Privacy Policy

Data collected and purposes

1. Website visitors (portguardnac.com)

• Technical data: IP address, browser, pages visited
• Purpose: security and aggregate traffic analysis
• Legal basis: legitimate interest (Art. 6(1)(f) GDPR)
• Retention: 30 days in system logs

2. Contact and demo requests

• Data: name, email, company, message
• Purpose: responding to commercial enquiries
• Legal basis: pre-contractual measures (Art. 6(1)(b) GDPR)
• Retention: 24 months from last contact

3. Registered partners (partner portal)

• Data: company name, contact name, email, address, VAT number
• Purpose: managing the contractual relationship, issuing the license
• Legal basis: performance of the contract (Art. 6(1)(b) GDPR)
• Retention: duration of the contract + 10 years (tax obligations)

4. Partners' end customers

• Data: company name, domain/hostname (technical)
• Purpose: generating and verifying the software license
• Legal basis: legitimate interest of the license holder
• Retention: duration of the license + 12 months

5. Website assistant (AI chat)

• Data: the questions you type into the assistant and its replies; a hashed, non-identifying form of your IP address used only for abuse prevention. No account, name or email is required to use it — please do not enter sensitive personal data in the chat.
• Purpose: answering product questions and improving the assistant and documentation; preventing spam and abuse
• Legal basis: legitimate interest in providing support and securing the service (Art. 6(1)(f) GDPR)
• Processor: messages are processed by our AI provider (Anthropic PBC) as a data processor under Art. 28 GDPR, solely to generate the reply
• Retention: chat transcripts are retained for up to 12 months, then deleted

Disclosure to third parties

Data is not sold or transferred to third parties. Any technical service providers (hosting, email, and the AI provider powering the website assistant) act as data processors under Art. 28 GDPR.

Data subject rights (Art. 15-22 GDPR)

• Access, rectification and erasure of your data
• Restriction of or objection to processing
• Data portability
• Withdrawal of consent (where applicable)

Requests to: [email protected] — response within 30 days.

Complaints

You may lodge a complaint with the Maltese supervisory authority:
Office of the Information and Data Protection Commissioner (IDPC)
https://idpc.org.mt

Cookies

This site uses only technical cookies necessary for the portal to function (authenticated session). It does not use profiling cookies, third-party cookies or behavioural tracking systems. See the Cookie Policy.