Last updated: 1 July 2026
1. Who we are
Evolexa Limited (“Evolexa”, “we”, “us”) is a private company registered in Malta under company number C112888, with a registered office at 115B Suite 3, Triq Zekka, Valletta VLT 1515, Malta. Evolexa is the data controller for personal data collected through this website.
Data protection enquiries: info@evolexa.com.
2. What personal data we collect
- Contact form data: name, email address, company (optional) and the message you send us via the contact page.
- Email communications: the content of any email you send to info@evolexa.com or receive from us, including delivery metadata.
- Technical data: IP address, browser type and version, referring page and timestamps, collected by our hosting provider in standard server logs for security and abuse prevention.
- Anti-abuse data: information collected by Google reCAPTCHA v3 to distinguish humans from bots on the contact form (see the Cookie Policy).
We do not knowingly collect data from children under 16 and we do not use this website to collect special categories of personal data.
3. Why we use your data and the legal basis
- Responding to enquiries submitted through the contact form or by email — legal basis: our legitimate interest in replying to prospective clients (Art. 6(1)(f) GDPR), and, where a contract results, performance of that contract (Art. 6(1)(b) GDPR).
- Protecting the site from spam, fraud and abuse — legal basis: legitimate interest in the security and integrity of our services (Art. 6(1)(f) GDPR).
- Complying with legal obligations, e.g. tax and accounting where a business relationship follows — legal basis: Art. 6(1)(c) GDPR.
4. How long we keep your data
- Contact-form submissions and related email correspondence: kept for up to 24 months from the last interaction, then deleted or anonymised, unless a client relationship is established.
- Client records (once a contract is signed): retained for the duration of the engagement and for the statutory retention periods that apply in Malta (typically up to 10 years for accounting records).
- Server and security logs: rotated within a short operational window by our hosting provider.
5. Who we share data with (processors)
We do not sell personal data. We share data only with service providers that process it on our behalf under written data-processing terms:
- Supabase (managed database and back-end services used to store contact-form submissions and email delivery logs; hosted in the EU).
- Resend (transactional email delivery for notifications from the contact form).
- Google reCAPTCHA (bot and abuse detection on forms).
- Google Fonts (delivery of web fonts).
6. International transfers
Where a processor is located outside the European Economic Area (for example, certain Google services in the United States), we rely on the European Commission’s Standard Contractual Clauses and/or the EU–US Data Privacy Framework as the safeguard for the transfer.
7. Your rights under the GDPR
You have the right to (i) access your personal data, (ii) request rectification or erasure, (iii) restrict or object to processing, (iv) data portability, and (v) withdraw consent at any time without affecting the lawfulness of processing before withdrawal. To exercise any of these rights, email info@evolexa.com.
You also have the right to lodge a complaint with the Maltese supervisory authority — the Information and Data Protection Commissioner (IDPC) — or with your local EU supervisory authority.
8. Security
We use HTTPS across the site, encrypted database storage, access controls, and audited third-party processors. No system is perfectly secure, but we work to protect data against unauthorised access, alteration, disclosure or destruction.
9. Cookies
For details of the cookies and similar technologies used on this site, please read our Cookie Policy.
10. Changes to this policy
We may update this policy from time to time. The “last updated” date at the top of this page shows when it was last revised. Material changes will be highlighted on this page.