Privacy Policy

1. Who We Are

MarginOps is a trading name of Thomas & Le Consulting Limited, a company registered in Malta (Level 3, Suite No. 3243, Tower Business Centre, Triq Il-Torri, Swatar, Birkirkara, BKR 4013, Malta), a wholly owned subsidiary of Thomas & Le Ltd (Mykinon, 12, Lavinia Building, 1st Floor, Nicosia, 1065, Cyprus).

For any privacy-related queries, contact us at [email protected].

2. What Data We Collect

We collect the minimum data necessary to provide our services:

Contact form submissions: name, email address, company name, and your message. This data is collected when you voluntarily submit our contact form.

Booking data: When you book a call via our scheduling system (powered by Cal.com), your name, email, and any information you provide during booking is processed by Cal.com under their privacy policy.

Technical data: Our website uses Cloudflare for DNS and security. Cloudflare may collect IP addresses, browser type, and access times for security and performance purposes under their own privacy policy.

Spam protection: We use Cloudflare Turnstile to protect our contact form from automated abuse. Turnstile may process interaction data to distinguish human visitors from bots. No cookies are set for tracking purposes.

3. How We Use Your Data

We use the data we collect to:

• Respond to your enquiries and provide information about our services
• Schedule and conduct consultations
• Protect our website from spam and abuse

We do not use your data for automated decision-making or profiling. We do not sell, rent, or trade your personal data to third parties.

4. Legal Basis for Processing

We process your personal data on the following legal bases under GDPR:

• Consent: When you submit a contact form or book a call, you consent to us processing your data to respond to your enquiry.
• Legitimate interest: We have a legitimate interest in protecting our website from spam and abuse (Cloudflare Turnstile).

5. Data Sharing

We share your data only with the following service providers, who process it on our behalf:

• Resend — email delivery for contact form submissions
• Cal.com — scheduling and booking management
• Cloudflare — DNS, CDN, SSL, and spam protection (Turnstile)
• Hetzner — web hosting infrastructure (EU-based)

We do not transfer your data outside the EEA except where our service providers maintain appropriate safeguards (e.g., Standard Contractual Clauses).

6. Data Retention

We retain contact form submissions for as long as necessary to respond to your enquiry and for a reasonable period thereafter for follow-up, typically no longer than 24 months. You can request deletion at any time by emailing [email protected].

7. Cookies

This website does not use analytics cookies or tracking cookies. We do not use Google Analytics, Facebook Pixel, or any similar tracking technology. Cloudflare may set strictly necessary cookies for security purposes.

8. Your Rights

Under GDPR, you have the right to:

• Access the personal data we hold about you
• Rectify inaccurate data
• Request erasure of your data
• Restrict or object to processing
• Data portability
• Withdraw consent at any time

To exercise any of these rights, email [email protected]. We will respond within 30 days.

You also have the right to lodge a complaint with your local data protection authority. For Malta, this is the Office of the Information and Data Protection Commissioner (idpc.org.mt).

9. Changes to This Policy

We may update this policy from time to time. Changes will be posted on this page with an updated revision date. We encourage you to review this page periodically.

10. Contact

For any questions about this privacy policy or our data practices, contact:

Thomas & Le Consulting Limited
Level 3 (Suite No. 3243), Tower Business Centre
Triq Il-Torri, Swatar, Birkirkara, BKR 4013, Malta
[email protected]