Privacy Policy

Last updated: 29 October 2026

This notice explains what personal data we collect when you visit felveo.com or contact us, why we collect it, who processes it and what rights you have. We keep it short and specific to what this website actually does.

1. Who we are

FELVEO is operated by Rudolf Meszesi, Triq Bugibba, Clejos, Fl7, SPB2760 St Paul’s Bay, Malta (VAT No. MT25838737) (“we”, “us”). We are the controller of the personal data described in this notice. Contact for any privacy question or request: info@felveo.com.

2. What this notice covers

This notice covers the felveo.com website: visiting it, requesting the Desk Reset Pack, signing up for early access and contacting us. It also covers the follow-up emails we send to contacts that business event organisers share with us (section 3.5). It does not replace the separate employee privacy notice and business data processing agreement required for the FELVEO platform. The platform is designed to restrict HR usage reports to grouped results; this website notice does not certify legal anonymity or approve the platform for customer use.

3. What we collect and why

3.1 Early access sign-ups

When you request the free Desk Reset Pack we receive your name, company, work email, optional team size and optional message. We send the requested pack, answer your enquiry and contact you about FELVEO early access (planned for early 2027). After the pack, we email you when we open and at most once before that if something important changes; no newsletter. Please do not include employee or health information in the message.

• Legal basis: steps taken at your request before entering into a contract (GDPR Art. 6(1)(b)) and our legitimate interest in responding to business enquiries (Art. 6(1)(f)).
• How it is handled: your submission is saved in our Hostinger database. If database saving fails, a private file outside the public website is used as a fallback. The submission is also emailed to info@felveo.com and authorised operational contacts; incoming messages are also delivered to our Gmail accounts. Your name, company and work email are added to MailerLite for the requested pack and early access emails. The form stores only the canonical website address, without query parameters or fragments. Our technical log records time, result codes, a lead reference and a message reference; it does not include form contents or database error messages. These references can be linked to the underlying submission and are not anonymous.
• Email delivery and measurement: MailerLite may record delivery, bounce, unsubscribe, open and link-click activity. The pack link uses a MailerLite redirect before the PDF is downloaded from felveo.com. Opening or clicking can therefore disclose technical information to the email provider; website cookie choices do not control email tracking. You can ask us by email for the pack or request deletion. Repeating the form can retrigger the pack email, subject to the provider's sending limits.
• We do not sell your contact details or add you to a newsletter.

3.2 Email and WhatsApp

If you email us or message us on WhatsApp, we process your contact details and the content of your message to reply (Art. 6(1)(b) and (f)). WhatsApp is provided by WhatsApp Ireland Limited (Meta) under its own terms and privacy policy.

3.3 Website analytics

If you allow optional analytics, we use Google Analytics 4 and Microsoft Clarity to understand page use: sections viewed, scrolling, button clicks, demo steps, form starts and successful submissions. They process technical information such as IP address, device, browser, screen size and approximate location, and can use browser identifiers. Clarity creates session replays and heatmaps. The sign-up form and interactive demo are marked for masking, and our custom events exclude typed contact details and the demo's selected needs and feedback. Masking and pseudonymous identifiers do not establish anonymity. Before loading analytics we remove URL query parameters and unrecognised fragments, preserving only navigation anchors defined on this page; Google receives a query-free page address and no referrer from our tag configuration.

• Legal basis: your consent (Art. 6(1)(a)). Analytics scripts and events load only after you choose “Allow”. Declining sends no analytics request from our code. Clarity is not loaded if the browser exposes an incoming referrer with query parameters or a fragment, because the replay provider could read that address independently. You can withdraw through Cookie settings; already-open website tabs reload to stop the analytics runtime. Withdrawal does not undo data already sent.
• Our website tags disable Google Signals and personalised advertising; we do not run advertising campaigns.

3.4 Hosting

When you load any page, our hosting provider's servers process your IP address, browser information and the time of the request to deliver the page and keep it secure (Art. 6(1)(f)). Our fonts and images are served from our own server; the site does not load Google Fonts or other third-party font services.

