Privacy Policy
Urban Rise Limited
Last updated: 15 March 2026
This website is operated by Urban Rise Limited, having registered address at 4A Ta'Xbiex Business Centre, Triq Testaferrata, Ta'Xbiex, Malta. Urban Rise Limited respect your privacy and are committed to protecting your personal data.
We will process your data in an appropriate and lawful manner, in accordance with the Data Protection Act (Chapter 586 of the Laws of Malta) (the "Act") and the General Data Protection Regulation (Regulation (EU) 2016/679) (the "GDPR").
We have structured our website so that you can visit us on the Internet without identifying yourself or revealing any personal information. Once you choose to provide us with personal information, we will protect such information and use it only in the ways described in this Notice.
This privacy policy describes how we collect and process your Personal Data acting as the data controller in connection with this website or with other services we are providing to you as an end customer.
Personal Information
We may ask for personal information, such as your:
- Name
- Social media profiles
- Date of birth
- Phone/mobile number
- Home/Mailing address
- Work address
- Payment information
This information will only be obtained if you provide this information yourself to our network or if you input this data in our website.
When we are approached to assist a client to find property to buy or rent
Personal Data will be collected whenever a client visits the website to view properties. Initially this data will be standard information provided by your web browser. It may include your computer's Internet Protocol (IP) address, your browser type and version, the pages you visit, the time and date of your visit, the time spent on each page, and other details. We may also collect data about the device you're using to access our website. This data may include the device type, operating system, unique device identifiers, device settings, and geo-location data. What we collect can depend on the individual settings of your device and software.
We recommend you manage your settings and make yourself aware of the information the device manufacturer or software provider make available to us.
Legal Bases for Processing
We will process your personal information lawfully, fairly and in a transparent manner. We collect and process information about you only where we have legal bases for doing so.
These legal bases depend on the services you use and how you use them, meaning we collect and use your information only where:
- it's necessary for the performance of a contract to which you are a party or to take steps at your request before entering into such a contract, for example, when we provide a service you request from us.
- it satisfies a legitimate interest (which is not overridden by your data protection interests), such as for research and development, to market and promote our services, and to protect our legal rights and interests.
- you give us consent to do so for a specific purpose, for example, you might consent to us sending you our newsletter.
- we need to process your data to comply with a legal obligation.
Where you consent to our use of information about you for a specific purpose, you have the right to change your mind at any time; however this will not affect any processing that has already taken place.
We don't keep personal information for longer than is necessary. While we retain this information, we will protect it within commercially acceptable means to prevent loss and theft, as well as unauthorised access, disclosure, copying, use or modification. That said, we advise that no method of electronic transmission or storage is 100% secure and cannot guarantee absolute data security. If necessary, we may retain your personal information for our compliance with a legal obligation or in order to protect your vital interests or the vital interests of another natural person.
In cases where we ask you to provide any Personal Data, there is no obligation to do so, but if you do not, you will not be able to use all functions of our website, apply with us or to make use of our real estate services in general.
Specific Categories of Personal Data
Urban Rise Limited is unlikely to request sensitive data. If we think there is a genuine need, we will clearly explain the purposes for which we wish to use such Personal Data when it is being collected and always obtain your consent at that time. You are within your rights to withdraw your consent for use of personal and sensitive data at any time.
Sensitive Data is classified as special categories of Personal Data, which relates to the following:
- Racial or ethnic origin
- Political opinions
- Religious or philosophical beliefs
- Trade union membership
- Genetic data
- Biometric data for the purpose of uniquely identifying a natural person
- Data concerning health
- Data concerning a person's sex life or sexual orientation
Purposes for Which We Use Your Data
We will use your Personal Data for the following reasons:
- To customise or personalise your experience of our website.
- To enable you to access and use our website, associated applications and associated social media platforms.
- To contact and communicate with you.
- For internal record keeping and administrative purposes.
- For analytics, market research and business development, including to operate and improve our website, associated applications and associated social media platforms.
- To run competitions and/or offer additional benefits to you.
- For advertising and marketing, including to send you promotional information about our products and services and information about third parties that we consider may be of interest to you.
- To comply with our legal obligations and resolve any disputes that we may have. Such as if you would like to sell a property, Urban Rise Limited would have entered into a contractual agreement with you and thus we would be processing your Personal Data to adhere to our contractual obligations in terms of article 6(1)(b) GDPR, due to certain legal obligations in terms of article 6(1)(c) GDPR and to protect our legitimate interest in terms of article 6(1)(f).
- For the process of concluding a transaction of sale or lease of an immovable property we shall also be processing additional Personal Data from each side of the transaction as required by law. The legal grounds for processing here shall be to adhere to our contractual obligations in terms of article 6(1)(b) GDPR, due to certain legal obligations in terms of article 6(1)(c) GDPR, specifically due to prevention of money laundering and financing of terrorism laws and to protect our legitimate interest in terms of article 6(1)(f).
