatically used for marketing?

Submitting a consultation or professional enquiry does not by itself mean that you have requested unrelated promotional marketing.

Where direct marketing is undertaken in the future, the appropriate legal requirements and opt-out or consent mechanisms will be applied as required.

Updates to this Privacy Notice

This Privacy Notice may be updated when the website, services, technology providers or relevant legal requirements change.

The date displayed at the top of this page indicates when this version was last updated.

Material changes should be reflected in the published notice before or when the relevant processing changes, as appropriate.

Questions about your data?