Privacy policy
Contact and scope
This policy covers the Gabba Auto Tint website and enquiries you choose to send to the business. You can contact Gabba Auto Tint about your personal data at 7 Triq l-Imqabba, Siġġiewi, SGW 2600, Malta, or by telephone / WhatsApp Business on +356 9948 6437.
Browsing and hosting
The website is hosted through ChatGPT Sites / OpenAI, with Cloudflare delivery and security. Serving and protecting a website involves processing connection information such as IP addresses and technical request information. This processing supports delivery, reliability and protection against abuse, on the basis of legitimate interests in operating a secure website. The infrastructure providers may process additional technical information under their own applicable terms and policies.
Privacy choices and interface sounds
Your privacy choice, policy version, timestamp and expiry are stored on your device for up to 180 days. This is necessary to respect your choice. Only with permission for preferences does the site read or store the sound setting. The legal basis for that optional preference is consent. These application storage values are not transmitted to Gabba. You can change or withdraw permission using Privacy settings in the footer. Sounds can be used on the current page without storing a preference. The language is selected by the page URL. See the Cookie policy for the actual technologies.
Contact through WhatsApp Business
Clicking a WhatsApp link directs you to WhatsApp. The website does not load a WhatsApp SDK or automatically transmit your personal data to Meta before you choose the link. You can edit the prepared message before sending it. If you contact the business, your telephone number, profile details made available by WhatsApp, message contents and any vehicle information or photos you send may be received. They are used to answer your enquiry, assess compatibility, discuss availability and provide requested customer assistance. Steps requested before a contract, or performance of a contract, rely on Article 6(1)(b) GDPR where applicable. Other relevant service correspondence relies on legitimate interests in responding to customers, Article 6(1)(f). A contact request does not constitute marketing consent. No dedicated external CRM or WhatsApp API is used.
Retention of conversations
WhatsApp Business conversations are normally kept in the chat history. There is currently no scheduled deletion policy or fixed retention period. You may request deletion; applicable rights and any need to retain information for legal obligations or the establishment, exercise or defence of claims must be considered. Browser preference durations are described in the Cookie policy. Technical data retention by hosting providers is governed by the applicable provider arrangements; this site does not specify an unverified fixed log-retention period.
External services and recipients
Enquiries are handled by the business through WhatsApp Business. Hosting and security providers process technical data needed to serve the website. WhatsApp / Meta also processes information under its applicable privacy policy. Google Maps and Facebook, Instagram and TikTok are ordinary external links, not embedded services. Following them brings you to the provider, whose own conditions and privacy policy also apply. Do not send information that is unnecessary for your enquiry.
Processing outside the EEA
Hosting, security and messaging services may process data outside the European Economic Area, including in the United States. ChatGPT Sites does not guarantee EEA-only data residency. The Sites Data Processing Addendum describes transfer arrangements using adequacy decisions or Standard Contractual Clauses where applicable. The precise terms depend on the applicable provider relationship. See the provider information linked below; we do not promise that all processing remains in Malta or the EEA.
Reviews and installation photos
The site displays selected excerpts of Google reviews and installation photos. Translations and excerpts are not independent verification of a purchase. Where an illustrative image is used, its caption distinguishes it from a reviewer’s photo. Contact Gabba to request correction or removal of personal information in displayed content.
Your rights
Subject to the GDPR conditions, you may request access, correction, erasure, restriction of processing and data portability, and object to processing based on legitimate interests. You may withdraw consent at any time, without affecting processing already lawfully carried out. Contact the business using the details above. You have the right to complain to Malta’s Information and Data Protection Commissioner (IDPC).
What this website does not collect
There is no visitor account, contact form, online payment, newsletter, analytics script, advertising pixel or automated decision-making / profiling in this website. Browsing does not require you to submit contact details. If you request assistance, provide only the information needed to answer it.
Related information
Last reviewed: 3 October 2026. Policy version: 2026-10-03.1.
