andrew carter photography

Privacy Policy

Effective Date: 21 August 2026

1. Introduction

Welcome to arti.mt. I am committed to protecting your privacy and ensuring that your personal data is handled in a safe and responsible manner. This Privacy Policy explains how I collect, use, and safeguard your personal information when you visit my photography website.

This policy complies with the General Data Protection Regulation (GDPR) and Malta’s Data Protection Act (Chapter 586 of Laws of Malta).

2. Data Controller

The data controller responsible for your personal data is:

Name: Andrew Carter

Website: http://www.arti.mt

Location: San Giljan, Malta

Contact: andrew@arti.mt

If you have any questions about the Privacy Policy or how I handle your personal data, please contact me using the details above.

3. Personal Data I Collect

3.1 Information You Provide Directly

I may collect the following types of personal data when you voluntarily provide it:

  1. Contact information: Name, email address, and phone number (when you contact me via email or contact forms)
  2. Communication Data: Messages, inquiries, or correspondence you send to me
  3. Project Information: Details about photography services, shoots, or collaborations your request

3.2 Information Collected Automatically

When you visit my website, certain information is collected automatically through standard web technologies:

  1. Device Information: IP address, browser type, operating system, device identifiers
  2. Usage Data: Pages visited, time spent on pages, referral source, click patterns
  3. Location Data: General geographic location (country/region level only, based on IP address)

3.3 Cookies and Tracking Technologies

My website may use cookies and similar tracking technologies to enhance your browsing experience and understand how visitors use the site. These include:

  1. Essential Cookies: Required for basic website functionality
  2. Analytics Cookies: Help me understand website traffic and visitor behaviour (e.g., Google Analytics, if used)
  3. Third-Party Cookies: May be set by embedded content from social media platforms or image hosting services.

You can control cookie preferences through your browser settings. Most browsers allow you to refuse cookies or delete them after they are set.

4. How I Use Your Personal Data

I process your personal data for the following purposes:

PurposeLegal BasisData Types
Responding to inquiries and communicationsLegitimate interestsContact information, communication data
Providing photography services and fulfilling requestsContract performanceContact information, project details
Improving website functionality and user experienceLegitimate interestsusage data, device information
Understanding website analytics and visitor behaviourConsent (for non-essential cookies)Analytics data, cookies
Complying with legal obligationsLegal obligationAll relevant data types

5. Data Sharing and Third Parties

I do not sell your personal data to third parties. However, I may share your data with the following categories of recipients when necessary:

  1. Service Providers: Hosting providers, email service providers, analytical platforms (e.g, Google, Mailchimp)
  2. Professional Advisors: Accountants, lawyers, or other professional service providers
  3. Legal Authorities: When required by law or to protect my rights and safety

All third-party processors are required to comply with GDPR standards and implement appropriate security measures.

International Transfers

Some service providers may process data outside the European Economic Area (EEA). Where this occurs, I ensure appropriate safeguards are in place, such as:

  1. EU Commission adequacy decisions
  2. Standard Contractual Clauses (SCCs)
  3. Other GDPR-compliant transfer mechanisms

6. Data retention

I retain your personal data only for as long as necessary to fulfil the purposes outlined in this policy:

  1. Contact Inquiries: Retained for up to 2 years from the date of last communication
  2. Service-Related Data: Retained for the duration of the service plus 7 years for legal and tax compliance
  3. Website Analytics: Retained for up to 26 months (Google Analytics default retention period)
  4. Cookie Data: Retained according to individual cookie lifespans (typically 30 days to 2 years)

After these periods, data is securely deleted or anonymised unless a longer retention period is required by law.

7. Your Rights Under GDPR

As a data subject, you have the following rights under the GDPR:

  1. Right of Access: Request a copy of your personal data
  2. Right to Rectification: Request correction of inaccurate or incomplete data
  3. Right to Erasure: Request deletion of your personal data
  4. Right to Restriction: Request limitation of processing in certain circumstances
  5. Right to Data Portability: Receive your data in a structured, machine-readable format
  6. Right to Object: Object to processing based on legitimate interests or direct marketing
  7. Right to Withdraw Consent: Withdraw consent at any time (where processing is based on consent)
  8. Right to Lodge a Complaint: File a complaint with the supervisory authority

How to exercise your rights

To exercise any of these rights, please contact me at andrew@arti.mt. I will respond to your request within one month of receipt.

Supervisory Authority

If you believe your data protection rights have been violated, you have the right to lodge a complaint with:

Information and Data Protection Commissioner (IDPC)

Office of the Information and Data Protection Commissioner

Malta

Website: http://www.idpc.org.mt

8. Data Security

I Implement appropriate technical and organisational measures to protect your personal data, including:

  1. Secure hosting with SSL/TLS encryption (HTTPS)
  2. Regular software updates and security patches
  3. Access controls and authentication measures
  4. Secure backup procedures
  5. Data minimisation practices

While I take reasonable steps to protect your data, no method of transmission over the internet is 100% secure. I cannot guarantee absolute security but will notify you promptly if a data breach occurs that may affect your rights.

9. Changes to This Privacy Policy

I may update this Privacy Policy from time to time and reflect changes in my practices, legal requirements, or technology. When I make changes, I will:

  1. Update the “Effective Date” at the top of this policy
  2. Post the updated policy on my website
  3. Notify you of significant changes via email or website notice (where applicable)

I encourage you to review this policy periodically to stay informed about how I protect your data.

10. Contact Information

If you have any questions, concerns, or requests regarding my Privacy Policy or my data practices, please contact me:

Email: andrew@arti.mt

Website: http://www.arti.mt

Location: San Giljan, Malta

11. Additional Information for Malta Residents

This policy complies with:

  1. General Data Protection Regulation (GDPR) – EU Regulation 2016/679
  2. Data Protection Act – Chapter 586 of the Laws of Malta
  3. Guidelines issued by Malta’s Information and Data Protection Commissioner (IDPC)

For more information about data protection in Malta, visit: http://www.idpc.org.mt