Who to contact
Blunt & Sharp is the name used for this website. For questions about your personal information or to exercise your privacy rights, email info@bluntandsharp.com.
This notice covers this public website and enquiries sent through it. It does not describe data processing in a client project, which would be agreed separately.
Information we process
- Enquiries: your name, email address, organisation and area of interest if you provide them, and the message you enter in the contact form. If you email us directly, we receive your email address and whatever you include in the email.
- Technical request information: our hosting provider processes information needed to deliver and protect the website, which can include your IP address, requested URL, browser information and request time.
- Website statistics: we collect page views and aggregate information about visited pages, referrers, browser and device types, and approximate location to understand how the website is used. Contact form fields and messages are not sent as analytics events.
The contact form requires a name, a valid email address and a message so we can handle your enquiry. Organisation and area of interest are optional. Please do not include passwords, payment details or sensitive personal information in your message.
This website has no visitor accounts, newsletter subscription, online checkout or live AI chat. The interactive examples in the expertise pages use illustrative records, not visitor or client records.
Purpose and legal basis
We use enquiry information to understand your request, reply and discuss possible work. Where you ask us to take steps towards a contract with you, the legal basis is taking those steps at your request (GDPR Article 6(1)(b)). For other correspondence, including enquiries on behalf of an organisation, the basis is our legitimate interest in responding to people who contact us (Article 6(1)(f)).
Delivering the website, preventing abuse and diagnosing technical problems serve our legitimate interest in running a reliable and secure website (Article 6(1)(f)). Where we must retain or disclose information to meet a legal obligation, the basis is Article 6(1)(c).
Submitting an enquiry does not subscribe you to marketing. The website does not use your information for advertising profiles or automated decisions that produce legal or similarly significant effects.
Service providers and transfers
Our service providers include cloud hosting and security providers that process website request information, website analytics providers that process visitor statistics, and email delivery and mailbox providers that process enquiries and replies. These are technology service providers operating internationally, including in the United States. Information may also be disclosed where required by law.
Provider processing can take place outside the European Economic Area, including in the United States. The providers’ data processing terms include Standard Contractual Clauses for transfers requiring safeguards. Email info@bluntandsharp.com for details of the safeguards applicable to your information or to request a copy.
How long information is kept
Enquiry correspondence is kept for as long as needed to handle your request and any resulting discussions or work. The period depends on whether the enquiry remains active, becomes a client relationship, or needs to be retained for legal obligations or to establish, exercise or defend legal claims.
Technical logs and email delivery records are subject to the relevant provider’s retention settings and terms. You can contact us to ask about information relating to you or request deletion, subject to any applicable retention obligation.
Your rights
Where the GDPR applies, you can request access to your personal information, correction of inaccurate information, erasure, or restriction of processing. You can object to processing based on legitimate interests and request data portability where its conditions apply. If processing relies on consent, you can withdraw that consent without affecting the lawfulness of earlier processing.
Email info@bluntandsharp.com with your request. We may need information to verify your identity. The GDPR normally requires a response within one month, with extensions allowed in certain circumstances.
You can also lodge a complaint with a data protection authority, including the Information and Data Protection Commissioner in Malta, or the authority where you live, work or believe an infringement occurred.
Changes to this notice
We will update this page when the website’s data handling changes. The date at the top identifies the latest revision.