Date of entry into force: 24 November 2025

1. Data Controller

Natalie Abadie
Freelancer based in Malta, operating under the name «Tareabox».»

Address: Capitol Mansions, Censu Xerri St, Sliema, Malta
Mail: hey@tareabox.com
Data Protection Authority: IDPC Malta - https://idpc.org.mt

2. Data We Process

Website visitors:

Newsletter: e-mail address, subscription date, IP address
Analytics: anonymised IP, browser, page views
Server logs: IP, user-agent, date/time of access

Registered users:

Account: email, encrypted password, name (optional), business information (optional)
Usage: tasks executed, contents entered, results generated, history
Files: videos, PDFs, images and other user-generated or uploaded files
Payments: transaction information (processed by Gumroad)
Support: message content, mail, attachments

3. Purposes and Legal Basis (Art. 6 RGPD)

Newsletter: Consent (Art. 6.1.a). Withdrawal: click on «Unsubscribe» or write to hey@tareabox.com
Technical operation: Legitimate interest (Art. 6.1.f)
Web analytics: Consent (Art. 6.1.a) via cookie banner
Manage account and run Service: Execution of contract (Art. 6.1.b)
Improve Service: Legitimate interest (Art. 6.1.f) in optimising algorithms and developing functionalities
Process payments: Execution of contract (Art. 6.1.b)
Support: Performance of contract or legitimate interest (Art. 6.1.b/f)
Legal obligations: Legal obligation (Art. 6.1.c)

4. Addressees (Processors)

Suppliers who process data on our behalf in accordance with GDPR agreements:

Email marketing
Hosting and storage
Web analytics
Cloud productivity services
Payment processing
Artificial intelligence providers
Design services

Some operate outside the EEA (mainly USA). We apply Standard Contractual Clauses approved by the European Commission.

5. Cookies

Necessary cookies: Essential for operation (always active)

Analytical cookies: Only if you accept in banner. IP anonymised.

You can change preferences from your browser settings.

6. Conservation periods

Newsletter: up to 24 months of inactivity or leave of absence
Server logs: 12 months
Google Analytics: 26 months
Account and usage data: as long as it is active
Generated and uploaded files (videos, PDFs, images, designs): 6 months from generation or uploading
Support: time needed + legal deadlines

After deletion of the account, only necessary data is retained for the legally prescribed period.

7. Your Rights

Access, rectification, deletion, limitation, opposition, portability.

Exercise: hey@tareabox.com

Complaint: IDPC Malta (https://idpc.org.mt) or your national data protection authority.

8. Changes

The changes will be published in https://tareabox.com/privacy-policy with a new date of entry into force.

9. Contact

Mail: hey@tareabox.com
Address: Capitol Mansions, Censu Xerri St, Sliema, Malta

Privacy Policy