Find Properties

Privacy Policy

Your privacy matters to us. Learn how we protect your personal data.

Last updated: 2 August 2026

Our Commitment to Your Privacy

Ralph AI ('we', 'our', or 'us') is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our real estate platform in Malta and Gozo.

1. Information We Collect

We collect several types of information to provide and improve our services to you:

Account Information

  • Name and contact details (email, phone number)
  • Profile information and preferences
  • Authentication credentials (securely encrypted)
  • Profile picture (if uploaded)

Usage Information

  • Properties you view and search queries
  • Favorited properties and saved searches
  • Contact form submissions and inquiries
  • Agencies you interact with
  • Log data (IP address, browser type, device)

Communication Data

  • Emails and messages you send us
  • Support requests and feedback
  • Newsletter subscriptions

2. How We Use Your Information

We use your information for the following purposes, in accordance with GDPR regulations:

  • Provide Services: To deliver property search, matching, and recommendation features
  • Account Management: To create and manage your account, authenticate your identity
  • Communication: To respond to your inquiries and send property updates (with your consent)
  • Personalization: To tailor property recommendations based on your preferences
  • Platform Improvement: To analyze usage patterns and improve our services
  • Security: To detect fraud, abuse, and ensure platform security
  • Legal Compliance: To comply with legal obligations and regulations

3. Information Sharing

We do not sell your personal data. We may share your information only in the following circumstances:

With Real Estate Agencies

  • When you submit a contact form or inquiry about a property
  • Only your name, email, and message are shared with the relevant agency
  • Agencies are required to respect your privacy and data protection rights

With Service Providers

  • Third-party services that help us operate our platform (e.g., Cloudflare for hosting and database)
  • These providers have strict data protection agreements with us
  • They may only access your data to perform services on our behalf

Legal Requirements

  • When required by law, court order, or government authority
  • To protect our rights, property, or safety
  • To prevent fraud or illegal activity

4. Data Security

We implement appropriate security measures to protect your personal data:

  • Encryption: Data is encrypted in transit (SSL) and at rest
  • Access Controls: Strict access controls limit who can access your data
  • Regular Audits: We regularly review and update our security practices
  • Secure Authentication: Password hashing and secure session management
  • GDPR Compliance: We comply with GDPR data protection requirements

Important: While we take all reasonable steps to protect your personal information, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.

5. Your GDPR Rights

Under GDPR, you have the following rights regarding your personal data:

Right to Access (Article 15)

You can request a copy of all personal data we hold about you. We will provide this within 30 days of your request.

Right to Rectification (Article 16)

You can request correction of inaccurate or incomplete personal data.

Right to Erasure (Right to be Forgotten) (Article 17)

You can request deletion of your personal data when it's no longer necessary or if you withdraw consent.

Right to Restrict Processing (Article 18)

You can request that we limit how we use your personal data while we verify its accuracy or contest its lawful basis.

Right to Data Portability (Article 20)

You can request your data in a structured, commonly used format and transfer it to another service provider.

Right to Object (Article 21)

You can object to processing based on legitimate interests or direct marketing.

Right to Withdraw Consent

You can withdraw consent at any time for processing based on consent. This will not affect the lawfulness of processing before withdrawal.

To exercise these rights: Contact us at privacy@dwelia.pages.dev. We will verify your identity before processing your request.

6. Cookies & Tracking Technologies

We use cookies and similar technologies to enhance your experience:

Essential Cookies

Required for the platform to function properly (authentication, security, basic features).

Performance Cookies

Help us understand how you use our platform and improve performance (analytics, error tracking).

Preference Cookies

Remember your settings and preferences (language, location, filter selections).

You can manage your cookie preferences through your browser settings. Note that disabling certain cookies may affect platform functionality.

7. Third-Party Services

Our platform integrates with third-party services:

Cloudflare (Hosting, Database & Storage)

We use Cloudflare D1 for database storage, R2 for image hosting, and Cloudflare Pages for application hosting. Cloudflare is GDPR-compliant.

Social Login Providers

Google and Facebook OAuth for authentication. Their privacy policies apply to data you provide to them.

Leaflet & OpenStreetMap

For map functionality. OpenStreetMap data is available under the Open Data Commons Open Database License.

Each third-party service has its own privacy policy. We encourage you to review them.

8. Data Retention

We retain your personal data only as long as necessary for the purposes outlined in this policy:

  • Account Data: While your account is active and for a reasonable period after deletion (for legal purposes)
  • Usage Data: Up to 2 years for analytics and platform improvement
  • Contact Submissions: Up to 5 years for legal and record-keeping purposes
  • Marketing Data: Until you unsubscribe or withdraw consent

Your Right to Delete: You can request deletion of your data at any time. We will delete it within 30 days, subject to legal obligations.

9. International Data Transfers

Your data is primarily stored and processed within the European Union. We only transfer data outside the EU when:

  • Required for providing our services (with appropriate safeguards)
  • You explicitly consent to the transfer
  • The destination country has adequate data protection laws

When transferring data, we use standard contractual clauses or other GDPR-approved mechanisms to ensure your data remains protected.

10. Children's Privacy

Our platform is not intended for children under 16 years of age. We do not knowingly collect personal information from children.

If we discover we have collected personal information from a child under 16 without parental consent, we will take steps to remove it immediately.

Parents and Guardians: If you believe your child has provided us with personal information, please contact us.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements.

  • We will notify you of significant changes by email or through prominent notice on our platform
  • Continued use of the platform after changes constitutes acceptance of the updated policy
  • We encourage you to review this policy periodically

The date at the top of this policy indicates when it was last updated.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:

We will respond to your inquiry within 30 days, as required by GDPR.

Still Have Questions?

Our team is here to help. Reach out if you have any questions about your privacy or data.

Contact Privacy Team