Disclosures and Data Transfers
As far as this is necessary for the purposes set out above, we may transfer your Personal Data to third parties as follows:
| Category | Detail |
|---|---|
| Internal Databases | Your Personal Data may be found in our internal databases and when necessary, it may be shared with service providers owned by the same shareholder. |
| Sales/Rent Associates | Your Personal Data will be provided to our sales/rent associates as a normal part of our business. |
| Marketing | Your Personal Data may be used in our marketing material and thus may be sent to marketing service providers. |
| Analytics | We may use your data to provide analytic feedback, and this may be done in conjunction with a third party not employed by Urban Rise Limited. |
| Storage | Data on our servers, which may contain Personal Data, is stored on a cloud system managed by service providers. |
| Legal Authorities | Your Personal Data may be shared with the relevant public authorities as required under law for credit reporting, court and tribunal requests and law enforcement officers in conjunction with legal proceedings and upon receipt of the correct documents. |
| International Entities | If we are required to provide personal data to a country outside of the EU GDPR law, Urban Rise Limited will always request Cross Border Data consent under the relevant country. |
Regulatory Authorities
In terms of current laws, we may be required to transfer your Personal Data to certain regulatory or government authorities when subject to a proper and lawful request in terms of the law. We may be obliged to provide such data, and we may also be prevented from informing you that such data has been provided.
Personal Data Collected from Third Parties
In certain cases, as allowed by law, we may receive Personal Data about you from third parties, such as public authorities mainly relating to searches dealing with immovable property. Any Personal Data collected in this regard shall be processed and stored in terms of the law.
Retention Periods
We will retain the data that we collect when you visit this website at least until the end of your business relationship and no longer than is necessary.
If you have subscribed to our newsletter, we will retain your email address until you unsubscribe from our newsletter. To unsubscribe from our e-mail database or opt-out of communications (including marketing communications), please contact us using the details below or opt-out using the opt-out facilities provided in the communication.
If you have registered on our website, we will retain your data for as long as your account exists and thereafter only for as long as there are any legal obligations to retain your data.
In this regard we shall keep:
- Any of your general Personal Data up to at least five years after the end of our business relationship. Such Personal Data shall be kept in order to protect our legitimate interest due to statutory limitations. In addition, this data shall be kept to cover our due diligence obligations under the current legislation to prevent money laundering and financing of terrorism. This period may be extended to 10 years in certain situations as dictated under law.
- Other Personal Data which may relate to transactions and other commercial matters shall be kept for at least ten years due to other obligations we have in terms of the law with the local authorities in relation to taxation matters.
Should in any event we be required to keep your Personal Data for any longer period as allowed by law, your Personal Data shall be kept secure and shall be deleted when we are allowed by law to delete such Personal Data.
Your Rights
Under applicable data protection law, you have these rights:
- Choice and consent: By providing personal information to us, you consent to us collecting, holding, using and disclosing your personal information in accordance with this privacy policy. You do not have to provide personal information to us, however, if you do not, it may affect your use of this website or the products and/or services offered on or through it.
- Information from third parties: If we receive personal information about you from a third party, we will protect it as set out in this privacy policy. If you are a third party providing personal information about somebody else, you represent and warrant that you have such person's consent to provide the personal information to us.
- Correction: If you believe that any information we hold about you is inaccurate, out of date, incomplete, irrelevant or misleading, please contact us using the details below. We will take reasonable steps to correct any information found to be inaccurate.
- Restrict: You may choose to restrict the collection or use of your personal information. If you have previously agreed to us using your personal information for direct marketing purposes, you may change your mind at any time by contacting us using the details below.
- Object: In certain circumstances, you can object for legitimate reasons to the processing of your Personal Data; please contact us so we can understand the nature and make allowances for the request.
- Access and data portability: You may request a copy of the personal information we hold about you. Where possible, we will provide this information in CSV format or other easily readable machine format. You may request that we erase the personal information we hold about you at any time. You may also request that we transfer this personal information to another third party. All Subject Access Requests will follow the guidelines issued by the General Data Protection Regulation (Regulation (EU) 2016/679).
- To know the identities of third parties to which your Personal Data are transferred.
- To provide instructions on how your data must be handled in the event of your death, when relevant.
In case of any complaints, you also have the right to lodge a complaint with the competent data protection authority in Malta or in the Member State in which you work or reside.
Data Security Measures
We shall take all the necessary measures as required by law to ensure proper security and protection to your Personal Data. Such measures may include encryption, use of firewalls, anti-virus software and specialised security software, access restrictions and limitations, strict enforcement of policies and any other measures that we may enforce from time to time. Our measures shall strive to ensure that:
- There is no unlawful destruction of your Personal Data.
- Your Personal Data is not subject to unauthorised access.
- Your Personal Data is not subject to unauthorised disclosure.
- Your Personal Data is not subject to unauthorised modifications.
Despite our best efforts however, we cannot provide a 100% guarantee in relation to our system security.
Marketing
Direct Marketing
We shall always send marketing material to you if authorised by law to do so and we shall never send unsolicited marketing material. If you sign up to our website we shall send you information regarding property that would interest you, based on the information you would have provided to us. Thus, we would be relying on your consent to send you such information which you can withdraw at any time.
Social Media
We also use social media to promote our services. Should you contact us through social media, or should you provide us with Personal Data through social media, this privacy policy shall also apply and any Personal Data collected there shall be managed in terms of this policy.
Cookies
We use "cookies" to collect information about you and your activity across our site. A cookie is a small piece of data that our website stores on your computer, and accesses each time you visit, so we can understand how you use our site. This helps us serve you content based on preferences you have specified. Please refer to our Cookie Policy for more information.
Updating of this Policy
We may at any time update the terms of this Privacy Policy in terms of the law. If you are our client, we shall inform you if we have carried out material changes to this policy. If you are not a client of ours, it shall be in your interest to regularly check this policy.
Contacting Us
Should you have any questions regarding our data protection policies or would like to make a request in relation to your Personal Data, please contact us.
Urban Rise Limited
4A Ta'Xbiex Business Centre, Triq Testaferrata, Ta'Xbiex, Malta