Privacy Policy
Effective from 15 October 2026.
This is a translation of the Hungarian original. In case of any discrepancy, the Hungarian version prevails.
1. The data controller
Island Merchants Ltd., 3, Advance Business Centre, Triq Guze Flores, SVR 1950 Santa Venera, Malta; EU VAT number: MT30933805; email: info@impulsyan.com; phone: +36 30 153 6533.
2. What data we process, why and for how long
| Activity | Data | Legal basis | Retention period |
|---|---|---|---|
| Assessment requests, appointment booking | name, company, email, phone, website, goal, budget, appointment time | consent (Art. 6(1)(a) GDPR) or steps prior to entering into a contract (Art. 6(1)(b)) | 2 years from the last contact, or until consent is withdrawn |
| Orders, invoicing | company name, VAT/tax number, address, contact person’s name, email, phone, order details | performance of a contract (Art. 6(1)(b)), legal obligation (Art. 6(1)(c)) | until the end of the retention period under accounting and tax law (typically 10 years in Malta) |
| Communication (email, WhatsApp, phone) | name, contact details, message content | legitimate interest (Art. 6(1)(f)) in responding to the enquiry | 1 year after the matter is closed |
| Server logs | IP address, time, browser | legitimate interest (Art. 6(1)(f)) – security | no more than 30 days |
3. Who has access to the data? (processors)
- Hosting: Namecheap, Inc. (web server, email forwarding)
- Appointment booking: Calendly LLC (the scheduler is embedded on the page; the data entered when booking is processed by Calendly)
- Email automation and forms: Systeme.io SAS
- Spreadsheet records, email, calendar: Google Ireland Ltd. (Google Workspace)
- Web analytics and tag management: Google Ireland Ltd. (Google Analytics 4, Google Tag Manager) – only with consent
- Ad measurement: Google Ireland Ltd. (Google Ads), Meta Platforms Ireland Ltd. – only with consent, and only while an advertising campaign is running
- Banking service provider: Revolut Bank UAB (bank transfers)
Some providers may also process data outside the EU (in the USA); in such cases, adequate protection is ensured by the European Commission’s adequacy decision (EU–US Data Privacy Framework) or by standard contractual clauses.
4. Cookies and analytics
When you first open the site, you can make your choice in a banner. We store your choice for 180 days in a cookie named imp_consent; you can change or withdraw it at any time using the “Cookie settings” button in the footer.
| Category | Purpose | Provider, cookies | Legal basis, duration |
|---|---|---|---|
| Necessary | operation of the site, remembering your cookie choice | Impulsyan: imp_consent; the browser’s session storage (source, campaign) | legitimate interest (Art. 6(1)(f)), 180 days / until the end of the session |
| Statistics | visitor numbers, performance of pages and channels, form and order events in aggregate | Google Analytics 4 (Google Ireland Ltd.): _ga, _ga_* | consent (Art. 6(1)(a)), up to 14 months |
| Ad measurement | measuring the effectiveness of our ads while a campaign is running | Google Ads (Google Ireland Ltd.): _gcl_*; Meta (Meta Platforms Ireland Ltd.): _fbp | consent (Art. 6(1)(a)), up to 90 days |
Tags are loaded by Google Tag Manager, which does not itself set any cookies. Until you give your consent, Google services do not store cookies on your device (Google Consent Mode). The scheduler (Calendly) only loads when you choose an appointment after completing the assessment form; at that point Calendly may use the cookies necessary for its operation.
5. Your rights
You may request access to your data, rectification, erasure, restriction of processing and data portability, object to processing based on legitimate interest, and withdraw your consent at any time by writing to info@impulsyan.com. We will respond to your request within 30 days at the latest.
You may lodge a complaint with the Maltese data protection authority (Information and Data Protection Commissioner, idpc.org.mt) or with the authority in your country of residence – in Hungary, the National Authority for Data Protection and Freedom of Information (Nemzeti Adatvédelmi és Információszabadság Hatóság, naih.hu).
6. Data security
The site operates over an encrypted (HTTPS) connection; order data is stored in a protected directory that is not accessible from the public web hosting, and only staff members performing the relevant tasks have access to it.