Privacy Policy

Sex Clinic Malta by Willingness is operated by Willingness Malta, a mental health and wellbeing practice registered in Malta. This policy covers the website at www.sexclinicmalta.com.

• Registered name: Willingness Malta
• Registration number: P1900
• VAT number: MT26805030
• Registered address: Willingness Hub, Qolla Street, Żebbuġ ZBG 1511, Malta
• Data controller: Willingness Malta

For anything relating to your personal data, email info@willingness.com.mt with "Data Protection Request" in the subject line, or write to Data Protection Contact, Willingness Hub, Qolla Street, Żebbuġ ZBG 1511, Malta. General enquiries: +356 7929 1817.

This site publishes educational sexual health content: question and answer articles, research summaries, and related resources. You do not need an account to read any of it. Appointments, clinical services and payments are not handled on this website.

• Contact details you send us. Your name, email address, phone number and the content of your message, if you contact us by email or telephone.
• Analytics data, only if you consent. A pseudonymous identifier stored in the _ga cookie, the pages you viewed, approximate location derived from your IP address, device and browser type, and the site that referred you.
• Your cookie choice.Whether you accepted or declined, stored in your browser's local storage on your own device.
• Server logs. Our host records IP address, request time, requested page and user agent for every request, which is necessary to serve the site and to detect abuse.

Being straight with you about analytics: if you accept analytics cookies, Google Analytics records which pages you viewed. The pages on this site are about sexual health, so what you read can imply something personal. That is precisely why analytics is switched off until you turn it on, and why you can turn it back off at any time from the Cookie settings link in the footer.

• No accounts, usernames or passwords. There is nothing to sign up for.
• No payment or card details. Nothing is sold on this website.
• No health records, symptoms, diagnoses or appointment information. You never have to tell us anything about yourself to read this site.
• No advertising or marketing cookies, no advertising profiles, and no data brokers.
• We do not sell personal data, and we do not share it for cross-context behavioural advertising.

• To answer the enquiries you send us.
• To see which articles are read and where readers come from, so we can decide what to write next.
• To keep the site available, secure, and free of abuse.
• To meet obligations that Maltese or EU law places on us.

• Consent (Art. 6(1)(a) GDPR) for analytics cookies and for loading embedded YouTube videos. You can withdraw it at any time.
• Legitimate interests (Art. 6(1)(f) GDPR) for replying to an enquiry you started, for keeping server logs, and for protecting the site against attack. We have weighed these against your interests and consider them proportionate, since the data involved is limited and you can object at any time.
• Legal obligation (Art. 6(1)(c) GDPR) where law requires us to keep or disclose records.

Analytics cookies and embedded videos are only loaded once you accept. Our Cookie Policy lists every cookie by name, purpose and duration, and explains how to change or withdraw your choice.

We use the following processors to run this website. Each one is bound by a data processing agreement under Art. 28 GDPR that limits them to acting on our instructions.

We may also disclose data where we are legally required to, for example in response to a lawful request from a public authority.

Some of the providers above are based in, or transfer data to, the United States. Where that happens we rely on one of the following safeguards under Chapter V GDPR:

• The European Commission's adequacy decision of 10 July 2023 for the EU-US Data Privacy Framework, where the recipient is certified under that framework.
• Standard Contractual Clauses adopted by the European Commission under Art. 46(2)(c) GDPR, together with a transfer impact assessment, where the framework does not apply.

You can request a copy of the safeguards that apply to a particular transfer by emailing us at the address above.

Under the GDPR and the Data Protection Act (Cap. 586) you have the right to:

• Access a copy of the personal data we hold about you.
• Rectification of data that is inaccurate or incomplete.
• Erasure of your data where we have no overriding reason to keep it.
• Restriction of how we use your data while a dispute is resolved.
• Portability of data you gave us, in a machine-readable format.
• Objection to processing we base on legitimate interests.
• Withdrawal of consent at any time, using the Cookie settings link in the footer of every page. Withdrawing does not affect processing that took place while your consent was active.

Email info@willingness.com.mt to exercise any of these. We respond within one month, as required by Art. 12(3) GDPR. If a request is complex we may extend that by up to two further months, and we will tell you within the first month if we do. There is no charge unless a request is manifestly unfounded or excessive.

We do not carry out automated decision-making or profiling that produces legal effects for you or similarly significantly affects you.

This site discusses sexual health explicitly and is written for readers aged 18 and over. It is not directed at children, and we do not knowingly collect personal data from them.

Maltese law (S.L. 586.11) sets 13 as the age from which a child can consent to the processing of their data by an information society service. We do not knowingly rely on a consent given by anyone below that age. If you believe a child has provided us with personal data, contact us and we will delete it.

• The site is served over HTTPS on every route.
• This website keeps no database of its own. There is no store of visitor records for an attacker to reach.
• Access to the mailbox that receives enquiries is limited to the staff who need it.
• Providers are selected on their security commitments and are bound by Art. 28 processing terms.

No system is perfectly secure. Where a personal data breach is reportable we notify the Information and Data Protection Commissioner within 72 hours of becoming aware of it, and we notify affected people directly where the breach is likely to result in a high risk to them.

If you are unhappy with how we have handled your data, please tell us first so we can put it right. You also have the right to complain to the Maltese supervisory authority:

• Information and Data Protection Commissioner (IDPC)
• Level 2, Airways House, High Street, Sliema SLM 1549, Malta
• Telephone: +356 2328 7100
• idpc.org.mt

If you live in another EU or EEA country you may complain to your own national supervisory authority instead.

We update this policy when our practices or the law change. The revision date at the top always reflects the current version. Where a change materially affects your rights we will make that clear on this page rather than relying on the date alone.