Privacy Policy
Privacy Policy
Last Updated: 13 Apr 2026
This Privacy Policy explains how Ultimate B2B collects, uses, stores, shares, and protects personal data when you visit our website, register for an account, place an order, contact us, or otherwise interact with us.
We are committed to processing personal data fairly, lawfully, transparently, and in accordance with applicable data protection laws, including the General Data Protection Regulation.
1. Who We Are
This website is operated by Cutajar Ltd, of Triq l-Akwedott, Birkirkara, Malta.
For any questions relating to this Privacy Policy or the processing of personal data, you may contact us at:
Email: info@cutajarltd.com
2. Scope of This Policy
This Privacy Policy applies to personal data processed through our website and related communications, including account registrations, order processing, customer service, delivery arrangements, billing, and business relationship management.
3. Categories of Personal Data We May Collect
Depending on how you interact with us, we may collect and process the following categories of personal data:
- Identity Data: such as your name, surname, job title, and company contact person details.
- Business Data: such as company name, business address, delivery address, and account classification.
- Contact Data: such as email address and billing or delivery contact details.
- Account Data: such as username, encrypted password, user role, account approvals, and customer tier details.
- Transaction Data: such as orders placed, quotations, invoices, products purchased, returns, and related commercial records.
- Financial Data: such as payment method details, payment status, account balance information, and agreed payment terms where applicable.
- Communication Data: such as messages sent via contact forms, email correspondence, support requests, and complaint records.
- Technical Data: such as IP address, browser type, device information, operating system, website usage logs, and cookie-related data.
- Marketing Data: such as subscription preferences, consent records, and engagement with newsletters or promotional communications.
4. How We Collect Personal Data
We may collect personal data:
- directly from you when you complete forms, register for an account, place an order, request a quotation, or contact us;
- from your employer or business where you act on behalf of a company;
- automatically through cookies, analytics tools, and server logs when you use our website; and
- from service providers involved in payments, deliveries, hosting, website management, or fraud prevention.
5. How and Why We Process Personal Data
We process personal data only where we have a valid legal basis to do so. The table below summarises the main categories of data we process, the purposes for which we use them, and the legal basis relied upon.
| Category of Data | Examples | Purpose of Processing | Legal Basis |
|---|---|---|---|
| Identity Data | Name, surname, job title | To identify account holders, business representatives, and authorised contacts | Performance of a contract; legitimate interests |
| Business Data | Company name, business address, delivery location | To create and manage business accounts, process orders, arrange deliveries, and maintain commercial records | Performance of a contract; legitimate interests |
| Contact Data | Email address, billing and delivery contact details | To communicate with you about orders, quotations, account matters, support requests, and service updates | Performance of a contract; legitimate interests |
| Account Data | Username, encrypted password, approval status, customer tier | To register users, control access to trade pricing, manage account permissions, and maintain website security | Performance of a contract; legitimate interests |
| Transaction Data | Orders, quotations, invoices, returns, purchase history | To process orders, maintain transaction records, handle claims, provide after-sales support, and administer the business relationship | Performance of a contract; legal obligation; legitimate interests |
| Financial Data | Payment status, payment method, account terms, invoicing information | To process payments, manage outstanding balances, apply agreed payment terms, and comply with financial record-keeping obligations | Performance of a contract; legal obligation; legitimate interests |
| Communication Data | Emails, support messages, contact form entries | To respond to enquiries, provide support, handle complaints, and keep records of communications | Legitimate interests; performance of a contract |
| Technical Data | IP address, browser, device, cookies, website logs | To operate the website, maintain security, prevent fraud, troubleshoot issues, and improve performance | Legitimate interests; consent where required for non-essential cookies |
| Marketing Data | Newsletter preferences, opt-in records, campaign engagement | To send marketing communications, promotions, product updates, and maintain records of your preferences | Consent; legitimate interests where permitted by law |
6. Legitimate Interests
Where we rely on legitimate interests as a legal basis, we do so only where those interests are not overridden by your rights and freedoms. Our legitimate interests may include:
- operating and administering our website and business activities efficiently;
- managing customer and supplier relationships;
- preventing fraud, abuse, and unauthorised access;
- maintaining network and information security;
- improving website functionality, product offering, and service quality; and
- responding to enquiries and maintaining commercial communications.
7. Marketing Communications
We may send you marketing communications about our products, services, offers, and business updates where permitted by law or where you have given your consent.
You may opt out of marketing communications at any time by using the unsubscribe link in our emails, updating your preferences where available, or contacting us directly.
8. Cookies and Similar Technologies
Our website may use cookies and similar technologies to ensure website functionality, remember preferences, analyse website usage, improve performance, and support security.
Strictly necessary cookies may be used without consent where permitted by law. Non-essential cookies, including analytics and marketing cookies, should only be used where you have given the relevant consent.
You may manage cookie settings through our website banner where available or through your browser settings. Disabling certain cookies may affect website functionality.
9. Sharing Personal Data
We may share personal data with trusted third parties where reasonably necessary for the operation of our business and website, including:
- website hosting and IT support providers;
- payment processors and financial service providers;
- delivery, freight, and logistics providers;
- software providers used for account management, communications, or analytics;
- professional advisers such as lawyers, accountants, and auditors; and
- regulatory bodies, law enforcement authorities, or courts where disclosure is legally required.
We do not sell personal data to third parties.
10. International Transfers
Where any personal data is transferred outside the European Economic Area, we will take appropriate steps to ensure that such transfers are protected by lawful safeguards and appropriate security measures in accordance with applicable data protection law.
11. Data Retention
We retain personal data only for as long as is necessary for the purposes for which it was collected, including to satisfy legal, accounting, tax, contractual, and operational requirements.
Retention periods may vary depending on the nature of the data, but generally include:
- account and business relationship records for as long as the account remains active and for a reasonable period thereafter;
- order, invoice, and transaction data for as long as required by applicable legal and financial obligations;
- support and communication records for as long as reasonably necessary to manage the relationship and resolve issues; and
- marketing records and consent preferences until you withdraw consent or request deletion where applicable.
12. Data Security
We implement appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. However, no internet-based system can ever be guaranteed to be completely secure.
13. Your Rights
Subject to applicable law, you may have the right to:
- request access to the personal data we hold about you;
- request correction of inaccurate or incomplete data;
- request erasure of personal data where applicable;
- request restriction of processing;
- object to processing based on legitimate interests or direct marketing;
- request portability of personal data where applicable; and
- withdraw consent at any time where processing is based on consent.
To exercise any of these rights, please contact us at info@cutajarltd.com.
14. Complaints
If you believe that your personal data has been processed in a manner that does not comply with applicable law, you may contact us first so that we may try to resolve your concern. You may also lodge a complaint with the competent supervisory authority in Malta.
15. Third-Party Links
Our website may contain links to third-party websites or services. We are not responsible for the privacy practices, content, or security of such third-party websites, and you should review their privacy notices separately.
16. Changes to This Privacy Policy
We may update this Privacy Policy from time to time by publishing the revised version on this page. Any changes shall take effect from the stated publication date unless otherwise indicated.
17. Contact Us
For any questions relating to this Privacy Policy or the processing of personal data, please contact:
Cutajar Ltd
Triq l-Akwedott, Birkirkara, Malta
Email: info@cutajarltd.com