Who we are
CYE – Craft Your Event is responsible for the personal information handled through this website. This policy explains how we use information from visitors, people who enquire about our services and people featured in our event stories.
CYE – Craft Your Event
Flat 5, Blossom Court, Antonio Sammut Street, Gzira, GZR1571, Malta
Email: info@cye.mt
For a question about your information or to exercise your rights, contact us at the email or postal address above.
Information we collect
- Enquiries: your name, email address, organisation if supplied, and the event details you choose to share. These can include the event type, approximate guest count, timing, location, budget, support needed and your message.
- Enquiry administration: the date and source of your submission, its reference, delivery results, follow-up correspondence, status and internal notes needed to handle it.
- Website security: technical request information, such as IP addresses, may appear in hosting logs. The enquiry form uses short-lived security counters derived from IP addresses and email addresses to limit abuse.
- Event stories: photographs, names and event information supplied by our team, photographers or event organisers for work shown on this website.
Please send only information relevant to your enquiry. Do not include payment card details, identity documents, medical information or sensitive information about guests in the event brief. If we need additional information for a booking, we will explain how to provide it separately.
How and why we use it
- Responding and preparing a proposal: we use the details you send to understand your request and discuss an event. Where you are a prospective customer, this supports steps you ask us to take before a contract. For enquiries made on behalf of an organisation, we rely on our legitimate interest in communicating with its representatives.
- Operating and protecting the website: our legitimate interests include reliable message delivery, handling enquiries, preventing misuse and resolving technical problems.
- Legal responsibilities: we may retain or disclose relevant records when required by law or needed to establish, exercise or defend a legal claim.
- Showing our work: event stories help explain our services. Where we rely on legitimate interests for this use, we consider the people involved and the context of the event. Where a particular use requires consent, we seek it separately.
Sending an enquiry does not subscribe you to a newsletter. We do not sell enquiry details. The enquiry process does not make decisions about you solely by automated means that have legal or similarly significant effects.
Sending an enquiry
The form lets you review and edit your brief before selecting Send enquiry. Your completed brief is submitted at that point, saved in our private website inbox and used to send an internal notification and an acknowledgement to your email address.
The required name and email fields allow us to identify and answer your request. If you do not provide required information, we cannot process the form. You can contact us by email instead. Optional details help us prepare a more useful response.
Security checks can run while the form is open. Moving between form steps does not send the contents of your brief to us.
Service providers and transfers
Access is limited to the people who need to handle your enquiry and service providers supporting our website, hosting, backups and business email. Professional advisers or public authorities may receive information where needed for a legal obligation or claim.
We use Resend to deliver enquiry notifications and acknowledgement emails. This involves processing recipient addresses, message content and delivery information. Resend states that its stored customer data is held in the United States, including when a European sending region is selected.
Resend’s data processing agreement includes EU Standard Contractual Clauses for transfers outside the European Economic Area. You can read its data processing agreement and data protection information, or contact us for information about the safeguards relevant to your enquiry.
If a proposed event needs us to share information with a venue or another supplier, we limit that information to what is needed for the arrangement and explain additional handling where appropriate.
How long we keep information
We keep enquiries while they are active and for as long afterwards as reasonably needed to deal with follow-up, document an agreed service or resolve a dispute. The retention decision depends on whether an enquiry becomes a booking, whether a matter remains unresolved and any applicable record-keeping obligations. Information that is no longer needed should be deleted or anonymised.
Website enquiries are managed by our team; submitting a form does not start an automatic deletion countdown. Copies in business email, authorised exports and backups have separate retention cycles. Removing an enquiry from the website inbox does not instantly remove every such copy.
Security counters for the enquiry form expire after short rate-limit windows and are cleared by scheduled housekeeping. Resend applies its own message and log retention periods, described in its linked data protection information. Published event stories remain while they serve their stated purpose, subject to review and requests about the people shown.
Comments and event photographs
Where comments are enabled, a comment may include your name, message and optional website link publicly. The email address you provide is not shown with the comment. WordPress may also store your IP address and browser information to help administer comments. If avatar display is enabled, Gravatar may receive a hash derived from your email address and technical request information; see Automattic’s privacy information.
If you appear in a photograph or event story and would like to discuss its use, email us with the page address and enough detail to identify the image. Please avoid sending identity documents unless we explain why they are necessary. We will consider requests and objections in light of the purpose of the publication and your circumstances.
Your rights and choices
Depending on the circumstances, you can ask to access your information, correct it, delete it, restrict its use or receive a portable copy. You can object to processing based on legitimate interests. If a use relies on your consent, you can withdraw that consent without affecting earlier lawful processing.
Contact info@cye.mt to make a request. We may need proportionate information to confirm your identity. We normally respond within one month; if a permitted extension is needed, we will explain it within that month.
You may complain to Malta’s Information and Data Protection Commissioner, or to the relevant supervisory authority where you live or work in the EEA. You do not have to contact us first.
Cookies, security and updates
Our Cookie Policy explains browser storage and your choices. An external website reached through a link has its own privacy practices.
We use access restrictions and appropriate technical measures to protect the information we hold. No website or email system can eliminate every security risk.
We may update this policy when the website or our handling of information changes. The review date at the top identifies the current version. Material changes affecting existing information will be communicated where required.