Privacy Policy

Last updated: 17 March 2026

CTS Transport Ltd ("CTS Transport", "we", "us", or "our") is committed to protecting your personal data. This Privacy Policy explains what information we collect when you use ctstransport.mt, why we collect it, and your rights under the General Data Protection Regulation (GDPR) and the Data Protection Act (Chapter 586 of the Laws of Malta).

1. Data Controller

The data controller responsible for your personal data is:

CTS Transport Ltd
2 Triq Philip Gatt, Żebbuġ, Malta
Email: [email protected]
Phone: +356 9968 5845

2. What Personal Data We Collect

We only collect data you provide directly to us. We do not use tracking cookies, advertising networks, or analytics platforms that collect personal data.

Quote and Contact Forms

When you submit a quote request or contact enquiry, we collect:

  • Full name
  • Email address
  • Phone number
  • Service type requested
  • Any additional details you include in your message

Technical Data

We collect your IP address when you submit a form. This is used solely to prevent abuse (rate limiting) and is not linked to your identity or stored beyond a short rolling window.

3. How We Use Your Data

PurposeLegal Basis (GDPR Art. 6)
Responding to your quote request or enquiryArt. 6(1)(b) - necessary for pre-contractual steps at your request
Sending you a confirmation that we received your submissionArt. 6(1)(b) - necessary for pre-contractual steps at your request
Preventing form abuse and spam (rate limiting by IP)Art. 6(1)(f) - legitimate interest in protecting our systems
Maintaining a record of service requests for operational continuityArt. 6(1)(f) - legitimate interest in business record-keeping

We do not use your data for automated decision-making or profiling. We do not sell, rent, or trade your personal data to third parties for marketing purposes.

4. How Long We Keep Your Data

We retain enquiry and quote data for a maximum of 2 years from the date of submission, or for as long as reasonably necessary to fulfil the purpose for which it was collected. If a quote leads to an ongoing commercial relationship, we retain relevant records for as long as that relationship exists plus any legally required period thereafter.

IP addresses collected for rate-limiting are held in memory only and are cleared automatically on a rolling basis (within minutes to hours).

5. Who We Share Your Data With

We share your data only where necessary to operate our business:

  • Email service provider - we use an SMTP email service to deliver your confirmation email and our internal notification. Your email address and name are transmitted to this provider solely for delivery.
  • Hosting infrastructure - our website is hosted on a private server. Data at rest remains within our controlled environment.

We do not use Google Analytics, Facebook Pixel, or any third-party advertising or tracking services that would receive your personal data.

6. Cookies

This website does not use cookies for tracking, analytics, or advertising purposes.

Your browser may store technical session data as part of normal website operation (such as security tokens for form submissions). These are strictly necessary for the website to function and do not identify you personally.

7. Your Rights Under GDPR

As a data subject, you have the following rights in relation to your personal data:

  • Right of access - request a copy of the personal data we hold about you.
  • Right to rectification - ask us to correct inaccurate or incomplete data.
  • Right to erasure - request deletion of your data where there is no overriding legal reason to retain it.
  • Right to restriction - ask us to limit how we use your data in certain circumstances.
  • Right to data portability - receive your data in a structured, machine-readable format.
  • Right to object - object to processing based on legitimate interests.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

8. Right to Lodge a Complaint

If you believe we have not handled your personal data in accordance with applicable law, you have the right to lodge a complaint with the competent supervisory authority:

Information and Data Protection Commissioner (IDPC)
Level 2, Airways House, High Street, Sliema SLM 1549, Malta
Email: [email protected]
Website: idpc.org.mt

9. Data Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. Our website is served over HTTPS. Access to stored enquiry data is restricted to authorised personnel only.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page will reflect any changes. We encourage you to review this page periodically.

11. Contact Us

For any questions or requests relating to this Privacy Policy or your personal data, please contact us:

CTS Transport Ltd
2 Triq Philip Gatt, Żebbuġ, Malta
Email: [email protected]
Phone: +356 9968 5845
Chat on WhatsApp