Contact Us

Privacy Notice

Privacy Notice

The data controller of your personal data is Noetic Ltd., a limited liability company incorporated in Malta, and subject to Maltese law, having its registered office at Level 2, Northlink Business Centre, Triq Il-Burmarrad, Naxxar NXR 6345, Malta, with company number: C113378.

Our business is advising companies on data privacy and AI legislation. This Privacy Notice explains how Noetic collects, uses, and processes your personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR“).

1. Categories of Personal Data We Collect

We collect and process the following categories of personal data:

  • Full Name
  • Email address
  • Phone number
  • Job title or department
  • Company you work for
  • Any other information you voluntarily provide through contact forms, email, or our services.

Please be aware that the vast majority of data we process is not personal data. Our clients are primarily other businesses, however, in the course of dealing with business clients, we will need to process personal data, for example, the personal data of the individual we are dealing with at the client company. 

2. Why We Process Your Personal Data

We process your personal data for the following purposes:

  • To register you as a client on our database
  • To correspond with you in relation to work matters and to provide you with advice
  • To manage our relationship with you (e.g. updates, billing, service communications)
  • To comply with our legal obligations
  • To send monthly newsletters if you have confirmed you would like to receive these.

3. Legal Basis for Processing

We process your personal data based on one or more of the following legal grounds:

  • Performance of a contract eg a Services Contract
  • Compliance with legal obligations
  • Consent – we only carry out direct marketing where the recipient has provided valid, informed consent to receive marketing. You can withdraw your consent at any time by emailing info@noetic.global

4. Who We Share Your Data With

We only share your personal data with Competent Authorities (eg Data Protection Authorities, Malta Digital Innovation Authority or other Market Surveillance Authorities):

  • With your consent, or
  • Where required by applicable law or regulation.

5. Data Transfers Outside the EEA

  • For EU-based clients, we do not transfer personal data outside the European Economic Area (EEA).
  • For non-EEA clients, we may transfer data internationally. However, if personal data is transferred outside the EEA to a country that does not have an adequacy decision, it will be transferred using Standard Contractual Clauses or any other method that ensures an equivalent level of protection of personal data as that required in the EEA.

6. Data Retention

We retain personal data for as long as necessary to provide our services and fulfill legal and contractual obligations. Specifically, we retain personal data:

  • For the duration of your engagement with us; and
  • For up to 6 years thereafter, for legal and compliance purposes.

7. Your Rights Under the GDPR

You have the following rights:

  • Right to access - Request a copy of your personal data
  • Right to rectification - Request corrections to inaccurate or incomplete data
  • Right to erasure - Ask us to delete your personal data (under certain conditions)
  • Right to restrict processing - Limit how we use your data
  • Right to data portability - Request transfer of your data to another provider
  • Right to lodge a complaint - You have the right to make a complaint to your local supervisory authority, for example, in Malta this is the Office of the Information and Data Protection Commissioner (IDPC). They can be contacted by telephone: +356 2328 7100 or email: idpc.info@idpc.org.mt
  • Right to object - Object to our processing based on legitimate interests. However, please note that we do not process any personal data on the basis of legitimate interests.

You are not required to pay any charge for exercising your rights. If you make a rights request, we must respond to you within one calendar month. Please be aware that if you make a rights request, we will need proof of identification. If you are using a third-party to make a rights request on your behalf, such as a lawyer, then we will also need to see proof of authority to act on your behalf, such as a Power of Attorney.

To exercise any of your rights, contact us at: info@noetic.global

8. Automated Decision-Making

We do not use your personal data to carry out any automated decision-making or profiling that produces legal or similarly significant effects.

9. Contact Details

If you have any questions about this policy or how we handle your data, please email: info@noetic.global

10. Changes to this Privacy Notice

We may update this Privacy Notice from time to time. Please check back periodically. Any significant changes will be notified on our website.

Last updated: 24th October 2025.