Last updated: 20 October 2026
1. Who we are
This policy explains how MB Group Malta (the Maltese Group for Travel & Tourism, “we”, “us”) collects and protects personal data when you use our website, our visa portal (visa.mbgroupmalta.com) and our mobile apps for iOS and Android (together, the “Services”). We are the data controller.
2. Data we collect
- Account data: name, phone number, email address, password (stored securely).
- Application data: date and place of birth, nationality, passport details, photos, address, travel plans, employment or study details, bank statements and other supporting documents you upload.
- Technical data: device type, operating system, app version, IP address and crash logs, used for security and troubleshooting.
- Messages: what you send us through the contact form, phone or email.
We do not intentionally collect precise location, contacts, or advertising identifiers.
3. How we use it
- To create and manage your account and prepare, submit and track your application.
- To send service notifications (for example, status updates by email, SMS or push notification).
- To answer enquiries and provide support.
- To protect the Services against fraud and misuse, and to meet legal obligations.
Our legal bases are performing our contract with you, your consent (where requested), our legitimate interests in running a secure service, and legal obligations.
4. App permissions
The mobile app may ask for: camera (to photograph documents), photos/files (to upload documents you choose), and notifications (to tell you about status changes). You can change these in your device settings at any time; some features will not work without them.
5. Who we share data with
- Maltese and European authorities, embassies, consulates and visa processing bodies, only as needed for your application.
- Educational institutions or partners, when your file requires it.
- Service providers (hosting, email/SMS delivery) acting on our instructions.
- Authorities or courts when the law requires it.
We do not sell your personal data and we do not share it with advertisers.
6. International transfers
Your data may be transferred to countries outside your own, including outside the European Economic Area, where your application requires it or where our providers operate. We use appropriate safeguards where required.
7. Retention
We keep data only as long as needed to provide the service and to meet legal, tax and accounting duties. After that it is deleted or anonymised.
8. Security
We use encryption in transit, access controls and secure hosting. No system is completely secure, so please keep your password private and tell us immediately if you suspect misuse.
9. Your rights and account deletion
Under the GDPR and applicable law you may request access, correction, deletion, restriction, portability, or object to processing, and withdraw consent at any time.
To delete your account and data: use the delete-account option in the app if available, or email info@mbgroupmalta.com with the subject “Account Deletion Request” from your registered email. We will verify your identity and process the request within 30 days. Some records may be kept where the law requires.
You may also complain to the Office of the Information and Data Protection Commissioner (IDPC) in Malta.
10. Children
The Services are for adults. Applications for a minor must be submitted by a parent or legal guardian. We do not knowingly collect data from children without guardian involvement.
11. Changes
We may update this policy and will post the new date above. Material changes will be notified through the Services.
12. Contact
Email: info@mbgroupmalta.com | Phone (Libya): 0922105595 | Malta / Libya.