Website information
Privacy policy
Updated 21 October 2026
This policy explains how WS Installations Ltd uses personal information collected through https://www.wsgroupmalta.com when you contact us, apply for a role, request products or installation, or choose optional website analytics.
Who is responsible for your information?
WS Installations Ltd is the controller for the website enquiries, recruitment applications, order requests and optional analytics described here. Contact us at info@wsinstallations.com, +356 9965 5581, or Triq Censu Busuttil, L-Iklin, Malta.
What information do we receive?
- Project enquiries: your name, email, telephone number if supplied, project location, selected services, property or project type, preferred timing, budget selection and the details you send us.
- Job applications: your name, contact details, selected role, experience, driving-licence and residence information supplied in the form, your CV and accompanying message.
- Order and quotation requests: contact details, installation address if supplied, preferred contact method, selected products, installation choices, quoted product totals and notes. The website submits a request; it does not collect payment-card details.
- Correspondence: the messages, references and follow-up information needed to handle your request.
- Technical information: hosting and infrastructure providers process network requests and operational or security logs, which can include IP addresses, request times and browser information. This is separate from our optional analytics reports.
Required form fields are marked with an asterisk. Without the information needed for a particular request, we may be unable to assess the work, review an application or respond. Submitting a form does not subscribe you to a marketing mailing list.
Why do we use it?
| Purpose | Legal basis |
|---|---|
| Responding to project enquiries and preparing quotations | Taking steps at your request before a contract, where applicable, and our legitimate interest in answering and managing business enquiries. |
| Handling product, installation and order requests | Taking steps before a contract and performing an agreed contract. Related business records may also be needed to meet legal obligations. |
| Reviewing job applications and contacting applicants | Taking steps at an applicant’s request before employment and our legitimate interest in assessing and documenting recruitment. Any consent given for future opportunities can be withdrawn. |
| Keeping the website and submissions secure | Our legitimate interest in operating a reliable website, preventing misuse and protecting information. |
| Optional website analytics | Your consent. Analytics is off unless you allow it, and you can withdraw that choice. |
| Meeting legal duties or dealing with claims | Applicable legal obligations and, where relevant, our legitimate interest in establishing, exercising or defending legal claims. |
The website forms route requests to our team. They do not make automated hiring or service-eligibility decisions.
Who can receive the information?
Information is available to authorised WS personnel handling the relevant enquiry, recruitment or order process, and to service providers supporting those processes. The current website uses:
- Vercel for website hosting and content delivery.
- Supabase for form processing, database records, private CV storage, administrator sign-in and optional analytics storage. The configured project database region is Ireland.
- Resend for submission notifications and confirmation emails. Notifications contain the submitted request information; uploaded CV files are accessed through the admin system.
- Email providers for delivery and handling of correspondence, including the services used by us and by the recipient of an email.
Some pages also load fonts, icons or client-logo images from external providers, including Google Fonts, jsDelivr and the relevant external image hosts. Loading those resources sends the network information needed to request them to the provider. Links to other websites lead to services with their own privacy notices.
Hosting, email delivery, support and other provider operations can involve processing outside the European Economic Area, including in the United States. Provider data-processing terms describe the relevant transfer arrangements, including EU Standard Contractual Clauses where applicable. Published information is available from Supabase, Vercel and Resend. Contact us for information about the arrangements and safeguards applicable to your data, including how to obtain a copy.
Information may also be disclosed to professional advisers or competent authorities where necessary to meet legal duties or deal with a claim.
How long is information kept?
Retention depends on the purpose and status of the record. The criteria are:
- Enquiries: the time needed to assess the request, prepare a quotation, complete follow-up and address any resulting work or dispute.
- Order and project records: handling the request, delivering agreed work and meeting applicable accounting, contractual and legal record-keeping requirements.
- Applications and CVs: completion of the recruitment process, any agreed consideration for future opportunities, and information necessary to address recruitment enquiries or legal claims.
- Correspondence: the purpose of the underlying enquiry, application or order, together with relevant legal or dispute requirements.
- Optional analytics: records older than 90 days are removed by the scheduled daily cleanup. This period does not apply to form submissions, CVs or email correspondence.
Archiving a submission does not erase it. You can contact us to ask about a record’s retention or request erasure; applicable legal requirements may require some information to be retained.
Cookies, browser storage and analytics choices
The website uses browser storage for the basket and your privacy preferences. The basket is stored under ws-cart until it is changed or cleared, or browser storage is cleared. Administrator sign-in also uses authentication storage for the signed-in administrator.
Optional analytics measures page and section views, predefined button actions, submission counts, broad referral source, screen-size category and approximate active time using random browser and visit identifiers. This feed does not collect form text, CVs, names, email addresses, telephone numbers, precise locations, raw IP addresses, full browser user-agent strings or screen recordings. The identifiers are not joined to submission records or staff accounts.
- The allow or reject choice is remembered for 180 days.
- An optional browser identifier expires after 90 days; the tab-session visit identifier resets after 30 minutes of inactivity.
- Global Privacy Control and Do Not Track signals disable analytics.
- Rejecting or withdrawing analytics stops future collection and removes optional identifiers from that browser. Previously collected records remain subject to the 90-day retention rule.
You can use the website normally with analytics off. To change your choice, use Privacy & analytics in the footer of the main website pages. See the detailed analytics notice for storage keys, limitations and administrator exclusions.
Your rights and how to contact us
Depending on the circumstances and the applicable law, you can request access, correction, erasure, restriction, data portability, or object to processing based on legitimate interests. Where processing relies on consent, you may withdraw it without affecting the lawfulness of earlier processing. You also have the right to complain to Malta’s Information and Data Protection Commissioner.
Send privacy requests to info@wsinstallations.com. Include the email address used for the submission and its reference if available so we can locate it. We may need to verify your identity before disclosing or changing personal information. An email address alone will normally not identify a pseudonymous analytics record.
Changes to this policy
The date above shows the latest update. This policy will be updated when the website’s processing arrangements change. Recruitment or services that proceed beyond the initial website request may require further privacy information.