3.5 Contacts shared with us by event organisers

If you registered for a business event, such as the FHRD Annual HR Conference & Expo 2026 in Malta, and opted in during registration to receive information from the event's partners and exhibitors, the organiser may share your name, surname and business email address with us. We did not collect these details from you directly; this section gives you the information required by GDPR Article 14, and our first email to you says where your details came from.

• What we use it for: a small number of follow-up emails after the event about the workplace wellbeing services and initiatives we presented there, including on-site workplace massage sessions that the operator of FELVEO also provides, the free Desk Reset Pack and FELVEO early access. No newsletter, no other purpose, and we never sell or rent your details.
• Legal basis: the consent you gave to the organiser at registration to receive partner and exhibitor information (GDPR Art. 6(1)(a)). This is also the prior consent that Maltese law requires for marketing emails (Processing of Personal Data (Electronic Communications Sector) Regulations, S.L. 586.01, regulation 9). If you reply or ask us something, we answer under our legitimate interest in business communication (Art. 6(1)(f)).
• Withdrawing consent: at any time and free of charge, with the unsubscribe link in every email or by emailing info@felveo.com. We then stop the emails and keep only the minimum record needed to honour your choice. Withdrawal does not affect emails already sent. For the consent you gave at registration, you can also contact the organiser.
• How it is handled: your name and email address are stored in our MailerLite account in a group named after the event, separately from website sign-ups. MailerLite sends the emails on our behalf and may record delivery, bounces, unsubscribes, opens and link clicks, as described in section 3.1; opening or clicking can disclose technical information to the email provider. These details are not loaded into the FELVEO platform and are not shared with your employer. If you reply, your message reaches info@felveo.com and our Gmail accounts (section 3.2).
• How long: we keep event contacts for the event follow-up only and delete or suppress them no later than 12 months after the event, or earlier if the organiser's partner terms require it. If you ask for the Desk Reset Pack, early access or another service in the meantime, section 3.1 applies from then on.

4. Who processes your data

These providers act on our instructions as processors, except where they state that they act as independent controllers under their own terms. We do not sell personal data.

5. Transfers outside the EU/EEA

Service providers may process information outside the EU/EEA, including in the United States. A provider's brand or an EU company address does not by itself guarantee EU-only processing. The applicable locations, contracting entities and transfer safeguards depend on the service and account contract. We must verify the relevant agreements and, where needed, adequacy decisions or Standard Contractual Clauses; this notice does not assert that every transfer is covered by the same safeguard. Contact us for the current account-specific information.

6. How long we keep it

• Early access sign-ups and related emails: up to 24 months after our last meaningful contact with you, or earlier if the purpose ends, subject to justified legal exceptions. Retention reviews and deletions for these website copies are handled manually; no automated purge is configured.
• Contacts shared by event organisers: for the event follow-up only, and no later than 12 months after the event (section 3.5); a minimal suppression record is kept after you unsubscribe.
• Google Analytics: event data is kept for 14 months.
• Microsoft Clarity: ordinary playback data is retained for 30 days; labelled or favourited sessions, click data and heatmaps can be kept for 9 months under Microsoft's published retention.
• Cookies: see the lifetimes in our Cookie Policy.

7. Your rights

Under the GDPR you can ask us to access, correct or delete your personal data, to restrict or object to its processing (including analytics), and to receive your data in a portable format. Email info@felveo.com; we reply within one month. You also have the right to lodge a complaint with the supervisory authority in Malta, the Information and Data Protection Commissioner (idpc.org.mt), or with the authority where you live or work.

8. Other points

• We do not make decisions about you based solely on automated processing.
• This website is intended for businesses and is not directed at children.
• We use appropriate technical and organisational measures (HTTPS, access restricted to the people who need it, form protection against spam) to protect your data.
• If we change this notice, we will update the date at the top of this page.