Privacy policy
Last updated 28 October 2026
Who we are
CarerMalta is operated by Lovell Digital Properties Pty Ltd (ACN 691 669 280), Adelaide, South Australia. The data controller for personal data collected through CarerMalta is Lovell Digital Properties Pty Ltd (ACN 691 669 280).
What we collect
Workers: first name, phone number, optional email, photo, nationality, year of birth, city, work preferences, experience and skills — the information you choose to put on your profile. We deliberately collect no more than the profile needs: no surnames, no addresses, no identity or immigration documents, and no religion. We also record how you first reached the site (for example a search engine or a link) so we can tell which channels help workers find us; this is never shown on your public profile. We use your phone number and, if you gave one, your email address to send you login codes (by SMS) and service messages such as a notice when a family posts a new job in your city. We record which job listings you respond to and any note you add, so the family who posted the job can see your response. If a family messages you on the site, we store the conversation.
Families: first name, email, city, the job listings you post, and payment records if you buy access (payments are processed by Stripe — we never see your card details). We record which helper profiles you view contact details for, which helpers responded to your jobs and how you first reached the site, so we can run the service and understand whether it works. If you message a helper on the site, we store the conversation.
Messages are visible to the two people in the conversation, and to us if we need to look into a report or keep the site safe. They are deleted when either account is deleted.
How it's used
Worker profile information is displayed publicly so families can find you. Your phone number and email are not public — they are only shown to signed-in family accounts (and only to paying accounts when paid access is active). We use contact details to operate the site (for example login codes and service messages). We do not sell personal data.
Our lawful bases for using your data
Under the GDPR we may only use personal data where we have a lawful basis. These are ours:
- To run the service you ask us for (contract, Article 6(1)(b)): creating and publishing your profile or job listing, signing you in with a login code, showing your profile to families, passing on messages and job responses, and keeping your account working.
- To keep the site safe and working (legitimate interests, Article 6(1)(f)): checking profiles, job listings and messages against our rules, handling reports, preventing fraud and spam, and keeping simple counts of how visitors reach the site. We weigh these interests against your rights, and you can object (see below).
- To meet legal obligations (Article 6(1)(c)): keeping the records the law requires, such as payment records for contact unlocks (payments are processed by Stripe), and answering lawful requests from authorities.
- With your consent (Article 6(1)(a)): showing your photo publicly, which happens only if you tick the box when you add it, and Google Analytics cookies, which load only if you accept them in the cookie banner. You can withdraw either consent at any time.
Automatic checks and public listings
Some of our checks are automatic. A profile that passes them may be published straight away, and a person may review it afterwards. Text that contains contact details or certain words is blocked or held back for a person to read before it is shown.
Worker profiles and job listings are public. A profile shows your first name, the details you choose to add and, if you ticked the box, your photo; your phone number and email are not shown. A job listing shows its title, description, city and pay. Please do not put surnames, addresses, medical details or other sensitive information about yourself, a relative or the person being cared for in a profile or job listing. We do not ask for it, and we may remove it.
Where your data is stored
Our database is hosted in the EU (Frankfurt, Germany). We use these service providers to run the site: Supabase (database and sign-in), Vercel (website hosting), Twilio (login codes), Stripe (payments) and Resend (email delivery; stores data in the United States).
Where we are based, and transfers outside the EU
Our database is in the EU, but the site is run from Australia. CarerMalta is operated by Lovell Digital Properties Pty Ltd from Adelaide, South Australia, and the people who run the service access the data from there. The European Commission has not made an adequacy decision for Australia, so we keep the data in the EU region, limit access to the people who need it, and use providers that commit by contract to protect it.
Some of our providers, or their group companies, are outside the European Economic Area, including in the United States. Where personal data leaves the EEA we rely on the safeguards the GDPR requires, such as the European Commission's standard contractual clauses or the provider's participation in the EU-US Data Privacy Framework. Google (Google Analytics) is a further provider, used only if you accept analytics cookies.
Your rights — including one-click deletion
You can delete your account and all associated data at any time from your dashboard — the deletion is immediate and permanent (profile, photo, phone number, messages, everything). You can also ask us to access, correct, export or restrict the use of your data, or withdraw a consent you gave us. You can complain to the Information and Data Protection Commissioner (IDPC).
Your other GDPR rights, and the IDPC
As well as the rights above, the GDPR gives you the right to have your data erased, to object to our using it where we rely on legitimate interests, and to receive it in a portable format. Email hello@carermalta.com to use any of them. We will reply within one month.
You also have the right to complain to a data protection authority. In Malta this is the Information and Data Protection Commissioner (IDPC), Floor 2, Airways House, Triq Il-Kbira, Tas-Sliema SLM 1549, telephone +356 2328 7100 (telephone enquiries every working day, 10am to 1pm). The IDPC takes complaints through its online form, linked below. You may instead complain to the authority in the EU country where you live or work. We would like the chance to put things right first, but you do not have to contact us before you complain.
How long we keep your data
We keep your data for as long as your account is active. If you delete your account, we delete your data immediately and permanently, except records we must keep for a legal reason (for example fraud or payment records). If an account is inactive for a long period, we may close it and delete its data after telling you first.
Data breaches
If a data breach is likely to put your rights or freedoms at risk, we will notify Information and Data Protection Commissioner (IDPC) within 72 hours of becoming aware of it, and will notify affected users without undue delay.
Cookies
We use only the cookies necessary to keep you signed in, and basic analytics to understand site usage. No advertising cookies.
Analytics cookies and your choice
Cookies and similar storage that are strictly necessary, such as those that keep you signed in and remember your cookie choice, are set without asking because the site cannot work without them.
Google Analytics is the only optional cookie. It loads only after you press Accept in the cookie banner; if you press No thanks, it never loads. We use it to understand how the site is used, not for advertising, and we run no advertising or social-media tracking on CarerMalta.
You can withdraw your consent at any time by clearing this site's data in your browser settings, which also removes the stored choice; the banner will then ask you again. Withdrawing does not affect anything done before.
Separately, and without any cookie, we keep simple counts of how visitors reach the site (for example from a search engine or a link) and how far they get through sign-up. These counts hold no name, email address or phone number.
Contact
Privacy questions: email hello@carermalta.com or contact us. Data controller: Lovell Digital Properties Pty Ltd (ACN 691 669 280).
Data protection contact: Lovell Digital Properties Pty Ltd (ACN 691 669 280), hello@carermalta.com.