Privacy Policy
This policy explains what personal data we collect when you use neilagius.com, book a session, sign up to our emails or contact us, why we collect it, who we share it with, and the rights you have. We keep it short and in plain language.
1. Who we are
The website neilagius.com is run by Neil Agius, a sole trader in Malta, who is responsible for your personal data (the "controller").
Neil Agius Flat 4, Pavillion Court B, Triq il-Kbira, Għargħur, GHR 1266, Malta VAT Registration No. 1992-2827
Email for privacy questions: neil@neilagius.com
2. What we collect and why
| When | What we collect | Why | Legal basis |
| You book a session | Name, email, phone number, the session you booked, date and time, what you paid, any discount code used, and your answers to the booking checkboxes | To manage your booking, send you booking emails and WhatsApp messages, give you access to your bookings online, and issue your invoice | To perform our contract with you; booking confirmations are also a legal requirement |
| You pay | Payment details are entered directly with Stripe. We do not see or store your full card number | To take payment and process refunds | To perform our contract with you |
| You tick "Stay Updated", or sign up through the website pop-up | Name and email | To send you news, upcoming sessions and offers by email | Your consent, which you can withdraw at any time |
| You tick the photos and videos box | Your agreement, and photos or videos of you taken at the session | To use them on Neil Agius's website and social media | Your consent, which you can withdraw at any time |
| You confirm the health and safety declaration | Your confirmation (a yes tick box only; we don't ask for health details) | To make sure the session is safe for you | To perform our contract with you |
| You use the contact, team building or media kit forms | The details you enter (for example name, email, phone, company, group size and your message) | To reply to your enquiry, prepare a team building proposal, or give you the media kit | Our legitimate interest in responding to requests you make, or steps you ask for before a contract |
| You browse the website | Cookie and device information (see section 7) | To make the site and payments work and, with your consent, to understand how emails and the site are used | Necessary cookies: our legitimate interest. Other cookies: your consent |
We do not sell your personal data.
3. WhatsApp messages
When you book, we use the phone number you give us to send you WhatsApp messages about that booking:
- a reminder before your session, with directions to the venue and a link to manage your booking
- a message after your session
These messages are sent through the WhatsApp Business Platform, provided by Meta (WhatsApp Ireland Limited for users in Europe). Meta processes your phone number and the message content to deliver them. WhatsApp's own privacy policy applies to your use of WhatsApp: https://www.whatsapp.com/legal/privacy-policy-eea
If you don't want to receive these messages, email us at neil@neilagius.com. You will still receive your booking emails.
WhatsApp Community
Our website and emails link to Neil Agius's WhatsApp Community. Joining it is optional. Other members of the community can see your name and phone number, and WhatsApp's privacy policy applies there.
4. Who we share your data with
We only share your data with service providers who help us run the website and our sessions, and only what they need:
| Provider | What they do |
| Stripe | Payments and refunds |
| Klaviyo | Booking emails and, if you agreed, marketing emails |
| Meta (WhatsApp Business Platform) | Booking WhatsApp messages |
| Brevo | Sends the emails from the website's forms |
| DigitalOcean (data centre in Frankfurt, Germany) | Hosts the website and booking system |
| Provides the fonts used on the website | |
| Our web development partners | Maintain the website and booking system |
We may also share data if the law requires it, for example with tax authorities.
5. Data transfers outside the EU
Some of these providers (for example Stripe, Klaviyo, Meta and Google) may process data outside the European Union, including in the United States. Where they do, the transfer is protected by the EU-US Data Privacy Framework or the European Commission's Standard Contractual Clauses.
6. How long we keep your data
- Bookings, payments and invoices: as long as Maltese tax law requires
- Marketing emails: until you unsubscribe
- Enquiries from our forms: 2 years after our last contact
- Photos and videos: until you withdraw your consent, after which we stop using them in anything new
7. Cookies
The website uses a small number of cookies:
| Cookie | Provider | Purpose | Type |
| __stripe_mid, __stripe_sid | Stripe | Fraud prevention and secure payments | Necessary |
| Booking and login cookies | Neil Agius (WordPress / Amelia) | Keep your booking and Customer Panel session working | Necessary |
| __kla_id | Klaviyo | Recognises you when you return from one of our emails, so we can understand which emails are useful | Marketing (only with your consent) |
When you first visit, you can accept or refuse non-necessary cookies, and change your choice at any time.
8. Your rights
You can ask us to:
- give you a copy of your data
- correct it
- delete it (unless we must keep it, for example invoices)
- restrict or object to how we use it
- send it to you or another provider in a usable format
- stop marketing: use the unsubscribe link in any email
Email us at the address in section 1. We reply within one month. If you're unhappy with how we handle your data, you can complain to Malta's Information and Data Protection Commissioner (idpc.org.mt).
9. Changes to this policy
We may update this policy. The latest version is always on this page, with the date it was last updated.