This Privacy Policy explains how MAIRA ("MAIRA", "we", "us", or "our") collects, uses, stores, shares, and protects personal data when you visit our website at maira.agency, contact us, book a call, submit an enquiry, or engage our marketing services.
MAIRA is a marketing service powered by experienced human professionals and artificial intelligence tools. Our services include social media management, content creation, ad management, Google Search Ads, campaign setup, and related digital marketing activities.
For the purposes of applicable data protection law, including the General Data Protection Regulation (EU) 2016/679 ("GDPR"), MAIRA is generally the data controller for personal data collected through our website, enquiries, client communications, contracts, billing, and service delivery. Where we process personal data strictly on behalf of a client and according to that client's instructions, we may act as a processor.
1. Personal Data We Collect
We may collect and process the following categories of personal data.
1.1 Information You Provide Directly
When you contact us, book a call, submit an enquiry, request a proposal, become a client, or communicate with us, we may collect:
- Your name
- Business name
- Email address
- Phone number
- Website or social media profile
- Package or service interest
- Information about your business, marketing goals, campaign needs, and preferred services
- Messages, feedback, approvals, revision requests, meeting notes, and other communications
- Billing, invoice, payment status, and contract-related information
1.2 Client Materials and Account Information
To provide our services, we may collect or access:
- Brand assets, logos, brand guidelines, approved imagery, creative references, and content materials
- Social media pages, ad accounts, business manager accounts, Google Ads accounts, LinkedIn accounts, and similar platform access details
- Campaign settings, audience information, analytics, performance data, reports, and platform data
- Content drafts, captions, visuals, videos, ad creatives, and other deliverables
Where client materials include personal data of third parties, such as staff photos, customer testimonials, audience lists, or user-generated content, the client is responsible for ensuring that such personal data is provided lawfully and that any required consents or notices have been obtained.
1.3 Website and Technical Data
When you visit maira.agency, we may automatically collect limited technical information, such as:
- IP address
- Browser type and version
- Device type
- Operating system
- Pages visited
- Date and time of visit
- Referring website or source
- Cookie or similar tracking identifiers, where applicable
This information helps us operate, secure, maintain, and improve our website and services.
2. How We Collect Personal Data
We collect personal data in the following ways:
- Directly from you when you submit a form, book a call, email us, sign a proposal, make a payment, or communicate with us
- From your business or team members when they interact with us in connection with our services
- Through third-party platforms used to provide our services, including Meta, Google, LinkedIn, and related advertising, analytics, scheduling, and communication tools
- Automatically through our website, cookies, analytics tools, server logs, or similar technologies, where enabled
3. How We Use Personal Data
We use personal data for the following purposes:
- To respond to enquiries and communicate with you
- To book, manage, and follow up on calls or meetings
- To assess your business needs and recommend suitable services
- To prepare proposals, contracts, invoices, and service documentation
- To provide onboarding, social media management, content creation, ad setup, ad management, Google Search Ads, reporting, and related marketing services
- To create, review, revise, schedule, and publish marketing content
- To access and manage client social media pages, ad accounts, and related platforms with the permissions granted by the client
- To analyse campaign performance and prepare reports
- To manage billing, payments, accounting, and tax records
- To improve our website, services, processes, and client experience
- To protect our business, systems, rights, users, and clients
- To comply with legal, regulatory, tax, accounting, and contractual obligations
- To send service-related communications and, where permitted, marketing communications about MAIRA services
4. Legal Bases for Processing
We process personal data under one or more of the following legal bases:
- Contract: where processing is necessary to provide services, manage client relationships, deliver agreed work, issue invoices, or perform our Terms and Conditions
- Pre-contractual steps: where processing is necessary to respond to enquiries, prepare proposals, or discuss potential services before a contract is formed
- Legitimate interests: where processing is necessary for running and improving our business, communicating with clients, managing campaigns, securing our website, protecting our rights, and maintaining business records, provided those interests are not overridden by your rights
- Consent: where we rely on your consent for specific activities, such as certain marketing communications or non-essential cookies, where required
- Legal obligation: where processing is necessary to comply with applicable laws, including tax, accounting, regulatory, and legal requirements
5. AI Tools and Automated Processing
MAIRA uses artificial intelligence tools to support marketing activities, content creation, creative development, campaign planning, analysis, and workflow efficiency.
AI tools may be used to assist with drafting copy, generating ideas, preparing creative concepts, analysing marketing information, improving content, and supporting campaign execution. We aim to avoid sharing unnecessary personal data with AI tools and use such tools in a way that supports, rather than replaces, human review and professional judgement.
We do not use personal data to make decisions based solely on automated processing that produce legal effects or similarly significant effects on individuals.
