Privacy notice

FM Legal (Av. Francesca Micallef, Advocate & Commissioner for Oaths), 66, Triq tal-Katidral, Sliema, Malta, is the controller of the personal data described in this notice. For any question about your data, or to exercise your rights, contact us at francesca.micallef@fmlegal.eu or +356 7990 6659.

• Enquiries — the details you give us when you email, call or visit the office.
• Consultation bookings — your name, email address, phone number, the description of your matter, and the date, time, format and time zone you choose.
• Payments— consultation fees and Counsel+ subscriptions are paid on Stripe's secure pages. We receive confirmation of the payment but never see your card details.
• Client matters — once an engagement is confirmed, the information needed to act for you.
• Website usage — anonymous, aggregated statistics such as page views (see Cookies & analytics).

Please keep the description in a booking request brief and avoid sensitive details until an engagement is in place.

• To respond to your enquiry and arrange your consultation — steps you ask us to take before entering into an engagement (GDPR Art. 6(1)(b)).
• To provide legal services once engaged — performance of our contract with you (Art. 6(1)(b)) and, where your matter involves special categories of data, the establishment, exercise or defence of legal claims (Art. 9(2)(f)).
• To meet our legal and professional obligations, including accounting, tax and, where applicable, anti-money-laundering requirements (Art. 6(1)(c)).
• To keep the website secure and understand, in aggregate, how it is used — our legitimate interests (Art. 6(1)(f)).

We do not use your data for marketing and never sell it.

We share personal data only as needed to provide our services or where the law requires. The service providers who process data on our behalf are:

• Cal.com — consultation scheduling and booking emails.
• Stripe — payment processing.
• Microsoft — email and Microsoft Teams for online consultations.
• Vercel — website hosting, security and anonymous analytics.

Some of these providers are based in, or process data in, the United States. Those transfers are covered by the EU–US Data Privacy Framework or the European Commission's Standard Contractual Clauses.

Enquiries and booking requests that do not lead to an engagement are kept only as long as needed to deal with them. Client files and billing records are kept for the periods required by our professional rules, tax and anti-money-laundering law, and the limitation periods that apply to claims concerning our services. Data is then securely deleted.

You may ask us for access to your personal data, and to correct, delete or restrict it, to object to its processing, or to receive it in a portable format. Some rights are limited where we must keep data to meet legal obligations or to protect professional secrecy. Write to francesca.micallef@fmlegal.eu and we will reply within one month.

You also have the right to complain to the Information and Data Protection Commissioner (idpc.org.mt).

This website does not set cookies of its own and does not track you across other websites.

• Analytics — we use Vercel Web Analytics to count page views. It uses no cookies, stores nothing on your device and does not identify you.
• Security — our hosting provider may set a strictly necessary cookie if it needs to check that a visitor is not an automated bot.
• Maps — the map on the Contact page is an image served from this website, so viewing it shares nothing with a map provider. Google Maps opens only if you follow the link to it.
• Payment pages — Cal.com and Stripe may use cookies on their own payment pages, which are governed by their privacy policies.
• Social links — our Facebook and LinkedIn links are plain links; nothing from those sites loads unless you follow them.

We will update this notice if our practices change. The date at the top shows when it was last revised.