1. Who we are
Pitazz is operated as a sole trader established in Malta, trading as Pitazz ("we", "us"). We are the data controller responsible for the personal data described in this policy, within the meaning of the EU General Data Protection Regulation (GDPR) and the Maltese Data Protection Act (Cap. 586 of the Laws of Malta). The controller's full identity and contact details are available on request at hello@pitazz.co.
You can contact us about anything in this policy at hello@pitazz.co. If Pitazz later incorporates as a company, that company will take over as controller and this policy will be updated to say so; your data and your rights will not change as a result.
2. What we collect
At this stage, Pitazz is a waitlist. The only personal data we actively collect is what you type into the waitlist form, together with a small amount of technical information recorded when you submit it.
The waitlist form
Everyone who joins gives us their name, email address, and their tutoring preferences: the subjects they need help with or teach (including anything typed into the "Other" box), the level, the lesson format (online, in person, or either), a location preference for in-person lessons where relevant, their locality in Malta or Gozo (optional if lessons will be online only), and the lesson type (one-to-one or small group).
The mobile number field works differently depending on who you are:
- Students and parents: the mobile number is optional. If you choose to leave one, we will use it to message you when a tutor match is ready in your area. Leaving it blank changes nothing else about your place on the waitlist.
- Tutors: the mobile number is required, because we use it as part of verifying tutors before they can appear in matches.
Phone numbers are Maltese mobile numbers stored in the format +356 XXXX XXXX.
Recorded automatically with your submission
When you submit the form, we also record the date and time of your submission, a page identifier, and — only if you arrived through a tagged link — the campaign tags in that link (UTM parameters), which tell us which advert or link brought you here. They are part of the link itself, not tracking on your device.
Cookies and analytics
This website sets no cookies and runs no analytics or advertising scripts. There is nothing to consent to and therefore no cookie banner. Like almost every website, our hosting provider keeps standard server logs (which include IP addresses) for security and reliability, and the page loads its typefaces from Google Fonts, which means your browser requests those font files from Google's servers when the page loads. If we ever add analytics or advertising tools that place cookies or similar technologies, we will update this policy and ask for your consent first.
3. Why we use your data, and on what legal basis
| What we do | Data involved | Legal basis (GDPR Art. 6) |
|---|---|---|
| Email you when Pitazz launches in your area | Name, email, preferences, locality | Your consent, given by joining the waitlist — Art. 6(1)(a) |
| Message students and parents when a match is ready | Mobile number (only if you chose to give one) | Your consent — Art. 6(1)(a) |
| Verify and onboard tutors who ask to join | Name, email, mobile number, subjects and levels taught | Steps taken at your request before entering an agreement — Art. 6(1)(b) |
| Understand which adverts and messages work, and plan where to launch first | Campaign tags (UTM parameters), preferences and localities in aggregate | Our legitimate interest in measuring our own marketing and planning the service — Art. 6(1)(f) |
| Keep the form free of spam and the site secure | Hidden anti-spam field, hosting server logs | Our legitimate interest in protecting the service — Art. 6(1)(f) |
You can withdraw any consent at any time by emailing hello@pitazz.co; this does not affect the lawfulness of anything done before you withdrew it. We do not use your data for automated decision-making or profiling that produces legal or similarly significant effects.
4. Where your data lives
Waitlist submissions are stored securely with Google (Google Workspace), which we use as our email and cloud storage provider. The website itself runs on the infrastructure of a specialist hosting provider, whose role is limited to serving the site and keeping standard server logs. Both act as our processors: they store or transmit data on our instructions and are not permitted to use it for their own purposes.
These providers may process data on infrastructure outside the European Economic Area, including in the United States. Where that happens, transfers are protected by the safeguards required under Chapter V of the GDPR, such as the EU–US Data Privacy Framework and the European Commission's Standard Contractual Clauses, as implemented in each provider's data processing terms.
5. Who we share it with
We do not sell your personal data, and we never will. We do not share it with advertisers, data brokers, or any other third party for their own use. The only parties that handle your data are the service providers named above, acting on our instructions, and public authorities if the law ever obliges us to disclose something.
6. How long we keep it
We keep waitlist data for as long as it serves the purpose you gave it to us for: to be told about the launch and, if you asked, to be contacted for matching. In practice that means we keep your submission until Pitazz launches and you either create an account (at which point a fuller privacy policy for the live service will apply) or you tell us you are no longer interested — and in any case no longer than 24 months from the date you submitted the form. And you can have your data deleted at any time — just email us.
7. Your rights
Under the GDPR you have the right to access the personal data we hold about you, to have it corrected if it is wrong, to have it erased, to restrict or object to how we use it, to receive it in a portable format, and to withdraw consent at any time where consent is the basis for what we do.
To exercise any of these rights, email hello@pitazz.co from the address you signed up with (or tell us the details you signed up with, so we can find your entry). We will respond within one month, and there is no charge.
8. Complaints
If you believe we have handled your data unlawfully, you have the right to lodge a complaint with Malta's supervisory authority, the Information and Data Protection Commissioner (IDPC), at idpc.org.mt. Of course, we would welcome the chance to resolve any concern directly — hello@pitazz.co reaches us straight away.
9. Children
The waitlist is intended to be completed by adults: parents and guardians sign up on behalf of younger students, and tutors and adult learners sign up for themselves. We do not knowingly collect personal data directly from children under 16. If you believe a child has submitted the form themselves, email us and we will delete the entry.
10. Changes to this policy
If what we collect or how we use it changes — for example, when the full Pitazz service launches — we will update this page and change the date at the top. For any significant change affecting data you have already given us, we will email you before it takes effect.
11. Contact
Questions, requests, or anything unclear: hello@pitazz.co.