6. Third-Party Platforms and Service Providers
To operate our business and deliver services, we may share or process personal data through trusted third parties, including:
- Meta platforms, including Facebook and Instagram
- Google services, including Google Ads and related tools
- Website hosting and technical service providers
- Email, communication, calendar, booking, and productivity tools
- Cloud storage and file-sharing tools
- Design, content creation, analytics, reporting, and AI tools
- Accounting, invoicing, payment, and administrative service providers
- Professional advisers, including legal, tax, and accounting advisers
- Public authorities, regulators, courts, or law enforcement where required by law
Third-party advertising platforms process data according to their own terms, privacy policies, and platform rules. MAIRA is not responsible for platform-side privacy practices, account actions, policy changes, billing errors, or enforcement decisions made by third-party platforms.
7. Client Account Access
Where MAIRA accesses a client's social media accounts, ad accounts, Google Ads accounts, LinkedIn accounts, or other platforms, the client grants MAIRA the permissions necessary to deliver the agreed services.
Such access is used only for service delivery, campaign setup, campaign management, content publication, reporting, and related activities. Access should remain in place only for the duration of the engagement and may be removed or relinquished upon termination, where requested or where no longer required.
8. Cookies and Similar Technologies
Our website may use cookies or similar technologies to operate properly, understand website usage, improve performance, and, where enabled, support analytics or marketing activity.
Cookies may include:
- Strictly necessary cookies required for the website to function
- Analytics cookies that help us understand how visitors use the website
- Marketing or advertising cookies, if enabled, that help measure or improve marketing activity
Where required by law, we will request consent before placing non-essential cookies. You can also manage cookies through your browser settings. Disabling some cookies may affect website functionality.
9. International Transfers
Some of the tools, platforms, and service providers we use may process personal data outside Malta or the European Economic Area.
Where personal data is transferred internationally, we take steps designed to protect it in accordance with applicable data protection law. These steps may include relying on adequacy decisions, standard contractual clauses, contractual protections, platform data transfer terms, or other lawful transfer mechanisms.
10. How Long We Keep Personal Data
We keep personal data only for as long as reasonably necessary for the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.
In general:
- Enquiry and contact data may be kept for a reasonable period after the last interaction, unless deletion is requested earlier and we are able to comply
- Client, contract, invoice, payment, and accounting records are kept for the period required by applicable legal, tax, accounting, and business record obligations
- Campaign materials, approvals, reports, and service communications may be kept for the duration of the client relationship and for a reasonable period afterwards to manage records, resolve disputes, and protect our rights
- Platform access permissions should be removed or relinquished when they are no longer required for the engagement
We may retain limited information where necessary to comply with legal obligations, enforce agreements, resolve disputes, prevent fraud, or protect our legitimate interests.
11. How We Protect Personal Data
We use reasonable technical, organisational, and administrative measures to protect personal data against unauthorised access, loss, misuse, alteration, disclosure, or destruction.
These measures may include access controls, password protection, restricted account permissions, confidentiality obligations, secure storage, and use of reputable service providers. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.
12. Your Data Protection Rights
Depending on your location and applicable law, you may have the right to:
- Request access to the personal data we hold about you
- Request correction of inaccurate or incomplete personal data
- Request deletion of your personal data
- Request restriction of processing
- Object to processing based on legitimate interests
- Object to direct marketing
- Request data portability
- Withdraw consent where processing is based on consent
- Lodge a complaint with a data protection supervisory authority
To exercise your rights, contact us at letstalk@maira.agency. We may need to verify your identity before responding to a request.
If you are in Malta or the European Union and believe your data protection rights have been infringed, you may contact the Office of the Information and Data Protection Commissioner in Malta:
Office of the Information and Data Protection Commissioner
Floor 2, Airways House, Triq Il-Kbira
Tas-Sliema SLM 1549, Malta
Website: https://idpc.org.mt/
Email: idpc.info@idpc.org.mt
Telephone: +356 2328 7100
13. Marketing Communications
We may contact you with service-related messages, follow-ups, or information about MAIRA services where permitted by law. If you receive marketing communications from us, you can opt out at any time by following the instructions in the message or by contacting letstalk@maira.agency.
14. Children's Data
We do not sell personal data. Our website and services are intended for businesses and are not directed at children. We do not knowingly collect personal data from children. If you believe a child has provided personal data to us, please contact us and we will take appropriate steps to delete it where required.
15. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, website, tools, legal obligations, or business operations.
Where changes are material, we will take reasonable steps to notify affected users or clients. Continued use of our website or services after an updated Privacy Policy is published indicates acceptance of the updated terms, where permitted by law.
16. Contact
For any questions about this Privacy Policy or how MAIRA handles personal data, please contact:
MAIRA
Email: letstalk@maira.agency
Website: maira.agency
MAIRA - Affordable Marketing Powered by Human Experience and AI.