Skip to content

Privacy Policy

Last updated: 25 October 2026

This policy explains how personal data is handled when you visit this website or contact WB Legal through it. It is issued in line with the EU General Data Protection Regulation (GDPR) and the Data Protection Act (Cap. 586 of the Laws of Malta).

Data controller

Dr Wilfrid Buttigieg, Advocate, practising as WB Legal Advocates, Victoria House, No 1A, Labour Avenue, Naxxar NXR 9021, Malta. Email: wilfrid@wblegal.mt. Phone: +356 9997 7778.

What we collect

  • When you contact us by email, phone or WhatsApp: your name, contact details and anything you choose to tell us. WhatsApp also processes data under its own privacy policy.
  • When you browse the site: this website has no contact forms, accounts or analytics. Our hosting provider processes technical data such as your IP address and browser type in server logs, for security and to deliver the site.
  • Third-party services: the site loads fonts from Google Fonts and a map from Google Maps. These services receive your IP address when the page loads. See our Cookies Policy.

Why we use it and the legal basis

  • To reply to your enquiry and take steps before a possible engagement (Article 6(1)(b) GDPR).
  • To meet our legal and professional obligations, including professional secrecy, record-keeping and anti-money-laundering rules (Article 6(1)(c)).
  • To keep the website secure and working (our legitimate interests, Article 6(1)(f)).

Confidentiality

Information you share with an advocate is protected by professional secrecy and the duty of confidentiality under the Code of Ethics and Conduct for Advocates. Please do not send highly sensitive details by email until we have agreed to act for you.

Sharing

We do not sell personal data. We share it only where necessary: with service providers who host the website or our email (under data-processing terms), with courts or authorities when required by law, or with your consent.

International transfers

Some service providers, such as Google, may process data outside the European Economic Area. Where this happens, transfers rely on safeguards recognised under the GDPR, such as the EU–US Data Privacy Framework or Standard Contractual Clauses.

How long we keep it

Enquiries that do not lead to an engagement are kept for no longer than necessary to handle them. Client files are kept for the period required by law and professional rules. Server logs are kept for a short period by our hosting provider.

Your rights

You have the right to access, correct or erase your personal data, to restrict or object to its processing, and to data portability, subject to legal and professional-secrecy limits. To exercise these rights, email wilfrid@wblegal.mt. You may also complain to the Information and Data Protection Commissioner (idpc.org.mt (opens in a new tab)).

Changes

We may update this policy. The date at the top shows when it was last changed.