Privacy Policy

1. Data Controller

MyRent operates as the data controller for personal information collected through our platform. We are based in Malta and operate in accordance with EU and Maltese data protection laws.

For any data protection enquiries, contact us at hello@myrent.mt.

MyRent has not appointed a Data Protection Officer as we do not meet the criteria for mandatory appointment under GDPR Article 37. The contact above is your point of contact for all privacy matters.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

• •Name and email address
• •Phone number (if you choose to provide it)
• •Account credentials

Providing your name and email address is necessary to create an account and use the platform. If you do not provide this information, we cannot provide you with the service.

2.2 Listing Information

When you create a property listing, we collect and process:

• •Property details (description, location, price, features)
• •Property images you upload
• •Contact information you choose to display publicly

We may review and moderate listing content (including images) to enforce our platform rules and remove or restrict content that we consider inappropriate, unlawful, or harmful. Such moderation is carried out under our legitimate interest in keeping the platform safe and compliant.

2.3 Technical Information

We automatically collect:

• •IP address and browser information
• •Device type and operating system
• •Usage data and navigation patterns
• •Cookies and similar tracking technologies (see Section 5)

3. How We Use Your Data

We process your personal data only for specific purposes and only where we have a lawful basis to do so under GDPR Article 6. The table below maps each activity to its legal basis.

4. Data Sharing and Third Parties

Technology Service Providers

We use the following third-party processors to operate the platform. Each acts only on our documented instructions under a written Data Processing Agreement in accordance with GDPR Article 28.

Social Media Platforms

As described in our Terms of Service, MyRentmay share listing content — including agent names, contact details, property descriptions, and photographs — on social media platforms including Facebook, Instagram, TikTok, X (Twitter), and LinkedIn for marketing and promotional purposes. This constitutes a disclosure of personal data to these platforms as independent data controllers. Each platform's own privacy policy governs how they handle data once received. Where MyRentoperates business pages on these platforms, we may be joint controllers with the platform operator for certain analytics data (such as Facebook Page Insights).

If you do not wish your listing to be shared on social media, please contact us at hello@myrent.mt before or after your listing goes live.

5. Cookies and Tracking

MyRent uses cookies and similar technologies to provide essential functionality and, with your explicit consent, to understand how the site is used. Non-essential cookies are not set until you have given your consent via our cookie banner.

You can manage, change, or withdraw your cookie consent at any time on our Cookie Policy page or via your browser settings. Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.

6. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes set out in this policy or as required by law. The periods below apply per data category:

7. Your GDPR Rights

Under GDPR and Malta's Data Protection Act, you have the following rights:

To exercise any of these rights, contact us at hello@myrent.mt. We will respond within one month as required by GDPR Article 12. This period may be extended by two further months in complex cases — we will inform you if this applies.

8. Data Security

We implement reasonable technical and organisational measures to protect your personal data, including:

• •Encrypted data transmission (HTTPS/TLS)
• •Encrypted data storage at rest
• •Secure authentication and access controls
• •Limited access to personal data on a need-to-know basis
• •Use of certified, security-audited third-party processors (SOC 2, ISO 27001)

9. International Data Transfers

Our primary data storage (Neon database) and analytics (PostHog) are hosted in the EU (Frankfurt). The main international transfer is through Vercel, our hosting provider, which is US-based.

Where data is transferred outside the European Economic Area, we ensure appropriate safeguards are in place:

• •EU-US Data Privacy Framework: Vercel and Sentry are certified under the EU-US DPF adequacy decision adopted July 2023
• •Standard Contractual Clauses (SCCs): Used as a supplementary safeguard with all US-based providers
• •EU hosting: Neon (database) and PostHog (analytics) are hosted in Frankfurt, EU — no international transfer for this data

You may request a copy of the relevant transfer safeguards by contacting us at hello@myrent.mt.

10. Listing Publication and Public Data

Publishing your property listing — including contact details, photos, and property description — is the core service MyRent provides. This processing is carried out on the basis of contractual necessity (GDPR Article 6(1)(b)): without it, we cannot provide the listing service you signed up for.

By posting a listing on MyRent, you acknowledge that:

• •You are solely responsible for managing communications from interested parties
• •The platform is not responsible for any misuse of your contact information by third parties once it has been displayed publicly
• •You warrant that any personal data of third parties included in your listing (for example, a joint landlord's details) has been shared with their knowledge and agreement

11. Children's Privacy

Our platform is not intended for individuals under the age of 18. We do not knowingly collect personal data from children. If you believe we have inadvertently collected such information, please contact us at hello@myrent.mt so we can promptly delete it.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Where changes are material, we will notify you by email or by a prominent notice on the platform before the change takes effect. The "Last updated" date at the top of this page reflects the most recent revision. Continued use of the platform after changes take effect constitutes acceptance of the updated policy.