Privacy Policy
Last updated: 17 October 2026.
Renewable Living Limited (C106837) processes personal data in accordance with the General Data Protection Regulation (GDPR) and applicable Maltese data protection law.
We are the controller for information used in connection with our website, enquiries, sales, installations and after-sales support. Contact us at info@renewablelivingmalta.com or G. Portelli Group Head Office, Pietru Xuereb Street, Pieta, PTA1501, Malta.
Information we use
Depending on your dealings with us, we use your name, contact details, delivery or installation address, order and invoice information, payment references, correspondence and service records. Assessments may also require relevant property photographs and technical details. Website services process information such as IP addresses, browser details and cookie preferences.
We receive information from you and, where relevant, someone arranging an order on your behalf, payment providers or contractors involved in your service. Please provide only information necessary for your request. Without the information needed for an order or legal requirement, we may be unable to supply the relevant service.
Why we use it
We use information to answer enquiries, prepare quotations, fulfil orders, arrange delivery and installation, process payments and provide support. For individual customers this generally involves steps you request before a contract or performance of that contract. Legal obligations apply to accounting and statutory records. Our legitimate interests support proportionate security, fraud prevention, business-contact administration and the handling of claims, balanced against your rights. Optional marketing and tracking rely on consent where required.
Who receives information
Our website operates through Squarespace and payments are processed through Stripe. Relevant information may also be shared with authorised staff, IT and email providers, delivery companies, installers, warranty suppliers, professional advisers and competent authorities, as necessary. Providers may act as processors or as independent controllers for particular activities. Do not send full card details by email.
Where information is transferred outside the European Economic Area, an applicable GDPR transfer mechanism is required, such as an adequacy decision or Standard Contractual Clauses with any necessary supplementary measures. Contact us for information about the safeguards relevant to your data.
How long we keep it
Retention depends on the purpose: enquiries are kept while being handled and for necessary follow-up; order, installation and service records are kept for contractual, guarantee, accounting and applicable legal-claim requirements. Disputes or legal obligations may require longer retention. Marketing preferences are retained while relevant, with the minimum suppression information needed to respect an opt-out. Information no longer needed is deleted or anonymised.
We apply security measures appropriate to the risks and restrict access to those who need it. No online system can guarantee absolute security.
Marketing and cookies
Optional promotional messages require the applicable permission. You may unsubscribe or contact us at any time. Order, delivery, payment and safety messages are separate from marketing.
Necessary cookies support requested functions such as security and checkout. Optional cookies require consent where applicable. Use the banner to accept, decline or manage optional cookies, and Cookie Preferences in the website subfooter to revisit your choices. Consent can be withdrawn without affecting earlier lawful processing. For information about Squarespace cookies and their duration, see https://support.squarespace.com/hc/en-us/articles/360001264507. Payment technologies are also explained at https://stripe.com/legal/cookies-policy.
Your rights
Subject to GDPR conditions, you may request access, correction, erasure, restriction or portability and object to processing based on legitimate interests. You may object to direct marketing and withdraw consent at any time. Some records must be retained to meet legal duties.
Contact info@renewablelivingmalta.com. We normally respond within one month; a legally justified extension of up to two further months will be explained within the first month. Proportionate identity verification may be necessary. You can complain to Malta's Information and Data Protection Commissioner at https://idpc.org.mt/contact/ or another competent supervisory authority.
We will update this notice when relevant practices change and show the effective date.