Workspace › Privacy notice
Your data, and what we do with it
Privacy notice
What personal data BUSINESSLABS collects through this website, its forms, the chat, the tour calendar and the booking portal; why; who else sees it; and your rights.
Last updated 4 November 2026
Who we are
BUSINESSLABS, and how to reach us about your data
BUSINESSLABS is operated by B2BMALTA LTD, a private limited liability company registered in Malta (C47353), registered office BUSINESSLABS Workspaces, Level One, Triq Dun Karm, B’Kara Bypass, Birkirkara. We decide how the personal data described here is used, so we are its controller.
For anything about your data, write to grow@businesslabsmalta.com or by post to BUSINESSLABS, Level One, Triq Dun Karm, Birkirkara BKR 9037.
What we collect
What you give us, and why
- When you write to usYour name, email, phone, company, what you need and your message, from the forms on this website and the chat. We use them to reply and to prepare an offer you asked for (GDPR, article 6(1)(b)), and keep them in HubSpot, our CRM.
- When you book a tourYour name, email and the time you chose, through HubSpot’s calendar, to arrange the visit (article 6(1)(b)).
- News and offersOnly if you tick the box on a form (consent, article 6(1)(a)). Every email has a link to stop them.
- When you book or buyBookings, passes, plans and payments are made in our booking portal, run on Nexudus, to provide what you booked and to keep the invoices the law requires (articles 6(1)(b) and (c)). Nexudus runs the portal for us as our processor, and the portal’s own privacy page says more about bookings and payments.
- When you browseCookies and similar technologies. Those the website needs to work are always on. Analytics (Google Analytics, HubSpot) and advertising (Google Ads, Meta, LinkedIn) are used only if you agree in the cookie banner, and you can change your mind at any time in Cookie settings (the Processing of Personal Data (Electronic Communications Sector) Regulations, S.L. 586.01).
Who else sees it
The services we use, and nobody else
HubSpot (our CRM, forms, chat and calendar), Google (Tag Manager, Analytics and Ads), Meta and LinkedIn (advertising, with your consent), Nexudus (the booking portal) and DigitalOcean (whose servers host this website). Each processes data for us under a contract. Our accountants and advisers see it where they need to. We never sell personal data.
Some of these companies process data in the United States. The transfers rely on the EU-US Data Privacy Framework or the European Commission’s standard contractual clauses.
How long
Only as long as we need it
An enquiry that does not lead to an agreement: up to 24 months after our last contact. Clients’ records: as long as accounting and tax law require. Analytics data: up to 14 months in Google Analytics.
Your rights
What you can ask of us
You can ask for a copy of your data, and ask us to correct it, delete it, restrict its use or send it to you or another company. You can object at any time to direct marketing, and withdraw a consent you gave. Write to us; we reply within a month.
If you are not happy with our answer, you can complain to the Information and Data Protection Commissioner (idpc.org.mt).