This Privacy Policy explains how Bastion Advisory ("we", "us") collects, uses, and protects personal data when you use bastionadvisory.eu. We are committed to handling your data in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and applicable Maltese data protection law.
The data controller is Bastion Advisory, operating at bastionadvisory.eu. For data-related enquiries, contact us at the contact form.
Contact form. When you submit a message via the contact form, we collect your name, email address, and the content of your message. This data is processed by Formspree (formspree.io) on our behalf and used solely to respond to your enquiry. Legal basis: legitimate interests (responding to a direct request).
Advertising cookies (Meta Pixel). The Meta Pixel, operated by Meta Platforms Ireland Ltd, is loaded only after you select "Accept" on the cookie banner. It is not loaded if you decline or ignore the banner. Where loaded, it may collect browsing behaviour, device identifiers and IP address. Legal basis: consent. To withdraw consent, select "Cookie settings" in the footer of any page and choose Decline. This also deletes the advertising and analytics cookies already set on your device.
Analytics (Google Analytics 4). We use Google Analytics 4 (property G-F4RVX3BCMM), operated by Google Ireland Ltd, to measure page views, traffic sources and use of the EU funding eligibility checker. This may involve the collection of device and browser information, approximate location derived from IP address, and on-site behaviour. Google Analytics runs in consent mode. Until you select "Accept" on the cookie banner it sets no analytics cookies and stores no identifier on your device; measurement is limited to aggregate, non-identifying signals. Selecting "Accept" enables full analytics measurement. Selecting "Decline" leaves it in the restricted state. You can change your choice at any time via "Cookie settings" in the footer.
Hosting performance cookies. Our web host, GoDaddy.com LLC, adds a performance-monitoring script (tccl.min.js, served from img1.wsimg.com) to every page at the point of delivery. We remove that script before the page reaches your browser, so it does not run, sets no cookies and contacts no third party. Previously it set three cookies on your device — _tccl_visitor, _tccl_visit and _scc_session — and contacted csp.secureserver.net; if you visited this site before 24 August 2026 those cookies may still be stored, and you can clear them through your browser’s site-data settings. We never received or used the data they collected.
EU funding eligibility checker. If you complete the checker and join the reserve list, we collect your first name, last name, email address, business name and the answers you gave about business size, location, trading history, sector and funding need. These are transmitted to our email platform, Brevo, and used to send you Malta EU funding updates. Legal basis: consent, given via the tick box on that form. Every email includes an unsubscribe link.
The early-access notification prompt shown on some pages is acknowledged in your browser only and is not stored or transmitted.
secureserver.net): provides web hosting. It adds its own performance-monitoring script to pages as they are served; we strip that script before delivery, so it sets no cookies. Subject to GoDaddy's privacy policy.Contact form submissions are retained by Formspree in accordance with their own retention policy. We do not maintain a separate copy of form submissions unless we have an ongoing business relationship with you. Pixel data is retained by Meta in accordance with their data retention policies.
You have the right to:
To exercise any of these rights, contact us at the contact form. We will respond within 30 days.
If you are based in Malta or the EU and believe your data has been handled unlawfully, you have the right to lodge a complaint with the Information and Data Protection Commissioner (IDPC), the Maltese data protection supervisory authority.
We may update this policy from time to time. The date at the top of this page reflects the most recent revision. Continued use of the site after any update constitutes acceptance of the revised policy.