Privacy notice
Last updated: 30 October 2026.
Who we are (the data controller)
The controller of your personal data is Martin Camilleri, trading as Nibharbor, Malta, EU. Contact for anything about your data: [email protected]. We work by email and form only. We do not offer phone calls.
What data we collect
- Intake form (free sample): your name, email address, role and company, your LinkedIn profile link, and the stories, opinions and answers you choose to write. Please do not send us sensitive data (health, politics, religion and similar) or other people’s private details.
- Emails you send us and our replies.
- If you buy a plan: your name, email, billing details you give at checkout (such as company name, address and VAT number), the plan you chose and the payment status. Payments are made on Stripe’s own page. We never see or store your full card number.
- Your drafts and working notes: the posts we write for you, your feedback and your approvals.
- Technical data: like any website, our host processes your IP address and browser details in its server logs, for security and to keep the site running. This website does not use advertising or analytics cookies or trackers.
Why we use it, and the legal basis (GDPR Article 6)
- To write your free sample post and reply to you: steps you ask for before any purchase (Article 6(1)(b)), and your consent when you tick the box on the form (Article 6(1)(a)). You can withdraw consent at any time by email; this does not affect what we did before.
- To provide a monthly plan, take payment and send you your drafts: to carry out our contract with you (Article 6(1)(b)).
- To issue invoices and keep accounting and tax records: a legal obligation (Article 6(1)(c)).
- To keep the website and email secure, answer enquiries and protect ourselves if there is a complaint or claim: our legitimate interest in running a safe, accountable business (Article 6(1)(f)). We have weighed this against your privacy rights.
AI writing tools help us draft posts, and our team reviews every post before it is sent. AI tools are used to help draft the posts, so the stories and answers you give us are entered into those tools only to write your drafts. We do not sell your data, we do not use it for advertising, and we do not make decisions about you by automated means.
Who receives your data (our processors and providers)
We share data only with the providers we need to run the service, and only for that purpose:
- Web3Forms (web3forms.com): the sample form. It receives the intake form and passes it to our email. Web3Forms may process data outside the EU/EEA under its standard safeguards.
- Stripe (stripe.com): payments. It takes card payments and manages monthly billing.
- Brevo (brevo.com, France): email. It sends our emails to you from [email protected].
- Cloudflare (cloudflare.com): hosting. It hosts this website and routes email sent to [email protected].
- Gmail (Google): where we read and keep our email.
- AI writing tools: used to help draft posts, as explained above.
We also give data to authorities such as the tax authorities when the law requires it. We do not share it with anyone else.
Transfers outside the EU/EEA. Some of these providers are outside the EU/EEA (for example Web3Forms in India, and US providers such as Cloudflare, Stripe and Google). Where data is transferred outside the EU/EEA, we rely on the safeguards the law allows, such as the European Commission’s Standard Contractual Clauses or the EU-US Data Privacy Framework, or on the transfer being needed to carry out your request.
How long we keep it
- Free sample requests (you did not become a client): up to 6 months after we send the sample, then deleted.
- Clients: drafts, notes and emails: while your plan is active and for up to 12 months after it ends, then deleted.
- Invoices and payment records: for as long as Maltese tax and accounting law requires.
- Server logs: kept by our host for a short period only, as set by the host.
- Form submissions held by Web3Forms: shown in its dashboard for about 30 days.
If you ask us to delete your data sooner, we do it unless the law requires us to keep it.
Your rights
Under the GDPR you can ask us to: give you a copy of your data; correct it; delete it; limit how we use it; give it to you in a common format (portability); and you can object to processing based on our legitimate interest. You can withdraw consent at any time. Email [email protected]. We reply within one month. We may need to check who you are first.
Complaints
Please tell us first and we will try to put it right. You also have the right to complain to the Maltese data protection authority, the Office of the Information and Data Protection Commissioner (IDPC): idpc.org.mt. You can also complain to the authority in the EU country where you live or work.
Providing your data
You do not have to give us your data, but we need your name, email address and answers to write your sample or run your plan.
Changes
We update this notice when what we do with data changes. The date at the top shows the latest version.
Nibharbor – Martin Camilleri, trading as Nibharbor, Malta, EU. Contact: [email protected]