Privacy Policy

1. Who we are

This website, euroflowcontrol.com (the “Site”), is operated by EAP Global Limited, a private limited company incorporated in Malta, trading as Euro Flow Control. For all data protection matters, EAP Global Limited is the data controller. You can reach us at sales@euroflowcontrol.com.

2. What this policy covers

This policy explains what personal data we collect when you visit euroflowcontrol.com, request a quote, contact us or otherwise interact with us. It covers why we collect it, the lawful basis we rely on, who we share it with, how long we keep it and what rights you have under the EU General Data Protection Regulation (Regulation (EU) 2016/679, “GDPR”) and the Maltese Data Protection Act.

3. What personal data we collect

Information you give us when you submit our contact or quote-request form, send an email, or call:

• Name (first, last)
• Company name and role (if provided)
• Email address
• Telephone number
• The content of your enquiry, including any technical or commercial information you choose to share, plus any attachments you upload

Information collected automatically when you visit the Site:

• IP address (anonymised in our access logs after 30 days)
• Browser type and version, device type, operating system
• Pages visited, time on page, referring URL
• Date and time of visit
• Whether or not you accept analytics cookies: a limited cookieless signal (IP address, browser type, page viewed) is sent to Google Analytics. It cannot identify you individually or link your visits together.

4. Why we use your data and on what lawful basis

We do not carry out automated decision-making or profiling that produces legal or similarly significant effects.

5. Who we share your data with

We share personal data only with the following categories of recipient:

• Website hosting and infrastructure analytics: Vercel (hosts the Site, processes request logs, and provides privacy-friendly cookieless analytics that set no cookies, store no personal identifier and cannot identify you)
• Website analytics: Google (Google Analytics 4). If you accept analytics cookies, Google receives aggregated usage data. If you decline, Google still receives a limited cookieless signal (IP address, browser type, page address) that cannot identify you. Google processes data under Standard Contractual Clauses.
• Customer relationship management: HubSpot, which holds your contact details (name, email address, company, phone number where given) and the enquiry itself: the products, quantities and specification you asked about, plus any note you wrote, saved as a text summary. Files you upload are NOT sent to HubSpot. HubSpot is based in the United States; transfers are covered by the safeguards described in section 6.
• Enquiry document storage: Google Workspace (Google Drive), where each enquiry has its own folder. This is where any drawing, specification or schedule you upload is stored, alongside the text of your enquiry and the datasheets for the products you asked about.
• Email infrastructure: Hostinger mail servers (delivery and storage of email correspondence)
• PDF spec-sheet extraction: Anthropic (Claude API), used only on request to extract text from uploaded datasheets. Under Anthropic's commercial terms, content sent to the API is not used to train its models.
• Professional advisers (lawyers, accountants, auditors), where necessary and bound by professional confidentiality
• Public authorities, only where required by law

We do not sell your personal data, and we do not share it with advertising networks.

6. International transfers

Where any recipient above is established outside the European Economic Area, we transfer your data only under safeguards set out in Chapter V GDPR, most commonly the European Commission’s Standard Contractual Clauses (Decision (EU) 2021/914). Google (both Google Analytics and Google Workspace, which includes the Google Drive storage described above) may process and store data on servers outside the EEA, including in the United States, under those clauses and its certification under the EU-US Data Privacy Framework. We do not restrict that storage to a particular country or region. A copy of the relevant safeguards is available on request to sales@euroflowcontrol.com.

7. How long we keep your data

8. Your rights

Under GDPR you have the right to:

• Access the personal data we hold about you (Art. 15)
• Rectify inaccurate or incomplete data (Art. 16)
• Erasure in the circumstances set out in Art. 17
• Restrict processing in the circumstances set out in Art. 18
• Data portability: receive your data in a structured, machine-readable format (Art. 20)
• Object to processing carried out on the basis of legitimate interests (Art. 21)
• Withdraw consent at any time where we rely on consent (Art. 7(3))
• Lodge a complaint with a supervisory authority (Art. 77). For Malta this is the Office of the Information and Data Protection Commissioner (IDPC), idpc.org.mt

To exercise any of these rights, email sales@euroflowcontrol.com. We will respond within one month.

9. Children

This Site is a B2B website serving industrial buyers and is not directed at children. We do not knowingly collect personal data from children under 16.

10. Security

We use TLS encryption for all Site traffic and restrict administrative access on a need-to-know basis. Security patches are applied to our infrastructure as they become available. Quote-form attachments are transmitted directly to our email service and are not persisted on the Site.

11. Changes to this policy

If we make material changes we will update the “Last updated” date and give prominent notice on the Site where appropriate.

12. Contact

EAP Global Limited (trading as Euro Flow Control)
Airedesk Business Hub 17, Triq Il-Modd, Swieqi, SWQ 2373, Malta
Email: sales@euroflowcontrol.com
Phone: +351 912 529 904