Privacy Policy
Kurt Darmanin, a sole trader trading as KD PC Builds & Repairs ("KD PC", "we", "us"), respects your privacy. This notice explains how we handle personal data when you contact us, request a quote, or use our PC build, repair, support, collection, delivery or on-site services.
1. Who is responsible for your data
The data controller is Kurt Darmanin trading as KD PC Builds & Repairs, based in Naxxar, Malta. For privacy questions or requests, email info@kdpcrepairs.com or call +356 9909 8879.
2. Personal data we may collect
- Contact details such as your name, email address and phone number.
- Quote and job information, including the service requested, budget, device specifications, fault description and preferred contact method.
- Service records such as diagnostics, work carried out, parts used, collection/delivery details and communications about the job.
- Billing and payment information needed for quotes, invoices and payments. We do not publish or intentionally store full payment-card details on this website.
- Device credentials or passwords only when you provide them and they are reasonably necessary to diagnose, test or complete the agreed work.
- Technical information generated when the website is used, such as IP address, browser/device information and security logs processed by our hosting or service providers.
3. Why we use your data
We use personal data to respond to enquiries and take steps requested before entering into a contract, to provide and manage agreed services, to communicate about repairs/builds, to take payment and keep required business records, and to protect our systems and handle disputes or warranty issues.
Depending on the situation, our legal basis under the GDPR is performance of a contract or steps at your request before a contract, compliance with legal obligations, or our legitimate interests in operating and protecting the business and keeping appropriate service records. Where consent is specifically required, we will ask for it separately.
4. Quote form and service providers
Quote-form submissions are processed through Formspree and delivered to our Google Workspace business email. The website is hosted using Google Firebase. We may also use other reputable service providers where reasonably necessary to operate the business. These providers process information for their own or our service purposes subject to applicable data-protection requirements.
Some service providers may process information outside Malta or the European Economic Area. Where GDPR transfer rules apply, appropriate transfer safeguards must be used by the relevant provider/controller.
5. Data and passwords on devices being serviced
Repair and diagnostic work can sometimes require access to the operating system, user account or files needed to reproduce a fault, test a repair, remove malware, perform recovery or complete another service you requested. We limit access to what is reasonably necessary for the agreed work and do not use customer data for unrelated purposes.
If you provide a password or temporary credential, it is used only as needed for the job and should be changed by you after the device is returned. We do not intentionally retain passwords once they are no longer required for the service.
You should back up important data before handing over a device whenever reasonably possible. If a temporary copy or backup is created by us as part of an agreed service, it is deleted when it is no longer needed, subject to any specific arrangement made with you.
6. How long we keep information
- Quote and contact enquiries that do not become jobs are normally kept for up to 12 months.
- Job and customer records are kept only as long as reasonably necessary to provide the service, support warranty/after-sales matters, deal with claims and maintain appropriate business records.
- Invoices, transaction records and other records that must be retained by law are kept for the period required under applicable Maltese law.
- Passwords and other access credentials are not intentionally retained after they are no longer necessary for the job.
7. Sharing your information
We do not sell customer personal data. Information may be shared with service providers that help us run the website, email, forms, payments or other business systems; with suppliers where necessary to fulfil an order; or with public authorities where disclosure is legally required. We only share what is reasonably necessary for the purpose.
8. Security
We use reasonable technical and organisational measures to protect personal data, including secured business accounts and access controls. No internet or storage system can be guaranteed completely secure, so customers should avoid sending unnecessary sensitive information.
9. Your data-protection rights
Subject to the GDPR and applicable law, you may have rights to access your personal data, correct inaccurate data, request deletion, restrict processing, object to certain processing, receive portable data in applicable cases, and withdraw consent where processing is based on consent.
To exercise a right, contact info@kdpcrepairs.com. You also have the right to lodge a complaint with Malta's Information and Data Protection Commissioner (IDPC).
10. Website tracking
We do not currently use advertising or behavioural analytics tracking on this website. The site's hosting, security services and externally loaded resources may still process basic technical information needed to deliver and protect the website.
11. Changes to this policy
We may update this policy when our services or legal obligations change. The latest version will be published on this page with an updated date.