Privacy Policy
Last updated: 16 July 2026
1. Who is responsible for your data
The data controller is Franklin Farrugia, self-employed in Malta, trading/operating the FairReply service. VAT details are held on file. Contact for all privacy matters: cases@getfairreply.com. We process personal data under the EU General Data Protection Regulation (GDPR).
2. What we collect and why
Your case: your name, contact details, the description of your complaint, and the evidence you attach (receipts, invoices, photos, emails, warranty documents). We use this to verify, deliver, and track your case. Lawful basis: your explicit consent, given at submission, to forward your case to the named company.
Case updates: we use your email address to send you updates about your own case. Lawful basis: performance of the service you requested.
Usage analytics: we use privacy-friendly, cookieless analytics to understand how the site is used (page views and anonymous funnel events). No personal profiles are built.
Private post-case feedback:after a case is resolved or closed, we may invite you to rate the company's response, communication, fairness, and resolution, and leave an optional private comment. This helps us evaluate complaint handling and improve FairReply. Your individual feedback and score are not published.
3. Who sees your data
Your case — including your name and evidence — is shared with exactly one party: the company your case concerns, so it can respond and resolve it. We do not sell personal data. We do not publish anything. Service providers (hosting, email delivery, file storage) process data on our behalf under GDPR-compliant agreements, within the EU/EEA or under approved transfer mechanisms.
4. Aggregated statistics
Where you confirm this use, we may produce anonymised, aggregated statistics and insights (for example, complaint volumes, response patterns, resolution outcomes, and grouped feedback trends). These never contain your name, contact details, documents, private comment, or individual score. We may use aggregate insights to improve the service and may eventually provide paid benchmark or reporting products. We do not sell personal data.
5. Retention
Case data, evidence, and identifiable feedback are kept for the duration of your case plus 12 months, then deleted or fully anonymised. Anonymous aggregate statistics may be retained for longer because they no longer identify you. You can request earlier deletion at any time (see below); we may retain minimal records where the law requires it.
6. Your rights
You have the right to access, rectify, delete, and receive a copy of your personal data, to withdraw your consent at any time (which stops further forwarding of your case), and to object to or restrict certain processing. Email cases@getfairreply.com and we will respond within 30 days. You also have the right to lodge a complaint with the Information and Data Protection Commissioner (IDPC) in Malta or your local supervisory authority.
7. Security
Evidence files are stored securely with access restricted to the FairReply team and transmitted over encrypted connections. Access to case data is protected by authentication.